Our blog posts

Blind signing drained $1.5B from Bybit. Clear Signing launches today as the open standard to fix it — here's what Cyfrin shipped and where the work goes next.

BattleMode runs adversarial simulation against your smart contracts to prove which vulnerabilities are exploitable, not just flagged by static analysis.

A Rust game sim with 8,500 lines and zero tests meets Cygent. The AI surfaced buried invariants the developer hadn't thought about in months.

Specialized AI built into smart contract development can protect DeFi better than consulting a general model after the code is written. Why shift-left matters.

Cygent is an AI security engineer that finds vulnerabilities in your smart contracts, writes the fixes, and opens the pull request. No more PDFs and manual triage.

A developer-focused breakdown of the OWASP Top 10 for LLM apps, with practical advice for reducing AI risk in web3 and smart contract workflows.

The $285M Drift hack used in-person social engineering to compromise a multisig. Here's why transaction legibility standards like ERC-8213 are the fix.

A deep dive into how ZKVMs work — from ZK proofs and circuits through arithmetization to building a working STARK-based ZKVM in Rust.

BattleChain is a pre-mainnet blockchain where whitehats legally attack your smart contracts with real funds before they reach production. The testnet is live today.

AI is an incredible productivity tool, but it's making us reckless. Here are 6 tips to use AI without getting destroyed — from security prompts to the Agent Rule of Two.

This guide outlines a focused, step-by-step strategy to maximize your chances of success in SSCD+. Learn what to study, how to practice, and how to perform on exam day.

A one-line typo fix cost thousands of tokens. Discover why AI coding agents can be overkill for small changes and how to reduce cost and overhead.