Our blog posts

Blind signing drained $1.5B from Bybit. Clear Signing launches today as the open standard to fix it — here's what Cyfrin shipped and where the work goes next.

A developer-focused breakdown of the OWASP Top 10 for LLM apps, with practical advice for reducing AI risk in web3 and smart contract workflows.

The $285M Drift hack used in-person social engineering to compromise a multisig. Here's why transaction legibility standards like ERC-8213 are the fix.

A deep dive into how ZKVMs work — from ZK proofs and circuits through arithmetization to building a working STARK-based ZKVM in Rust.

AI is an incredible productivity tool, but it's making us reckless. Here are 6 tips to use AI without getting destroyed — from security prompts to the Agent Rule of Two.

A one-line typo fix cost thousands of tokens. Discover why AI coding agents can be overkill for small changes and how to reduce cost and overhead.

Cyfrin has secured $50B+ across RWA audits. Learn why real-world asset protocols need specialized security expertise beyond standard DeFi audits.

Discover how a u256 bug in Cetus Protocol led to a $223M hack, emptied liquidity pools, and the steps taken for recovery on Sui.

A complete guide to EU MiCA regulation for crypto enterprises: authorization requirements, enforcement penalties, deadlines, DeFi/NFT gaps & Digital Euro integration.

Deep dive analysis of Uniswap v4 hooks security. Raise the bar for secure implementation; discover attack vectors and known smart contract vulnerabilities.

Learn how elliptic curves form cyclic groups, explore their homomorphic properties, and discover how the discrete logarithm problem provides cryptographic security.

Elliptic curves are algebraic curves often used in cryptography. Dive into a technical exploration of them, their structure, properties, point addition, and use in ZKPs.