OpenZeppelin
@OpenZeppelin

The security standard for onchain finance. $35 trillion+ in value transferred secured since 2015 for the institutions and innovators shaping global finance.

openzeppelin.com/
Joined August 2016
819 Photos and videos
Article

The Notorious Bug Digest #9: Rule Downgrade, ZK Misconstraint, and the Aftermath Exploit

Welcome to The Notorious Bug Digest #9, a curated compilation of insights into recent blockchain bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate
2
20
12,657
Article

Relocation-Oriented Programming on Solana

Disclaimer: The technique described in this post applies only to SBPF (Solana's bytecode format) v0, v1, and v2 programs. SBPF v3+ programs do not use relocation processing, making this approach

1
1
16
2,152
Article

Hidden Syscalls on Solana

The PoC in this post was implemented for SBPF v0 and the relocation-related internals described in this post apply to SBPF v0/v1/v2 only. Relocation logic has been removed in SBPF v3. Solana's syscall

1
3
21
2,150
Article

Critical Bug Patterns in Sui Move: Lessons from Real Audits

Introduction Move’s type system prevents entire classes of bugs that plague Solidity. Objects can’t be copied or silently dropped, ownership is enforced by both the type system and the runtime, and
13
63
6,695
Article

$292 Million Lost, Zero Bugs Found

When news broke on April 18, 2026 that an attack involving KelpDAO, LayerZero, and Aave had resulted in $292 million in losses, making it the largest DeFi exploit of 2026, the first instinct of most

1
13
76
8,835
Article

The Notorious Bug Digest #8: Sui Bugs and a Rounding Backfire

Welcome to The Notorious Bug Digest #8—a curated compilation of insights into recent onchain bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate time to

1
6
15
1,508
Article

State Changes at the Boundary: Lessons From Security Research on Babylon

This article presents our security research on Babylon, the largest BTC staking DeFi protocol. We explain how Babylon works, a recurring class of issues we encountered, how we found them, and our

3
6
35
3,123
Article

The Notorious Bug Digest #7: Timestamp Attacks, Reentrancy Failures, and Vault Hijacking

Welcome to The Notorious Bug Digest #7, a curated compilation of insights into recent Web3 bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate time to

2
4
48
4,448
Article

We Audited OpenAI's EVMBench. Here's What We Found.

If you’ve been following recent AI smart contract security news, you’ve likely seen EVMBench, the new benchmark from OpenAI in partnership with Paradigm. We reviewed the dataset and identified

23
58
370
56,359
Article

A Mental Model for EVM Developers Building on Sui - Part Two

Last week we went through Part 1 of the mental model for EVM developers building on Sui. As a quick recap, we focused on how developing on Sui revolves around object and ownership models that differ

5
8
32
28,044
Article

A Mental Model for EVM Developers Building on Sui - Part One

If you’ve been building on Ethereum or other EVM chains for a while, chances are you’ve heard more and more about @SuiNetwork. An ecosystem where there’s fast execution, parallelism, strong safety

3
19
70
36,592
Article

Web3 Security Auditor's 2025 Rewind

Welcome to the Web3 Security Auditor’s 2025 Rewind, a collection of succinct technical breakdowns of notable security incidents and vulnerabilities from the past year. Previously known as the Ethereum

3
29
94
10,094
Load more