
Subscribe for Insights on Web3 Security
Insights, Analysis, and Best Practices
January 18, 2026 · Bug Deep DiveJackpot enforces pool cap as the following: This is to ensure the following: bonusBallMax +...January 16, 2026 · MentorshipWe finished the Panoptic contest on Code4rena. Lesson Summary: Verify pool ID packing...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary: Simulate full sequences ...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary:## Notes When the user doesn't...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary: There seems to be enough...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary: Downcasting cuts the number,...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary: Entry point for UniswapV4 is...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary: Offset is the byte position in...January 16, 2026 · MentorshipWe continued the Panoptic contest on Code4rena. Lesson Summary: Master bit manipulation first ...January 16, 2026 · MentorshipWe started the Panoptic contest on Code4rena. Lesson Summary: OZ multicall had a bug when...January 4, 2026 · Bug Deep DiveThe Factory.deploy function uses create2 to deploy a wallet but reverts (CreateCollision) if...January 3, 2026 · Bug Deep DiveSequence wallets support ERC‑4337 by validating signatures inside validateUserOp() in ERC4337v07....December 27, 2025 · Bug Deep DiveWhen a session call with BEHAVIOR_REVERT_ON_ERROR behavior fails, the entire execution reverts...December 25, 2025 · Bug Deep DiveConsider a scenario where (1) the wallet is behind the checkpointer and (2) a chained signature...December 24, 2025 · Bug Deep DiveDue to insufficient safeguards against price drops, liquidators receive less collateral than...December 23, 2025 · Bug Deep DiveRewards obtained from FSTO through the delegation of voting power to signal providers can be...December 22, 2025 · Bug Deep DiveA collateral token may become invalid following a governance decision. In such a case, the agent...December 21, 2025 · Bug Deep DiveTo protect users against bricked positions by malicious subscriber contracts, Uniswap V4 notifier...December 20, 2025 · Bug Deep DiveWhen ViewFacet.queryAssetBalances calculates the earnings for compounded maker, it ignores the...December 19, 2025 · Bug Deep DiveView::queryAssetBalances is used to query how much assets an user would receive if they were to...More Posts
