Topic
Practice of finding and preventing vulnerabilities in smart contracts, including audits, access control, admin-key design, and exploit response.
An attacker with one share unit withdrew about 14,838 DAI from a Polygon Uniswap V4 vault on October 9, Panda Security found. The zero-liquidity fallback paid out the whole balance, so every fallback needs the main path's proportional-payout check.
Reality
Manhattan federal jurors convicted Jonathan Spalletta of computer fraud and money laundering over the $53.3 million Uranium Finance exploit of 2021. Where the roughly $31 million in crypto seized in February 2025 ends up now turns on restitution and forfeiture rulings still to come.
Perspective Coverage
10 publishersReality
Arbitrum's Security Council used an October 2 emergency upgrade to pause new Stylus activations on two chains and add a guard that can delay withdrawals. On Arbitrum One, the delay is tied to one case: the dispute system accepting contradictory proofs.
Reality
According to a developer's write-up, six contracts satisfy the EXTCODESIZE(owner) > 0 firmness check on an on-chain order book and still pull their depth, each run as a real testnet transaction.
Reality
Kyber Network Pte. Ltd. has been a Singapore company since 2017 but says it is not operated from Singapore. After 30 June, that sentence has to hold up against a licensing regime.
Reality
Analyst Yajin Zhou's team says the KYC and revocation controls in Anchorpoint's live HKDAP contract do not work as coded. The contract is verified on Etherscan, so anyone can check.
Reality