@OpenZeppelin

The security standard for onchain finance. $38 trillion+ in value transferred secured since 2015 for the institutions and innovators shaping global finance.

openzeppelin.com/
Joined August 2016
  • Tweets4.5K
  • Following132
  • Followers59.7K
828Media

The Notorious Bug Digest #9: Rule Downgrade, ZK Misconstraint, and the Aftermath Exploit

Welcome to The Notorious Bug Digest #9, a curated compilation of insights into recent blockchain bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate t…

Article · @OpenZeppelin
2
4
20
12,694

Relocation-Oriented Programming on Solana

Disclaimer: The technique described in this post applies only to SBPF (Solana's bytecode format) v0, v1, and v2 programs. SBPF v3+ programs do not use relocation processing, making this approach obsol…

Article · @OpenZeppelin
1
1
1
16
2,172

Hidden Syscalls on Solana

The PoC in this post was implemented for SBPF v0 and the relocation-related internals described in this post apply to SBPF v0/v1/v2 only. Relocation logic has been removed in SBPF v3.

Article · @OpenZeppelin
1
3
21
2,153

Critical Bug Patterns in Sui Move: Lessons from Real Audits

Move’s type system prevents entire classes of bugs that plague Solidity. Objects can’t be copied or silently dropped, ownership is enforced by both the type system and the runtime, and there's no …

Article · @OpenZeppelin
13
1
63
6,708

$292 Million Lost, Zero Bugs Found

When news broke on April 18, 2026 that an attack involving KelpDAO, LayerZero, and Aave had resulted in $292 million in losses, making it the largest DeFi exploit of 2026, the first instinct of most s…

Article · @OpenZeppelin
1
13
3
76
8,850

The Notorious Bug Digest #8: Sui Bugs and a Rounding Backfire

Welcome to The Notorious Bug Digest #8—a curated compilation of insights into recent onchain bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate tim…

Article · @OpenZeppelin
1
6
2
15
1,518

State Changes at the Boundary: Lessons From Security Research on Babylon

This article presents our security research on Babylon, the largest BTC staking DeFi protocol. We explain how Babylon works, a recurring class of issues we encountered, how we found them, and our thou…

Article · @OpenZeppelin
3
6
1
35
3,138

The Notorious Bug Digest #7: Timestamp Attacks, Reentrancy Failures, and Vault Hijacking

Welcome to The Notorious Bug Digest #7, a curated compilation of insights into recent Web3 bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate time to…

Article · @OpenZeppelin
2
4
1
48
4,455

We Audited OpenAI's EVMBench. Here's What We Found.

If you’ve been following recent AI smart contract security news, you’ve likely seen EVMBench, the new benchmark from OpenAI in partnership with Paradigm. We reviewed the dataset and identified met…

Article · @OpenZeppelin
23
58
16
369
56,410

A Mental Model for EVM Developers Building on Sui - Part Two

Last week we went through Part 1 of the mental model for EVM developers building on Sui. As a quick recap, we focused on how developing on Sui revolves around object and ownership models that differ f…

Article · @OpenZeppelin
5
8
8
32
28,056

A Mental Model for EVM Developers Building on Sui - Part One

If you’ve been building on Ethereum or other EVM chains for a while, chances are you’ve heard more and more about @SuiNetwork. An ecosystem where there’s fast execution, parallelism, strong safe…

Article · @OpenZeppelin
3
18
9
69
36,608

Web3 Security Auditor's 2025 Rewind

Welcome to the Web3 Security Auditor’s 2025 Rewind, a collection of succinct technical breakdowns of notable security incidents and vulnerabilities from the past year.

Article · @OpenZeppelin
3
29
2
94
10,146
Load more