All Blogs
Inside CertiK's Independent Security Research on Besu
CertiK independently discovered and disclosed five resource-exhaustion vulnerabilities in Besu (formerly Hyperledger Besu), now patched in version 26.7.1, through a proactive chaos-engineering-style testing methodology now productized as Chain Scan.
Aptos Confidential APT: Verifiable Encrypted Transfers on Mainnet
Aptos Confidential APT brings encrypted balances and transfers to Aptos mainnet while using zero-knowledge proofs, governance controls, and optional auditor access to keep state transitions verifiable.
Why Brazil Is Becoming a Blueprint for Digital Asset Regulation
CertiK's CBO Jason Jiang joined the Central Bank of Brazil and Veirano Advogados at Blockchain.RIO to discuss how collaborative VASP regulation is turning Brazil into a global model for digital asset compliance.
DGrid's AI Routing Experiment: Can Onchain Agents Improve Model Selection?
DGrid is testing whether onchain agents, provider redundancy, and Proof of Quality can improve AI model routing across cost, latency, availability, and output quality.
How Venus Is Expanding DeFi Lending on BNB Chain
Venus is expanding DeFi lending on BNB Chain by adding institutional custody access, tokenized equities, and tokenized gold as collateral.
The Real-World Assets Settling on XDC Network
XDC Network is settling real-world credit, including corporate debentures, agribusiness receivables, and business loans, with CertiK helping secure the chain.
Eight Years, 100 Million Users: Bitget Wallet’s Pivot to Payments
Bitget Wallet has evolved from a multi-chain non-custodial wallet into a payments platform spanning cards, QR payments, bank transfers, yield, and tokenized assets.
Where CIP-56 Security Actually Lives: A Guide for Institutions on Canton
How Daml views, choices, factories, client-side construction, and operational permissions determine the security of CIP-56 assets.
What Is a Crypto-Asset Service Provider (CASP)?
A crypto-asset service provider (CASP) is any business offering any regulated “‘crypto-asset service” as defined under the EU's MiCA framework. Learn what qualifies, what compliance requires, and how to meet it.
Post-Quantum Signatures, Part 3: Inside FIPS 205 Through Quranium’s SLH-DSA Adoption
In this post, we use the structure of FIPS 205 to explain how SLH-DSA works and why it matters for real protocol implementations. We start with Forest of Random Subsets (FORS), the few-time signature component that signs part of the randomized message digest, then build up the hypertree that authenticates the reconstructed FORS public key to the public root. Finally, we examine how FIPS 205 defines the concrete SLH-DSA algorithm used by interoperable implementations.
CLARITY Act Stalls as Regulators Move Ahead
Senate leadership released a massive 616-page draft of the CLARITY Act, representing the most detailed legislative effort to date to regulate the digital asset industry. This comprehensive text includes expansive provisions for both crypto market structure and new law enforcement mandates designed to modernize federal oversight of the ecosystem.
Verus Incident Analysis
On July 23, 2026, an attacker exploited the Verus Protocol’s Ethereum cross-chain bridge, draining approximately $7.44 million in ETH, tBTC, stablecoins, and MKR. The attack relied on a discrepancy in how Verus and Ethereum interpreted notarization data: malicious duplicate state-root entries were included in otherwise legitimate notarizations, signed by Verus notaries, and then relayed to Ethereum, where they overwrote the genuine trusted state root.