https://www.shieldify.orgTue, 04 Aug 2026 07:12:54 GMT60Webflowhttps://www.shieldify.org/post/oracle-manipulationhttps://www.shieldify.org/post/oracle-manipulationIt is one of the most common attack vectors in DeFi, so both auditors and protocols need to learn what it is and how to deal with it, so get your notepads out and dive into our thread.Sun, 30 Jun 2024 19:12:58 GMThttps://www.shieldify.org/post/dao-governance-attackshttps://www.shieldify.org/post/dao-governance-attacksDAO is Decentralised Autonomous Organisation. Essentially, it’s a set of smart contracts the determine how its participants/members make decisions. Let’s look at a small graph to easier understand it.Thu, 27 Jun 2024 09:04:47 GMThttps://www.shieldify.org/post/merkle-treehttps://www.shieldify.org/post/merkle-treeMerkle tree is a generalisation of a hash list or a hash chain. It has “leaf” nodes, each of them have a cryptographic hash of a data black they’re accossiated with. Every node that is not a “leaf” (they’re called branch or inner node) is labelled with the cryptographic hash of its child node’s hash. Merkle tree (or hash tree) allows more secure and efficient verification of large data structures. It was created in 1979 by Ralph Merkle (hence, Merkle tree).Thu, 20 Jun 2024 08:00:45 GMThttps://www.shieldify.org/post/mev-attackhttps://www.shieldify.org/post/mev-attackMEV is the abbreviation of Miner or Maximum Extractable Value. Miners/validators can order, prioritize and censor transactions in blocks, moreover, they can insert their transactions. Therefore, they always seek opportunities to manipulate transactions and gain additional value besides the fees for creating blocks.Thu, 30 May 2024 16:11:08 GMThttps://www.shieldify.org/post/inflation-attackhttps://www.shieldify.org/post/inflation-attackIn simple terms, an inflation attack is a malicious attacker front-running the vault’s first depositor, manipulating solidity’s rounding down and taking all the shares. But let’s start from the basics.Fri, 24 May 2024 09:25:43 GMThttps://www.shieldify.org/post/reentrancy-and-denial-of-service-dos-attacks-what-are-they-and-example-mitigation-strategieshttps://www.shieldify.org/post/reentrancy-and-denial-of-service-dos-attacks-what-are-they-and-example-mitigation-strategiesBlockchain technology has revolutionized various industries by offering decentralized and transparent solutions. However, the security of blockchain systems heavily relies on the integrity of smart contracts. In this article, we delve into three of the most common smart contract vulnerabilities, shedding light on their impact and mitigation strategies to bolster blockchain security.Mon, 22 Apr 2024 08:54:03 GMThttps://www.shieldify.org/post/zero-knowledge-zk-rollups-the-evolution-of-blockchain-scalabilityhttps://www.shieldify.org/post/zero-knowledge-zk-rollups-the-evolution-of-blockchain-scalability‍Understanding ZK-Rollups‍A ZK-rollup is an advanced layer 2 scaling solution designed to expedite transaction processing by shifting the workload off the main blockchain (off- chain), while still anchoring transaction data on the layer 1 blockchain (on-chain). It leverages ZK-proofs to authenticate transactions as legitimate without disclosing any sensitive information.Wed, 27 Mar 2024 21:35:11 GMThttps://www.shieldify.org/post/introduction-to-account-abstraction-use-cases-and-security-considerations-for-developershttps://www.shieldify.org/post/introduction-to-account-abstraction-use-cases-and-security-considerations-for-developersThis article explores the various benefits EIP-4337 (Account Abstraction) introduces to Ethereum, together with security considerations to be taken care of while using it.Thu, 21 Mar 2024 07:13:34 GMThttps://www.shieldify.org/post/what-is-erc-404-token-standardhttps://www.shieldify.org/post/what-is-erc-404-token-standardBut what problem does ERC404 solve? The main goal is to make NFTs liquid to be traded and used as collateral or liquidity for DeFi protocols. Moreover, they present a concept of fractionalized ownership, when several users may have a part of one NFT, making previously inaccessible tokens to be attained by a larger number of users.Mon, 18 Mar 2024 10:02:35 GMThttps://www.shieldify.org/post/smart-contract-audit-approaches-pros-and-conshttps://www.shieldify.org/post/smart-contract-audit-approaches-pros-and-consWhat is a Smart Contract? Are smart contracts secure? How Are Smart Contracts secured?Sun, 17 Mar 2024 21:40:55 GMThttps://www.shieldify.org/post/understanding-solidity-storage-management-and-security-considerationshttps://www.shieldify.org/post/understanding-solidity-storage-management-and-security-considerationsUnderstanding how storage works in the realm of Ethereum is crucial for two reasons - smart contract optimization and ensuring its security. This blog post dives into these essentials of Solidity storage management. To do so, weʼll cover everything from storage types to cost optimization and security considerations.Sat, 24 Feb 2024 23:52:13 GMThttps://www.shieldify.org/post/smart-contract-auditing-shieldify-recap-2023https://www.shieldify.org/post/smart-contract-auditing-shieldify-recap-2023In 2023, Shieldify took its inaugural steps in pioneering Web3 Security. We established the first Bulgarian-based company specialising in Solidity based Smart Contract Auditing. This bold move signaled our commitment to redefine industry standards, bridging the gap between tradition and innovation. Within just six months we became multilinugal, adding Rust, Cairo (Starknet), and Go to our portfolio. These additions allow us stay ahead of the curve and helped us secure more than 45,000 lines of code spanning over 16 projects. Enabling collaborative efforts with our clients to whom we became tech partners. Read along for more information and shared achievements. Fri, 26 Jan 2024 16:35:01 GMT