Public incidents are described from the reports of the projects involved and from published analyses. Quantix does not claim discoveries made by others.
Latest publication
PrimerSmart Contract Vulnerabilities
What to prepare before a smart contract audit, the checks to run for each class in the OWASP Smart Contract Top 10: 2026, what Slither, fuzzers and provers catch and miss, and what to do after the report.
Smart Contract Security11 min read
In this piece
Research areas
Smart Contract Vulnerabilities8 publicationsVulnerability classes in on-chain code across EVM, Solana and Move: how they arise and how they are fixed.Show in the archive · latest 31 October 2026DeFi Security7 publicationsEconomic and protocol-level risk: oracles, vault accounting, governance and incentive design.Show in the archive · latest 31 October 2026
Blockchain Infrastructure2 publicationsNodes, RPC, block building and the off-chain systems decentralised applications depend on.Show in the archive · latest 8 September 2026
Threat Intelligence1 publicationHow attacks are prepared and executed on-chain, and the signals that precede them.Show in the archive · latest 20 October 2026
Incident Analysis1 publicationStructured analysis of public incidents: root causes, attack paths and the controls that would have helped.Show in the archive · latest 29 September 2026
Formal Verification3 publicationsSpecifications, invariants, fuzzing and provers: techniques for checking what code must always do.Show in the archive · latest 15 September 2026
Zero-Knowledge Systems1 publicationSoundness of circuits and proof systems, and how zero-knowledge applications fail.Show in the archive · latest 2 June 2026Cross-Chain Security2 publicationsBridges, messaging layers and signatures that must stay valid on exactly one chain.Show in the archive · latest 31 October 2026
Wallet Security2 publicationsSigning flows, approvals, phishing and the interfaces between users and contracts.Show in the archive · latest 31 October 2026Archive
Press / to search from anywhere on the page, Esc to clear.
Showing 27 of 27 publications.
PrimerSmart Contract Vulnerabilities11 min read
What to prepare before a smart contract audit, the checks to run for each class in the OWASP Smart Contract Top 10: 2026, what Slither, fuzzers and provers catch and miss, and what to do after the report.
By Quantix Research, Smart Contract Security
PrimerSmart Contract Vulnerabilities11 min read
What each section of an audit report establishes and what it leaves open, how to check that deployed bytecode matches the audited commit, and the questions to ask before relying on a report.
By Quantix Research, Smart Contract Security
Technical analysisDeFi Security11 min read
How a lending market decides when a position can be liquidated, how much a liquidator repays and seizes, and when a price gap leaves bad debt. Worked numbers on a model market, compared with Aave v3 and Compound III.
By Quantix Research, DeFi Security
Technical analysisCross-Chain Security11 min read
Assume a bridge’s verification will fail one day. Replay protection, rate limits sized from observed outflows, withdrawal delays and a well-scoped pause decide how much that failure can take, and who pays for it.
By Quantix Research, Cross-Chain Security
PrimerSmart Contract Vulnerabilities11 min read
Access control leads OWASP’s Smart Contract Top 10. How ownership transfers, role-admin graphs, timelocks and multisigs fail, six common bugs with their fixes, and how to test who can call what.
By Quantix Research, Smart Contract Security
PrimerDeFi Security12 min read
A reproducible method for checking whether an ERC-20 or SPL token can dilute or trap holders: mint, freeze, fee, sell, upgrade and liquidity checks, a worked 99% sell-tax example, and what scanners miss.
By Quantix Research, Threat Intelligence
Technical analysisDeFi Security11 min read
A flash loan removes the capital barrier from an attack, not the flaw behind it. How the loans work, a fully worked example of the economics, four public incidents, and the defences that change the arithmetic.
By Quantix Research, DeFi Security
Technical analysisWallet Security11 min read
An agent that signs will one day be asked to sign the wrong transaction. A threat model for AI agents that transact, delegation from hot keys to ERC-4337 session keys and EIP-7702, and spending caps sized step by step.
By Quantix Research, Wallet Security
Technical analysisThreat Intelligence8 min read
Many exploits are preceded by preparation that is visible on-chain: funding, deployment, rehearsal. A structured look at the signals, how far each can be trusted, and how to turn them into detection rules.
By Quantix Research, Threat Intelligence
PrimerDeFi Security6 min read
An empty tokenised vault can be manipulated so that the next depositor receives no shares. Why the arithmetic allows it, and how virtual shares, dead shares and slippage checks close the gap.
By Quantix Research, DeFi Security
PrimerSmart Contract Vulnerabilities8 min read
A contract can be safe from classic reentrancy and still expose an inconsistent state to anyone who reads it mid-call. How the pattern works, and how integrators should defend against it.
By Quantix Research, Smart Contract Security
Technical analysisIncident Analysis6 min read
Bridges concentrate value behind a verification step that most users never see. A taxonomy of how that step has failed in public incidents, from key compromise to forged proofs, and what each failure implies for design.
By Quantix Research, Cross-Chain Security
PrimerSmart Contract Vulnerabilities7 min read
Upgradeable contracts move construction logic into ordinary functions. That small change creates a family of access-control failures that a constructor would never allow.
By Quantix Research, Smart Contract Security
Technical analysisFormal Verification6 min read
Provers can establish that a property holds in every reachable state. Whether that matters depends on which properties were written, what the model assumed, and what was left out. A practitioner’s map.
By Quantix Research, Formal Methods
PrimerBlockchain Infrastructure7 min read
Frontends and backends trust the node they query. A review of what an untrusted or misconfigured RPC layer can do to an otherwise sound application.
By Quantix Research, Infrastructure Security
PrimerCross-Chain Security6 min read
A signature proves that someone agreed to something. Unless the message says where and how often, it can be presented again on another chain, another contract or another day. The binding fields, and how they fail.
By Quantix Research, Cross-Chain Security
PrimerWallet Security7 min read
Permit-style signatures let users authorise transfers without sending a transaction. The same property makes them a favoured tool for phishing. What wallets, dApps and users can check.
By Quantix Research, Wallet Security
Technical analysisBlockchain Infrastructure6 min read
Transaction ordering is a resource that someone will sell. How maximal extractable value reaches users through the block-building pipeline, and which protocol designs reduce what can be extracted.
By Quantix Research, Infrastructure Security
PrimerDeFi Security7 min read
Every price source has a cost of manipulation. Protocols are safe only while that cost exceeds what an attacker can extract. A framework for estimating both sides.
By Quantix Research, DeFi Security
PrimerSmart Contract Vulnerabilities7 min read
A proxy splits a contract into the address users trust and the code that runs behind it. Every upgrade is a chance to break the agreement between the two. The failure modes, by layer.
By Quantix Research, Smart Contract Security
PrimerFormal Verification7 min read
Fuzzers and provers are only as good as the properties they check. How to move from vague requirements to invariants precise enough to fail.
By Quantix Research, Formal Methods
PrimerSmart Contract Vulnerabilities6 min read
Solana programs receive their state as a list of accounts chosen by the caller. Most serious bugs come from trusting that list. The checks every instruction needs, and how Anchor helps and where it does not.
By Quantix Research, Smart Contract Security
Technical analysisDeFi Security6 min read
On-chain governance turns token balances into authority over code and treasuries. How that authority has been borrowed, bought, hidden in proposal payloads and routed around timelocks.
By Quantix Research, DeFi Security
Technical analysisDeFi Security7 min read
Spot prices, time-weighted averages, push feeds and pull feeds fail in different ways. A comparison of oracle designs, the assumptions each makes, and the checks a consuming contract must add.
By Quantix Research, DeFi Security
PrimerSmart Contract Vulnerabilities6 min read
Move’s type system rules out whole classes of EVM bugs: resources cannot be copied or silently dropped. Capability leaks, generic confusion, arithmetic aborts and upgrade semantics remain. A review guide for Aptos and Sui.
By Quantix Research, Smart Contract Security
PrimerFormal Verification6 min read
Coverage-guided and stateful fuzzers explore sequences of calls no reviewer would think to write. How they work, how to give them good inputs, and how to tell whether a green run means anything.
By Quantix Research, Formal Methods
PrimerZero-Knowledge Systems6 min read
A proof is only as strong as the constraints behind it. When a circuit computes a value without constraining it, a prover can choose a different one. How under-constrained circuits arise in Circom and how to find them.
By Quantix Research, Zero-Knowledge Systems
The reviewers who write these publications also assess production code. Tell us what you are building and when it ships.
