Blog
Research and disclosures
Vulnerabilities we have reported and seen resolved, the testing methods behind them, and news from Guardian.
Guardian Commits $5,000,000 to Digital Asset Security Pilots
Funded security pilots for the institutions and teams bringing digital assets into the global financial system: architecture, standards, assurance engineering, a smart contract audit and offchain pentests.
Read the post →
Guardian Announces Vanguard
Two teams on one codebase, the Helix AI Auditor, a $100,000 Defender contest, offchain coverage and six months of post-launch review, plus $1,000,000 in security audit grants.
Read the post →
Introducing: Guardian Defender
Guardian Defender runs free post-audit bounty contests for Guardian clients, and Guardian pays out any validated Critical finding.
Read the post →
Why Audited Teams Are Getting Hacked
Over $500M was taken from audited DeFi projects in a single year. Why human error survives audits, and a step-by-step guide to invariant testing with Echidna.
Read the post →
Web2: The Hidden Layer of DeFi Risk
Smart contracts can be sound while the Web2 systems around them decide who calls them, with what calldata, and when. A real Guardian finding shows how.
Read the post →
Baseline Markets: Vulnerabilities Reported and Resolved
22 high-severity issues across two Guardian reviews of Baseline Markets V2, and the three most novel vulnerabilities explained.
Read the post →
DN404: Vulnerabilities Reported and Resolved
Two high-severity NFT theft issues and several value-extraction scenarios found in Guardian's review of DN404, the ERC-7631 implementation.
Read the post →