Nothing found.

Latest stories

Compound Finance Audit Summary

Compound Finance is a protocol, currently deployed on the Ethereum network, for automatic, permissionless, and…

Read More

Compound Audit

The Compound team asked us to review and audit their platform's smart contracts. We examined their code and our results…

Read More

Build your app with the Gas Station Network

The Gas Station Network, or GSN for short, is a decentralized solution for solving user onboarding to Ethereum…

Read More

Our most popular audit reports

Nothing found.

SEE ALL >
More stories

Follow this quality checklist before an audit

At Zeppelin we help protect the core infrastructure of open and decentralized applications. I’m part of the Research team, which is in charge of conducting security audits.

Testing real-world contract upgrades

Deploying to production can be a stressful experience, especially if you don’t have a proper suite of tests to ensure that what you built will run smoothly.

Zeppelin at ETHDenver: an upgradeable, linkable future!

¡Hola Zeppeliners! It’s that time again, when hackers, innovators, and Bufficorns converge on ETHDenver for a week of #buidl, #buidl, #buidl!

EVM package deployment with ZeppelinOS—Part III

Now that you’ve created your first EVM package, let’s go through the steps you would take to link it to your project as if you were linking directly from NPM. These commands you already know, so I’ll…

EVM package deployment with ZeppelinOS—Part II

In this section, we’ll make sure the contract we’ve deployed to our local network works by testing directly against it in Truffle Console. Once we’re happy it works, we’ll publish to the mainnet and…

EVM package deployment with ZeppelinOS—Part I

If you’re familiar with Node.js, then you will be familiar with NPM (Node Package Manager). You will also know that the ability to npm install existing code in your project makes your life as a…

Why I’m Building Zeppelin

The purpose of this post is to update my personal vision of Zeppelin and Zeppelin’s projects, as their founder and CTO. This is my own personal perspective, and some Zeppelin team members may not be…

State of EVM Packages – End of 2018

 Two months ago, we presented the EVM package standard as a means to securely share on-chain upgradeable smart contract code. Since then, we have had a great response from the community...

RNDR Token Transfer Audit

The OTOY team asked us to review and audit their RNDR Token contracts. We looked at the code and now publish our results.

Toward a secure code ecosystem

This week started off with the finding of malicious code injected into a dependency of a popular open source npm package. The attacker found an inactive library, volunteered to help with the project,…

More stories

Follow this quality checklist before an audit

At Zeppelin we help protect the core infrastructure of open and decentralized applications. I’m part of the Research team, which is in charge of conducting security audits.

Testing real-world contract upgrades

Deploying to production can be a stressful experience, especially if you don’t have a proper suite of tests to ensure that what you built will run smoothly.

Zeppelin at ETHDenver: an upgradeable, linkable future!

¡Hola Zeppeliners! It’s that time again, when hackers, innovators, and Bufficorns converge on ETHDenver for a week of #buidl, #buidl, #buidl!

EVM package deployment with ZeppelinOS—Part III

Now that you’ve created your first EVM package, let’s go through the steps you would take to link it to your project as if you were linking directly from NPM. These commands you already know, so I’ll…

EVM package deployment with ZeppelinOS—Part II

In this section, we’ll make sure the contract we’ve deployed to our local network works by testing directly against it in Truffle Console. Once we’re happy it works, we’ll publish to the mainnet and…

EVM package deployment with ZeppelinOS—Part I

If you’re familiar with Node.js, then you will be familiar with NPM (Node Package Manager). You will also know that the ability to npm install existing code in your project makes your life as a…

Why I’m Building Zeppelin

The purpose of this post is to update my personal vision of Zeppelin and Zeppelin’s projects, as their founder and CTO. This is my own personal perspective, and some Zeppelin team members may not be…

State of EVM Packages – End of 2018

 Two months ago, we presented the EVM package standard as a means to securely share on-chain upgradeable smart contract code. Since then, we have had a great response from the community...

RNDR Token Transfer Audit

The OTOY team asked us to review and audit their RNDR Token contracts. We looked at the code and now publish our results.

Toward a secure code ecosystem

This week started off with the finding of malicious code injected into a dependency of a popular open source npm package. The attacker found an inactive library, volunteered to help with the project,…