Introducing OpenZeppelin Contracts v5.1

MakerDAO Critical Vulnerability Notice

While working on an audit for the Coinbase team, we found a critical vulnerability in one of the...

Security Insights

A new wave of applications

Few blockchain applications have real adoption. It’s a fact. Barely a few surpass the low hundreds...

Security Insights

Building Blocks

A mental shortcut for thinking about EVM packages is to compare them to a package manager such as...

Security Insights Products

Follow this quality checklist before an audit

At OpenZeppelin we help protect the core infrastructure of open and decentralized applications. I’m...

Security Insights

Testing real-world contract upgrades

Deploying to production can be a stressful experience, especially if you don’t have a proper suite...

Security Insights Products

EVM package deployment with ZeppelinOS—Part II

In this section, we’ll make sure the contract we’ve deployed to our local network works by testing...

Security Insights Products

State of EVM Packages – End of 2018

Two months ago, we presented the EVM package standard as a means to securely share on-chain...

Security Insights

Toward a secure code ecosystem

This week started off with the finding of malicious code injected into a dependency of a popular...

Security Insights

The Global Coordination Machine

Few applications need blockchains. Distributed consensus makes each computational step very...

Security Insights

Deconstructing a Solidity Contract  - Part VI: The Metadata Hash

In the last article, we noticed that the runtime bytecode generated by the Solidity compiler...

Security Insights

Deconstructing a Solidity Contract  - Part IV: Function Wrappers

We saw how the function selector acts as a hub or a switch of sorts in our BasicToken.sol contract....

Security Insights

Compliant Decentralization?: Exploring an Approach to Utility Token Distribution

William Hinman’s recent statements at the Yahoo Finance All Markets Summit provide some guidance...

Security Insights