The Quantstamp Blog

June Security Beat: Keys Over Code

$75.32M was lost across 32 crypto incidents in June, up from May's $59.52M. No coordinated campaign carried the month, but one targeted operation did. A targeted social-engineering attack against Humanity Protocol reached the keys behind the $H token and drained $32M, roughly 42% of every dollar lost in June. Quantstamp led the independent investigation and traced the tooling to a phishing campaign previously seen targeting macOS users. Offchain, a fresh npm supply chain wave hit Red Hat's packages on the first day of the month, and a PeopleSoft zero-day was exploited for two weeks before Oracle said a word. Here's the month in security 👇

Quantstamp Labs

How to Use DeFi Safely

With eye popping interest rates on lending platforms, it’s never been more tempting to put assets into some of the promising new #DeFi applications out there today. But is security an issue? Dr. Poming Lee, Security Engineer with Quantstamp, explains how to keep your funds safe when using DeFi.

Quantstamp Announcements

Quantstamp Enhances Security of Blockchain Certified Sports Memorabilia

On Monday, September 9th, BlockStar, a company authenticating real-world goods using blockchain technology, and DeMarchi, the iconic cycling apparel brand established in 1946, sold the world’s first blockchain certified replica of Fausto Coppi’s 1953 De Marchi Jersey for $10,500. Quantstamp facilitated the success of this sale by enhancing the security of the blockchain components and the website used to conduct the auction.

Quantstamp Announcements

Securing DeFi with PoolTogether

Quantstamp is facilitating the future of DeFi by enhancing the security of leading open finance projects like PoolTogether, a no-loss lottery and innovative savings account application.

Quantstamp Labs

What is a Re-Entrancy Attack?

Computer scientists say that a procedure is re-entrant if its execution can be interrupted in the middle, initiated over (re-entered), and both runs can complete without any errors in execution. In the context of Ethereum smart contracts, re-entrancy can lead to serious vulnerabilities.

Quantstamp Labs

Open Sourcing Our Bounty Protocol

We are open sourcing the code for our Bounty Protocol. A bounty protocol is a marketplace for developers to identify bugs in smart contracts that automation cannot detect. The Bounty Protocol has the potential to leverage software engineering talent from around the world to add an essential layer of infrastructure for blockchain security.

Quantstamp Announcements

Quantstamp Secures Binance's First Stablecoin

Quantstamp, a Y Combinator-backed blockchain security company, recently completed the audit of leading global cryptocurrency exchange Binance’s GBP-backed stablecoin, Binance GBP (BGBP). The BGBP token joins other stablecoins in the market including Coinbase’s USDC, Facebook’s Libra, MakerDAO’s Dai, and Bitfinex’s Tether, and is one of the first major stablecoins to be pegged to the British pound.

Quantstamp Announcements

Quantstamp Audits Ampleforth, a Digital-Asset-Protocol for Smart Commodity-Money

Quantstamp recently completed an audit of Ampleforth, a digital-asset-protocol for smart commodity-money and the first IEO on Tokinex (Ethfinex/Bitfinex IEO platform).

Quantstamp Labs

Economics of the Quantstamp Security Network

This post will explain the economics behind how the Quantstamp Security Network currently is designed so we can understand how node operators can earn QSP and how much smart contract scans cost for users. The two major influences to the economics of the Quantstamp Security Network are the price floor, and supply and demand.

Quantstamp Announcements

Quantstamp Audits Kakao's Blockchain Platform Klaytn

Quantstamp, a Y Combinator-backed blockchain security company, has completed its audit of smart contracts for Klaytn, the blockchain platform created by Kakao, the operator of South Korea’s dominant messaging platform KakaoTalk. Built by GroundX, a Kakao subsidiary, Klaytn is a business-centric blockchain platform designed for mass adoption.