The Quantstamp Blog

June Security Beat: Keys Over Code

$75.32M was lost across 32 crypto incidents in June, up from May's $59.52M. No coordinated campaign carried the month, but one targeted operation did. A targeted social-engineering attack against Humanity Protocol reached the keys behind the $H token and drained $32M, roughly 42% of every dollar lost in June. Quantstamp led the independent investigation and traced the tooling to a phishing campaign previously seen targeting macOS users. Offchain, a fresh npm supply chain wave hit Red Hat's packages on the first day of the month, and a PeopleSoft zero-day was exploited for two weeks before Oracle said a word. Here's the month in security 👇

Quantstamp Announcements

Quantstamp Joins Alliance Unveiling First Social Impact Stablecoin on Binance

Quantstamp is proud to announce that we are contributing to the Binance Charity Foundation’s Pink Care Token Project, which aims to increase opportunities for women in underdeveloped countries by providing them with feminine care products.

Quantstamp Labs

The Quantstamp Security Network V2 is Now Live on Ethereum Mainnet

Our latest release features an enhanced user experience and is designed to allow individuals to run a node without needing to be whitelisted by Quantstamp.

Quantstamp Announcements

Fundamentals of Smart Contract Security Released

Fundamentals of Smart Contract Security, the world’s first book dedicated to the subject of the security of blockchain applications, has been released. The book is written by smart contract security experts at Quantstamp.

Quantstamp Announcements

Meet the Authors: Ed Zulkoski

Ed holds a Ph.D in Computer Science from the University of Waterloo. His research there was primarily in SAT/SMT solvers and formal verification technologies, with a focus on understanding what makes SAT formulas hard or easy for solvers. Before joining Quantstamp, he worked at Microsoft Research.

Quantstamp Announcements

Meet the Authors: Kacper Bąk

Kacper holds a Ph.D. in Computer Science from the University of Waterloo for his work on modeling and analysis of software product lines. Before coming to Quantstamp, he worked at MathWorks (maker of MATLAB), Opera, and Samsung.

Quantstamp Labs

What is a Smart Contract Audit?

Blockchain technology is promising to revolutionize entire industries, but hacks and exploits of popular blockchain applications threaten to undermine it before it even takes off. Isn’t blockchain supposed to be secure? It’s not that simple.

Quantstamp Announcements

Quantstamp Audits Lockdrop for Polkadot’s First Smart Contract Platform: Edgeware

Quantstamp recently audited Edgeware's lockdrop contract. Edgware is the first smart contract platform which plans to integrate with Polkadot, a blockchain interoperability platform. Built as a parachain of Polkadot, Edgeware is a WebAssembly (Wasm) runtime, high-performance, self-upgrading smart contract platform with on-chain governance. As an infrastructure project, Edgeware aims to address many of the shortcomings facing blockchain technology, including governance hurdles, developer accessibility, and token distribution challenges.

Quantstamp Announcements

Meet the Authors: Jan Gorzny

Jan is a Ph.D candidate at the University of Waterloo. His research interests include complexity theory, software verification and formal methods, discrete mathematics, and blockchain technologies. At Quantstamp, his role is to keep up with emerging technologies, assist in protocol design, and develop ideas with the engineering team.

Quantstamp Announcements

Meet the Authors: Olga Mack

Olga V. Mack is a strategist, nationally-recognized author, public speaker, and women’s advocate. As VP of Strategy at Quantstamp, her role is focused on moving the company towards its mission to achieve broader adoption of blockchain technology through smart contract security.