Citadelle Defence & Security Consultancy and FailSafe announce a strategic partnership to deliver Digital Security & Resilience Services....
FailSafe conducted a comprehensive full-stack security audit for MakeBanc, hardening their smart contracts and off-chain backend orchestration services....
Anthropic recently proved that AI is superior to humans at vulnerability discovery. We explore the economics of their $20,000 Mythos scaffold, and how FailSafe ...
FailSafe SWARM partnered with NEAR AI to uncover and patch a critical safety layer bypass and memory poisoning vulnerabilities in their Rust-based IronClaw fram...
A proactive security assessment of NVIDIA NemoClaw (alpha) uncovered multiple vulnerabilities, including a path traversal exploit that escaped the agent sandbox...
FailSafe conducted a comprehensive security assessment for UniOcean, delivering two detailed audit reports on their core platform and oracle integration....
Anthropic’s Claude Mythos Preview proved AI is ready for offensive security. As AI-assisted attacks scale and overwhelm platforms like HackerOne, CISOs must har...
Current LLM firewalls only protect the prompt and response layer. FailSafe ARC is a continuous security platform that red-teams agent workflows, catches behavio...
The rush to deploy autonomous AI agents has created a massive, unmanaged attack surface. Today’s critical CVSS 10.0 RCE vulnerability in Flowise proves why trad...
Driven by AI coding assistants and autonomous development pipelines, enterprises are deploying code faster than human security teams can audit it. FailSafe answ...
A critical privilege escalation vulnerability in the OpenClaw gateway is being actively exploited in the wild, allowing attackers to hijack autonomous AI agents...
Threat actors compromised an axios maintainer account to publish malicious versions to npm, bypassing CI/CD to deploy a highly sophisticated, cross-platform RAT...
Learn how fintech companies in Singapore should approach penetration testing to satisfy MAS's strict Technology Risk Management (TRM) guidelines for annual lice...
A major supply chain attack compromised the popular LiteLLM Python package on PyPI, actively harvesting AWS, GitHub, and crypto credentials while attempting lat...
FailSafe has partnered with Synthesys to provide comprehensive, institutional-grade security for the launch of the TPLUS tokenized private credit fund....
An attacker exploited a critical minting vulnerability in the Resolv Protocol, creating 80 million uncollateralized USR tokens via a $100K deposit and triggerin...
A critical zero-day vulnerability in Langflow (CVE-2026-33017) isn't just leaking API keys. Attackers are deploying reverse shells, mining cryptocurrency, and a...
FailSafe’s code-agnostic agentic security testing platform, SWARM, achieves 69.2% vulnerability detection recall on the EVMbench smart contract security benchma...
FailSafe's agentic AI surfaced valuable security findings in Bitmor's Bitcoin lending protocol on Base ahead of launch, the kind of vulnerabilities traditional ...
FailSafe's SWARM completed a full assessment across Megapot v2 contracts, identifying four vulnerabilities including an LP pool cap bypass that could have expos...
TL;DR On February 15, 2026, DeFi lending protocol Moonwell lost $1.78 million after an oracle misconfiguration priced cbETH at $1.12 instead of its actual value...
FailSafe completed a comprehensive smart contract audit for Rujira Fin, a hybrid order book DEX on THORChain's omnichain app layer, uncovering two critical fund...
FailSafe completed a comprehensive smart contract audit for Redacted's privacy-focused protocol on Rujira (THORChain), uncovering a critical fee bypass vulnerab...
FailSafe completed a comprehensive smart contract audit for Canonic's Midpoint Anchored Order Book (MAOB) protocol on MegaETH, uncovering oracle manipulation ve...
The Evolving Role of Cybersecurity in an Agentic Age ~7 minute read Over the past year, I’ve been thinking more deeply about why Failsafe exists and why w...
Smart Contract Audit in Minutes, Not Months: Automated Security for Blockchain Developers A traditional smart contract audit typically costs $50,000-150,000 and...
Free Wallet Risk Score Tool from FailSafe! Every day, $6.4 million in crypto gets stolen. Before you send funds to any address—whether it’s a new DeFi pro...
An attacker exploited a critical integer overflow vulnerability in the Truebit protocol, minting TRU tokens for negligible cost and draining $26 million from th...
FailSafe completed a comprehensive penetration testing engagement for Codex's payment processing platform, identifying critical workflow vulnerabilities and ens...
dbook is a fully on-chain EVM orderbook exchange designed to deliver decentralized trading with high performance, gas efficiency, and self-custody. The protocol...
Aegis is a multichain stablecoin protocol powering JUSD and YUSD, featuring minting, redemption, staking vaults, rewards distribution, and cross-chain bridging ...
The Moats are a flexible staking and rewards protocol enabling project teams to configure easy governance participation, time-weighted incentives, and multi-tok...
FailSafe completed a comprehensive smart contract audit for dFusion AI's attestation infrastructure on Monad, ensuring secure attestation mechanics and access c...
BaseVol is a next-generation on-chain options protocol delivering lightning-fast 0DTE trading, capital-efficient vault strategies, and institutional-grade produ...
A comprehensive analysis of the Balancer V2 exploit, its technical specifications, and the aftermath of the incident, targeted towards security professionals....
FailSafe completed a comprehensive smart contract audit for Oobit's Solana-based payment infrastructure, ensuring secure financial calculations and reward distr...
Moonwell DeFi’s smart contracts on Base and Optimism were potentially targeted. A price feed issue exploited, risking over $1M....
FailSafe completed a comprehensive pre-audit security review for MU Digital's Ethereum-based staking and vault infrastructure, ensuring secure ERC4626 vault mec...
FailSafe completed a comprehensive smart contract audit for AI Seer's staking infrastructure on Base, ensuring secure reward distribution, vault mechanics, and ...
402bridge has reportedly been exploited, with funds extracted. Users are advised to revoke transaction allowances for security....
FailSafe completed a comprehensive LLM security penetration testing engagement for MetaComp's WhatsApp trading bot, identifying critical vulnerabilities in prom...
BetterBank is a revolutionary DeFi (Decentralized Finance) protocol that reimagines lending, borrowing, and wealth generation. Traditional banking systems are s...
The @noble_xyz X account has been compromised, sharing phishing tweets. Security measures are crucial as details unfold....
In-depth analysis of SharwaFinance’s reported exploit reveals absence of insolvency check as root issue for multiple attacks. Explore our findings....
Kadena’s unexpected shutdown and its effect on stakeholders highlight crucial insights into Web3 security and market volatility....
Exploring DPRK’s adoption of EtherHiding, a technique leveraging blockchain for malware distribution, impacting cybersecurity and cryptocurrency theft....
Discover essential steps to ensure your smart contract is audit-ready, based on insights from a real-world experience....
Comprehensive analysis of the largest-ever joint sanctions action against cybercriminal networks in Southeast Asia by OFAC, FinCEN, and the UK FCDO....
Explore how Paxos’s $300 trillion PYUSD minting error occurred and how comprehensive security measures can prevent such incidents....
Explore recent security breaches on Solana, including threats and preventative measures, to safeguard your digital assets....
The official RubiFi X account has been compromised, leading to the dissemination of phishing tweets. Stay vigilant and follow security protocols....
Typus Finance has paused all smart contracts due to an oracle vulnerability in their TLP contract....
An exploit has been detected on $sil, initially created by @AndreCronjeTech. Stay vigilant....
FailSafe completed a comprehensive smart contract audit for Nodo's AI-powered vault infrastructure on Sui, ensuring secure custody, share accounting, and integr...
Explore the essential aspects of RWA tokenization risk assessment with insights tailored for web3 security professionals....
Explore Singapore’s advanced stablecoin regulatory framework and its implications for digital currency adoption and security....
SBI Crypto, once viewed as a stable entity in the blockchain space, faced a $24 million heist. Explore the implications and security lessons from this significa...
FailSafe completed a comprehensive smart contract audit for Thetanuts' onchain options protocol, ensuring secure vault mechanics, options settlement, and advanc...
FailSafe completed a comprehensive smart contract audit for YGG Play's gaming platform by Yield Guild Games, ensuring secure in-game economy and NFT mechanics. ...
FailSafe completed a comprehensive smart contract audit for Fractalized's RWA tokenization platform, ensuring secure fractional ownership mechanisms and protoco...
FailSafe completed a comprehensive smart contract audit for Valiant's Launchpad on Fogo, ensuring secure token launch mechanisms and protocol safety. Learn abou...
FailSafe completed a comprehensive smart contract audit for Nocturnal's Solana trading platform, ensuring secure fee collection mechanisms and protocol safety. ...
FailSafe completed a comprehensive penetration testing engagement for Football.fun's Web3 prediction gaming platform, identifying critical vulnerabilities in sm...
SwissBorg experienced a critical exploit with 192.6K SOL stolen, raising concerns in the crypto community....
Web3 developers face growing threats, including NPM supply chain attacks. Learn how to secure your crypto transactions from malicious code injections....
Nemo Protocol on SuiNetwork has been hit by a $2.4M exploit. The hacker bridged USDC via Circle....
Explore the groundbreaking partnership between FailSafe and Bitdefender, enhancing security with innovative solutions for blockchain and AI....
Uncover the details behind the Venus Protocol hack, the recovery process, and its implications on decentralization in DeFi....
Explore the recent Bunni hack and its implications for DeFi projects. Learn what led to the $2.3M exploit and how to safeguard against liquidity rebalancing fla...
TN7 is not just an NFT minting platform, it’s the gateway to an expansive digital content universe. Anchored by Viu’s first-ever digital comic series, Path of V...
Security is the cornerstone of DeFi adoption. Aarna Protocol, a next-generation asset management platform powered by AI and on-chain vault strategies, recently ...
Explore the significance of Agentic AI Security in Web3 environments. Learn how FailSafe provides robust solutions to protect AI systems....
DeFi continues to evolve rapidly, and protocols like PokPok are pushing the boundaries with innovative mechanics. To ensure the safety of its users and ecosyste...
Explore the recent $48M outflows from BtcTurk and their implications for web3 security auditing and monitoring. Learn how FailSafe can help prevent such inciden...
The rise of decentralized finance (DeFi) and AI-powered blockchain tools has made security more important than ever. OpenPad, a decentralized AI-driven launchpa...
Delivering secure code is no longer optional. Application security code review is a vital practice that identifies vulnerabilities before deployment, saving tim...
Overview Artificial intelligence cybersecurity represents a dual-use paradigm: adversaries leverage AI to launch scalable, adaptive attacks, while defenders emp...
What Is a Vulnerability Scan? A vulnerability scan is an automated process using security tools to identify known weaknesses such as missing patches, misconfigu...
Vulnerability testing and penetration testing are both crucial pillars of a proactive cybersecurity strategy, yet they serve distinct purposes. Understanding th...
Crypto transaction monitoring is a foundational requirement for any Web3 platform seeking to build trust, remain compliant, and defend against illicit finance. ...
What is AML Transaction Monitoring? AML (Anti-Money Laundering) transaction monitoring is the process of analyzing financial transactions to detect and report s...
What Are AI Guardrails? AI guardrails are design principles, tools, and operational frameworks that prevent unintended behavior in AI systems. They help ensure ...
Why Cybersecurity Matters for Large Language Models As large language models (LLMs) become integral to software, customer service, healthcare, finance, and ente...
What Is Prompt Hacking? Prompt hacking, also referred to as prompt injection, is a method used by malicious actors to manipulate the inputs of large language mo...
What is OWASP LLM? OWASP LLM, also known as the OWASP Top 10 for Large Language Model Applications, is a focused effort by the OWASP Foundation to catalog and r...
On July 16, 2025, the BigONE crypto exchange disclosed a significant security incident involving a breach of its warm wallet system. The team reported: BigONE r...
Upgradeability in smart contracts refers to the ability to improve, fix, or expand contract logic after deployment without changing the contract’s address or di...
On July 15 2025, suspicious transactions on Base involving Arcadia Finance’s rebalancer contract was flagged. The attacker leveraged a malicious swapdata payloa...
On July 9, 2025, GMX V1, a decentralized perpetual exchange on Arbitrum, suffered a significant exploit resulting in the loss of approximately $42 million from ...
Peapods Finance, a decentralized volatility farming protocol, suffered a security breach resulting in the loss of approximately $200,000. The exploit targeted t...
As decentralized finance infrastructure evolves across Layer 1 and Layer 2 ecosystems, stablecoins serve as foundational primitives that must withstand adversar...
Stablecoins, digital assets pegged to fiat currencies or commodities, are driving a new era of blockchain-based finance. In 2025, stablecoin adoption is acceler...
Tokenizing real-world assets (RWAs), from real estate and gold to invoices and equities is one of the most promising applications of blockchain. However, bringi...
In today’s high-stakes cybersecurity landscape, aligning with globally recognized standards is a prerequisite for trust and compliance. FailSafe is committed to...
In the rapidly evolving cryptocurrency landscape, centralized exchanges (CEXs) remain pivotal for digital asset trading. However, their centralized nature makes...
As financial institutions accelerate the adoption of tokenized assets, stablecoins, and permissioned blockchain networks, many are rethinking how compliance and...
In an era where digital transformation is accelerating, the convergence of artificial intelligence (AI), cybersecurity, and blockchain technology is more critic...
Overview As blockchain-based gaming and NFT systems gain traction, the underlying infrastructure must be built on hardened, auditable foundations. LoL Land, dev...
Published: June 26, 2025 What Happened to Resupply? On June 26, 2025, Resupply, a decentralized stablecoin protocol utilizing Curve and Frax liquidity was flagg...
On June 26, 2025, speculation began circulating within the DeFi community about a potential exploit targeting ResupplyFi, a decentralized stablecoin protocol in...
Updated on 25 June 2025, 10:23PM SGT Immediate Actions for Silo Finance Users If you’re currently engaged with Silo Finance, whether as a depositor, borrower, o...
Overview As the proliferation of Stablecoins accelerates in emerging markets, so does the risk landscape. National initiatives like cNGN, Nigeria’s blockc...
The Digital Operational Resilience Act (DORA) is a critical regulation from the European Union designed to bolster digital resilience across the financial secto...
The GENIUS Act (Guiding and Establishing National Innovation for US Stablecoins Act) passed the U.S. Senate on June 17, 2025 by a 68–30 vote and is now headed t...
On June 18, 2025, Nobitex—Iran’s largest cryptocurrency exchange—suffered a devastating hack, losing over $90 million across major blockchains. The incident app...
On 30 May 2025, the Monetary Authority of Singapore released its final framework for Digital Token Service Providers (DTSPs) under Part 9 of the Financial Servi...
June 6, 2025 As the blockchain ecosystem matures, the cost of vulnerabilities is no longer theoretical. It’s measured in nine-figure exploits, regulatory fines,...
Stablecoins have emerged as a transformative force in the realm of cross-border payments, offering unparalleled speed, cost-efficiency, and transparency. Howeve...
In the rapidly evolving world of digital finance, ensuring the security and regulatory compliance of stablecoins is paramount. FailSafe is proud to partner with...
Overview In late April 2025, Term Finance—a fixed-rate lending protocol—suffered an exploit resulting in roughly $1.5 million in losses. The incident was trigge...
April 24, 2025 In our ongoing commitment to providing a secure and transparent digital asset, FailSafe is proud to announce a strategic partnership with IDRX, t...
A New Era of Social Engineering In today’s remote-first world, the interview process has become a new battleground for cybercriminals. Recent reports—including ...
BLOX, the first Malaysian stablecoin platform issuing MYRC (Malaysian Ringgit Coin), has officially partnered with FailSafe to elevate the security of its digit...
FailSafe offers unparalleled protection by providing comprehensive end-to-end security solutions—from detailed pre-deployment audits to real-time post-deploymen...
In the month of March, FailSafe had the privilege to participate in three landmark events that brought together the world’s brightest minds in cybersecurity, bl...
Almanax, an AI-driven security auditing tool, is integrating FailSafe into its platform, giving its customers direct access to real-time threat monitoring and a...
Paladin has built a reputation as a premier smart contract auditing firm, specializing in securing DeFi protocols through in-depth code reviews, penetration tes...
The year 2024 saw a significant number of security breaches across the web3 ecosystem, with smart contract exploits and access control failures emerging as prim...
It’s been a really chaotic week. Bybit fell victim to a brilliantly orchestrated attack—credit where it’s due—resulting in the largest crypto theft to dat...
In an era where Web3 threats evolve faster than ever, static security measures are no longer enough. That’s why FailSafe is proud to announce our partnership wi...
On February 21, 2025, Bybit’s Ethereum multisig Cold Wallet 1 was exploited in a staggering $1.5 billion breach, exposing critical vulnerabilities in traditiona...
Multisig Security in the Spotlight In recent months, the security of multisig wallets has come under intense scrutiny as high-profile breaches continue to expos...
The Largest Breach in Crypto History In what is now the largest breach in cryptocurrency history, Bybit suffered a staggering loss of 499,395 ETH, valued at app...
In the last few hours, the Bybit hack has sent shockwaves across the blockchain and cybersecurity community, with attackers siphoning off nearly 401,347 ETH—app...
Background Polter Finance, a decentralized lending protocol on the Fantom (now Sonic) blockchain, was a fast-growing DeFi platform offering innovative lending s...
The decentralized future promised by blockchain technology is exciting, but the reality is clear: smart contract hacks are happening far too often. Projects are...
17th February 2025 – After suffering a catastrophic $8.7 million exploit in November 2024, Polter Finance, a leading DeFi lending protocol on the Fantom blockch...
In the fast-paced world of blockchain and decentralized applications, security is paramount. Smart contracts are the backbone of DeFi, NFTs, and countless other...
President Donald Trump has initiated several pro-cryptocurrency measures aimed at fostering innovation while emphasizing the importance of security within the d...
As blockchain technology matures, the importance of robust smart contract security becomes undeniable. Rust smart contract auditing has become a critical proces...
FailSafe announces a security partnership with OpenEden, delivering comprehensive infrastructure security, penetration testing, smart contract review, and ongoi...
Gambit Finance is a trading protocol that enables users to trade esports player exposure through a friendtech inspired AMM-like bonding curve. The platform feat...
The European Union is ushering in a new era of digital asset regulation with the implementation of the Markets in Crypto-Assets Regulation (MiCA) and the Digita...
Smart contracts have revolutionized the blockchain landscape by enabling automated, self-executing agreements that eliminate intermediaries. However, despite th...
In the rapidly evolving digital landscape, the sophistication of cyber threats has escalated, with phishing attacks emerging as a predominant method employed by...
2025 kicks off with stablecoins reaching product-market fit and record-breaking adoption, but rising threats from sophisticated attackers demand urgent action. ...
Building a smart contract is only half the battle. The real challenge is making sure your contract stays safe every single moment it’s live on the blockchain. A...
Overcoming Multisig Vulnerabilities with FailSafe On July 18, 2024, WazirX, a cryptocurrency exchange based in India, experienced a security breach resulting in...
Take control of your security—detect and stop fraud and security breaches before they cause damage. Continuously monitor your smart contracts for risk and stop ...
How FailSafe could have prevented the attack and saved over $50 million by monitoring risk and enforcing strict access controls....
Strategic Alliance Unlocks Security and Compliance Tooling for Blockchain Networks Zeeve, a leading Rollups-as-a-Service (RaaS) provider, has joined forces with...
As the world flocked to Singapore for this year’s edition of Token2049, FailSafe headlined a widely-attended event alongside StraitsX and Polygon Labs wit...
Traditional smart contract audits are slow, costly, and ineffective for teams that ship fast and often. This article explores how Audit AI enables real-time vul...
With FailSafe Guardian, Haven1 was able to create and enforce transaction policies to ensure transactions comply with predefined rules, thereby mitigating the r...
Haven1 is the latest blockchain company to integrate FailSafe’s defence-in-depth cybersecurity architecture across its entire network, providing unparalle...
The Monetary Authority of Singapore (MAS) is phasing out its previous regulatory regime for payment services, making it necessary for payment service providers ...
Security researchers have discovered a new type of phishing attack that steals data by exploiting commonly trusted online platforms like WhatsApp. Security expe...
FailSafe’s Head of Growth, Jesslyn Zeng, featured on a panel discussion on the emergent regulatory challenges facing stablecoins at Malaysia Blockchain We...
Security incidents involving crypto hacks resulted in the loss of $318.7 million between June and July 2024. Crypto theft has exploded in the second half of 202...
FailSafe Guard: Advanced Security Solution to Prevent Unauthorised Smart Contract Operations FailSafe, a leader in blockchain-based security solutions, announce...
As the popularity of stablecoins grows, so does the scrutiny from regulators worldwide. This blog post examines the regulatory landscape for stablecoins in five...
FailSafe is a comprehensive security and compliance solution for blockchain enterprises. By aligning closely with MAS regulatory requirements, FailSafe assists ...
FailSafe unveils the mechanics behind FailSafe Guard™, its cutting-edge module designed to protect smart contracts and mitigate attempts at crypto theft in the ...
FailSafe has expanded its capabilities to include fraud detection and internal risk scoring. This latest feature enables rapid detection of fraudulent addresses...
Hijacked social media accounts are increasingly being used to carry out online phishing scams. Whether you’re a big or small account, this cheat sheet wil...
2023 saw billions of dollars in liquidity extracted from web3 ecosystem by crypto thieves. Although the losses were less than the year before, this is largely d...
Eleos Labs is proud to announce that the FailSafe scientific paper, ‘From Social Engineering to Quantum Threats: Safeguarding User Wallets with FailSafe&#...
Questions & answers
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the Project GlassBreak registry at getfailsafe.com/disclosures.
