Features
AI Agent Audit Logs: Record Actions Without Collecting Secrets
Design assessment evidence that connects a user request to tool authorization and outcome while minimizing sensitive trace content.
Oct 29, 2026 · 3 min read
FailSafe insights
Security research and insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Features
Authenticated Pentesting: Build a Role and Tenant Coverage Matrix
Use a role-by-action matrix to plan authenticated application testing and identify what was observed, blocked, or left untested.
Oct 29, 2026 · 3 min read
Features
Browser Agent Sessions: Keep Workspaces and Accounts Separate
Review browser-profile isolation, downloads, account switching, shared workers, and cleanup for AI agents operating authenticated applications.
Oct 29, 2026 · 3 min read
Features
RAG Citation Provenance: Verify What the Answer Actually Used
Assess citation integrity, source permissions, document versions, and claim support in retrieval-augmented answers.
Oct 29, 2026 · 3 min read
Features
WAF Allowlisting During a Pentest: Record the Coverage Tradeoff
Decide whether test traffic should pass through normal protective controls or use a documented exception, based on the assessment objective.
Oct 29, 2026 · 3 min read
Case Studies
FailSafe AI Secures Base's BTC Lending Protocol, Bitmor
FailSafe's agentic AI surfaced valuable security findings in Bitmor's Bitcoin lending protocol on Base ahead of launch, the kind of vulnerabilities traditional tools miss.
Mar 8, 2026 · 5 min read
Features
Production or Staging Pentest: What the Evidence Can Support
Compare environment fidelity, safety, identity, integrations, and deployment differences before deciding where a pentest should run.
Oct 29, 2026 · 3 min read
Features
PTaaS SLA Questions: Timing, Access, Retesting, and Escalation
Review a penetration-testing service SLA by its start conditions, delivery commitments, blockers, retest terms, and escalation process.
Oct 29, 2026 · 3 min read
Features
Invitation flow security: ownership, expiry, and role assignment
An invitation-flow security review should examine who may invite, which identity may accept, and what permission the accepted invitation grants. These decisions often cross email d
Oct 29, 2026 · 3 min read
Case Studies
How FailSafe's Agentic AI Secured Megapot v2 Ahead of Launch
FailSafe's SWARM completed a full assessment across Megapot v2 contracts, identifying four vulnerabilities including an LP pool cap bypass that could have exposed liquidity provide
Mar 5, 2026 · 3 min read
Features
AI Agent Memory Poisoning: Assess Persistence Across Sessions
Test memory write authority, provenance, isolation, and reset behavior using harmless persistent markers and controlled agent tasks.
Oct 29, 2026 · 3 min read
Hacks & Incidents
Vibe Coding Just Cost Moonwell $1.78 Million. Here’s What Every Protocol Needs to Learn.
TL;DR On February 15, 2026, DeFi lending protocol Moonwell lost $1.78 million after an oracle misconfiguration priced cbETH at $1.12 instead of its actual value of ~$2,200. The cod
Feb 23, 2026 · 7 min read
Case Studies
Rujira Fin Smart Contract Audit
FailSafe completed a comprehensive smart contract audit for Rujira Fin, a hybrid order book DEX on THORChain's omnichain app layer, uncovering two critical fund-theft vulnerabiliti
Feb 13, 2026 · 8 min read
Case Studies
Redacted Smart Contract Audit
FailSafe completed a comprehensive smart contract audit for Redacted's privacy-focused protocol on Rujira (THORChain), uncovering a critical fee bypass vulnerability, deposit grief
Feb 6, 2026 · 7 min read
Case Studies
Canonic Smart Contract Audit
FailSafe completed a comprehensive smart contract audit for Canonic's Midpoint Anchored Order Book (MAOB) protocol on MegaETH, uncovering oracle manipulation vectors, economic expl
Feb 4, 2026 · 8 min read
Questions & answers
Frequently asked questions
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.