Blog
Research and disclosures
Vulnerabilities we have reported and seen resolved, the testing methods behind them, and news from Guardian.
Introducing: Guardian Defender
Guardian Defender runs free post-audit bounty contests for Guardian clients, and Guardian pays out any validated Critical finding.
Read the post →
Why Audited Teams Are Getting Hacked
Over $500M was taken from audited DeFi projects in a single year. Why human error survives audits, and a step-by-step guide to invariant testing with Echidna.
Read the post →
Web2: The Hidden Layer of DeFi Risk
Smart contracts can be sound while the Web2 systems around them decide who calls them, with what calldata, and when. A real Guardian finding shows how.
Read the post →
Baseline Markets: Vulnerabilities Reported and Resolved
22 high-severity issues across two Guardian reviews of Baseline Markets V2, and the three most novel vulnerabilities explained.
Read the post →
DN404: Vulnerabilities Reported and Resolved
Two high-severity NFT theft issues and several value-extraction scenarios found in Guardian's review of DN404, the ERC-7631 implementation.
Read the post →