https://guardian.security/ https://guardian.security/audits/ https://guardian.security/audits/smart-contract-audit/ https://guardian.security/audits/infrastructure-pentest/ https://guardian.security/audits/webapp-pentest/ https://guardian.security/audits/api-pentest/ https://guardian.security/audits/browser-extension-pentest/ https://guardian.security/audits/sdk-audit/ https://guardian.security/audits/automation-pentest/ https://guardian.security/managed-security/ https://guardian.security/managed-security/watch/ https://guardian.security/institutional/ https://guardian.security/fintechs/ https://guardian.security/onchain-teams/ https://guardian.security/capital-allocators/ https://guardian.security/risk-monitoring/ https://guardian.security/regulatory-compliance/ https://guardian.security/vanguard/ https://guardian.security/vanguard/quote/ https://guardian.security/case-studies/ https://guardian.security/case-studies/synthetix-lp-vault/ https://guardian.security/case-studies/usdt0/ https://guardian.security/case-studies/yuga-labs/ https://guardian.security/case-studies/synthetix-bfp/ https://guardian.security/case-studies/poolshark/ https://guardian.security/case-studies/gmx/ https://guardian.security/case-studies/orderly/ https://guardian.security/case-studies/umami/ https://guardian.security/case-studies/dolomite/ https://guardian.security/case-studies/mimswap/ https://guardian.security/case-studies/gmx-keeper/ https://guardian.security/case-studies/avantis-offchain/ https://guardian.security/case-studies/usdt0-gasolina/ https://guardian.security/case-studies/usdt0-deployment-verification/ https://guardian.security/blog/ https://guardian.security/blog/guardian-vs-other-audit-firms/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-vs-other-audit-firms/v1/poster.jpg Same Code, Different Results: Guardian vs. Other Auditors We compared 17 codebases that Guardian and another audit firm reviewed at or near the same time, counting each firm's findings from its own public report. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-vs-other-audit-firms/v1/video.mp4 96 2026-11-04T21:38:33+00:00 https://guardian.security/blog/sec-central-party-admin-powers/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-central-party-admin-powers/v1/poster.jpg The SEC Central Party Test: Which Admin Powers Make a Protocol Centralized How FAQ 1.5 from the SEC's Division of Corporation Finance defines a central party through four unilateral powers, how those powers map to contract functions, the two carve-outs, and what to hand counsel. https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-central-party-admin-powers/v1/video.mp4 108 2026-11-04T18:44:00+00:00 https://guardian.security/blog/who-controls-defi-admin-keys-census/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/who-controls-defi-admin-keys-census/v1/poster.jpg Who Controls DeFi? Admin Keys Behind 25 of the Largest Protocols Guardian traced who can upgrade, pause, freeze, mint and burn at 25 of the largest DeFi protocols on Ethereum, using public chain state, down to the final key. https://d1ryz0te1mu7pf.cloudfront.net/blog/who-controls-defi-admin-keys-census/v1/video.mp4 93 2026-11-04T19:17:06+00:00 https://guardian.security/blog/canton-coin-no-action-letter/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-coin-no-action-letter/v1/poster.jpg Is Canton Coin a Security? The SEC No-Action Letter Explained What SEC staff's November 3, 2026 Canton Coin letter says and what it leaves out. Covers the 13 node operators, the two-thirds vote, and what these facts mean for teams seeking similar relief. https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-coin-no-action-letter/v1/video.mp4 103 2026-11-04T19:03:33+00:00 https://guardian.security/blog/canton-network-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-network-security/v1/poster.jpg Canton Network Security: A Guide for Banks and Asset Managers How secure is Canton Network for institutions? The protocol's guarantees, who controls the Global Synchronizer, and the validator, Daml and key risks banks should review before going live. https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-network-security/v1/video.mp4 107 2026-11-04T19:10:43+00:00 https://guardian.security/blog/crypto-foundation-central-party-sec-faq/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-foundation-central-party-sec-faq/v1/poster.jpg When a Crypto Foundation Is a Central Party: SEC FAQ Footnote 4 Explained Footnote 4 to the SEC staff's FAQ 1.4 says a foundation can itself be a central party. This video covers which foundation-held keys raise that question and a plan for handing them off to governance. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-foundation-central-party-sec-faq/v1/video.mp4 99 2026-11-04T18:44:57+00:00 https://guardian.security/blog/essential-managerial-efforts-security-maintenance/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/essential-managerial-efforts-security-maintenance/v1/poster.jpg Essential managerial efforts after launch: funding audits, fixes and monitoring SEC staff FAQ 2.3 says securing and maintaining a functional crypto system are not essential managerial efforts. This video covers what that includes, and why who ships the fix still matters under FAQ 1.5. https://d1ryz0te1mu7pf.cloudfront.net/blog/essential-managerial-efforts-security-maintenance/v1/video.mp4 96 2026-11-04T18:45:53+00:00 https://guardian.security/blog/genius-freeze-mandate-vs-sec-central-party-test/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/genius-freeze-mandate-vs-sec-central-party-test/v2/poster.jpg Is USDC Centralized? GENIUS Freeze Mandates vs the SEC Central Party Test USDC is centralized by design. This video explains why the GENIUS Act requires freeze powers that SEC staff FAQ 1.5 counts as central party control, and who that affects. https://d1ryz0te1mu7pf.cloudfront.net/blog/genius-freeze-mandate-vs-sec-central-party-test/v2/video.mp4 97 2026-11-04T22:21:25+00:00 https://guardian.security/blog/decentralization-tests-compared/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/decentralization-tests-compared/v2/poster.jpg Decentralization Tests Compared: SEC, FCA, MiCA, FATF and IOSCO How the SEC, the UK FCA, the EU, FATF and IOSCO each test whether a DeFi protocol is decentralized, and the contract facts that feed all five. https://d1ryz0te1mu7pf.cloudfront.net/blog/decentralization-tests-compared/v2/video.mp4 110 2026-11-04T22:20:16+00:00 https://guardian.security/blog/fca-decentralisation-test-perg-18-control-facts/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-decentralisation-test-perg-18-control-facts/v1/poster.jpg FCA Crypto Perimeter Guidance: The Control Facts in Draft PERG 18 How the FCA's draft PERG 18 in CP26/36 decides whether anyone behind a DeFi protocol needs authorization, and the onchain control facts teams should record before applying. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-decentralisation-test-perg-18-control-facts/v1/video.mp4 93 2026-11-04T18:49:37+00:00 https://guardian.security/blog/fca-gc26-7-defi-mapping-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-gc26-7-defi-mapping-checklist/v1/poster.jpg FCA DeFi Guidance GC26/7: Mapping Smart Contracts, Oracles, Bridges and Admin Keys A short guide to the FCA's draft DeFi guidance GC26/7. It covers what firms should map, how to record admin key powers, which scenario tests to run and how to monitor dependencies before comments close on November 18, 2026. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-gc26-7-defi-mapping-checklist/v1/video.mp4 105 2026-11-04T18:50:37+00:00 https://guardian.security/blog/asic-cp-392-asset-holding-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/asic-cp-392-asset-holding-standards/v2/poster.jpg ASIC CP 392: Asset-Holding Standards for Digital Asset Platforms A short guide to ASIC's CP 392 draft asset-holding standards: daily reconciliation, quarterly wallet reports, transfer controls and custodian oversight, with comments due November 27, 2026. https://d1ryz0te1mu7pf.cloudfront.net/blog/asic-cp-392-asset-holding-standards/v2/video.mp4 101 2026-11-04T22:18:02+00:00 https://guardian.security/blog/defi-protocol-due-diligence-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-protocol-due-diligence-checklist/v1/poster.jpg DeFi Protocol Due Diligence Checklist for Regulated Firms, From ADGM's Draft Guidance How regulated firms can turn the ADGM FSRA's draft DeFi Risk Management Guidance into concrete protocol checks: deployed code, audits, admin keys, timelocks, oracles, bridges and re-diligence triggers. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-protocol-due-diligence-checklist/v1/video.mp4 100 2026-11-04T18:20:00+00:00 https://guardian.security/blog/adgm-defi-continuous-monitoring/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/adgm-defi-continuous-monitoring/v2/poster.jpg DeFi Protocol Monitoring Under ADGM's Draft Guidance What the FSRA's draft DeFi Risk Management Guidance expects ADGM firms to monitor: seven monitoring areas, onchain admin and governance events, threshold alerts and escalation outside business hours. https://d1ryz0te1mu7pf.cloudfront.net/blog/adgm-defi-continuous-monitoring/v2/video.mp4 104 2026-11-04T18:21:05+00:00 https://guardian.security/blog/federal-reserve-genius-act-proposal-it-security-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-reserve-genius-act-proposal-it-security-standards/v1/poster.jpg Federal Reserve GENIUS Act Proposal: IT, Smart Contract and Key Management Standards What the Federal Reserve's proposed 12 CFR 247.13 would require from stablecoin issuers: smart contract validation, independent testing, private key management and third party oversight. https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-reserve-genius-act-proposal-it-security-standards/v1/video.mp4 100 2026-11-04T18:55:34+00:00 https://guardian.security/blog/cftc-crypto-anprm-comment-deadline/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/cftc-crypto-anprm-comment-deadline/v1/poster.jpg CFTC Request for Comment on Crypto Markets: Answering the Technical Questions Before December 14 The CFTC's crypto asset markets ANPRM closes December 14, 2026. How to answer its smart contract, fail-safe, validator and proof of reserves questions with evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/cftc-crypto-anprm-comment-deadline/v1/video.mp4 93 2026-11-04T18:56:30+00:00 https://guardian.security/blog/canada-stablecoin-act-draft-regulations/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canada-stablecoin-act-draft-regulations/v1/poster.jpg Canada Stablecoin Act: Risk, Data Security and Incident Rules for Issuers How Canada's Stablecoin Act and the October 2026 draft regulations set out risk management, data security, review and incident duties for issuers, and the token contract controls that back them. https://d1ryz0te1mu7pf.cloudfront.net/blog/canada-stablecoin-act-draft-regulations/v1/video.mp4 90 2026-11-04T18:57:26+00:00 https://guardian.security/blog/esma-non-mica-compliant-stablecoins-opinion/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/esma-non-mica-compliant-stablecoins-opinion/v1/poster.jpg ESMA's Opinion on Non-MiCA Compliant Stablecoins: What EU CASPs Must Switch Off ESMA's October 2026 opinion puts every CASP service in scope for non-MiCA compliant stablecoins, including custody and transfers. It also rules out disclosures as a fix and sets an 8 January 2027 remediation deadline. https://d1ryz0te1mu7pf.cloudfront.net/blog/esma-non-mica-compliant-stablecoins-opinion/v1/video.mp4 106 2026-11-04T18:59:36+00:00 https://guardian.security/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/v1/poster.jpg GENIUS Act Foreign Issuers: Freeze, Seize and Burn Due Diligence Checklist What Treasury's proposed 12 CFR 1523.3(c) asks exchanges to verify about foreign stablecoin issuers, and Guardian's six-step onchain checklist for freeze, seize and burn functions. https://d1ryz0te1mu7pf.cloudfront.net/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/v1/video.mp4 102 2026-11-04T19:08:36+00:00 https://guardian.security/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/v1/poster.jpg Is USDT GENIUS Act Compliant? What Treasury's Foreign Stablecoin Rule Asks Exchanges to Verify No regulator has ruled on USDT. This video covers the GENIUS Act's two dates for foreign stablecoins, Treasury's due diligence proposal, section 8 bans and the freeze functions that USDT's contracts actually show. https://d1ryz0te1mu7pf.cloudfront.net/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/v1/video.mp4 105 2026-11-04T19:09:39+00:00 https://guardian.security/blog/stablecoin-freeze-requirements-mas-hkma-genius/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-freeze-requirements-mas-hkma-genius/v2/poster.jpg Stablecoin Freeze Requirements Compared: MAS, HKMA and the GENIUS Act How the GENIUS Act, the HKMA issuer guidelines and MAS proposal P015-2026 differ on stablecoin freeze requirements, with one role design that meets all three. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-freeze-requirements-mas-hkma-genius/v2/video.mp4 101 2026-11-04T22:22:26+00:00 https://guardian.security/blog/stablecoin-regulation/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-regulation/v2/poster.jpg Stablecoin Regulation in 2026: GENIUS Act, MiCA, Hong Kong, Singapore and the Security Requirements A short guide to stablecoin regulation in 2026 across six regulations, and the key, freeze, audit and incident rules they place on issuers. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-regulation/v2/video.mp4 101 2026-11-04T22:23:27+00:00 https://guardian.security/blog/fca-crypto-admission-due-diligence-smart-contracts/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-crypto-admission-due-diligence-smart-contracts/v1/poster.jpg UK Crypto Listing Due Diligence: The Smart Contract Checks in CRYPTO 3.2.5R What the FCA's PS26/9 admission rules require on token technology, and the per-token evidence UK listing teams need: admin powers, key custody, audits and verification limits. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-crypto-admission-due-diligence-smart-contracts/v1/video.mp4 106 2026-11-04T18:51:38+00:00 https://guardian.security/blog/uk-crypto-regulation-october-2027-deadlines/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/uk-crypto-regulation-october-2027-deadlines/v2/poster.jpg UK Crypto Regulation October 2027: The Deadlines That Matter The UK crypto regulation under SI 2026/102 starts on October 25, 2027, but the FCA application window closes February 28, 2027. Here is every date and the controls each one needs. https://d1ryz0te1mu7pf.cloudfront.net/blog/uk-crypto-regulation-october-2027-deadlines/v2/video.mp4 100 2026-11-04T22:24:31+00:00 https://guardian.security/blog/sec-crypto-safe-harbor-proposal-form-tr/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-crypto-safe-harbor-proposal-form-tr/v1/poster.jpg The SEC Crypto Safe Harbor Proposal: Rule 400, Form TR and the Technical Evidence How the SEC's proposed Rule 400 safe harbor would work, what Form TR asks for, and the role, key and code evidence behind a certification. https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-crypto-safe-harbor-proposal-form-tr/v1/video.mp4 92 2026-11-04T18:47:44+00:00 https://guardian.security/blog/crypto-regulatory-compliance/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-regulatory-compliance/v2/poster.jpg Crypto Regulatory Compliance: The Security Requirements Behind MiCA, DORA, GENIUS, NYDFS and VARA What MiCA, DORA, the GENIUS Act, NYDFS, VARA, MAS and the SFC require on testing, keys and incidents, and the evidence supervisors expect to see. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-regulatory-compliance/v2/video.mp4 113 2026-11-04T22:19:07+00:00 https://guardian.security/blog/federal-decree-law-6-2025-defi/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-decree-law-6-2025-defi/v1/poster.jpg Federal Decree-Law No. 6 of 2025: What the New CBUAE Law Means for DeFi Article 62 of the UAE's new Central Bank law covers DeFi, dApps and protocols that facilitate licensed financial activities. This video covers what is in scope, the penalties, and the control facts your counsel needs. https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-decree-law-6-2025-defi/v1/video.mp4 105 2026-11-04T18:25:12+00:00 https://guardian.security/blog/fatf-defi-report-2026-control-indicators/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fatf-defi-report-2026-control-indicators/v2/poster.jpg FATF DeFi Report 2026: The 12 Control Indicators Mapped to Smart Contract Functions The FATF's July 2026 DeFi report lists 12 onchain and offchain indicators of control. This video explains them and maps each one to the contract functions, keys and records a protocol should inventory. https://d1ryz0te1mu7pf.cloudfront.net/blog/fatf-defi-report-2026-control-indicators/v2/video.mp4 95 2026-11-04T18:22:04+00:00 https://guardian.security/blog/sfc-circular-on-tokenisation-smart-contract-integrity/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-circular-on-tokenisation-smart-contract-integrity/v1/poster.jpg SFC Circular on Tokenisation: Smart Contract Integrity and Third-Party Audits How the SFC's revised tokenisation circular makes fund providers prove smart contract integrity with a high level of confidence, control public chains, manage hacking risk and get third-party audits on request. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-circular-on-tokenisation-smart-contract-integrity/v1/video.mp4 100 2026-11-04T18:26:12+00:00 https://guardian.security/blog/sfc-va-custody-circular-cold-wallet-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-va-custody-circular-cold-wallet-standards/v1/poster.jpg SFC VA Custody Circular Explained: Cold Wallet Standards for Hong Kong VATPs How the SFC's custody circular 25EC44 changes cold wallets at Hong Kong VATPs: no public-chain smart contracts, air-gapped keys, whitelists, independent code review and 24/7 monitoring. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-va-custody-circular-cold-wallet-standards/v1/video.mp4 101 2026-11-04T18:27:12+00:00 https://guardian.security/blog/in-bcb-701-technical-certification/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/in-bcb-701-technical-certification/v1/poster.jpg IN BCB 701: What Brazil's Technical Certification for Bank and Broker Crypto Services Must Cover A short explainer on Instrução Normativa BCB 701. It covers the 17 items an independent technical certification must address, why a consolidated opinion is rejected, and how Brazilian banks and brokers can prepare the security evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/in-bcb-701-technical-certification/v1/video.mp4 107 2026-11-04T18:37:20+00:00 https://guardian.security/blog/dora-smart-contract-audits-source-code-review/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-smart-contract-audits-source-code-review/v1/poster.jpg DORA Source Code Review: Do Smart Contract Audits Count Under Article 25? A smart contract audit is one of the tests DORA Article 25 names, but it is not the whole resilience testing program. Here is what it must meet, what it misses, and how to file it as evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-smart-contract-audits-source-code-review/v1/video.mp4 97 2026-11-04T18:34:52+00:00 https://guardian.security/blog/dora-penetration-testing-requirements/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-penetration-testing-requirements/v1/poster.jpg DORA Penetration Testing Requirements: Articles 24 to 27 and TLPT What penetration testing DORA requires and how often: the Article 24 yearly testing program, TLPT under RTS 2025/1190, tester rules, and a test plan for crypto firms. https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-penetration-testing-requirements/v1/video.mp4 98 2026-11-04T18:38:17+00:00 https://guardian.security/blog/openzeppelin-defender-alternatives/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/openzeppelin-defender-alternatives/v1/poster.jpg OpenZeppelin Defender Alternatives After the July 2026 Shutdown OpenZeppelin Defender shut down on July 1, 2026. This video matches each Defender module to a replacement, covers the gaps in the open-source tools, and walks through the main migration steps. https://d1ryz0te1mu7pf.cloudfront.net/blog/openzeppelin-defender-alternatives/v1/video.mp4 98 2026-11-04T18:39:13+00:00 https://guardian.security/blog/crypto-hack-time-to-detection/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-time-to-detection/v1/poster.jpg How Fast Are Crypto Hacks Detected? Time-to-Detection Data From 30 Exploits Guardian timed 30 crypto exploits from 2024 to 2026 using onchain timestamps: a median 35 minutes to the first public alert, about 2 hours to a team statement, and 88 minutes to a pause. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-time-to-detection/v1/video.mp4 93 2026-11-04T19:05:36+00:00 https://guardian.security/blog/guardian-critical-findings-report/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-critical-findings-report/v1/poster.jpg What 360 Critical Vulnerabilities Taught Us: Smart Contract Audit Findings Statistics Guardian counted every Critical finding in its 337 published audit reports. This video covers what the 360 Criticals were, which protocols had the most, how often they were fixed, and what teams can do before launch. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-critical-findings-report/v1/video.mp4 102 2026-11-04T18:28:12+00:00 https://guardian.security/blog/critical-bugs-post-launch-updates/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/critical-bugs-post-launch-updates/v2/poster.jpg Smart Contract Upgrade Bugs: What Guardian Found in 49 Update Reviews Guardian's published update reviews found 21 Criticals and 83 Highs across 49 reviews. See how often post-launch changes introduce serious bugs, which types appear, and how to review updates. https://d1ryz0te1mu7pf.cloudfront.net/blog/critical-bugs-post-launch-updates/v2/video.mp4 89 2026-11-04T22:27:29+00:00 https://guardian.security/blog/onchain-vs-offchain-crypto-hacks/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/onchain-vs-offchain-crypto-hacks/v1/poster.jpg Onchain vs Offchain Attacks: Where Crypto Hack Losses Came From, 2024 to 2026 Guardian analyzed DefiLlama's hacks data from 2024 to 2026. Code exploits make up most incidents, but offchain compromises of keys, signers and infrastructure account for most of the money lost. https://d1ryz0te1mu7pf.cloudfront.net/blog/onchain-vs-offchain-crypto-hacks/v1/video.mp4 112 2026-11-04T18:54:35+00:00 https://guardian.security/blog/defi-offchain-pentest-findings/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-offchain-pentest-findings/v2/poster.jpg Web3 Pentest Findings: What Guardian Found in DeFi Backends, APIs, Keepers and Cloud What Guardian's published offchain reviews found in 331 findings across DeFi backends, APIs, keepers and cloud, plus case studies and fix priorities. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-offchain-pentest-findings/v2/video.mp4 103 2026-11-04T22:25:35+00:00 https://guardian.security/blog/multichain-stablecoin-deployment-verification/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/multichain-stablecoin-deployment-verification/v2/poster.jpg Multichain Stablecoin Deployment Verification: How to Check That Every Chain Matches How multichain stablecoin issuers can check bytecode, messaging configuration, roles and migration transactions on every chain, based on Guardian's USDT0 deployment verification work. https://d1ryz0te1mu7pf.cloudfront.net/blog/multichain-stablecoin-deployment-verification/v2/video.mp4 93 2026-11-04T22:26:31+00:00 https://guardian.security/blog/best-web-application-pentesting-companies/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web-application-pentesting-companies/v2/poster.jpg Best Web Application Pentesting Companies for Crypto and Fintech in 2026 Seven web application pentesting firms for crypto exchanges, wallets and fintechs, compared on scope, method and retesting. Guardian publishes this guide and ranks itself first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web-application-pentesting-companies/v2/video.mp4 102 2026-11-04T18:16:56+00:00 https://guardian.security/blog/best-web3-pentesting-firms/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-pentesting-firms/v2/poster.jpg Best Web3 Penetration Testing Companies in 2026 A short guide to the best web3 penetration testing companies for exchanges, wallets and protocols in 2026. It covers what a web3 pentest should test and where each firm fits best. Guardian publishes the guide. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-pentesting-firms/v2/video.mp4 102 2026-11-04T18:18:00+00:00 https://guardian.security/blog/crypto-wallet-pentesting/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-wallet-pentesting/v1/poster.jpg Crypto Wallet Penetration Testing: What to Test in Mobile, Desktop and Extension Wallets What a crypto wallet pentest covers across mobile, desktop and extension wallets: key storage, signing flows, backend and APIs, supply chain, MPC and passkeys. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-wallet-pentesting/v1/video.mp4 102 2026-11-04T18:31:03+00:00 https://guardian.security/blog/telegram-mini-app-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/telegram-mini-app-security/v1/poster.jpg Telegram Mini App Security: A Pentesting Checklist How to secure a Telegram Mini App that moves crypto: server-side initData validation, backend authorization, wallet proof with ton_proof, and webhook protection. https://d1ryz0te1mu7pf.cloudfront.net/blog/telegram-mini-app-security/v1/video.mp4 92 2026-11-04T18:32:57+00:00 https://guardian.security/blog/signing-ui-supply-chain-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/signing-ui-supply-chain-security/v1/poster.jpg Your Wallet Frontend Is Attack Surface: Securing Signing Interfaces After Bybit How attackers compromise a crypto wallet's signing interface through cloud buckets, build pipelines and developer machines, and the controls that stop it, from SRI and CSP to verifying on the signer. https://d1ryz0te1mu7pf.cloudfront.net/blog/signing-ui-supply-chain-security/v1/video.mp4 101 2026-11-04T18:32:02+00:00 https://guardian.security/blog/mcp-pentesting-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/mcp-pentesting-checklist/v1/poster.jpg MCP Pentesting Guide and Checklist How to pentest a Model Context Protocol server: recon, authorization, tool poisoning, transport and SSRF, and supply chain, mapped to the OWASP MCP Top 10. https://d1ryz0te1mu7pf.cloudfront.net/blog/mcp-pentesting-checklist/v1/video.mp4 97 2026-11-04T18:33:53+00:00 https://guardian.security/blog/best-smart-contract-monitoring-tools/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-smart-contract-monitoring-tools/v1/poster.jpg Best Smart Contract Monitoring Tools in 2026: 9 Platforms Compared Nine smart contract monitoring tools for 2026, ranked by what they detect, how they respond, who acts on an alert and how they deploy. Guardian publishes this guide and ranks its own service first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-smart-contract-monitoring-tools/v1/video.mp4 100 2026-11-04T18:40:21+00:00 https://guardian.security/blog/what-is-web3-mdr/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-web3-mdr/v1/poster.jpg What Is Web3 MDR? Managed Detection and Response for Crypto Managed detection and response for crypto explained: what changes onchain, how MDR differs from a monitoring tool, what an SLA should define, and how Guardian delivers it. https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-web3-mdr/v1/video.mp4 97 2026-11-04T18:41:18+00:00 https://guardian.security/blog/web3-pentest-cost/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-pentest-cost/v1/poster.jpg Blockchain Penetration Testing Cost: Public Web3 Pentest Prices in 2026 No one publishes a credible Web3 pentest price list. This video covers the public price points we found and the scope drivers that set a crypto pentest quote. https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-pentest-cost/v1/video.mp4 93 2026-11-04T18:42:57+00:00 https://guardian.security/blog/audit-firm-pricing-compared/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-firm-pricing-compared/v1/poster.jpg What Top Audit Firms Charge: OpenZeppelin, Trail of Bits, Halborn and More Public DAO records show what OpenZeppelin, Trail of Bits, Halborn, Certora and others quoted, plus typical weekly auditor rates and the factors behind the price. https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-firm-pricing-compared/v1/video.mp4 100 2026-11-04T19:16:10+00:00 https://guardian.security/finality/ https://guardian.security/blog/top-smart-contract-auditors/2026-11-03 https://d1ryz0te1mu7pf.cloudfront.net/blog/top-smart-contract-auditors/v1/poster.jpg Top 10 Smart Contract Auditors and Digital Asset Security Firms in 2026 Guardian ranks the top 10 smart contract auditors and digital asset security firms of 2026 on coverage, method, protection after launch and track record. Guardian publishes this guide. https://d1ryz0te1mu7pf.cloudfront.net/blog/top-smart-contract-auditors/v1/video.mp4 105 2026-11-03T23:33:17+00:00 https://guardian.security/blog/guardian-announces-managed-security/ https://guardian.security/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/ https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/v1/poster.jpg Guardian's Digital Asset Assurance Pilot and $5,000,000 in Funded Pilots How Guardian's Digital Asset Assurance Pilot helps regulated firms secure digital asset programs from design to live, and the $5,000,000 Guardian is committing to funded pilots. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/v1/video.mp4 121 2026-11-04T00:01:36+00:00 https://guardian.security/blog/guardian-announces-vanguard/ https://guardian.security/blog/why-audited-teams-are-getting-hacked/ https://guardian.security/blog/web2-the-hidden-layer-of-defi-risk/ https://guardian.security/blog/introducing-guardian-defender/ https://guardian.security/blog/baseline-markets-vulnerabilities-reported-and-resolved/ https://guardian.security/blog/dn404-vulnerabilities-reported-and-resolved/ https://guardian.security/blog/how-to-audit-a-smart-contract/2026-11-04 https://i.ytimg.com/vi/5g-Hzw5ind8/hqdefault.jpg Complete Smart Contract Auditing System How to audit a smart contract with a repeatable system: preparation, jobs to be done, audit tags, attack knobs, broken invariants, PoCs and the final report. https://www.youtube.com/embed/5g-Hzw5ind8 1492 2023-02-17T00:00:00+00:00 https://guardian.security/blog/ways-to-miss-vulnerabilities-in-an-audit/2026-11-04 https://i.ytimg.com/vi/f--w08g7lyU/hqdefault.jpg 28 Ways To Miss Vulnerabilities In A Smart Contract Audit Smart contract audit mistakes that hide vulnerabilities: 27 ways auditors miss bugs, from unchecked external calls to weird ERC-20s, and what to do instead. https://www.youtube.com/embed/f--w08g7lyU 1613 2023-03-26T00:00:00+00:00 https://guardian.security/blog/how-to-prepare-for-a-smart-contract-audit/2026-11-04 https://i.ytimg.com/vi/BY0Edn_py_k/hqdefault.jpg Getting An Audit? 13 Mistakes To Avoid How to prepare for a smart contract audit: 13 mistakes protocol teams make, from thin docs to no code freeze, plus five design habits that cut audit cost. https://www.youtube.com/embed/BY0Edn_py_k 1293 2023-06-18T00:00:00+00:00 https://guardian.security/blog/smart-contract-audit-severity-levels/2026-11-04 https://i.ytimg.com/vi/f4UdAnHUpSE/hqdefault.jpg Is This A Critical? How To Rank Vulnerability Severity Smart contract audit severity levels explained: what makes a finding critical, high, medium or low, how to rate centralization risks and when to merge findings. https://www.youtube.com/embed/f4UdAnHUpSE 2894 2023-12-03T00:00:00+00:00 https://guardian.security/blog/solidity-security-best-practices/2026-11-04 https://i.ytimg.com/vi/UUhjTcD1BfM/hqdefault.jpg The 9 Keys To Developing Secure Smart Contracts Solidity security best practices from audit work: write less code, validate inputs, avoid loops, scrutinize external calls, add post checks and document flows. https://www.youtube.com/embed/UUhjTcD1BfM 2603 2024-03-03T00:00:00+00:00 https://guardian.security/blog/formal-verification-smart-contracts/2026-11-04 https://i.ytimg.com/vi/imSy7Ll9ftg/hqdefault.jpg Guide To Formal Verification | Take Security To The Next Level How formal verification of smart contracts works: Boolean formulas, SMT solvers and Solidity's SMTChecker, with worked examples of invariants and targets. https://www.youtube.com/embed/imSy7Ll9ftg 1129 2023-06-22T00:00:00+00:00 https://guardian.security/blog/mutation-testing-solidity/2026-11-04 https://i.ytimg.com/vi/HIN8lmj597M/hqdefault.jpg The #1 Most Underrated Web3 Security Tool Mutation testing in Solidity measures how many bugs your tests catch. Learn how it works, how to run Gambit and Vertigo, and how to kill surviving mutants. https://www.youtube.com/embed/HIN8lmj597M 2173 2024-03-10T00:00:00+00:00 https://guardian.security/blog/how-to-write-a-smart-contract-poc/2026-11-04 https://i.ytimg.com/vi/pn-UpJ0yas4/hqdefault.jpg Guide To Writing PoCs How to write a smart contract proof of concept: scope the PoC in comments, reuse the test harness, log as you debug and prove the finding, using a GMX V2 example. https://www.youtube.com/embed/pn-UpJ0yas4 1938 2023-06-08T00:00:00+00:00 https://guardian.security/blog/how-to-find-critical-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/oIoozgIl4pw/hqdefault.jpg How To Find SO Many Criticals You Get Bored Of Auditing How to find critical vulnerabilities in smart contracts with the GTDA method: set goals, tag questions, diagram call paths, then attack with your toolbox. https://www.youtube.com/embed/oIoozgIl4pw 2741 2024-02-01T00:00:00+00:00 https://guardian.security/blog/how-to-become-a-smart-contract-auditor/2026-11-04 https://i.ytimg.com/vi/CUU5kVVVl7Y/hqdefault.jpg 4 Steps To Become A Master Security Researcher How to become a smart contract auditor: build in Solidity, learn DeFi primitives, read codebases deeply, study vulnerabilities, then audit and publish your work. https://www.youtube.com/embed/CUU5kVVVl7Y 1096 2023-10-08T00:00:00+00:00 https://guardian.security/blog/common-smart-contract-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/MgCSEUrMnSQ/hqdefault.jpg 22 Vulnerabilities I Use To Find Criticals FAST! A smart contract vulnerabilities list of 22 attack vectors to check first in a new codebase, from front-running and weird ERC-20s to signatures and hash collisions. https://www.youtube.com/embed/MgCSEUrMnSQ 1996 2024-01-21T00:00:00+00:00 https://guardian.security/blog/sneaky-solidity-bugs/2026-11-04 https://i.ytimg.com/vi/8fNNVQv4-oY/hqdefault.jpg 21 Sneaky Smart Contract Bugs | Do Not Miss These! 21 sneaky Solidity bugs from real audits: struct deletes, downcast overflow, msg.value in loops, stale prices, off by one errors and more, with fixes. https://www.youtube.com/embed/8fNNVQv4-oY 1738 2023-06-11T00:00:00+00:00 https://guardian.security/blog/reentrancy-attacks-explained/2026-11-04 https://i.ytimg.com/vi/3T1t2ginfTg/hqdefault.jpg The Ultimate Guide To Reentrancy A reentrancy attack exploits state that is outdated during an external call. Learn classic, cross-function, cross-contract and read-only reentrancy. https://www.youtube.com/embed/3T1t2ginfTg 1881 2023-05-07T00:00:00+00:00 https://guardian.security/blog/liquidation-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/AD2IF8ovE-w/hqdefault.jpg You Have To Know These 13 Critical Liquidation Vulnerabilities 13 liquidation vulnerabilities in DeFi lending, perps and options protocols, from blacklisted tokens and unpayable fees to self-liquidation, with a checklist. https://www.youtube.com/embed/AD2IF8ovE-w 3538 2024-01-18T00:00:00+00:00 https://guardian.security/blog/weird-erc20-tokens-checklist/2026-11-04 https://i.ytimg.com/vi/Tx0f8A2Yd3k/hqdefault.jpg 12 ERC20 Edge Cases | Web3 Exploits 101 Weird ERC20 tokens break DeFi protocols: fee-on-transfer, callbacks, missing return values, blacklists, approval rules, decimals and more, with a checklist. https://www.youtube.com/embed/Tx0f8A2Yd3k 2167 2023-11-16T00:00:00+00:00 https://guardian.security/blog/erc4626-inflation-attack/2026-11-04 https://i.ytimg.com/vi/3IMw7xbxJgY/hqdefault.jpg Vault Exploit Masterclass | 3 Red Flags | Web3 Exploits 101 How the ERC4626 inflation attack steals the first deposit, the three red flags that reveal it, the Beefy and Kelp examples, and the two fixes that stop it. https://www.youtube.com/embed/3IMw7xbxJgY 3777 2023-12-18T00:00:00+00:00 https://guardian.security/blog/defi-accounting-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/-9VmITcdm3c/hqdefault.jpg The Vulnerability Nobody Talks About | Web3 Security 101 DeFi reward accounting vulnerabilities from stepwise jumps: sandwiched reward compounds, reward and interest rate updates, and vault inflation attacks. https://www.youtube.com/embed/-9VmITcdm3c 1611 2023-12-24T00:00:00+00:00 https://guardian.security/blog/price-oracle-manipulation/2026-11-04 https://i.ytimg.com/vi/tbGqaDHZtuc/hqdefault.jpg Oracle Manipulation | Web3 Security 101 How an oracle manipulation attack works: slot0 spot prices, a lending exploit with real numbers, Cream Finance, TWAP limits under proof of stake, and fixes. https://www.youtube.com/embed/tbGqaDHZtuc 2232 2023-10-28T00:00:00+00:00 https://guardian.security/blog/sandwich-attack/2026-11-04 https://i.ytimg.com/vi/6y3nwJS4UJw/hqdefault.jpg Sandwich Attacks | Web3 Exploits 101 How a sandwich attack in crypto works on an AMM, why slippage protection stops it, a real hard-coded slippage finding, and a live jaredfromsubway.eth sandwich. https://www.youtube.com/embed/6y3nwJS4UJw 1442 2023-09-10T00:00:00+00:00 https://guardian.security/blog/front-running-smart-contracts/2026-11-04 https://i.ytimg.com/vi/dlEIfGT2bHo/hqdefault.jpg Front-Running Attacks | Web3 Exploits 101 How a front running smart contract attack works: the mempool, priority fees, two real audit findings, and a framework for finding front running in review. https://www.youtube.com/embed/dlEIfGT2bHo 1541 2023-09-03T00:00:00+00:00 https://guardian.security/blog/upgradeable-smart-contracts-explained/2026-11-04 https://i.ytimg.com/vi/e5lWvt1rIm0/hqdefault.jpg Smart Contract Upgradeability 101 | 5 Upgradeability Methods Upgradeable smart contracts explained: eternal storage, transparent proxies, UUPS, beacon proxies and the diamond standard, with each pattern's pitfalls. https://www.youtube.com/embed/e5lWvt1rIm0 2417 2023-08-20T00:00:00+00:00 https://guardian.security/blog/upgradeable-contract-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/6aPyykZhglM/hqdefault.jpg Do Not Miss These 5 Upgradeability Vulnerabilities Five upgradeable contract vulnerabilities auditors keep finding: storage gaps, upgradeable inheritance, initializers and unprotected UUPS upgrades. https://www.youtube.com/embed/6aPyykZhglM 1949 2024-01-14T00:00:00+00:00 https://guardian.security/blog/external-call-attacks/2026-11-04 https://i.ytimg.com/vi/VF1HYD50eus/hqdefault.jpg The 4 External Call Attacks | Web3 Exploits 101 The four external call vulnerabilities in Solidity: reentrancy, denial of service, gas griefing and return values, plus how GMX V2 makes callbacks safe. https://www.youtube.com/embed/VF1HYD50eus 1816 2023-11-19T00:00:00+00:00 https://guardian.security/blog/signature-malleability/2026-11-04 https://i.ytimg.com/vi/V3TJLDHZBFU/hqdefault.jpg Web3 Exploits | Signature Malleability What signature malleability is, why every ECDSA signature on secp256k1 has a twin, how an attacker forges it to double spend, and how to stop it in Solidity. https://www.youtube.com/embed/V3TJLDHZBFU 895 2023-02-27T00:00:00+00:00 https://guardian.security/blog/solidity-rounding-errors/2026-11-04 https://i.ytimg.com/vi/6rmLP-ri-JU/hqdefault.jpg Rounding Errors | Web3 Exploits 101 Why rounding errors in Solidity happen, how truncating division broke an average price and a tick rounding function, and what to check at every division. https://www.youtube.com/embed/6rmLP-ri-JU 1976 2023-10-16T00:00:00+00:00 https://guardian.security/blog/dao-governance-attacks/2026-11-04 https://i.ytimg.com/vi/O4fLWPKQINA/hqdefault.jpg Dao And Governance Attacks | Web3 Exploits 101 Governance attacks push a malicious proposal through a DAO's vote. Learn the common flaws, flash-loaned votes, and how Beanstalk's emergency commit was drained. https://www.youtube.com/embed/O4fLWPKQINA 1847 2023-11-12T00:00:00+00:00 https://guardian.security/blog/metamorphic-contracts/2026-11-04 https://i.ytimg.com/vi/XEe-FMiTDYU/hqdefault.jpg Metamorphic Contracts | Tornado Cash Exploit! A metamorphic contract swaps its code at one address. Learn how the Tornado Cash governance exploit used one, two ways to build one, and what EIP-6780 changed. https://www.youtube.com/embed/XEe-FMiTDYU 1292 2023-06-01T00:00:00+00:00 https://guardian.security/blog/critical-defi-vulnerability-patterns/2026-11-04 https://i.ytimg.com/vi/B8igzag_7jY/hqdefault.jpg 6 Critical Vulnerabilities | Build Your Toolbox Six critical DeFi vulnerabilities from real audits: reward sandwiches, unbounded loops, solvency gaps, gas manipulation, blacklists and price impact games. https://www.youtube.com/embed/B8igzag_7jY 4754 2023-11-30T00:00:00+00:00 https://guardian.security/blog/critical-vulnerabilities-breakdown/2026-11-04 https://i.ytimg.com/vi/N9VtIomWo2s/hqdefault.jpg Do Not Miss These 3 Critical Vulnerabilities | Critical Findings Breakdown Three critical smart contract vulnerabilities from Guardian audits: zero-amount withdrawals, parallel withdrawal state and liquidations that lower health. https://www.youtube.com/embed/N9VtIomWo2s 2230 2024-02-22T00:00:00+00:00 https://guardian.security/blog/audit-findings-explained/2026-11-04 https://i.ytimg.com/vi/ekFN7GtGtBU/hqdefault.jpg Learn From My Findings | 3 Findings Breakdown Six smart contract audit findings from Guardian reports, each with the context, the bug and the heuristic an auditor can reuse to find similar issues. https://www.youtube.com/embed/ekFN7GtGtBU 1835 2023-06-30T00:00:00+00:00 https://guardian.security/blog/solidity-compiler-bugs/2026-11-04 https://i.ytimg.com/vi/ulFDHyuVb1I/hqdefault.jpg Vulnerabilities With The Solidity Compiler! Solidity compiler bugs can make correct-looking code misbehave. See how dirty bytes copied to storage leak through an empty push, and how to check your version. https://www.youtube.com/embed/ulFDHyuVb1I 1275 2023-07-28T00:00:00+00:00 https://guardian.security/blog/evm-explained/2026-11-04 https://i.ytimg.com/vi/Ru3inmu1FuQ/hqdefault.jpg Complete Guide To The EVM | Everything You Need To Know How the EVM works: the stack, memory, calldata and storage, the opcodes that tie them together, and a function call traced opcode by opcode. https://www.youtube.com/embed/Ru3inmu1FuQ 2116 2023-06-15T00:00:00+00:00 https://guardian.security/blog/ethereum-calldata-explained/2026-11-04 https://i.ytimg.com/vi/WkyyT0pmJSw/hqdefault.jpg Guide To Advanced Calldata | Everything You Need To Know Ethereum calldata explained by decoding a real GMX V2 multicall byte by byte: function selectors, dynamic data, heads, tails, offsets and how memory differs. https://www.youtube.com/embed/WkyyT0pmJSw 2493 2023-07-06T00:00:00+00:00 https://guardian.security/blog/yul-memory-explained/2026-11-04 https://i.ytimg.com/vi/9qLUvtL5uKQ/hqdefault.jpg Yul & Memory Intro | Yul Exploit! A guide to Yul memory: how the EVM lays out memory, the free memory pointer, how strings are stored, and a low-level exploit built on a crafted string length. https://www.youtube.com/embed/9qLUvtL5uKQ 2413 2023-05-25T00:00:00+00:00 https://guardian.security/blog/what-is-secp256k1/2026-11-04 https://i.ytimg.com/vi/9ZKY8DoVCkI/hqdefault.jpg Ethereum Cryptography Basics What is secp256k1? A plain guide to the elliptic curve behind Ethereum keys: the equation, group theory, point addition and multiplication, and why keys are secure. https://www.youtube.com/embed/9ZKY8DoVCkI 846 2023-02-24T00:00:00+00:00 https://guardian.security/blog/constant-product-amm/2026-11-04 https://i.ytimg.com/vi/QvyMkRtjLv8/hqdefault.jpg The Ultimate Guide To AMMs How a constant product AMM works, with worked numbers: x * y = k, a swap's price, minting LP tokens, why deeper pools trade better, and impermanent loss. https://www.youtube.com/embed/QvyMkRtjLv8 1505 2023-04-06T00:00:00+00:00 https://guardian.security/blog/uniswap-v3-concentrated-liquidity/2026-11-04 https://i.ytimg.com/vi/Ltph_X60kbo/hqdefault.jpg Uniswap V3 Made Easy Uniswap V3 concentrated liquidity explained: why range-bound liquidity exists, how ticks and sqrtPriceX96 work, real reserves, and how swaps cross ticks. https://www.youtube.com/embed/Ltph_X60kbo 1218 2023-04-14T00:00:00+00:00 https://guardian.security/blog/how-makerdao-and-dai-work/2026-11-04 https://i.ytimg.com/vi/0a7W7s0K7SI/hqdefault.jpg How Does DAI & Maker DAO Work? | DeFi 101 How does DAI work? MakerDAO explained: collateral ratios, vaults, looping, the levers that hold the peg, liquidations by Dutch auction and how bad debt is covered. https://www.youtube.com/embed/0a7W7s0K7SI 2297 2023-11-09T00:00:00+00:00 https://guardian.security/blog/cdp-lending-protocol-explained/2026-11-04 https://i.ytimg.com/vi/zKAgEp9vHms/hqdefault.jpg Abracadabra Money Guide | DeFi 101 What is a CDP in crypto? Learn collateralized debt positions through Abracadabra Money: LTV ratios, cauldrons, DegenBox shares, interest, and liquidations. https://www.youtube.com/embed/zKAgEp9vHms 2233 2023-11-23T00:00:00+00:00 https://guardian.security/blog/gmx-v2-explained/2026-11-04 https://i.ytimg.com/vi/58om-oA1vpI/hqdefault.jpg DeFi Protocol Deep Dives | GMX V2 GMX V2 explained from the code, as of early 2023: markets and backing tokens, two-step keeper execution, deposits, orders, and an auditor's first pass on withdrawals. https://www.youtube.com/embed/58om-oA1vpI 2979 2023-04-30T00:00:00+00:00 https://guardian.security/blog/advanced-web3-security-course/2026-11-04 https://i.ytimg.com/vi/DRZogmD647U/hqdefault.jpg Advanced Web3 Security Course | Part 1 A free web3 security course in two parts and about 23 hours: every chapter with its start time, from smart contract design to fuzzing and formal verification. https://www.youtube.com/embed/DRZogmD647U 40815 2023-10-22T00:00:00+00:00 https://guardian.security/testimonials/ https://guardian.security/careers/ https://guardian.security/team/ https://guardian.security/grants/ https://guardian.security/brand-kit/ https://guardian.security/work-with-us/ https://guardian.security/bounty-contest/ https://guardian.security/privacy/ https://guardian.security/terms/