https://guardian.security/ https://guardian.security/audits/ https://guardian.security/audits/smart-contract-audit/ https://guardian.security/audits/infrastructure-pentest/ https://guardian.security/audits/webapp-pentest/ https://guardian.security/audits/api-pentest/ https://guardian.security/audits/browser-extension-pentest/ https://guardian.security/audits/sdk-audit/ https://guardian.security/audits/automation-pentest/ https://guardian.security/managed-security/ https://guardian.security/managed-security/watch/ https://guardian.security/institutional/ https://guardian.security/fintechs/ https://guardian.security/onchain-teams/ https://guardian.security/capital-allocators/ https://guardian.security/risk-monitoring/ https://guardian.security/regulatory-compliance/ https://guardian.security/vanguard/ https://guardian.security/vanguard/quote/ https://guardian.security/case-studies/ https://guardian.security/case-studies/synthetix-lp-vault/ https://guardian.security/case-studies/usdt0/ https://guardian.security/case-studies/yuga-labs/ https://guardian.security/case-studies/synthetix-bfp/ https://guardian.security/case-studies/poolshark/ https://guardian.security/case-studies/gmx/ https://guardian.security/case-studies/orderly/ https://guardian.security/case-studies/umami/ https://guardian.security/case-studies/dolomite/ https://guardian.security/case-studies/mimswap/ https://guardian.security/case-studies/gmx-keeper/ https://guardian.security/case-studies/avantis-offchain/ https://guardian.security/case-studies/usdt0-gasolina/ https://guardian.security/case-studies/jupiter-yield-store/ https://guardian.security/case-studies/usdt0-deployment-verification/ https://guardian.security/blog/ https://guardian.security/blog/sec-central-party-admin-powers/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-central-party-admin-powers/v1/poster.jpg The SEC Central Party Test: Which Admin Powers Make a Protocol Centralized How FAQ 1.5 from the SEC's Division of Corporation Finance defines a central party through four unilateral powers, how those powers map to contract functions, the two carve-outs, and what to hand counsel. https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-central-party-admin-powers/v1/video.mp4 108 2026-11-04T18:44:00+00:00 https://guardian.security/blog/who-controls-defi-admin-keys-census/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/who-controls-defi-admin-keys-census/v1/poster.jpg Who Controls DeFi? Admin Keys Behind 25 of the Largest Protocols Guardian traced who can upgrade, pause, freeze, mint and burn at 25 of the largest DeFi protocols on Ethereum, using public chain state, down to the final key. https://d1ryz0te1mu7pf.cloudfront.net/blog/who-controls-defi-admin-keys-census/v1/video.mp4 93 2026-11-04T19:17:06+00:00 https://guardian.security/blog/canton-coin-no-action-letter/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-coin-no-action-letter/v1/poster.jpg Is Canton Coin a Security? The SEC No-Action Letter Explained What SEC staff's November 3, 2026 Canton Coin letter says and what it leaves out. Covers the 13 node operators, the two-thirds vote, and what these facts mean for teams seeking similar relief. https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-coin-no-action-letter/v1/video.mp4 103 2026-11-04T19:03:33+00:00 https://guardian.security/blog/canton-network-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-network-security/v1/poster.jpg Canton Network Security: A Guide for Banks and Asset Managers How secure is Canton Network for institutions? The protocol's guarantees, who controls the Global Synchronizer, and the validator, Daml and key risks banks should review before going live. https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-network-security/v1/video.mp4 107 2026-11-04T19:10:43+00:00 https://guardian.security/blog/crypto-foundation-central-party-sec-faq/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-foundation-central-party-sec-faq/v1/poster.jpg When a Crypto Foundation Is a Central Party: SEC FAQ Footnote 4 Explained Footnote 4 to the SEC staff's FAQ 1.4 says a foundation can itself be a central party. This video covers which foundation-held keys raise that question and a plan for handing them off to governance. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-foundation-central-party-sec-faq/v1/video.mp4 99 2026-11-04T18:44:57+00:00 https://guardian.security/blog/essential-managerial-efforts-security-maintenance/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/essential-managerial-efforts-security-maintenance/v1/poster.jpg Essential managerial efforts after launch: funding audits, fixes and monitoring SEC staff FAQ 2.3 says securing and maintaining a functional crypto system are not essential managerial efforts. This video covers what that includes, and why who ships the fix still matters under FAQ 1.5. https://d1ryz0te1mu7pf.cloudfront.net/blog/essential-managerial-efforts-security-maintenance/v1/video.mp4 96 2026-11-04T18:45:53+00:00 https://guardian.security/blog/genius-freeze-mandate-vs-sec-central-party-test/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/genius-freeze-mandate-vs-sec-central-party-test/v1/poster.jpg Is USDC Centralized? GENIUS Freeze Mandates vs the SEC Central Party Test USDC is centralized by design. This video explains why the GENIUS Act requires freeze powers that SEC staff FAQ 1.5 counts as central party control, and who that affects. https://d1ryz0te1mu7pf.cloudfront.net/blog/genius-freeze-mandate-vs-sec-central-party-test/v1/video.mp4 97 2026-11-04T19:14:10+00:00 https://guardian.security/blog/decentralization-tests-compared/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/decentralization-tests-compared/v1/poster.jpg Decentralization Tests Compared: SEC, FCA, MiCA, FATF and IOSCO How the SEC, the UK FCA, the EU, FATF and IOSCO each test whether a DeFi protocol is decentralized, and the contract facts that feed all five. https://d1ryz0te1mu7pf.cloudfront.net/blog/decentralization-tests-compared/v1/video.mp4 111 2026-11-04T19:04:39+00:00 https://guardian.security/blog/fca-decentralisation-test-perg-18-control-facts/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-decentralisation-test-perg-18-control-facts/v1/poster.jpg FCA Crypto Perimeter Guidance: The Control Facts in Draft PERG 18 How the FCA's draft PERG 18 in CP26/36 decides whether anyone behind a DeFi protocol needs authorization, and the onchain control facts teams should record before applying. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-decentralisation-test-perg-18-control-facts/v1/video.mp4 93 2026-11-04T18:49:37+00:00 https://guardian.security/blog/fca-gc26-7-defi-mapping-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-gc26-7-defi-mapping-checklist/v1/poster.jpg FCA DeFi Guidance GC26/7: Mapping Smart Contracts, Oracles, Bridges and Admin Keys A short guide to the FCA's draft DeFi guidance GC26/7. It covers what firms should map, how to record admin key powers, which scenario tests to run and how to monitor dependencies before comments close on November 18, 2026. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-gc26-7-defi-mapping-checklist/v1/video.mp4 105 2026-11-04T18:50:37+00:00 https://guardian.security/blog/asic-cp-392-asset-holding-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/asic-cp-392-asset-holding-standards/v1/poster.jpg ASIC CP 392: Asset-Holding Standards for Digital Asset Platforms A short guide to ASIC's CP 392 draft asset-holding standards: daily reconciliation, quarterly wallet reports, transfer controls and custodian oversight, with comments due November 27, 2026. https://d1ryz0te1mu7pf.cloudfront.net/blog/asic-cp-392-asset-holding-standards/v1/video.mp4 101 2026-11-04T18:24:12+00:00 https://guardian.security/blog/defi-protocol-due-diligence-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-protocol-due-diligence-checklist/v1/poster.jpg DeFi Protocol Due Diligence Checklist for Regulated Firms, From ADGM's Draft Guidance How regulated firms can turn the ADGM FSRA's draft DeFi Risk Management Guidance into concrete protocol checks: deployed code, audits, admin keys, timelocks, oracles, bridges and re-diligence triggers. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-protocol-due-diligence-checklist/v1/video.mp4 100 2026-11-04T18:20:00+00:00 https://guardian.security/blog/adgm-defi-continuous-monitoring/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/adgm-defi-continuous-monitoring/v2/poster.jpg DeFi Protocol Monitoring Under ADGM's Draft Guidance What the FSRA's draft DeFi Risk Management Guidance expects ADGM firms to monitor: seven monitoring areas, onchain admin and governance events, threshold alerts and escalation outside business hours. https://d1ryz0te1mu7pf.cloudfront.net/blog/adgm-defi-continuous-monitoring/v2/video.mp4 104 2026-11-04T18:21:05+00:00 https://guardian.security/blog/federal-reserve-genius-act-proposal-it-security-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-reserve-genius-act-proposal-it-security-standards/v1/poster.jpg Federal Reserve GENIUS Act Proposal: IT, Smart Contract and Key Management Standards What the Federal Reserve's proposed 12 CFR 247.13 would require from stablecoin issuers: smart contract validation, independent testing, private key management and third party oversight. https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-reserve-genius-act-proposal-it-security-standards/v1/video.mp4 100 2026-11-04T18:55:34+00:00 https://guardian.security/blog/cftc-crypto-anprm-comment-deadline/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/cftc-crypto-anprm-comment-deadline/v1/poster.jpg CFTC Request for Comment on Crypto Markets: Answering the Technical Questions Before December 14 The CFTC's crypto asset markets ANPRM closes December 14, 2026. How to answer its smart contract, fail-safe, validator and proof of reserves questions with evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/cftc-crypto-anprm-comment-deadline/v1/video.mp4 93 2026-11-04T18:56:30+00:00 https://guardian.security/blog/canada-stablecoin-act-draft-regulations/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canada-stablecoin-act-draft-regulations/v1/poster.jpg Canada Stablecoin Act: Risk, Data Security and Incident Rules for Issuers How Canada's Stablecoin Act and the October 2026 draft regulations set out risk management, data security, review and incident duties for issuers, and the token contract controls that back them. https://d1ryz0te1mu7pf.cloudfront.net/blog/canada-stablecoin-act-draft-regulations/v1/video.mp4 90 2026-11-04T18:57:26+00:00 https://guardian.security/blog/esma-non-mica-compliant-stablecoins-opinion/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/esma-non-mica-compliant-stablecoins-opinion/v1/poster.jpg ESMA's Opinion on Non-MiCA Compliant Stablecoins: What EU CASPs Must Switch Off ESMA's October 2026 opinion puts every CASP service in scope for non-MiCA compliant stablecoins, including custody and transfers. It also rules out disclosures as a fix and sets an 8 January 2027 remediation deadline. https://d1ryz0te1mu7pf.cloudfront.net/blog/esma-non-mica-compliant-stablecoins-opinion/v1/video.mp4 106 2026-11-04T18:59:36+00:00 https://guardian.security/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/v1/poster.jpg GENIUS Act Foreign Issuers: Freeze, Seize and Burn Due Diligence Checklist What Treasury's proposed 12 CFR 1523.3(c) asks exchanges to verify about foreign stablecoin issuers, and Guardian's six-step onchain checklist for freeze, seize and burn functions. https://d1ryz0te1mu7pf.cloudfront.net/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/v1/video.mp4 102 2026-11-04T19:08:36+00:00 https://guardian.security/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/v1/poster.jpg Is USDT GENIUS Act Compliant? What Treasury's Foreign Stablecoin Rule Asks Exchanges to Verify No regulator has ruled on USDT. This video covers the GENIUS Act's two dates for foreign stablecoins, Treasury's due diligence proposal, section 8 bans and the freeze functions that USDT's contracts actually show. https://d1ryz0te1mu7pf.cloudfront.net/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/v1/video.mp4 105 2026-11-04T19:09:39+00:00 https://guardian.security/blog/stablecoin-freeze-requirements-mas-hkma-genius/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-freeze-requirements-mas-hkma-genius/v1/poster.jpg Stablecoin Freeze Requirements Compared: MAS, HKMA and the GENIUS Act How the GENIUS Act, the HKMA issuer guidelines and MAS proposal P015-2026 differ on stablecoin freeze requirements, with one role design that meets all three. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-freeze-requirements-mas-hkma-genius/v1/video.mp4 101 2026-11-04T19:00:40+00:00 https://guardian.security/blog/stablecoin-regulation/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-regulation/v1/poster.jpg Stablecoin Regulation in 2026: GENIUS Act, MiCA, Hong Kong, Singapore and the Security Requirements A short guide to stablecoin regulation in 2026 across six regimes, and the key, freeze, audit and incident rules they place on issuers. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-regulation/v1/video.mp4 104 2026-11-04T19:06:38+00:00 https://guardian.security/blog/fca-crypto-admission-due-diligence-smart-contracts/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-crypto-admission-due-diligence-smart-contracts/v1/poster.jpg UK Crypto Listing Due Diligence: The Smart Contract Checks in CRYPTO 3.2.5R What the FCA's PS26/9 admission rules require on token technology, and the per-token evidence UK listing teams need: admin powers, key custody, audits and verification limits. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-crypto-admission-due-diligence-smart-contracts/v1/video.mp4 106 2026-11-04T18:51:38+00:00 https://guardian.security/blog/uk-crypto-regulation-october-2027-deadlines/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/uk-crypto-regulation-october-2027-deadlines/v1/poster.jpg UK Crypto Regulation October 2027: The Deadlines That Matter The UK crypto regime under SI 2026/102 starts on October 25, 2027, but the FCA application window closes February 28, 2027. Here is every date and the controls each one needs. https://d1ryz0te1mu7pf.cloudfront.net/blog/uk-crypto-regulation-october-2027-deadlines/v1/video.mp4 100 2026-11-04T18:52:36+00:00 https://guardian.security/blog/sec-crypto-safe-harbor-proposal-form-tr/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-crypto-safe-harbor-proposal-form-tr/v1/poster.jpg The SEC Crypto Safe Harbor Proposal: Rule 400, Form TR and the Technical Evidence How the SEC's proposed Rule 400 safe harbor would work, what Form TR asks for, and the role, key and code evidence behind a certification. https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-crypto-safe-harbor-proposal-form-tr/v1/video.mp4 92 2026-11-04T18:47:44+00:00 https://guardian.security/blog/crypto-regulatory-compliance/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-regulatory-compliance/v1/poster.jpg Crypto Regulatory Compliance: The Security Requirements Behind MiCA, DORA, GENIUS, NYDFS and VARA What MiCA, DORA, the GENIUS Act, NYDFS, VARA, MAS and the SFC require on testing, keys and incidents, and the evidence supervisors expect to see. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-regulatory-compliance/v1/video.mp4 114 2026-11-04T18:58:33+00:00 https://guardian.security/blog/federal-decree-law-6-2025-defi/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-decree-law-6-2025-defi/v1/poster.jpg Federal Decree-Law No. 6 of 2025: What the New CBUAE Law Means for DeFi Article 62 of the UAE's new Central Bank law covers DeFi, dApps and protocols that facilitate licensed financial activities. This video covers what is in scope, the penalties, and the control facts your counsel needs. https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-decree-law-6-2025-defi/v1/video.mp4 105 2026-11-04T18:25:12+00:00 https://guardian.security/blog/fatf-defi-report-2026-control-indicators/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fatf-defi-report-2026-control-indicators/v2/poster.jpg FATF DeFi Report 2026: The 12 Control Indicators Mapped to Smart Contract Functions The FATF's July 2026 DeFi report lists 12 onchain and offchain indicators of control. This video explains them and maps each one to the contract functions, keys and records a protocol should inventory. https://d1ryz0te1mu7pf.cloudfront.net/blog/fatf-defi-report-2026-control-indicators/v2/video.mp4 95 2026-11-04T18:22:04+00:00 https://guardian.security/blog/sfc-circular-on-tokenisation-smart-contract-integrity/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-circular-on-tokenisation-smart-contract-integrity/v1/poster.jpg SFC Circular on Tokenisation: Smart Contract Integrity and Third-Party Audits How the SFC's revised tokenisation circular makes fund providers prove smart contract integrity with a high level of confidence, control public chains, manage hacking risk and get third-party audits on request. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-circular-on-tokenisation-smart-contract-integrity/v1/video.mp4 100 2026-11-04T18:26:12+00:00 https://guardian.security/blog/sfc-va-custody-circular-cold-wallet-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-va-custody-circular-cold-wallet-standards/v1/poster.jpg SFC VA Custody Circular Explained: Cold Wallet Standards for Hong Kong VATPs How the SFC's custody circular 25EC44 changes cold wallets at Hong Kong VATPs: no public-chain smart contracts, air-gapped keys, whitelists, independent code review and 24/7 monitoring. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-va-custody-circular-cold-wallet-standards/v1/video.mp4 101 2026-11-04T18:27:12+00:00 https://guardian.security/blog/in-bcb-701-technical-certification/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/in-bcb-701-technical-certification/v1/poster.jpg IN BCB 701: What Brazil's Technical Certification for Bank and Broker Crypto Services Must Cover A short explainer on Instrução Normativa BCB 701. It covers the 17 items an independent technical certification must address, why a consolidated opinion is rejected, and how Brazilian banks and brokers can prepare the security evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/in-bcb-701-technical-certification/v1/video.mp4 107 2026-11-04T18:37:20+00:00 https://guardian.security/blog/dora-smart-contract-audits-source-code-review/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-smart-contract-audits-source-code-review/v1/poster.jpg DORA Source Code Review: Do Smart Contract Audits Count Under Article 25? A smart contract audit is one of the tests DORA Article 25 names, but it is not the whole resilience testing program. Here is what it must meet, what it misses, and how to file it as evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-smart-contract-audits-source-code-review/v1/video.mp4 97 2026-11-04T18:34:52+00:00 https://guardian.security/blog/dora-penetration-testing-requirements/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-penetration-testing-requirements/v1/poster.jpg DORA Penetration Testing Requirements: Articles 24 to 27 and TLPT What penetration testing DORA requires and how often: the Article 24 yearly testing program, TLPT under RTS 2025/1190, tester rules, and a test plan for crypto firms. https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-penetration-testing-requirements/v1/video.mp4 98 2026-11-04T18:38:17+00:00 https://guardian.security/blog/openzeppelin-defender-alternatives/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/openzeppelin-defender-alternatives/v1/poster.jpg OpenZeppelin Defender Alternatives After the July 2026 Shutdown OpenZeppelin Defender shut down on July 1, 2026. This video matches each Defender module to a replacement, covers the gaps in the open-source tools, and walks through the main migration steps. https://d1ryz0te1mu7pf.cloudfront.net/blog/openzeppelin-defender-alternatives/v1/video.mp4 98 2026-11-04T18:39:13+00:00 https://guardian.security/blog/crypto-hack-time-to-detection/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-time-to-detection/v1/poster.jpg How Fast Are Crypto Hacks Detected? Time-to-Detection Data From 30 Exploits Guardian timed 30 crypto exploits from 2024 to 2026 using onchain timestamps: a median 35 minutes to the first public alert, about 2 hours to a team statement, and 88 minutes to a pause. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-time-to-detection/v1/video.mp4 93 2026-11-04T19:05:36+00:00 https://guardian.security/blog/guardian-critical-findings-report/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-critical-findings-report/v1/poster.jpg What 360 Critical Vulnerabilities Taught Us: Smart Contract Audit Findings Statistics Guardian counted every Critical finding in its 337 published audit reports. This video covers what the 360 Criticals were, which protocols had the most, how often they were fixed, and what teams can do before launch. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-critical-findings-report/v1/video.mp4 102 2026-11-04T18:28:12+00:00 https://guardian.security/blog/critical-bugs-post-launch-updates/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/critical-bugs-post-launch-updates/v1/poster.jpg Smart Contract Upgrade Bugs: What Guardian Found in 52 Update Reviews Guardian's published update reviews found 21 Criticals and 83 Highs across 52 reviews. See how often post-launch changes introduce serious bugs, which types appear, and how to review updates. https://d1ryz0te1mu7pf.cloudfront.net/blog/critical-bugs-post-launch-updates/v1/video.mp4 88 2026-11-04T18:29:05+00:00 https://guardian.security/blog/onchain-vs-offchain-crypto-hacks/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/onchain-vs-offchain-crypto-hacks/v1/poster.jpg Onchain vs Offchain Attacks: Where Crypto Hack Losses Came From, 2024 to 2026 Guardian analyzed DefiLlama's hacks data from 2024 to 2026. Code exploits make up most incidents, but offchain compromises of keys, signers and infrastructure account for most of the money lost. https://d1ryz0te1mu7pf.cloudfront.net/blog/onchain-vs-offchain-crypto-hacks/v1/video.mp4 112 2026-11-04T18:54:35+00:00 https://guardian.security/blog/defi-offchain-pentest-findings/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-offchain-pentest-findings/v1/poster.jpg Web3 Pentest Findings: What Guardian Found in DeFi Backends, APIs, Keepers and Cloud What Guardian's published offchain reviews found in 331 findings across DeFi backends, APIs, keepers and cloud, plus case studies and fix priorities. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-offchain-pentest-findings/v1/video.mp4 105 2026-11-04T18:30:05+00:00 https://guardian.security/blog/multichain-stablecoin-deployment-verification/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/multichain-stablecoin-deployment-verification/v1/poster.jpg Multichain Stablecoin Deployment Verification: How to Check That Every Chain Matches How multichain stablecoin issuers can check bytecode, messaging configuration, roles and migration transactions on every chain, based on Guardian's USDT0 deployment verification work. https://d1ryz0te1mu7pf.cloudfront.net/blog/multichain-stablecoin-deployment-verification/v1/video.mp4 99 2026-11-04T19:18:41+00:00 https://guardian.security/blog/best-web-application-pentesting-companies/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web-application-pentesting-companies/v2/poster.jpg Best Web Application Pentesting Companies for Crypto and Fintech in 2026 Seven web application pentesting firms for crypto exchanges, wallets and fintechs, compared on scope, method and retesting. Guardian publishes this guide and ranks itself first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web-application-pentesting-companies/v2/video.mp4 102 2026-11-04T18:16:56+00:00 https://guardian.security/blog/best-web3-pentesting-firms/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-pentesting-firms/v2/poster.jpg Best Web3 Penetration Testing Companies in 2026 A short guide to the best web3 penetration testing companies for exchanges, wallets and protocols in 2026. It covers what a web3 pentest should test and where each firm fits best. Guardian publishes the guide. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-pentesting-firms/v2/video.mp4 102 2026-11-04T18:18:00+00:00 https://guardian.security/blog/crypto-wallet-pentesting/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-wallet-pentesting/v1/poster.jpg Crypto Wallet Penetration Testing: What to Test in Mobile, Desktop and Extension Wallets What a crypto wallet pentest covers across mobile, desktop and extension wallets: key storage, signing flows, backend and APIs, supply chain, MPC and passkeys. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-wallet-pentesting/v1/video.mp4 102 2026-11-04T18:31:03+00:00 https://guardian.security/blog/telegram-mini-app-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/telegram-mini-app-security/v1/poster.jpg Telegram Mini App Security: A Pentesting Checklist How to secure a Telegram Mini App that moves crypto: server-side initData validation, backend authorization, wallet proof with ton_proof, and webhook protection. https://d1ryz0te1mu7pf.cloudfront.net/blog/telegram-mini-app-security/v1/video.mp4 92 2026-11-04T18:32:57+00:00 https://guardian.security/blog/signing-ui-supply-chain-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/signing-ui-supply-chain-security/v1/poster.jpg Your Wallet Frontend Is Attack Surface: Securing Signing Interfaces After Bybit How attackers compromise a crypto wallet's signing interface through cloud buckets, build pipelines and developer machines, and the controls that stop it, from SRI and CSP to verifying on the signer. https://d1ryz0te1mu7pf.cloudfront.net/blog/signing-ui-supply-chain-security/v1/video.mp4 101 2026-11-04T18:32:02+00:00 https://guardian.security/blog/mcp-pentesting-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/mcp-pentesting-checklist/v1/poster.jpg MCP Pentesting Guide and Checklist How to pentest a Model Context Protocol server: recon, authorization, tool poisoning, transport and SSRF, and supply chain, mapped to the OWASP MCP Top 10. https://d1ryz0te1mu7pf.cloudfront.net/blog/mcp-pentesting-checklist/v1/video.mp4 97 2026-11-04T18:33:53+00:00 https://guardian.security/blog/best-smart-contract-monitoring-tools/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-smart-contract-monitoring-tools/v1/poster.jpg Best Smart Contract Monitoring Tools in 2026: 9 Platforms Compared Nine smart contract monitoring tools for 2026, ranked by what they detect, how they respond, who acts on an alert and how they deploy. Guardian publishes this guide and ranks its own service first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-smart-contract-monitoring-tools/v1/video.mp4 100 2026-11-04T18:40:21+00:00 https://guardian.security/blog/what-is-web3-mdr/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-web3-mdr/v1/poster.jpg What Is Web3 MDR? Managed Detection and Response for Crypto Managed detection and response for crypto explained: what changes onchain, how MDR differs from a monitoring tool, what an SLA should define, and how Guardian delivers it. https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-web3-mdr/v1/video.mp4 97 2026-11-04T18:41:18+00:00 https://guardian.security/blog/web3-pentest-cost/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-pentest-cost/v1/poster.jpg Blockchain Penetration Testing Cost: Public Web3 Pentest Prices in 2026 No one publishes a credible Web3 pentest price list. This video covers the public price points we found and the scope drivers that set a crypto pentest quote. https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-pentest-cost/v1/video.mp4 93 2026-11-04T18:42:57+00:00 https://guardian.security/blog/audit-firm-pricing-compared/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-firm-pricing-compared/v1/poster.jpg What Top Audit Firms Charge: OpenZeppelin, Trail of Bits, Halborn and More Public DAO records show what OpenZeppelin, Trail of Bits, Halborn, Certora and others quoted, plus typical weekly auditor rates and the factors behind the price. https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-firm-pricing-compared/v1/video.mp4 100 2026-11-04T19:16:10+00:00 https://guardian.security/finality/ https://guardian.security/blog/top-smart-contract-auditors/2026-11-03 https://d1ryz0te1mu7pf.cloudfront.net/blog/top-smart-contract-auditors/v1/poster.jpg Top 10 Smart Contract Auditors and Digital Asset Security Firms in 2026 Guardian ranks the top 10 smart contract auditors and digital asset security firms of 2026 on coverage, method, protection after launch and track record. Guardian publishes this guide. https://d1ryz0te1mu7pf.cloudfront.net/blog/top-smart-contract-auditors/v1/video.mp4 105 2026-11-03T23:33:17+00:00 https://guardian.security/blog/guardian-announces-managed-security/ https://guardian.security/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/ https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/v1/poster.jpg Guardian's Digital Asset Assurance Pilot and $5,000,000 in Funded Pilots How Guardian's Digital Asset Assurance Pilot helps regulated firms secure digital asset programs from design to live, and the $5,000,000 Guardian is committing to funded pilots. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/v1/video.mp4 121 2026-11-04T00:01:36+00:00 https://guardian.security/blog/guardian-announces-vanguard/ https://guardian.security/blog/why-audited-teams-are-getting-hacked/ https://guardian.security/blog/web2-the-hidden-layer-of-defi-risk/ https://guardian.security/blog/introducing-guardian-defender/ https://guardian.security/blog/baseline-markets-vulnerabilities-reported-and-resolved/ https://guardian.security/blog/dn404-vulnerabilities-reported-and-resolved/ https://guardian.security/testimonials/ https://guardian.security/careers/ https://guardian.security/team/ https://guardian.security/grants/ https://guardian.security/brand-kit/ https://guardian.security/work-with-us/ https://guardian.security/bounty-contest/ https://guardian.security/privacy/ https://guardian.security/terms/