https://guardian.security/ https://guardian.security/audits/ https://guardian.security/audits/smart-contract-audit/ https://guardian.security/audits/infrastructure-pentest/ https://guardian.security/audits/webapp-pentest/ https://guardian.security/audits/api-pentest/ https://guardian.security/audits/browser-extension-pentest/ https://guardian.security/audits/sdk-audit/ https://guardian.security/audits/opsec-audit/ https://guardian.security/audits/automation-pentest/ https://guardian.security/managed-security/ https://guardian.security/managed-security/watch/ https://guardian.security/institutional/ https://guardian.security/fintechs/ https://guardian.security/onchain-teams/ https://guardian.security/capital-allocators/ https://guardian.security/risk-monitoring/ https://guardian.security/regulatory-compliance/ https://guardian.security/digital-asset-assurance-pilot/ https://guardian.security/digital-asset-assurance-pilot/start/ https://guardian.security/pilot-overview/ https://guardian.security/system-review/ https://guardian.security/vanguard/ https://guardian.security/vanguard/quote/ https://guardian.security/case-studies/ https://guardian.security/case-studies/synthetix-lp-vault/ https://guardian.security/case-studies/usdt0/ https://guardian.security/case-studies/yuga-labs/ https://guardian.security/case-studies/synthetix-bfp/ https://guardian.security/case-studies/poolshark/ https://guardian.security/case-studies/gmx/ https://guardian.security/case-studies/orderly/ https://guardian.security/case-studies/umami/ https://guardian.security/case-studies/dolomite/ https://guardian.security/case-studies/mimswap/ https://guardian.security/case-studies/gmx-keeper/ https://guardian.security/case-studies/avantis-offchain/ https://guardian.security/case-studies/usdt0-gasolina/ https://guardian.security/case-studies/usdt0-deployment-verification/ https://guardian.security/client-stories/layerzero/ https://guardian.security/client-stories/ethena/ https://guardian.security/client-stories/jupiter/ https://guardian.security/client-stories/gmx/ https://guardian.security/client-stories/usdt0/ https://guardian.security/blog/ https://guardian.security/glossary/2026-11-04 https://guardian.security/glossary/digital-asset-compliance/2026-11-04 https://guardian.security/blog/guardian-vs-other-audit-firms/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-vs-other-audit-firms/v2/poster.jpg Same Code, Different Results: Guardian vs. Other Auditors We compared 17 codebases that Guardian and another audit firm reviewed at or near the same time, counting each firm's findings from its own public report. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-vs-other-audit-firms/v2/video.mp4 96 2026-11-05T01:06:04+00:00 https://guardian.security/blog/sec-central-party-admin-powers/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-central-party-admin-powers/v2/poster.jpg The SEC Central Party Test: Which Admin Powers Make a Protocol Centralized How FAQ 1.5 from the SEC's Division of Corporation Finance defines a central party through four unilateral powers, how those powers map to contract functions, the two carve-outs, and what to hand counsel. https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-central-party-admin-powers/v2/video.mp4 108 2026-11-05T01:12:53+00:00 https://guardian.security/blog/who-controls-defi-admin-keys-census/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/who-controls-defi-admin-keys-census/v2/poster.jpg Who Controls DeFi? Admin Keys Behind 25 of the Largest Protocols Guardian traced who can upgrade, pause, freeze, mint and burn at 25 of the largest DeFi protocols on Ethereum, using public chain state, down to the final key. https://d1ryz0te1mu7pf.cloudfront.net/blog/who-controls-defi-admin-keys-census/v2/video.mp4 93 2026-11-05T01:27:52+00:00 https://guardian.security/blog/canton-coin-no-action-letter/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-coin-no-action-letter/v2/poster.jpg Is Canton Coin a Security? The SEC No-Action Letter Explained What SEC staff's November 3, 2026 Canton Coin letter says and what it leaves out. Covers the 13 node operators, the two-thirds vote, and what these facts mean for teams seeking similar relief. https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-coin-no-action-letter/v2/video.mp4 103 2026-11-05T00:42:56+00:00 https://guardian.security/blog/canton-network-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-network-security/v2/poster.jpg Canton Network Security: A Guide for Banks and Asset Managers How secure is Canton Network for institutions? The protocol's guarantees, who controls the Global Synchronizer, and the validator, Daml and key risks banks should review before going live. https://d1ryz0te1mu7pf.cloudfront.net/blog/canton-network-security/v2/video.mp4 107 2026-11-05T00:43:56+00:00 https://guardian.security/blog/crypto-foundation-central-party-sec-faq/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-foundation-central-party-sec-faq/v2/poster.jpg When a Crypto Foundation Is a Central Party: SEC FAQ Footnote 4 Explained Footnote 4 to the SEC staff's FAQ 1.4 says a foundation can itself be a central party. This video covers which foundation-held keys raise that question and a plan for handing them off to governance. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-foundation-central-party-sec-faq/v2/video.mp4 99 2026-11-05T00:46:31+00:00 https://guardian.security/blog/essential-managerial-efforts-security-maintenance/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/essential-managerial-efforts-security-maintenance/v2/poster.jpg Essential managerial efforts after launch: funding audits, fixes and monitoring SEC staff FAQ 2.3 says securing and maintaining a functional crypto system are not essential managerial efforts. This video covers what that includes, and why who ships the fix still matters under FAQ 1.5. https://d1ryz0te1mu7pf.cloudfront.net/blog/essential-managerial-efforts-security-maintenance/v2/video.mp4 96 2026-11-05T00:55:54+00:00 https://guardian.security/blog/genius-freeze-mandate-vs-sec-central-party-test/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/genius-freeze-mandate-vs-sec-central-party-test/v3/poster.jpg Is USDC Centralized? GENIUS Freeze Mandates vs the SEC Central Party Test USDC is centralized by design. This video explains why the GENIUS Act requires freeze powers that SEC staff FAQ 1.5 counts as central party control, and who that affects. https://d1ryz0te1mu7pf.cloudfront.net/blog/genius-freeze-mandate-vs-sec-central-party-test/v3/video.mp4 97 2026-11-05T01:03:07+00:00 https://guardian.security/blog/decentralization-tests-compared/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/decentralization-tests-compared/v3/poster.jpg Decentralization Tests Compared: SEC, FCA, MiCA, FATF and IOSCO How the SEC, the UK FCA, the EU, FATF and IOSCO each test whether a DeFi protocol is decentralized, and the contract facts that feed all five. https://d1ryz0te1mu7pf.cloudfront.net/blog/decentralization-tests-compared/v3/video.mp4 110 2026-11-05T00:50:23+00:00 https://guardian.security/blog/fca-decentralisation-test-perg-18-control-facts/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-decentralisation-test-perg-18-control-facts/v2/poster.jpg FCA Crypto Perimeter Guidance: The Control Facts in Draft PERG 18 How the FCA's draft PERG 18 in CP26/36 decides whether anyone behind a DeFi protocol needs authorization, and the onchain control facts teams should record before applying. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-decentralisation-test-perg-18-control-facts/v2/video.mp4 93 2026-11-05T00:58:33+00:00 https://guardian.security/blog/fca-gc26-7-defi-mapping-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-gc26-7-defi-mapping-checklist/v2/poster.jpg FCA DeFi Guidance GC26/7: Mapping Smart Contracts, Oracles, Bridges and Admin Keys A short guide to the FCA's draft DeFi guidance GC26/7. It covers what firms should map, how to record admin key powers, which scenario tests to run and how to monitor dependencies before comments close on November 18, 2026. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-gc26-7-defi-mapping-checklist/v2/video.mp4 105 2026-11-05T00:59:27+00:00 https://guardian.security/blog/asic-cp-392-asset-holding-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/asic-cp-392-asset-holding-standards/v3/poster.jpg ASIC CP 392: Asset-Holding Standards for Digital Asset Platforms A short guide to ASIC's CP 392 draft asset-holding standards: daily reconciliation, quarterly wallet reports, transfer controls and custodian oversight, with comments due November 27, 2026. https://d1ryz0te1mu7pf.cloudfront.net/blog/asic-cp-392-asset-holding-standards/v3/video.mp4 101 2026-11-05T00:37:18+00:00 https://guardian.security/blog/defi-protocol-due-diligence-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-protocol-due-diligence-checklist/v2/poster.jpg DeFi Protocol Due Diligence Checklist for Regulated Firms, From ADGM's Draft Guidance How regulated firms can turn the ADGM FSRA's draft DeFi Risk Management Guidance into concrete protocol checks: deployed code, audits, admin keys, timelocks, oracles, bridges and re-diligence triggers. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-protocol-due-diligence-checklist/v2/video.mp4 100 2026-11-05T00:52:14+00:00 https://guardian.security/blog/adgm-defi-continuous-monitoring/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/adgm-defi-continuous-monitoring/v3/poster.jpg DeFi Protocol Monitoring Under ADGM's Draft Guidance What the FSRA's draft DeFi Risk Management Guidance expects ADGM firms to monitor: seven monitoring areas, onchain admin and governance events, threshold alerts and escalation outside business hours. https://d1ryz0te1mu7pf.cloudfront.net/blog/adgm-defi-continuous-monitoring/v3/video.mp4 104 2026-11-05T00:36:22+00:00 https://guardian.security/blog/federal-reserve-genius-act-proposal-it-security-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-reserve-genius-act-proposal-it-security-standards/v2/poster.jpg Federal Reserve GENIUS Act Proposal: IT, Smart Contract and Key Management Standards What the Federal Reserve's proposed 12 CFR 247.13 would require from stablecoin issuers: smart contract validation, independent testing, private key management and third party oversight. https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-reserve-genius-act-proposal-it-security-standards/v2/video.mp4 100 2026-11-05T01:01:17+00:00 https://guardian.security/blog/cftc-crypto-anprm-comment-deadline/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/cftc-crypto-anprm-comment-deadline/v2/poster.jpg CFTC Request for Comment on Crypto Markets: Answering the Technical Questions Before December 14 The CFTC's crypto asset markets ANPRM closes December 14, 2026. How to answer its smart contract, fail-safe, validator and proof of reserves questions with evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/cftc-crypto-anprm-comment-deadline/v2/video.mp4 93 2026-11-05T00:44:49+00:00 https://guardian.security/blog/canada-stablecoin-act-draft-regulations/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/canada-stablecoin-act-draft-regulations/v2/poster.jpg Canada Stablecoin Act: Risk, Data Security and Incident Rules for Issuers How Canada's Stablecoin Act and the October 2026 draft regulations set out risk management, data security, review and incident duties for issuers, and the token contract controls that back them. https://d1ryz0te1mu7pf.cloudfront.net/blog/canada-stablecoin-act-draft-regulations/v2/video.mp4 90 2026-11-05T00:41:58+00:00 https://guardian.security/blog/esma-non-mica-compliant-stablecoins-opinion/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/esma-non-mica-compliant-stablecoins-opinion/v2/poster.jpg ESMA's Opinion on Non-MiCA Compliant Stablecoins: What EU CASPs Must Switch Off ESMA's October 2026 opinion puts every CASP service in scope for non-MiCA compliant stablecoins, including custody and transfers. It also rules out disclosures as a fix and sets an 8 January 2027 remediation deadline. https://d1ryz0te1mu7pf.cloudfront.net/blog/esma-non-mica-compliant-stablecoins-opinion/v2/video.mp4 106 2026-11-05T00:55:02+00:00 https://guardian.security/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/v2/poster.jpg GENIUS Act Foreign Issuers: Freeze, Seize and Burn Due Diligence Checklist What Treasury's proposed 12 CFR 1523.3(c) asks exchanges to verify about foreign stablecoin issuers, and Guardian's six-step onchain checklist for freeze, seize and burn functions. https://d1ryz0te1mu7pf.cloudfront.net/blog/foreign-stablecoin-due-diligence-freeze-seize-burn-checklist/v2/video.mp4 102 2026-11-05T01:02:14+00:00 https://guardian.security/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/v2/poster.jpg Is USDT GENIUS Act Compliant? What Treasury's Foreign Stablecoin Rule Asks Exchanges to Verify No regulator has ruled on USDT. This video covers the GENIUS Act's two dates for foreign stablecoins, Treasury's due diligence proposal, section 8 bans and the freeze functions that USDT's contracts actually show. https://d1ryz0te1mu7pf.cloudfront.net/blog/is-usdt-genius-act-compliant-foreign-stablecoin-rule/v2/video.mp4 105 2026-11-05T01:08:02+00:00 https://guardian.security/blog/stablecoin-freeze-requirements-mas-hkma-genius/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-freeze-requirements-mas-hkma-genius/v3/poster.jpg Stablecoin Freeze Requirements Compared: MAS, HKMA and the GENIUS Act How the GENIUS Act, the HKMA issuer guidelines and MAS proposal P015-2026 differ on stablecoin freeze requirements, with one role design that meets all three. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-freeze-requirements-mas-hkma-genius/v3/video.mp4 101 2026-11-05T01:18:17+00:00 https://guardian.security/blog/stablecoin-regulation/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-regulation/v3/poster.jpg Stablecoin Regulation in 2026: GENIUS Act, MiCA, Hong Kong, Singapore and the Security Requirements A short guide to stablecoin regulation in 2026 across six regulations, and the key, freeze, audit and incident rules they place on issuers. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-regulation/v3/video.mp4 101 2026-11-05T01:19:40+00:00 https://guardian.security/blog/fca-crypto-admission-due-diligence-smart-contracts/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-crypto-admission-due-diligence-smart-contracts/v2/poster.jpg UK Crypto Listing Due Diligence: The Smart Contract Checks in CRYPTO 3.2.5R What the FCA's PS26/9 admission rules require on token technology, and the per-token evidence UK listing teams need: admin powers, key custody, audits and verification limits. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-crypto-admission-due-diligence-smart-contracts/v2/video.mp4 106 2026-11-05T00:57:41+00:00 https://guardian.security/blog/uk-crypto-regulation-october-2027-deadlines/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/uk-crypto-regulation-october-2027-deadlines/v3/poster.jpg UK Crypto Regulation October 2027: The Deadlines That Matter The UK crypto regulation under SI 2026/102 starts on October 25, 2027, but the FCA application window closes February 28, 2027. Here is every date and the controls each one needs. https://d1ryz0te1mu7pf.cloudfront.net/blog/uk-crypto-regulation-october-2027-deadlines/v3/video.mp4 100 2026-11-05T01:23:45+00:00 https://guardian.security/blog/sec-crypto-safe-harbor-proposal-form-tr/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-crypto-safe-harbor-proposal-form-tr/v2/poster.jpg The SEC Crypto Safe Harbor Proposal: Rule 400, Form TR and the Technical Evidence How the SEC's proposed Rule 400 safe harbor would work, what Form TR asks for, and the role, key and code evidence behind a certification. https://d1ryz0te1mu7pf.cloudfront.net/blog/sec-crypto-safe-harbor-proposal-form-tr/v2/video.mp4 92 2026-11-05T01:13:51+00:00 https://guardian.security/blog/crypto-regulatory-compliance/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-regulatory-compliance/v3/poster.jpg Crypto Regulatory Compliance: The Security Requirements Behind MiCA, DORA, GENIUS, NYDFS and VARA What MiCA, DORA, the GENIUS Act, NYDFS, VARA, MAS and the SFC require on testing, keys and incidents, and the evidence supervisors expect to see. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-regulatory-compliance/v3/video.mp4 113 2026-11-05T00:48:31+00:00 https://guardian.security/blog/federal-decree-law-6-2025-defi/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-decree-law-6-2025-defi/v2/poster.jpg Federal Decree-Law No. 6 of 2025: What the New CBUAE Law Means for DeFi Article 62 of the UAE's new Central Bank law covers DeFi, dApps and protocols that facilitate licensed financial activities. This video covers what is in scope, the penalties, and the control facts your counsel needs. https://d1ryz0te1mu7pf.cloudfront.net/blog/federal-decree-law-6-2025-defi/v2/video.mp4 105 2026-11-05T01:00:22+00:00 https://guardian.security/blog/fatf-defi-report-2026-control-indicators/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/fatf-defi-report-2026-control-indicators/v3/poster.jpg FATF DeFi Report 2026: The 12 Control Indicators Mapped to Smart Contract Functions The FATF's July 2026 DeFi report lists 12 onchain and offchain indicators of control. This video explains them and maps each one to the contract functions, keys and records a protocol should inventory. https://d1ryz0te1mu7pf.cloudfront.net/blog/fatf-defi-report-2026-control-indicators/v3/video.mp4 95 2026-11-05T00:56:46+00:00 https://guardian.security/blog/sfc-circular-on-tokenisation-smart-contract-integrity/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-circular-on-tokenisation-smart-contract-integrity/v2/poster.jpg SFC Circular on Tokenisation: Smart Contract Integrity and Third-Party Audits How the SFC's revised tokenisation circular makes fund providers prove smart contract integrity with a high level of confidence, control public chains, manage hacking risk and get third-party audits on request. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-circular-on-tokenisation-smart-contract-integrity/v2/video.mp4 100 2026-11-05T01:14:54+00:00 https://guardian.security/blog/sfc-va-custody-circular-cold-wallet-standards/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-va-custody-circular-cold-wallet-standards/v2/poster.jpg SFC VA Custody Circular Explained: Cold Wallet Standards for Hong Kong VATPs How the SFC's custody circular 25EC44 changes cold wallets at Hong Kong VATPs: no public-chain smart contracts, air-gapped keys, whitelists, independent code review and 24/7 monitoring. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-va-custody-circular-cold-wallet-standards/v2/video.mp4 101 2026-11-05T01:15:56+00:00 https://guardian.security/blog/in-bcb-701-technical-certification/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/in-bcb-701-technical-certification/v2/poster.jpg IN BCB 701: What Brazil's Technical Certification for Bank and Broker Crypto Services Must Cover A short explainer on Instrução Normativa BCB 701. It covers the 17 items an independent technical certification must address, why a consolidated opinion is rejected, and how Brazilian banks and brokers can prepare the security evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/in-bcb-701-technical-certification/v2/video.mp4 107 2026-11-05T01:07:04+00:00 https://guardian.security/blog/dora-smart-contract-audits-source-code-review/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-smart-contract-audits-source-code-review/v2/poster.jpg DORA Source Code Review: Do Smart Contract Audits Count Under Article 25? A smart contract audit is one of the tests DORA Article 25 names, but it is not the whole resilience testing program. Here is what it must meet, what it misses, and how to file it as evidence. https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-smart-contract-audits-source-code-review/v2/video.mp4 97 2026-11-05T00:54:04+00:00 https://guardian.security/blog/dora-penetration-testing-requirements/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-penetration-testing-requirements/v2/poster.jpg DORA Penetration Testing Requirements: Articles 24 to 27 and TLPT What penetration testing DORA requires and how often: the Article 24 yearly testing program, TLPT under RTS 2025/1190, tester rules, and a test plan for crypto firms. https://d1ryz0te1mu7pf.cloudfront.net/blog/dora-penetration-testing-requirements/v2/video.mp4 98 2026-11-05T00:53:08+00:00 https://guardian.security/blog/openzeppelin-defender-alternatives/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/openzeppelin-defender-alternatives/v2/poster.jpg OpenZeppelin Defender Alternatives After the July 2026 Shutdown OpenZeppelin Defender shut down on July 1, 2026. This video matches each Defender module to a replacement, covers the gaps in the open-source tools, and walks through the main migration steps. https://d1ryz0te1mu7pf.cloudfront.net/blog/openzeppelin-defender-alternatives/v2/video.mp4 98 2026-11-05T01:11:50+00:00 https://guardian.security/blog/crypto-hack-time-to-detection/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-time-to-detection/v2/poster.jpg How Fast Are Crypto Hacks Detected? Time-to-Detection Data From 30 Exploits Guardian timed 30 crypto exploits from 2024 to 2026 using onchain timestamps: a median 35 minutes to the first public alert, about 2 hours to a team statement, and 88 minutes to a pause. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-time-to-detection/v2/video.mp4 93 2026-11-05T00:47:30+00:00 https://guardian.security/blog/guardian-critical-findings-report/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-critical-findings-report/v2/poster.jpg What 360 Critical Vulnerabilities Taught Us: Smart Contract Audit Findings Statistics Guardian counted every Critical finding in its 337 published audit reports. This video covers what the 360 Criticals were, which protocols had the most, how often they were fixed, and what teams can do before launch. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-critical-findings-report/v2/video.mp4 102 2026-11-05T01:05:08+00:00 https://guardian.security/blog/critical-bugs-post-launch-updates/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/critical-bugs-post-launch-updates/v3/poster.jpg Smart Contract Upgrade Bugs: What Guardian Found in 49 Update Reviews Guardian's published update reviews found 21 Criticals and 83 Highs across 49 reviews. See how often post-launch changes introduce serious bugs, which types appear, and how to review updates. https://d1ryz0te1mu7pf.cloudfront.net/blog/critical-bugs-post-launch-updates/v3/video.mp4 89 2026-11-05T00:45:38+00:00 https://guardian.security/blog/onchain-vs-offchain-crypto-hacks/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/onchain-vs-offchain-crypto-hacks/v2/poster.jpg Onchain vs Offchain Attacks: Where Crypto Hack Losses Came From, 2024 to 2026 Guardian analyzed DefiLlama's hacks data from 2024 to 2026. Code exploits make up most incidents, but offchain compromises of keys, signers and infrastructure account for most of the money lost. https://d1ryz0te1mu7pf.cloudfront.net/blog/onchain-vs-offchain-crypto-hacks/v2/video.mp4 112 2026-11-05T01:10:51+00:00 https://guardian.security/blog/defi-offchain-pentest-findings/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-offchain-pentest-findings/v3/poster.jpg Web3 Pentest Findings: What Guardian Found in DeFi Backends, APIs, Keepers and Cloud What Guardian's published offchain reviews found in 331 findings across DeFi backends, APIs, keepers and cloud, plus case studies and fix priorities. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-offchain-pentest-findings/v3/video.mp4 103 2026-11-05T00:51:18+00:00 https://guardian.security/blog/multichain-stablecoin-deployment-verification/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/multichain-stablecoin-deployment-verification/v3/poster.jpg Multichain Stablecoin Deployment Verification: How to Check That Every Chain Matches How multichain stablecoin issuers can check bytecode, messaging configuration, roles and migration transactions on every chain, based on Guardian's USDT0 deployment verification work. https://d1ryz0te1mu7pf.cloudfront.net/blog/multichain-stablecoin-deployment-verification/v3/video.mp4 93 2026-11-05T01:09:47+00:00 https://guardian.security/blog/best-web-application-pentesting-companies/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web-application-pentesting-companies/v3/poster.jpg Best Web Application Pentesting Companies for Crypto and Fintech in 2026 Seven web application pentesting firms for crypto exchanges, wallets and fintechs, compared on scope, method and retesting. Guardian publishes this guide and ranks itself first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web-application-pentesting-companies/v3/video.mp4 102 2026-11-05T00:40:02+00:00 https://guardian.security/blog/best-web3-pentesting-firms/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-pentesting-firms/v3/poster.jpg Best Web3 Penetration Testing Companies in 2026 A short guide to the best web3 penetration testing companies for exchanges, wallets and protocols in 2026. It covers what a web3 pentest should test and where each firm fits best. Guardian publishes the guide. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-pentesting-firms/v3/video.mp4 102 2026-11-05T00:41:02+00:00 https://guardian.security/blog/crypto-wallet-pentesting/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-wallet-pentesting/v2/poster.jpg Crypto Wallet Penetration Testing: What to Test in Mobile, Desktop and Extension Wallets What a crypto wallet pentest covers across mobile, desktop and extension wallets: key storage, signing flows, backend and APIs, supply chain, MPC and passkeys. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-wallet-pentesting/v2/video.mp4 102 2026-11-05T00:49:26+00:00 https://guardian.security/blog/telegram-mini-app-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/telegram-mini-app-security/v2/poster.jpg Telegram Mini App Security: A Pentesting Checklist How to secure a Telegram Mini App that moves crypto: server-side initData validation, backend authorization, wallet proof with ton_proof, and webhook protection. https://d1ryz0te1mu7pf.cloudfront.net/blog/telegram-mini-app-security/v2/video.mp4 92 2026-11-05T01:20:54+00:00 https://guardian.security/blog/signing-ui-supply-chain-security/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/signing-ui-supply-chain-security/v2/poster.jpg Your Wallet Frontend Is Attack Surface: Securing Signing Interfaces After Bybit How attackers compromise a crypto wallet's signing interface through cloud buckets, build pipelines and developer machines, and the controls that stop it, from SRI and CSP to verifying on the signer. https://d1ryz0te1mu7pf.cloudfront.net/blog/signing-ui-supply-chain-security/v2/video.mp4 101 2026-11-05T01:17:00+00:00 https://guardian.security/blog/mcp-pentesting-checklist/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/mcp-pentesting-checklist/v2/poster.jpg MCP Pentesting Guide and Checklist How to pentest a Model Context Protocol server: recon, authorization, tool poisoning, transport and SSRF, and supply chain, mapped to the OWASP MCP Top 10. https://d1ryz0te1mu7pf.cloudfront.net/blog/mcp-pentesting-checklist/v2/video.mp4 97 2026-11-05T01:08:55+00:00 https://guardian.security/blog/best-smart-contract-monitoring-tools/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-smart-contract-monitoring-tools/v2/poster.jpg Best Smart Contract Monitoring Tools in 2026: 9 Platforms Compared Nine smart contract monitoring tools for 2026, ranked by what they detect, how they respond, who acts on an alert and how they deploy. Guardian publishes this guide and ranks its own service first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-smart-contract-monitoring-tools/v2/video.mp4 100 2026-11-05T00:39:06+00:00 https://guardian.security/blog/what-is-web3-mdr/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-web3-mdr/v2/poster.jpg What Is Web3 MDR? Managed Detection and Response for Crypto Managed detection and response for crypto explained: what changes onchain, how MDR differs from a monitoring tool, what an SLA should define, and how Guardian delivers it. https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-web3-mdr/v2/video.mp4 97 2026-11-05T01:26:32+00:00 https://guardian.security/blog/web3-pentest-cost/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-pentest-cost/v2/poster.jpg Blockchain Penetration Testing Cost: Public Web3 Pentest Prices in 2026 No one publishes a credible Web3 pentest price list. This video covers the public price points we found and the scope drivers that set a crypto pentest quote. https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-pentest-cost/v2/video.mp4 93 2026-11-05T01:25:08+00:00 https://guardian.security/blog/audit-firm-pricing-compared/2026-11-04 https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-firm-pricing-compared/v2/poster.jpg What Top Audit Firms Charge: OpenZeppelin, Trail of Bits, Halborn and More Public DAO records show what OpenZeppelin, Trail of Bits, Halborn, Certora and others quoted, plus typical weekly auditor rates and the factors behind the price. https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-firm-pricing-compared/v2/video.mp4 100 2026-11-05T00:38:12+00:00 https://guardian.security/finality/2026-11-04 https://guardian.security/blog/top-smart-contract-auditors/2026-11-03 https://d1ryz0te1mu7pf.cloudfront.net/blog/top-smart-contract-auditors/v2/poster.jpg Top 10 Smart Contract Auditors and Digital Asset Security Firms in 2026 Guardian ranks the top 10 smart contract auditors and digital asset security firms of 2026 on coverage, method, protection after launch and track record. Guardian publishes this guide. https://d1ryz0te1mu7pf.cloudfront.net/blog/top-smart-contract-auditors/v2/video.mp4 105 2026-11-05T01:22:21+00:00 https://guardian.security/blog/guardian-announces-managed-security/ https://guardian.security/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/ https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/v2/poster.jpg Guardian's Digital Asset Assurance Pilot and $5,000,000 in Funded Pilots How Guardian's Digital Asset Assurance Pilot helps regulated firms secure digital asset programs from design to live, and the $5,000,000 Guardian is committing to funded pilots. https://d1ryz0te1mu7pf.cloudfront.net/blog/guardian-commits-5m-to-digital-asset-assurance-pilots/v2/video.mp4 121 2026-11-05T01:04:13+00:00 https://guardian.security/blog/guardian-announces-vanguard/ https://guardian.security/blog/why-audited-teams-are-getting-hacked/ https://guardian.security/blog/web2-the-hidden-layer-of-defi-risk/ https://guardian.security/blog/introducing-guardian-defender/ https://guardian.security/blog/baseline-markets-vulnerabilities-reported-and-resolved/ https://guardian.security/blog/dn404-vulnerabilities-reported-and-resolved/ https://guardian.security/blog/how-to-audit-a-smart-contract/2026-11-04 https://i.ytimg.com/vi/5g-Hzw5ind8/hqdefault.jpg Complete Smart Contract Auditing System How to audit a smart contract with a repeatable system: preparation, jobs to be done, audit tags, attack knobs, broken invariants, PoCs and the final report. https://www.youtube.com/embed/5g-Hzw5ind8 1492 2023-02-17T00:00:00+00:00 https://guardian.security/blog/ways-to-miss-vulnerabilities-in-an-audit/2026-11-04 https://i.ytimg.com/vi/f--w08g7lyU/hqdefault.jpg 28 Ways To Miss Vulnerabilities In A Smart Contract Audit Smart contract audit mistakes that hide vulnerabilities: 27 ways auditors miss bugs, from unchecked external calls to weird ERC-20s, and what to do instead. https://www.youtube.com/embed/f--w08g7lyU 1613 2023-03-26T00:00:00+00:00 https://guardian.security/blog/how-to-prepare-for-a-smart-contract-audit/2026-11-04 https://i.ytimg.com/vi/BY0Edn_py_k/hqdefault.jpg Getting An Audit? 13 Mistakes To Avoid How to prepare for a smart contract audit: 13 mistakes protocol teams make, from thin docs to no code freeze, plus five design habits that cut audit cost. https://www.youtube.com/embed/BY0Edn_py_k 1293 2023-06-18T00:00:00+00:00 https://guardian.security/blog/smart-contract-audit-severity-levels/2026-11-04 https://i.ytimg.com/vi/f4UdAnHUpSE/hqdefault.jpg Is This A Critical? How To Rank Vulnerability Severity Smart contract audit severity levels explained: what makes a finding critical, high, medium or low, how to rate centralization risks and when to merge findings. https://www.youtube.com/embed/f4UdAnHUpSE 2894 2023-12-03T00:00:00+00:00 https://guardian.security/blog/solidity-security-best-practices/2026-11-04 https://i.ytimg.com/vi/UUhjTcD1BfM/hqdefault.jpg The 9 Keys To Developing Secure Smart Contracts Solidity security best practices from audit work: write less code, validate inputs, avoid loops, scrutinize external calls, add post checks and document flows. https://www.youtube.com/embed/UUhjTcD1BfM 2603 2024-03-03T00:00:00+00:00 https://guardian.security/blog/formal-verification-smart-contracts/2026-11-04 https://i.ytimg.com/vi/imSy7Ll9ftg/hqdefault.jpg Guide To Formal Verification | Take Security To The Next Level How formal verification of smart contracts works: Boolean formulas, SMT solvers and Solidity's SMTChecker, with worked examples of invariants and targets. https://www.youtube.com/embed/imSy7Ll9ftg 1129 2023-06-22T00:00:00+00:00 https://guardian.security/blog/mutation-testing-solidity/2026-11-04 https://i.ytimg.com/vi/HIN8lmj597M/hqdefault.jpg The #1 Most Underrated Web3 Security Tool Mutation testing in Solidity measures how many bugs your tests catch. Learn how it works, how to run Gambit and Vertigo, and how to kill surviving mutants. https://www.youtube.com/embed/HIN8lmj597M 2173 2024-03-10T00:00:00+00:00 https://guardian.security/blog/how-to-write-a-smart-contract-poc/2026-11-04 https://i.ytimg.com/vi/pn-UpJ0yas4/hqdefault.jpg Guide To Writing PoCs How to write a smart contract proof of concept: scope the PoC in comments, reuse the test harness, log as you debug and prove the finding, using a GMX V2 example. https://www.youtube.com/embed/pn-UpJ0yas4 1938 2023-06-08T00:00:00+00:00 https://guardian.security/blog/how-to-find-critical-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/oIoozgIl4pw/hqdefault.jpg How To Find SO Many Criticals You Get Bored Of Auditing How to find critical vulnerabilities in smart contracts with the GTDA method: set goals, tag questions, diagram call paths, then attack with your toolbox. https://www.youtube.com/embed/oIoozgIl4pw 2741 2024-02-01T00:00:00+00:00 https://guardian.security/blog/how-to-become-a-smart-contract-auditor/2026-11-04 https://i.ytimg.com/vi/CUU5kVVVl7Y/hqdefault.jpg 4 Steps To Become A Master Security Researcher How to become a smart contract auditor: build in Solidity, learn DeFi primitives, read codebases deeply, study vulnerabilities, then audit and publish your work. https://www.youtube.com/embed/CUU5kVVVl7Y 1096 2023-10-08T00:00:00+00:00 https://guardian.security/blog/common-smart-contract-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/MgCSEUrMnSQ/hqdefault.jpg 22 Vulnerabilities I Use To Find Criticals FAST! A smart contract vulnerabilities list of 22 attack vectors to check first in a new codebase, from front-running and weird ERC-20s to signatures and hash collisions. https://www.youtube.com/embed/MgCSEUrMnSQ 1996 2024-01-21T00:00:00+00:00 https://guardian.security/blog/sneaky-solidity-bugs/2026-11-04 https://i.ytimg.com/vi/8fNNVQv4-oY/hqdefault.jpg 21 Sneaky Smart Contract Bugs | Do Not Miss These! 21 sneaky Solidity bugs from real audits: struct deletes, downcast overflow, msg.value in loops, stale prices, off by one errors and more, with fixes. https://www.youtube.com/embed/8fNNVQv4-oY 1738 2023-06-11T00:00:00+00:00 https://guardian.security/blog/reentrancy-attacks-explained/2026-11-04 https://i.ytimg.com/vi/3T1t2ginfTg/hqdefault.jpg The Ultimate Guide To Reentrancy A reentrancy attack exploits state that is outdated during an external call. Learn classic, cross-function, cross-contract and read-only reentrancy. https://www.youtube.com/embed/3T1t2ginfTg 1881 2023-05-07T00:00:00+00:00 https://guardian.security/blog/liquidation-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/AD2IF8ovE-w/hqdefault.jpg You Have To Know These 13 Critical Liquidation Vulnerabilities 13 liquidation vulnerabilities in DeFi lending, perps and options protocols, from blacklisted tokens and unpayable fees to self-liquidation, with a checklist. https://www.youtube.com/embed/AD2IF8ovE-w 3538 2024-01-18T00:00:00+00:00 https://guardian.security/blog/weird-erc20-tokens-checklist/2026-11-04 https://i.ytimg.com/vi/Tx0f8A2Yd3k/hqdefault.jpg 12 ERC20 Edge Cases | Web3 Exploits 101 Weird ERC20 tokens break DeFi protocols: fee-on-transfer, callbacks, missing return values, blacklists, approval rules, decimals and more, with a checklist. https://www.youtube.com/embed/Tx0f8A2Yd3k 2167 2023-11-16T00:00:00+00:00 https://guardian.security/blog/erc4626-inflation-attack/2026-11-04 https://i.ytimg.com/vi/3IMw7xbxJgY/hqdefault.jpg Vault Exploit Masterclass | 3 Red Flags | Web3 Exploits 101 How the ERC4626 inflation attack steals the first deposit, the three red flags that reveal it, the Beefy and Kelp examples, and the two fixes that stop it. https://www.youtube.com/embed/3IMw7xbxJgY 3777 2023-12-18T00:00:00+00:00 https://guardian.security/blog/defi-accounting-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/-9VmITcdm3c/hqdefault.jpg The Vulnerability Nobody Talks About | Web3 Security 101 DeFi reward accounting vulnerabilities from stepwise jumps: sandwiched reward compounds, reward and interest rate updates, and vault inflation attacks. https://www.youtube.com/embed/-9VmITcdm3c 1611 2023-12-24T00:00:00+00:00 https://guardian.security/blog/price-oracle-manipulation/2026-11-04 https://i.ytimg.com/vi/tbGqaDHZtuc/hqdefault.jpg Oracle Manipulation | Web3 Security 101 How an oracle manipulation attack works: slot0 spot prices, a lending exploit with real numbers, Cream Finance, TWAP limits under proof of stake, and fixes. https://www.youtube.com/embed/tbGqaDHZtuc 2232 2023-10-28T00:00:00+00:00 https://guardian.security/blog/sandwich-attack/2026-11-04 https://i.ytimg.com/vi/6y3nwJS4UJw/hqdefault.jpg Sandwich Attacks | Web3 Exploits 101 How a sandwich attack in crypto works on an AMM, why slippage protection stops it, a real hard-coded slippage finding, and a live jaredfromsubway.eth sandwich. https://www.youtube.com/embed/6y3nwJS4UJw 1442 2023-09-10T00:00:00+00:00 https://guardian.security/blog/front-running-smart-contracts/2026-11-04 https://i.ytimg.com/vi/dlEIfGT2bHo/hqdefault.jpg Front-Running Attacks | Web3 Exploits 101 How a front running smart contract attack works: the mempool, priority fees, two real audit findings, and a framework for finding front running in review. https://www.youtube.com/embed/dlEIfGT2bHo 1541 2023-09-03T00:00:00+00:00 https://guardian.security/blog/upgradeable-smart-contracts-explained/2026-11-04 https://i.ytimg.com/vi/e5lWvt1rIm0/hqdefault.jpg Smart Contract Upgradeability 101 | 5 Upgradeability Methods Upgradeable smart contracts explained: eternal storage, transparent proxies, UUPS, beacon proxies and the diamond standard, with each pattern's pitfalls. https://www.youtube.com/embed/e5lWvt1rIm0 2417 2023-08-20T00:00:00+00:00 https://guardian.security/blog/upgradeable-contract-vulnerabilities/2026-11-04 https://i.ytimg.com/vi/6aPyykZhglM/hqdefault.jpg Do Not Miss These 5 Upgradeability Vulnerabilities Five upgradeable contract vulnerabilities auditors keep finding: storage gaps, upgradeable inheritance, initializers and unprotected UUPS upgrades. https://www.youtube.com/embed/6aPyykZhglM 1949 2024-01-14T00:00:00+00:00 https://guardian.security/blog/external-call-attacks/2026-11-04 https://i.ytimg.com/vi/VF1HYD50eus/hqdefault.jpg The 4 External Call Attacks | Web3 Exploits 101 The four external call vulnerabilities in Solidity: reentrancy, denial of service, gas griefing and return values, plus how GMX V2 makes callbacks safe. https://www.youtube.com/embed/VF1HYD50eus 1816 2023-11-19T00:00:00+00:00 https://guardian.security/blog/signature-malleability/2026-11-04 https://i.ytimg.com/vi/V3TJLDHZBFU/hqdefault.jpg Web3 Exploits | Signature Malleability What signature malleability is, why every ECDSA signature on secp256k1 has a twin, how an attacker forges it to double spend, and how to stop it in Solidity. https://www.youtube.com/embed/V3TJLDHZBFU 895 2023-02-27T00:00:00+00:00 https://guardian.security/blog/solidity-rounding-errors/2026-11-04 https://i.ytimg.com/vi/6rmLP-ri-JU/hqdefault.jpg Rounding Errors | Web3 Exploits 101 Why rounding errors in Solidity happen, how truncating division broke an average price and a tick rounding function, and what to check at every division. https://www.youtube.com/embed/6rmLP-ri-JU 1976 2023-10-16T00:00:00+00:00 https://guardian.security/blog/dao-governance-attacks/2026-11-04 https://i.ytimg.com/vi/O4fLWPKQINA/hqdefault.jpg Dao And Governance Attacks | Web3 Exploits 101 Governance attacks push a malicious proposal through a DAO's vote. Learn the common flaws, flash-loaned votes, and how Beanstalk's emergency commit was drained. https://www.youtube.com/embed/O4fLWPKQINA 1847 2023-11-12T00:00:00+00:00 https://guardian.security/blog/metamorphic-contracts/2026-11-04 https://i.ytimg.com/vi/XEe-FMiTDYU/hqdefault.jpg Metamorphic Contracts | Tornado Cash Exploit! A metamorphic contract swaps its code at one address. Learn how the Tornado Cash governance exploit used one, two ways to build one, and what EIP-6780 changed. https://www.youtube.com/embed/XEe-FMiTDYU 1292 2023-06-01T00:00:00+00:00 https://guardian.security/blog/critical-defi-vulnerability-patterns/2026-11-04 https://i.ytimg.com/vi/B8igzag_7jY/hqdefault.jpg 6 Critical Vulnerabilities | Build Your Toolbox Six critical DeFi vulnerabilities from real audits: reward sandwiches, unbounded loops, solvency gaps, gas manipulation, blacklists and price impact games. https://www.youtube.com/embed/B8igzag_7jY 4754 2023-11-30T00:00:00+00:00 https://guardian.security/blog/critical-vulnerabilities-breakdown/2026-11-04 https://i.ytimg.com/vi/N9VtIomWo2s/hqdefault.jpg Do Not Miss These 3 Critical Vulnerabilities | Critical Findings Breakdown Three critical smart contract vulnerabilities from Guardian audits: zero-amount withdrawals, parallel withdrawal state and liquidations that lower health. https://www.youtube.com/embed/N9VtIomWo2s 2230 2024-02-22T00:00:00+00:00 https://guardian.security/blog/audit-findings-explained/2026-11-04 https://i.ytimg.com/vi/ekFN7GtGtBU/hqdefault.jpg Learn From My Findings | 3 Findings Breakdown Six smart contract audit findings from Guardian reports, each with the context, the bug and the heuristic an auditor can reuse to find similar issues. https://www.youtube.com/embed/ekFN7GtGtBU 1835 2023-06-30T00:00:00+00:00 https://guardian.security/blog/solidity-compiler-bugs/2026-11-04 https://i.ytimg.com/vi/ulFDHyuVb1I/hqdefault.jpg Vulnerabilities With The Solidity Compiler! Solidity compiler bugs can make correct-looking code misbehave. See how dirty bytes copied to storage leak through an empty push, and how to check your version. https://www.youtube.com/embed/ulFDHyuVb1I 1275 2023-07-28T00:00:00+00:00 https://guardian.security/blog/evm-explained/2026-11-04 https://i.ytimg.com/vi/Ru3inmu1FuQ/hqdefault.jpg Complete Guide To The EVM | Everything You Need To Know How the EVM works: the stack, memory, calldata and storage, the opcodes that tie them together, and a function call traced opcode by opcode. https://www.youtube.com/embed/Ru3inmu1FuQ 2116 2023-06-15T00:00:00+00:00 https://guardian.security/blog/ethereum-calldata-explained/2026-11-04 https://i.ytimg.com/vi/WkyyT0pmJSw/hqdefault.jpg Guide To Advanced Calldata | Everything You Need To Know Ethereum calldata explained by decoding a real GMX V2 multicall byte by byte: function selectors, dynamic data, heads, tails, offsets and how memory differs. https://www.youtube.com/embed/WkyyT0pmJSw 2493 2023-07-06T00:00:00+00:00 https://guardian.security/blog/yul-memory-explained/2026-11-04 https://i.ytimg.com/vi/9qLUvtL5uKQ/hqdefault.jpg Yul & Memory Intro | Yul Exploit! A guide to Yul memory: how the EVM lays out memory, the free memory pointer, how strings are stored, and a low-level exploit built on a crafted string length. https://www.youtube.com/embed/9qLUvtL5uKQ 2413 2023-05-25T00:00:00+00:00 https://guardian.security/blog/what-is-secp256k1/2026-11-04 https://i.ytimg.com/vi/9ZKY8DoVCkI/hqdefault.jpg Ethereum Cryptography Basics What is secp256k1? A plain guide to the elliptic curve behind Ethereum keys: the equation, group theory, point addition and multiplication, and why keys are secure. https://www.youtube.com/embed/9ZKY8DoVCkI 846 2023-02-24T00:00:00+00:00 https://guardian.security/blog/constant-product-amm/2026-11-04 https://i.ytimg.com/vi/QvyMkRtjLv8/hqdefault.jpg The Ultimate Guide To AMMs How a constant product AMM works, with worked numbers: x * y = k, a swap's price, minting LP tokens, why deeper pools trade better, and impermanent loss. https://www.youtube.com/embed/QvyMkRtjLv8 1505 2023-04-06T00:00:00+00:00 https://guardian.security/blog/uniswap-v3-concentrated-liquidity/2026-11-04 https://i.ytimg.com/vi/Ltph_X60kbo/hqdefault.jpg Uniswap V3 Made Easy Uniswap V3 concentrated liquidity explained: why range-bound liquidity exists, how ticks and sqrtPriceX96 work, real reserves, and how swaps cross ticks. https://www.youtube.com/embed/Ltph_X60kbo 1218 2023-04-14T00:00:00+00:00 https://guardian.security/blog/how-makerdao-and-dai-work/2026-11-04 https://i.ytimg.com/vi/0a7W7s0K7SI/hqdefault.jpg How Does DAI & Maker DAO Work? | DeFi 101 How does DAI work? MakerDAO explained: collateral ratios, vaults, looping, the levers that hold the peg, liquidations by Dutch auction and how bad debt is covered. https://www.youtube.com/embed/0a7W7s0K7SI 2297 2023-11-09T00:00:00+00:00 https://guardian.security/blog/cdp-lending-protocol-explained/2026-11-04 https://i.ytimg.com/vi/zKAgEp9vHms/hqdefault.jpg Abracadabra Money Guide | DeFi 101 What is a CDP in crypto? Learn collateralized debt positions through Abracadabra Money: LTV ratios, cauldrons, DegenBox shares, interest, and liquidations. https://www.youtube.com/embed/zKAgEp9vHms 2233 2023-11-23T00:00:00+00:00 https://guardian.security/blog/gmx-v2-explained/2026-11-04 https://i.ytimg.com/vi/58om-oA1vpI/hqdefault.jpg DeFi Protocol Deep Dives | GMX V2 GMX V2 explained from the code, as of early 2023: markets and backing tokens, two-step keeper execution, deposits, orders, and an auditor's first pass on withdrawals. https://www.youtube.com/embed/58om-oA1vpI 2979 2023-04-30T00:00:00+00:00 https://guardian.security/blog/advanced-web3-security-course/2026-11-04 https://i.ytimg.com/vi/DRZogmD647U/hqdefault.jpg Advanced Web3 Security Course | Part 1 A free web3 security course in two parts and about 23 hours: every chapter with its start time, from smart contract design to fuzzing and formal verification. https://www.youtube.com/embed/DRZogmD647U 40815 2023-10-22T00:00:00+00:00 https://guardian.security/blog/kelpdao-rseth-exploit/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/kelpdao-rseth-exploit/v1/poster.jpg Kelp DAO Hack: How the rsETH Exploit Reached Aave How a forged LayerZero message on Kelp DAO's 1-of-1 DVN route released 116,500 rsETH, why Aave faced bad debt, and what LRT teams and lenders should check. https://d1ryz0te1mu7pf.cloudfront.net/blog/kelpdao-rseth-exploit/v1/video.mp4 104 2026-11-05T05:53:29+00:00 https://guardian.security/blog/drift-exploit-durable-nonce/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/drift-exploit-durable-nonce/v1/poster.jpg The Drift Exploit Explained: Durable Nonces and a 2-of-5 Council How the Drift exploit worked: attackers got two of five Solana council signers to pre-sign durable nonce transactions, then, with no timelock, drained about $285 million. Plus the controls that fix it. https://d1ryz0te1mu7pf.cloudfront.net/blog/drift-exploit-durable-nonce/v1/video.mp4 96 2026-11-05T05:27:33+00:00 https://guardian.security/blog/daml-smart-contract-audit/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/daml-smart-contract-audit/v2/poster.jpg Daml Smart Contract Audit: What Reviewers Check on Canton What a Daml audit checks on Canton: authority tied to caller-supplied parties and contract IDs, privacy leaks in both directions, and risks in package upgrades. https://d1ryz0te1mu7pf.cloudfront.net/blog/daml-smart-contract-audit/v2/video.mp4 106 2026-11-05T16:28:47+00:00 https://guardian.security/blog/vara-reserve-assets-audit-circular/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/vara-reserve-assets-audit-circular/v1/poster.jpg VARA Reserve Assets Audit Circular: The Minimum Scope VARA's October 6, 2026 circular sets the minimum scope for Dubai reserve assets audits: full backing in the same asset, every wallet, control, daily reconciliation and rehypothecation. https://d1ryz0te1mu7pf.cloudfront.net/blog/vara-reserve-assets-audit-circular/v1/video.mp4 104 2026-11-05T04:56:27+00:00 https://guardian.security/blog/nydfs-risk-assessment-guidance-crypto-template/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/nydfs-risk-assessment-guidance-crypto-template/v1/poster.jpg NYDFS Risk Assessment Guidance: A 500.9 Template for Crypto A short explainer on the NYDFS September 10, 2026 risk assessment guidance under Part 500.9, and how crypto firms can bring wallets, keys, contracts and signer devices into the inventory and risk register. https://d1ryz0te1mu7pf.cloudfront.net/blog/nydfs-risk-assessment-guidance-crypto-template/v1/video.mp4 101 2026-11-05T05:05:49+00:00 https://guardian.security/blog/cyber-resilience-act-reporting-obligations-crypto/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/cyber-resilience-act-reporting-obligations-crypto/v1/poster.jpg Cyber Resilience Act Reporting Obligations for Crypto Teams How the EU Cyber Resilience Act's reporting duty applies to wallet, node and SDK makers since September 11, 2026: the triggers, the 24-hour, 72-hour and final reports, scope, and a runbook. https://d1ryz0te1mu7pf.cloudfront.net/blog/cyber-resilience-act-reporting-obligations-crypto/v1/video.mp4 103 2026-11-05T05:26:38+00:00 https://guardian.security/blog/sfc-ai-enabled-cyberattacks-circular/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-ai-enabled-cyberattacks-circular/v1/poster.jpg SFC June 2026 Cybersecurity Circular on AI-Enabled Attacks, Explained Hong Kong's SFC circular 26EC32 says AI shortens the time from disclosure to exploit. Here is what licensed crypto platforms should change in patching, access, suppliers and incident response. https://d1ryz0te1mu7pf.cloudfront.net/blog/sfc-ai-enabled-cyberattacks-circular/v1/video.mp4 114 2026-11-05T04:48:02+00:00 https://guardian.security/blog/california-dfal-token-listing-certification-1250/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/california-dfal-token-listing-certification-1250/v1/poster.jpg California DFAL Token Listing Certification: 10 CCR 1250 Explained California's DFAL rules require a covered exchange to file a signed certification with the DFPI before listing a token. Here is what it certifies and what the risk assessment should check. https://d1ryz0te1mu7pf.cloudfront.net/blog/california-dfal-token-listing-certification-1250/v1/video.mp4 103 2026-11-05T05:32:43+00:00 https://guardian.security/blog/fca-fg26-6-cryptoasset-operational-resilience-guidance/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-fg26-6-cryptoasset-operational-resilience-guidance/v1/poster.jpg FCA FG26/6 Crypto Operational Resilience Checklist A short guide to the FCA's FG26/6 guidance: the four crypto-specific risks, key controls, impact tolerances, scenario tests and the evidence crypto firms should prepare for SYSC 15A from October 25, 2027. https://d1ryz0te1mu7pf.cloudfront.net/blog/fca-fg26-6-cryptoasset-operational-resilience-guidance/v1/video.mp4 106 2026-11-05T05:03:56+00:00 https://guardian.security/blog/cass-17-4-means-of-access-key-management-checklist/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/cass-17-4-means-of-access-key-management-checklist/v1/poster.jpg FCA Crypto Safeguarding: CASS 17.4 Key Management Checklist How CASS 17.4 in the FCA's PS26/11 applies to crypto keys and shards: what is in scope, key ceremony evidence, the means of access record, recovery testing, dependency risk and key incidents. https://d1ryz0te1mu7pf.cloudfront.net/blog/cass-17-4-means-of-access-key-management-checklist/v1/video.mp4 105 2026-11-05T05:04:52+00:00 https://guardian.security/blog/x402-facilitator-security-checklist/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/x402-facilitator-security-checklist/v1/poster.jpg x402 Facilitator Security Checklist: Stopping Double Settlement and Replay A checklist for x402 facilitator operators: close the gap between verify and settle, dedupe on payer and nonce, report success only on confirmed transfers, and cap gas. https://d1ryz0te1mu7pf.cloudfront.net/blog/x402-facilitator-security-checklist/v1/video.mp4 104 2026-11-05T05:33:42+00:00 https://guardian.security/blog/agentic-payments-security/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/agentic-payments-security/v1/poster.jpg Agentic Payments Security for Banks and Fintechs How banks and fintechs can secure AI agent payments: the main threats, six controls to require before agents pay, stablecoin rail risks, and evidence for DORA and NYDFS. https://d1ryz0te1mu7pf.cloudfront.net/blog/agentic-payments-security/v1/video.mp4 106 2026-11-05T05:34:39+00:00 https://guardian.security/blog/certik-alternatives/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/certik-alternatives/v1/poster.jpg CertiK Alternatives: 10 Smart Contract Audit Firms Compared Guardian ranks ten CertiK alternatives for a smart contract audit and matches each to the need it fits. It also covers how to switch auditors mid-roadmap. https://d1ryz0te1mu7pf.cloudfront.net/blog/certik-alternatives/v1/video.mp4 108 2026-11-05T05:17:25+00:00 https://guardian.security/blog/certik-audit-cost/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/certik-audit-cost/v1/poster.jpg CertiK Audit Cost: What CertiK Charges and What You Get CertiK publishes no prices, but Venus governance records show a $350-an-hour retainer. This video covers what the audit includes, how public rates compare and what to ask before signing. https://d1ryz0te1mu7pf.cloudfront.net/blog/certik-audit-cost/v1/video.mp4 100 2026-11-05T06:03:36+00:00 https://guardian.security/blog/hypernative-vs-hexagate-vs-blockaid/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/hypernative-vs-hexagate-vs-blockaid/v1/poster.jpg Hypernative vs Hexagate vs Blockaid Compared A neutral comparison of Hypernative, Hexagate and Blockaid on detection, automated response, pre-signing checks, pricing signals and who responds when an alert fires. https://d1ryz0te1mu7pf.cloudfront.net/blog/hypernative-vs-hexagate-vs-blockaid/v1/video.mp4 101 2026-11-05T05:06:44+00:00 https://guardian.security/blog/smart-contract-audit-cost-estimator/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/smart-contract-audit-cost-estimator/v2/poster.jpg Smart Contract Audit Cost Estimator: From nSLOC to a Price Range How to estimate a smart contract audit cost from nSLOC, using Guardian's published review lengths, Arbitrum's weekly auditor rates, Sherlock's premiums and real public price points. https://d1ryz0te1mu7pf.cloudfront.net/blog/smart-contract-audit-cost-estimator/v2/video.mp4 92 2026-11-05T16:23:27+00:00 https://guardian.security/blog/best-arbitrum-auditors/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-arbitrum-auditors/v2/poster.jpg Best Arbitrum Auditors in 2026 Guardian ranks the Arbitrum auditors with the most public Arbitrum work, explains where Arbitrum differs from Ethereum, and shows how the Arbitrum Security Program subsidizes audits. Guardian ranks itself first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-arbitrum-auditors/v2/video.mp4 111 2026-11-05T16:25:30+00:00 https://guardian.security/blog/best-perp-dex-auditors/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-perp-dex-auditors/v2/poster.jpg Best Perp DEX Auditors in 2026 Guardian ranks the best perp DEX auditors of 2026 on public perpetuals reports and explains what a perps audit must cover, from oracles to keepers. Guardian publishes this ranking and placed itself first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-perp-dex-auditors/v2/video.mp4 109 2026-11-05T16:26:32+00:00 https://guardian.security/blog/solana-smart-contract-audit/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/solana-smart-contract-audit/v1/poster.jpg Solana Smart Contract Audit: Cost, Timeline and Checks A short guide to Solana smart contract audits: what public records say about cost, how long Guardian's Solana reviews take, and what reviewers check, from account validation to CPIs. https://d1ryz0te1mu7pf.cloudfront.net/blog/solana-smart-contract-audit/v1/video.mp4 105 2026-11-05T04:57:24+00:00 https://guardian.security/blog/audit-contest-vs-private-audit/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-contest-vs-private-audit/v1/poster.jpg Audit Contest vs Private Audit: Cost, Coverage and Timing How private smart contract audits and audit contests differ in coverage, cost and timing, and why high-value code should run both, in order. https://d1ryz0te1mu7pf.cloudfront.net/blog/audit-contest-vs-private-audit/v1/video.mp4 97 2026-11-05T05:52:33+00:00 https://guardian.security/blog/when-do-you-need-a-re-audit/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/when-do-you-need-a-re-audit/v1/poster.jpg When Do You Need a Smart Contract Re-Audit? When does a smart contract need to be audited again? This video covers re-audit triggers, diff audits versus full re-audits, and how to size a review by the value a change can reach. https://d1ryz0te1mu7pf.cloudfront.net/blog/when-do-you-need-a-re-audit/v1/video.mp4 101 2026-11-05T05:07:43+00:00 https://guardian.security/blog/pre-mainnet-security-checklist/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/pre-mainnet-security-checklist/v1/poster.jpg Pre-Mainnet Security Checklist for Smart Contract Teams A pre-mainnet checklist for smart contract teams: audit closure, configuration, roles and keys, monitoring, pause readiness and deployment day steps. https://d1ryz0te1mu7pf.cloudfront.net/blog/pre-mainnet-security-checklist/v1/video.mp4 106 2026-11-05T05:13:35+00:00 https://guardian.security/blog/vciso-for-crypto-companies/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/vciso-for-crypto-companies/v1/poster.jpg vCISO for Crypto Companies: Scope, Deliverables and Cost What a virtual CISO should own at a crypto company, what to expect in the first 90 days, published vendor pricing, and how Guardian Managed Security works alongside one. https://d1ryz0te1mu7pf.cloudfront.net/blog/vciso-for-crypto-companies/v1/video.mp4 103 2026-11-05T05:16:27+00:00 https://guardian.security/blog/crypto-exchange-pentesting/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-exchange-pentesting/v1/poster.jpg Crypto Exchange Pentesting: What a Real Assessment Covers What a crypto exchange pentest covers: apps, APIs, cloud and the wallet signing systems behind withdrawals, business logic tests like balance races, and a report that ends with a retest. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-exchange-pentesting/v1/video.mp4 100 2026-11-05T05:01:56+00:00 https://guardian.security/blog/privy-vs-turnkey-vs-dynamic/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/privy-vs-turnkey-vs-dynamic/v1/poster.jpg Privy vs Turnkey vs Dynamic: Embedded Wallet Security Compared Privy, Turnkey and Dynamic compared on key isolation, ownership after the Stripe and Fireblocks deals, policy controls and audit transparency, plus how to pick between them. https://d1ryz0te1mu7pf.cloudfront.net/blog/privy-vs-turnkey-vs-dynamic/v1/video.mp4 106 2026-11-05T05:36:22+00:00 https://guardian.security/blog/best-web3-bug-bounty-platforms/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-bug-bounty-platforms/v1/poster.jpg Best Web3 Bug Bounty Platforms in 2026, Compared Guardian compares the best web3 bug bounty platforms of 2026 on fees, triage, KYC and payout records, and discloses that it publishes the guide and ranks itself first. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-web3-bug-bounty-platforms/v1/video.mp4 100 2026-11-05T05:25:42+00:00 https://guardian.security/blog/digital-asset-vendor-due-diligence-questionnaire/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/digital-asset-vendor-due-diligence-questionnaire/v1/poster.jpg Crypto Vendor Due Diligence Questionnaire: What to Ask What banks and funds should put in a crypto vendor due diligence questionnaire: governance, key management, smart contracts, offchain security, incidents and exit, plus the evidence to ask for. https://d1ryz0te1mu7pf.cloudfront.net/blog/digital-asset-vendor-due-diligence-questionnaire/v1/video.mp4 100 2026-11-05T05:37:17+00:00 https://guardian.security/blog/mica-compliance-checklist-security/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/mica-compliance-checklist-security/v1/poster.jpg MiCA Compliance Checklist: Security Controls for CASPs A security-only MiCA compliance checklist for CASPs: the ICT, custody, testing, incident and continuity controls required under MiCA and DORA, and the evidence to keep for each. https://d1ryz0te1mu7pf.cloudfront.net/blog/mica-compliance-checklist-security/v1/video.mp4 107 2026-11-05T05:24:48+00:00 https://guardian.security/blog/cost-to-tokenize-an-asset/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/cost-to-tokenize-an-asset/v1/poster.jpg How Much Does It Cost to Tokenize an Asset? What it costs to tokenize an asset, from legal and platform fees to audits and monitoring. The figures come from published prices, SEC filings and public audit records. https://d1ryz0te1mu7pf.cloudfront.net/blog/cost-to-tokenize-an-asset/v1/video.mp4 102 2026-11-05T05:47:54+00:00 https://guardian.security/blog/crypto-exchange-insider-threat-program/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-exchange-insider-threat-program/v1/poster.jpg Insider Threat Programs for Crypto Exchanges: A Template How a crypto exchange should build an insider threat program, drawn from the Coinbase and Kraken support-staff cases: access tiers, dual control, monitoring, offboarding and a written template. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-exchange-insider-threat-program/v1/video.mp4 99 2026-11-05T05:14:34+00:00 https://guardian.security/blog/best-ai-tools-smart-contract-auditing/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/best-ai-tools-smart-contract-auditing/v1/poster.jpg Best AI Tools for Smart Contract Auditing in 2026 A short guide to AI smart contract auditing tools: autonomous auditors, coding-agent skills and static analysis. It covers what EVMbench shows, how to combine the tools, and how Guardian, which builds Helix, uses AI. https://d1ryz0te1mu7pf.cloudfront.net/blog/best-ai-tools-smart-contract-auditing/v1/video.mp4 109 2026-11-05T05:41:19+00:00 https://guardian.security/blog/audited-vs-unaudited-exploits/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/audited-vs-unaudited-exploits/v1/poster.jpg Were Hacked Protocols Audited? Audited vs Unaudited Exploits Guardian counted 512 DeFi protocol hacks from 2024 to 2026 and checked the 20 largest by hand to see which were audited, and whether the exploited path was inside the audit scope. https://d1ryz0te1mu7pf.cloudfront.net/blog/audited-vs-unaudited-exploits/v1/video.mp4 99 2026-11-05T05:58:10+00:00 https://guardian.security/blog/cost-of-a-crypto-hack/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/cost-of-a-crypto-hack/v1/poster.jpg Cost of a Crypto Hack: The Bill Beyond the Stolen Funds Guardian measures what a crypto hack costs beyond the stolen funds: token falls, deposit outflows, lenders' bad debt, bounties and remediation, based on 2024 to 2026 hacks. https://d1ryz0te1mu7pf.cloudfront.net/blog/cost-of-a-crypto-hack/v1/video.mp4 107 2026-11-05T05:59:14+00:00 https://guardian.security/blog/deployed-vs-audited-code-match-rate/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/deployed-vs-audited-code-match-rate/v1/poster.jpg Deployed vs Audited Code: What Bytecode Verification Found Guardian compared 25 deployed contracts from five public reports with their final reviewed commits. 15 matched, and nine of the 10 differences trace to a single report. https://d1ryz0te1mu7pf.cloudfront.net/blog/deployed-vs-audited-code-match-rate/v1/video.mp4 92 2026-11-05T06:01:28+00:00 https://guardian.security/blog/safe-multisig-statistics/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/safe-multisig-statistics/v1/poster.jpg Safe Multisig Statistics: Thresholds and Signers of 39 DeFi Admin Safes Guardian read the 39 Safes that hold admin powers at 22 large Ethereum DeFi protocols. The video covers their thresholds, signer counts, shared and nested signers, modules and guards. https://d1ryz0te1mu7pf.cloudfront.net/blog/safe-multisig-statistics/v1/video.mp4 102 2026-11-05T05:48:50+00:00 https://guardian.security/blog/mean-time-to-remediate-smart-contract-vulnerabilities/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/mean-time-to-remediate-smart-contract-vulnerabilities/v2/poster.jpg Audit Remediation Timelines: Data From 93 Guardian Reports Guardian measured smart contract audit remediation timelines across 93 of its public reports. Fix reviews began a median 11 days after the main review ended, and fixes were verified a median 14 days after it. https://d1ryz0te1mu7pf.cloudfront.net/blog/mean-time-to-remediate-smart-contract-vulnerabilities/v2/video.mp4 91 2026-11-05T16:20:24+00:00 https://guardian.security/blog/access-control-vulnerabilities-smart-contracts/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/access-control-vulnerabilities-smart-contracts/v2/poster.jpg Access Control Vulnerabilities in Smart Contracts: The Data Why access control leads smart contract hack counts but not dollar losses, five bug patterns from 53 Guardian audit findings, and how to test permissions. https://d1ryz0te1mu7pf.cloudfront.net/blog/access-control-vulnerabilities-smart-contracts/v2/video.mp4 100 2026-11-05T16:21:25+00:00 https://guardian.security/blog/crypto-hack-statistics/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-statistics/v1/poster.jpg Crypto Hack Statistics 2026: Losses, Vectors and Trends Crypto hack statistics for 2026: $8.78B stolen in 328 incidents to November 2, why Binance dominates the total, where losses come from, and how the major reports compare. https://d1ryz0te1mu7pf.cloudfront.net/blog/crypto-hack-statistics/v1/video.mp4 110 2026-11-05T05:57:12+00:00 https://guardian.security/blog/what-is-onchain-monitoring/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-onchain-monitoring/v1/poster.jpg What Is Onchain Monitoring? A Guide for Security Teams What onchain monitoring is, the signals it watches, why audited protocols still need it, how to build or buy it, and how Guardian's Managed Security watches every block. https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-onchain-monitoring/v1/video.mp4 106 2026-11-05T05:08:43+00:00 https://guardian.security/blog/web3-penetration-testing-explained/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-penetration-testing-explained/v1/poster.jpg Web3 Penetration Testing Explained: Scope and Methodology What a web3 pentest covers beyond smart contracts, how the PTES phases shape the method, how it differs from a contract audit, and how Guardian runs offchain pentests. https://d1ryz0te1mu7pf.cloudfront.net/blog/web3-penetration-testing-explained/v1/video.mp4 102 2026-11-05T05:02:57+00:00 https://guardian.security/blog/what-is-a-smart-contract-audit/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-a-smart-contract-audit/v2/poster.jpg What Is a Smart Contract Audit? Process and Deliverables A short explainer on what a smart contract audit is, what auditors check, the six deliverables to expect, what an audit leaves out, and how Guardian runs its audits. https://d1ryz0te1mu7pf.cloudfront.net/blog/what-is-a-smart-contract-audit/v2/video.mp4 103 2026-11-05T16:24:26+00:00 https://guardian.security/blog/stablecoin-security/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-security/v1/poster.jpg Stablecoin Security: The Complete Risk Guide for Issuers A short guide to stablecoin security for issuers. It covers the five risk layers, onchain mint caps, separating roles, freeze testing and monitoring, plus what Guardian found across more than 50 USDT0 engagements. https://d1ryz0te1mu7pf.cloudfront.net/blog/stablecoin-security/v1/video.mp4 112 2026-11-05T05:46:04+00:00 https://guardian.security/blog/defi-incident-response-plan/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-incident-response-plan/v1/poster.jpg How to Write a Web3 Incident Response Plan for DeFi A short guide to a web3 incident response plan for DeFi protocols. It covers roles, pause authority, signer availability, SEAL 911, severity levels, onchain containment and drills. https://d1ryz0te1mu7pf.cloudfront.net/blog/defi-incident-response-plan/v1/video.mp4 104 2026-11-05T05:30:48+00:00 https://guardian.security/blog/smart-contract-upgrade-change-management/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/smart-contract-upgrade-change-management/v1/poster.jpg Smart Contract Change Management for Live Protocols How live protocols can ship smart contract upgrades safely: a six-step pipeline from change record to monitoring, SEAL timelock guidance, sign-off roles, and how Guardian's Vanguard reviews updates. https://d1ryz0te1mu7pf.cloudfront.net/blog/smart-contract-upgrade-change-management/v1/video.mp4 99 2026-11-05T05:15:29+00:00 https://guardian.security/blog/perp-dex-security/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/perp-dex-security/v1/poster.jpg Perp DEX Security: The Attack Surface of Perpetual Exchanges How perp DEXs get attacked through oracles, margin and funding math, liquidations, keepers and admin keys, with public incidents and findings from Guardian's perps audits. https://d1ryz0te1mu7pf.cloudfront.net/blog/perp-dex-security/v1/video.mp4 108 2026-11-05T05:40:22+00:00 https://guardian.security/blog/lending-protocol-audit-checklist/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/lending-protocol-audit-checklist/v1/poster.jpg Lending Protocol Audit Checklist: 40 Money Market Checks A lending protocol audit checklist covering collateral, oracles, debt accounting, liquidations, access control and integrations, mapped to real exploits and Guardian findings. https://d1ryz0te1mu7pf.cloudfront.net/blog/lending-protocol-audit-checklist/v1/video.mp4 103 2026-11-05T05:47:01+00:00 https://guardian.security/blog/layerzero-oft-security-checklist/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/layerzero-oft-security-checklist/v1/poster.jpg LayerZero OFT Security Checklist: OFTs and OFT Adapters A code-level checklist for LayerZero OFTs and OFT adapters: contract type, shared decimals, peers and DVNs, enforced gas, rate limits, supply backing and upgrades. https://d1ryz0te1mu7pf.cloudfront.net/blog/layerzero-oft-security-checklist/v1/video.mp4 108 2026-11-05T05:31:45+00:00 https://guardian.security/blog/business-logic-vulnerabilities/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/business-logic-vulnerabilities/v2/poster.jpg Business Logic Vulnerabilities in Smart Contracts Business logic bugs let smart contract code run as written while breaking the protocol's own rules. This video covers real Guardian Criticals, why scanners and AI tools miss these bugs, and how Vanguard finds them. https://d1ryz0te1mu7pf.cloudfront.net/blog/business-logic-vulnerabilities/v2/video.mp4 101 2026-11-05T16:22:24+00:00 https://guardian.security/blog/institutional-security-requirements-onchain-teams/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/institutional-security-requirements-onchain-teams/v1/poster.jpg Institutional Security Requirements for Onchain Teams What banks and funds ask onchain partners for before they integrate, custody or allocate: SOC 2 and CCSS, audits tied to deployed code, key controls, pentests, and the rules such as DORA that drive these requests. https://d1ryz0te1mu7pf.cloudfront.net/blog/institutional-security-requirements-onchain-teams/v1/video.mp4 101 2026-11-05T05:55:20+00:00 https://guardian.security/blog/layerzero-vs-chainlink-ccip/2026-11-05 https://d1ryz0te1mu7pf.cloudfront.net/blog/layerzero-vs-chainlink-ccip/v2/poster.jpg LayerZero vs Chainlink CCIP: Security for Token Issuers Guardian compares LayerZero and Chainlink CCIP for token issuers: who verifies messages, what the issuer controls, rate limits, and which model fits. LayerZero is a Guardian client. https://d1ryz0te1mu7pf.cloudfront.net/blog/layerzero-vs-chainlink-ccip/v2/video.mp4 111 2026-11-05T16:07:12+00:00 https://guardian.security/testimonials/ https://guardian.security/careers/ https://guardian.security/roles/role-gsr-1/ https://guardian.security/roles/role-gsr-2/ https://guardian.security/roles/role-gsr-3/ https://guardian.security/roles/role-gsr-4/ https://guardian.security/roles/role-gfe-1/ https://guardian.security/roles/web2-security-engineer/ https://guardian.security/roles/account-executive/ https://guardian.security/roles/vp-of-operations/ https://guardian.security/team/ https://guardian.security/team/owen-thurm/ https://guardian.security/grants/ https://guardian.security/ecosystem-partners/ https://guardian.security/referral-champions/ https://guardian.security/brand-kit/ https://guardian.security/work-with-us/ https://guardian.security/bounty-contest/ https://guardian.security/privacy/ https://guardian.security/terms/