$1,000,000 in security audit grants are live now, Apply here →

Guardian · Chief Executive Officer

Owen Thurm

Owen leads Guardian. He has spent five years and hundreds of security reviews in complex DeFi: bespoke AMMs, novel lending, and the most advanced perpetuals exchanges in the world.

  • 400+ Critical and High issues reported and resolved
  • Reviews for GMX, Synthetix, Yuga Labs, USDT0, Ethena, M0, Dolomite, Azuki and Solady
  • Writes the Resource Hub’s technical guides, most first published on his YouTube channel
  • Hosts Guardian’s podcast, Finality, and before it Permissionless
Owen Thurm

Resource Hub

Articles by Owen Thurm

41 guides and explainers, newest first.

8 min readVideo

Mutation Testing in Solidity With Gambit and Vertigo

10 min readVideo

Solidity Security Best Practices: 9 Keys

8 min readVideo

3 Critical Smart Contract Vulnerabilities Explained

10 min readVideo

How to Find Critical Vulnerabilities in Smart Contracts

Pillar guide10 min readVideo

Smart Contract Vulnerabilities List: 22 to Check First

11 min readVideo

13 Liquidation Vulnerabilities Every DeFi Auditor Must Know

9 min readVideo

5 Upgradeable Contract Vulnerabilities to Check

7 min readVideo

DeFi Reward Accounting Vulnerabilities: Stepwise Jumps

11 min readVideo

ERC-4626 Inflation Attack: 3 Red Flags and 2 Fixes

12 min readVideo

Smart Contract Audit Severity Levels Explained

13 min readVideo

6 Critical DeFi Vulnerabilities From Real Audits

8 min readVideo

What Is a CDP in Crypto? Abracadabra Money Explained

9 min readVideo

External Call Vulnerabilities in Solidity: 4 Attacks

7 min readVideo

Weird ERC-20 Tokens: 12 Edge Cases and a Checklist

8 min readVideo

DAO Governance Attacks: How Proposals Get Hijacked

9 min readVideo

How Does DAI Work? MakerDAO Explained

9 min readVideo

Oracle Manipulation Attacks: From Spot Price to TWAP

4 min readVideo

Advanced Web3 Security Course: Every Chapter

9 min readVideo

Rounding Errors in Solidity: Causes and Real Bugs

8 min readVideo

How to Become a Smart Contract Auditor

6 min readVideo

Sandwich Attacks in Crypto and Slippage Protection

7 min readVideo

Front Running Smart Contracts: How the Attacks Work

11 min readVideo

Upgradeable Smart Contracts Explained: 5 Patterns

5 min readVideo

Solidity Compiler Bugs: Dirty Bytes Arrays in Storage

11 min readVideo

Ethereum Calldata Explained: Decoding a Real Multicall

12 min readVideo

6 Smart Contract Audit Findings Explained

7 min readVideo

Formal Verification of Smart Contracts: A Guide

9 min readVideo

How to Prepare for a Smart Contract Audit

Pillar guide8 min readVideo

How the EVM Works: Stack, Memory, Calldata and Storage

9 min readVideo

21 Sneaky Solidity Bugs to Catch Before You Deploy

7 min readVideo

How to Write a Smart Contract Proof of Concept

7 min readVideo

Metamorphic Contracts and the Tornado Cash Exploit

7 min readVideo

Yul and Memory: A Low-Level Exploit

7 min readVideo

Reentrancy Attacks Explained: Every Type and How to Find It

13 min readVideo

GMX V2 Explained: Inside the Synthetics Exchange

7 min readVideo

Uniswap V3 Concentrated Liquidity Explained

7 min readVideo

The Constant Product AMM: Swaps, LPs and Impermanent Loss

10 min readVideo

Smart Contract Audit Mistakes: 27 Ways to Miss Bugs

6 min readVideo

Signature Malleability in Solidity, Explained

5 min readVideo

What Is secp256k1? Ethereum's Elliptic Curve Explained

Pillar guide12 min readVideo

How to Audit a Smart Contract: A Complete System

Podcast

Episodes hosted by Owen

29 conversations with the builders behind onchain protocols, on Finality and Permissionless.

Finality · EP 0255 min

Propr: Building a Crypto Prop Trading Firm

Finality · EP 0165 min

Meta Pool: Lessons From Five Years of Liquid Staking

Permissionless66 min

Maia DAO: Liquidity Rental and Omnichain Bridging

Permissionless47 min

AUTOfinance: Automating DeFi Liquidity with Autopools

Permissionless70 min

Zivoe: Bringing Consumer Credit Onchain

Permissionless66 min

Solayer: Scaling Solana with a Hardware-Accelerated Chain

Permissionless57 min

Altitude: Self-Repaying Loans and Hands-Free Borrowing

Permissionless67 min

TopCut Finance: Trading as a Simple Price Prediction

Permissionless55 min

Tuyo: Building an Internet Native Bank

Permissionless58 min

Mace: Building a DEX Aggregator for Monad

Permissionless58 min

Ebisu: A CDP Stablecoin With User-Set Interest Rates

Permissionless49 min

Nekodex: Perp Protocol's Mobile-First Path to Retail

Permissionless56 min

SEDA: Permissionless Oracles for Any Chain

Permissionless56 min

Caldera: Rollups as a Service and the Metalayer

Permissionless61 min

DeFiTuna: Leveraged Concentrated Liquidity on Solana

Permissionless70 min

Tokenise: Engineering Tokenomics Before and After Launch

Permissionless52 min

Predicate: Bringing Policy Onchain for Institutions

Permissionless60 min

Gelato: Rollups as a Service for Apps and Institutions

Permissionless74 min

Glider: Automating Onchain Portfolios for Everyone

Permissionless67 min

Cork: Pricing and Hedging Depeg Risk in DeFi

Permissionless81 min

Superfluid: Streaming Money Every Second

Permissionless58 min

IPOR: Interest Rate Swaps and Automated DeFi Vaults

Permissionless50 min

Avantis: Leverage Trading for Global Markets on Base

Permissionless47 min

Sovereign: Low-Latency Rollups and Better Onchain UX

Permissionless70 min

Nashpoint: Infrastructure for Onchain Asset Managers

Permissionless56 min

Overtime: The Sportsbook Where Anyone Can Be the House

Permissionless53 min

Ajna: Lending and Liquidations Without Oracles

Permissionless52 min

Polynomial: Building a Derivatives Superchain

Permissionless53 min

YieldNest: Restaking Vaults and AI Yield

The whole Guardian team