Guardian · Chief Executive Officer
Owen Thurm
Owen leads Guardian. He has spent five years and hundreds of security reviews in complex DeFi: bespoke AMMs, novel lending, and the most advanced perpetuals exchanges in the world.
- 400+ Critical and High issues reported and resolved
- Reviews for GMX, Synthetix, Yuga Labs, USDT0, Ethena, M0, Dolomite, Azuki and Solady
- Writes the Resource Hub’s technical guides, most first published on his YouTube channel
- Hosts Guardian’s podcast, Finality, and before it Permissionless
Resource Hub
Articles by Owen Thurm
41 guides and explainers, newest first.
8 min readVideo
Mutation Testing in Solidity With Gambit and Vertigo
10 min readVideo
Solidity Security Best Practices: 9 Keys
8 min readVideo
3 Critical Smart Contract Vulnerabilities Explained
10 min readVideo
How to Find Critical Vulnerabilities in Smart Contracts
Pillar guide10 min readVideo
Smart Contract Vulnerabilities List: 22 to Check First
11 min readVideo
13 Liquidation Vulnerabilities Every DeFi Auditor Must Know
9 min readVideo
5 Upgradeable Contract Vulnerabilities to Check
7 min readVideo
DeFi Reward Accounting Vulnerabilities: Stepwise Jumps
11 min readVideo
ERC-4626 Inflation Attack: 3 Red Flags and 2 Fixes
12 min readVideo
Smart Contract Audit Severity Levels Explained
13 min readVideo
6 Critical DeFi Vulnerabilities From Real Audits
8 min readVideo
What Is a CDP in Crypto? Abracadabra Money Explained
9 min readVideo
External Call Vulnerabilities in Solidity: 4 Attacks
7 min readVideo
Weird ERC-20 Tokens: 12 Edge Cases and a Checklist
8 min readVideo
DAO Governance Attacks: How Proposals Get Hijacked
9 min readVideo
How Does DAI Work? MakerDAO Explained
9 min readVideo
Oracle Manipulation Attacks: From Spot Price to TWAP
4 min readVideo
Advanced Web3 Security Course: Every Chapter
9 min readVideo
Rounding Errors in Solidity: Causes and Real Bugs
8 min readVideo
How to Become a Smart Contract Auditor
6 min readVideo
Sandwich Attacks in Crypto and Slippage Protection
7 min readVideo
Front Running Smart Contracts: How the Attacks Work
11 min readVideo
Upgradeable Smart Contracts Explained: 5 Patterns
5 min readVideo
Solidity Compiler Bugs: Dirty Bytes Arrays in Storage
11 min readVideo
Ethereum Calldata Explained: Decoding a Real Multicall
12 min readVideo
6 Smart Contract Audit Findings Explained
7 min readVideo
Formal Verification of Smart Contracts: A Guide
9 min readVideo
How to Prepare for a Smart Contract Audit
Pillar guide8 min readVideo
How the EVM Works: Stack, Memory, Calldata and Storage
9 min readVideo
21 Sneaky Solidity Bugs to Catch Before You Deploy
7 min readVideo
How to Write a Smart Contract Proof of Concept
7 min readVideo
Metamorphic Contracts and the Tornado Cash Exploit
7 min readVideo
Yul and Memory: A Low-Level Exploit
7 min readVideo
Reentrancy Attacks Explained: Every Type and How to Find It
13 min readVideo
GMX V2 Explained: Inside the Synthetics Exchange
7 min readVideo
Uniswap V3 Concentrated Liquidity Explained
7 min readVideo
The Constant Product AMM: Swaps, LPs and Impermanent Loss
10 min readVideo
Smart Contract Audit Mistakes: 27 Ways to Miss Bugs
6 min readVideo
Signature Malleability in Solidity, Explained
5 min readVideo
What Is secp256k1? Ethereum's Elliptic Curve Explained
Pillar guide12 min readVideo
How to Audit a Smart Contract: A Complete System
Podcast
Episodes hosted by Owen
29 conversations with the builders behind onchain protocols, on Finality and Permissionless.
Finality · EP 0255 min
Propr: Building a Crypto Prop Trading Firm
Finality · EP 0165 min
Meta Pool: Lessons From Five Years of Liquid Staking
Permissionless66 min
Maia DAO: Liquidity Rental and Omnichain Bridging
Permissionless47 min
AUTOfinance: Automating DeFi Liquidity with Autopools
Permissionless70 min
Zivoe: Bringing Consumer Credit Onchain
Permissionless66 min
Solayer: Scaling Solana with a Hardware-Accelerated Chain
Permissionless57 min
Altitude: Self-Repaying Loans and Hands-Free Borrowing
Permissionless67 min
TopCut Finance: Trading as a Simple Price Prediction
Permissionless55 min
Tuyo: Building an Internet Native Bank
Permissionless58 min
Mace: Building a DEX Aggregator for Monad
Permissionless58 min
Ebisu: A CDP Stablecoin With User-Set Interest Rates
Permissionless49 min
Nekodex: Perp Protocol's Mobile-First Path to Retail
Permissionless56 min
SEDA: Permissionless Oracles for Any Chain
Permissionless56 min
Caldera: Rollups as a Service and the Metalayer
Permissionless61 min
DeFiTuna: Leveraged Concentrated Liquidity on Solana
Permissionless70 min
Tokenise: Engineering Tokenomics Before and After Launch
Permissionless52 min
Predicate: Bringing Policy Onchain for Institutions
Permissionless60 min
Gelato: Rollups as a Service for Apps and Institutions
Permissionless74 min
Glider: Automating Onchain Portfolios for Everyone
Permissionless67 min
Cork: Pricing and Hedging Depeg Risk in DeFi
Permissionless81 min
Superfluid: Streaming Money Every Second
Permissionless58 min
IPOR: Interest Rate Swaps and Automated DeFi Vaults
Permissionless50 min
Avantis: Leverage Trading for Global Markets on Base
Permissionless47 min
Sovereign: Low-Latency Rollups and Better Onchain UX
Permissionless70 min
Nashpoint: Infrastructure for Onchain Asset Managers
Permissionless56 min
Overtime: The Sportsbook Where Anyone Can Be the House
Permissionless53 min
Ajna: Lending and Liquidations Without Oracles
Permissionless52 min
Polynomial: Building a Derivatives Superchain
Permissionless53 min