Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
Zealynx research

Security Research.

Public write-ups on the bugs, patterns, and protocols we audit. Engineer-to-engineer, no fluff.

48 results for "Ethereum"

Search.

Clear search
Quadratic Funding Explained: Ethereum Security QF Round and Zealynx Academy
NewsApr 23

Quadratic Funding Explained: Ethereum Security QF Round and Zealynx Academy

14 min read
Inside the ETHSecurity Badge: Recognition from TheDAO Fund and What It Means
NewsMay 14

Inside the ETHSecurity Badge: Recognition from TheDAO Fund and What It Means

10 min read
EIP-7702 Security: 5 Delegate Contract Bugs and the Fix for Each
Smart contractsOct 25

EIP-7702 Security: 5 Delegate Contract Bugs and the Fix for Each

18 min read
Zealynx Academy Is Public: Build, Audit, and Launch Web3 Protocols
NewsApr 23

Zealynx Academy Is Public: Build, Audit, and Launch Web3 Protocols

20 min read
Base OP Stack Security Audit: 29 Checks EVM Equivalence Hides
Smart contractsApr 13

Base OP Stack Security Audit: 29 Checks EVM Equivalence Hides

23 min read
Layer 2 security under the hood: proof systems, upgrade keys, and what actually protects your funds
Smart contractsApr 9

Layer 2 security under the hood: proof systems, upgrade keys, and what actually protects your funds

17 min read
Agent Payment Security: 20 Checks Before You Ship
AI securityOct 31

Agent Payment Security: 20 Checks Before You Ship

14 min read
Code4rena Is Winding Down. Your Audit Plan Is Out of Date
Audit opsNov 6

Code4rena Is Winding Down. Your Audit Plan Is Out of Date

19 min read
How to Prevent Front-Running in ERC20 Smart Contracts
Attack vectorsMay 21, 2024

How to Prevent Front-Running in ERC20 Smart Contracts

11 min read
Restaking risk: slashing, depegs, and exit queue attacks
AI securityJul 2

Restaking risk: slashing, depegs, and exit queue attacks

25 min read
EIP-7702 wallet security: what auditors check after Pectra
Smart contractsMay 18

EIP-7702 wallet security: what auditors check after Pectra

27 min read
Bug Bounty Win: How We Placed Top 5 in the Cyfrin CodeHawks Contest
NewsApr 30, 2024

Bug Bounty Win: How We Placed Top 5 in the Cyfrin CodeHawks Contest

13 min read
Smart Contract Upgradeability: UUPS vs Transparent vs Beacon
Smart contractsJan 29

Smart Contract Upgradeability: UUPS vs Transparent vs Beacon

19 min read
Solidity Gas Optimization: Understanding How EVM Works Can Save You Gas
Smart contractsMar 1, 2023

Solidity Gas Optimization: Understanding How EVM Works Can Save You Gas

5 min read
Agentic DeFi security: when AI agents control treasury, trading, and liquidations
AI securityJun 1

Agentic DeFi security: when AI agents control treasury, trading, and liquidations

21 min read
Are Crypto Payments with CrossFi's Visa Card Safe?
IndustryDec 19, 2025

Are Crypto Payments with CrossFi's Visa Card Safe?

9 min read
The Asset You Price Is Not Always the Asset You Release
Attack vectorsOct 12

The Asset You Price Is Not Always the Asset You Release

17 min read
When AI controls DeFi vaults, prompt injection becomes remote code execution
AI securityMar 25

When AI controls DeFi vaults, prompt injection becomes remote code execution

16 min read
EthCC[9] in Cannes: Which Security Tracks Actually Matter for Protocol Teams
IndustryMar 11

EthCC[9] in Cannes: Which Security Tracks Actually Matter for Protocol Teams

14 min read
Move vs. Rust vs. Solidity: The Ultimate L1 Blockchain Security Comparison (2026)
Smart contractsJan 23

Move vs. Rust vs. Solidity: The Ultimate L1 Blockchain Security Comparison (2026)

12 min read
Smart Contract Audit Cost in 2026, Exact Pricing for Tokens, DeFi, and Bridges
Audit opsJan 2026 · Updated May 2026

Smart Contract Audit Cost in 2026, Exact Pricing for Tokens, DeFi, and Bridges

11 min read
ERC-7540 vs ERC-4626: Async Settlement for RWA Vaults
DeFi analysisJan 2

ERC-7540 vs ERC-4626: Async Settlement for RWA Vaults

8 min read
The ERC‑20 Pitfall: Why It Doesn't Fit Tokenized Securities and RWA Compliance
DeFi analysisDec 18, 2025

The ERC‑20 Pitfall: Why It Doesn't Fit Tokenized Securities and RWA Compliance

8 min read
Building RWA Protocols on EVM: ERC-3643, ERC-7540 Vaults, and the SPV Synchronization Problem
DeFi analysisDec 12, 2025

Building RWA Protocols on EVM: ERC-3643, ERC-7540 Vaults, and the SPV Synchronization Problem

9 min read
Who is Zealynx? Why DeFi teams choose our top-tier smart contract audits
NewsSep 2025 · Updated Apr 2026

Who is Zealynx? Why DeFi teams choose our top-tier smart contract audits

7 min read
Blind Signing: The Bybit $1.5B Lesson in UI Insecurity
AI securityJul 7

Blind Signing: The Bybit $1.5B Lesson in UI Insecurity

9 min read
Gamified Learning in Web3: Why Ranks, Leaderboards, and Lynx Actually Work
Smart contractsMay 18

Gamified Learning in Web3: Why Ranks, Leaderboards, and Lynx Actually Work

11 min read
The Web3 Founder's Survival Guide: Everything No Engineering Curriculum Teaches
IndustryMay 11

The Web3 Founder's Survival Guide: Everything No Engineering Curriculum Teaches

16 min read
Flash loan attacks: anatomy of nine-figure DeFi exploits
Attack vectorsApr 29

Flash loan attacks: anatomy of nine-figure DeFi exploits

37 min read
Shadow Audits: How to Learn Web3 Security by Breaking Real Protocol Forks
NewsApr 29

Shadow Audits: How to Learn Web3 Security by Breaking Real Protocol Forks

15 min read
How to Build Uniswap V2 From Scratch (Line by Line, 207 Tests)
NewsApr 24 · Updated Apr 29

How to Build Uniswap V2 From Scratch (Line by Line, 207 Tests)

18 min read
Post-audit security: why the audit is a commit hash, not a security posture
Audit opsApr 22

Post-audit security: why the audit is a commit hash, not a security posture

21 min read
DAO governance attacks: how flash loans and vote manipulation drain treasuries
Attack vectorsMar 23

DAO governance attacks: how flash loans and vote manipulation drain treasuries

21 min read
Tokenizing Intellectual Property on EVM: Solidity Patterns for Programmable IP Rights
DeFi analysisFeb 13

Tokenizing Intellectual Property on EVM: Solidity Patterns for Programmable IP Rights

9 min read
Proxy Security Checklist: 33 Critical Upgradeability Checks
Smart contractsFeb 12

Proxy Security Checklist: 33 Critical Upgradeability Checks

22 min read
What Is Hyperliquid Exchange? Builder Guide to API, SDKs, HyperEVM & Launch Risk
IndustryNov 2025 · Updated Jun 2026

What Is Hyperliquid Exchange? Builder Guide to API, SDKs, HyperEVM & Launch Risk

11 min read
What Is Curve Finance? StableSwap, crvUSD, Risks, and Security
DeFi analysisOct 10, 2025

What Is Curve Finance? StableSwap, crvUSD, Risks, and Security

38 min read
When Operator Approval Stops Meaning Consent
ResearchOct 15

When Operator Approval Stops Meaning Consent

18 min read
Uniswap v4 hook attacks: 4 exploit patterns with PoCs
DeFi analysisMay 25

Uniswap v4 hook attacks: 4 exploit patterns with PoCs

25 min read
Hyperliquid Security Checklist for Builders: HyperBFT, HyperCore, HyperEVM
Smart contractsMay 20

Hyperliquid Security Checklist for Builders: HyperBFT, HyperCore, HyperEVM

13 min read
How to Build Your Own AI Auditor Agent (Interactive Guide, Multiple Paths)
AI securityMay 7

How to Build Your Own AI Auditor Agent (Interactive Guide, Multiple Paths)

15 min read
Supply Chain Attacks in Web3 — From NPM to Protocol Exploits
AI securityMay 6

Supply Chain Attacks in Web3 — From NPM to Protocol Exploits

12 min read
OWASP Smart Contract Top 10 2026: changes and audit guide
IndustryMay 4

OWASP Smart Contract Top 10 2026: changes and audit guide

29 min read
Oracle manipulation in DeFi: how price feeds become attack vectors
Attack vectorsMar 18

Oracle manipulation in DeFi: how price feeds become attack vectors

12 min read
How to protect your DeFi protocol from MEV: A full-stack defense guide
Attack vectorsMar 16

How to protect your DeFi protocol from MEV: A full-stack defense guide

12 min read
ERC-4337 Smart Accounts: Six Failure Modes We're Already Seeing in Audits
Smart contractsMar 12

ERC-4337 Smart Accounts: Six Failure Modes We're Already Seeing in Audits

14 min read
From EVM to SVM: A senior security researcher's guide to Solana in 2026
Smart contractsFeb 20

From EVM to SVM: A senior security researcher's guide to Solana in 2026

11 min read
Uniswap V2 Code Deep Dive: Router, Factory, Pair & Security Risks
DeFi analysisFeb 18

Uniswap V2 Code Deep Dive: Router, Factory, Pair & Security Risks

11 min read