Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
Zealynx research

Security Research.

Public write-ups on the bugs, patterns, and protocols we audit. Engineer-to-engineer, no fluff.

35 results for "Hacks"

Search.

Clear search
Signer compromise: why clean audits don't stop key hacks
Attack vectorsJun 22

Signer compromise: why clean audits don't stop key hacks

20 min read
2025 DeFi Hacks: $3.4B Exploit Lessons You Must Know
IndustryJan 10

2025 DeFi Hacks: $3.4B Exploit Lessons You Must Know

8 min read
The Web2 blind spot: Why audited smart contracts get hacked
AI securityMay 22

The Web2 blind spot: Why audited smart contracts get hacked

27 min read
When to audit a smart contract: The 2026 security timeline
Audit opsApr 27

When to audit a smart contract: The 2026 security timeline

26 min read
When AI controls DeFi vaults, prompt injection becomes remote code execution
AI securityMar 25

When AI controls DeFi vaults, prompt injection becomes remote code execution

16 min read
Blind Signing: The Bybit $1.5B Lesson in UI Insecurity
AI securityJul 7

Blind Signing: The Bybit $1.5B Lesson in UI Insecurity

9 min read
AI Agent Outbound Authority: Audit Checks
AI securityMay 20

AI Agent Outbound Authority: Audit Checks

13 min read
ERC-4626 inflation attack: how it works and how to stop it
Attack vectorsJul 2

ERC-4626 inflation attack: how it works and how to stop it

20 min read
Your Vault Prices Collateral at $1: 5 Ways to Bad Debt
Attack vectorsNov 6

Your Vault Prices Collateral at $1: 5 Ways to Bad Debt

17 min read
Postmark MCP Supply-Chain Attack: ASI04 in Production
AI securityJun 12

Postmark MCP Supply-Chain Attack: ASI04 in Production

12 min read
EscapeRoute Explained: Anthropic Filesystem MCP CVEs
AI securityJun 5

EscapeRoute Explained: Anthropic Filesystem MCP CVEs

13 min read
CVE-2025-49596: Anthropic MCP Inspector RCE Explained
AI securityMay 29

CVE-2025-49596: Anthropic MCP Inspector RCE Explained

12 min read
Uniswap v4 hook attacks: 4 exploit patterns with PoCs
DeFi analysisMay 25

Uniswap v4 hook attacks: 4 exploit patterns with PoCs

25 min read
Cursor IDE MCP CVEs: MCPoison & CurXecute Explained
AI securityMay 22

Cursor IDE MCP CVEs: MCPoison & CurXecute Explained

11 min read
EIP-7702 wallet security: what auditors check after Pectra
Smart contractsMay 18

EIP-7702 wallet security: what auditors check after Pectra

27 min read
Indirect prompt injection: the Web3 agent attack chain
AI securityMay 15

Indirect prompt injection: the Web3 agent attack chain

26 min read
Anthropic MCP SDK Vulnerability (April 2026): Full Analysis
AI securityMay 15

Anthropic MCP SDK Vulnerability (April 2026): Full Analysis

12 min read
MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index
AI securityMay 8

MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index

14 min read
OWASP Smart Contract Top 10 2026: changes and audit guide
IndustryMay 4

OWASP Smart Contract Top 10 2026: changes and audit guide

29 min read
Flash loan attacks: anatomy of nine-figure DeFi exploits
Attack vectorsApr 29

Flash loan attacks: anatomy of nine-figure DeFi exploits

37 min read
Post-audit security: why the audit is a commit hash, not a security posture
Audit opsApr 22

Post-audit security: why the audit is a commit hash, not a security posture

21 min read
DAO governance attacks: how flash loans and vote manipulation drain treasuries
Attack vectorsMar 23

DAO governance attacks: how flash loans and vote manipulation drain treasuries

21 min read
Long-Lived Agents: Delayed Execution Risk
AI securityMay 27

Long-Lived Agents: Delayed Execution Risk

14 min read
The Weakest Link in DeFi Isn't the Smart Contract — It's the Web App
AI securityFeb 28

The Weakest Link in DeFi Isn't the Smart Contract — It's the Web App

15 min read
When Web2 Infrastructure Breaks DeFi: The Hidden Attack Surface
AI securityFeb 16

When Web2 Infrastructure Breaks DeFi: The Hidden Attack Surface

13 min read
Bridge Security Checklist: 100+ Critical Exploit Checks
Smart contractsJan 26

Bridge Security Checklist: 100+ Critical Exploit Checks

21 min read
Code4rena Is Winding Down. Your Audit Plan Is Out of Date
Audit opsNov 6

Code4rena Is Winding Down. Your Audit Plan Is Out of Date

19 min read
GENIUS Act Stablecoin Security: 5 Things Your Contract Must Get Right
Smart contractsOct 19

GENIUS Act Stablecoin Security: 5 Things Your Contract Must Get Right

16 min read
MiCA Regulation & Security: What Every Crypto Founder Needs to Know
IndustryFeb 5

MiCA Regulation & Security: What Every Crypto Founder Needs to Know

12 min read
Move vs. Rust vs. Solidity: The Ultimate L1 Blockchain Security Comparison (2026)
Smart contractsJan 23

Move vs. Rust vs. Solidity: The Ultimate L1 Blockchain Security Comparison (2026)

12 min read
Audit vs DeFi Insurance: Which Secures Your Protocol Better?
Audit opsJan 15

Audit vs DeFi Insurance: Which Secures Your Protocol Better?

10 min read
Why AI Penetration Testing Is Now Critical in Web3 Security
AI securityJun 6, 2025

Why AI Penetration Testing Is Now Critical in Web3 Security

7 min read
Bug Bounty Win: How We Placed Top 5 in the Cyfrin CodeHawks Contest
NewsApr 30, 2024

Bug Bounty Win: How We Placed Top 5 in the Cyfrin CodeHawks Contest

13 min read
Fuzzing + Formal Verification: Two Layers That Catch What Manual Audits Miss
Smart contractsFeb 21, 2024

Fuzzing + Formal Verification: Two Layers That Catch What Manual Audits Miss

16 min read
Reentrancy Attacks in Solidity — Understand Them and Prevent Them
Attack vectorsFeb 28, 2023

Reentrancy Attacks in Solidity — Understand Them and Prevent Them

11 min read