Zealynx research
Security Research.
Public write-ups on the bugs, patterns, and protocols we audit. Engineer-to-engineer, no fluff.
48 results for "Security Checklist"
Clear search Search.
Solana Security Checklist: 45 Anchor and Native Program Audit Checks
17 min read
Hyperliquid Security Checklist for Builders: HyperBFT, HyperCore, HyperEVM
13 min read
Bridge Security Checklist: 100+ Critical Exploit Checks
21 min read
Proxy Security Checklist: 33 Critical Upgradeability Checks
22 min read
GameFi Security Checklist: 55+ Critical P2E Exploit Checks
20 min read
Base OP Stack Security Audit: 29 Checks EVM Equivalence Hides
23 min read
Post-audit security: why the audit is a commit hash, not a security posture
21 min read
AI Agent Approval Bypass: Audit Checks
12 min read
OWASP Smart Contract Top 10 2026: changes and audit guide
29 min read
Beyond Static Checklists: A Defense‑in‑Depth Workflow for Smarter Smart Contract Audits
8 min read
Uniswap V3 Explained: Concentrated Liquidity, Tick Math & Security Risks
16 min read
When to audit a smart contract: The 2026 security timeline
26 min read
MCP Security Guide: 24 Checks for AI Agents & MCP Servers
9 min read![EthCC[9] in Cannes: Which Security Tracks Actually Matter for Protocol Teams](/_next/image?url=%2Fpost%2Fethcc-security-guide%2Fcover.png&w=3840&q=75&dpl=dpl_12tJpNLHuP1THRCqGKf3ia3eA2Hi)
EthCC[9] in Cannes: Which Security Tracks Actually Matter for Protocol Teams
14 min read
Layer 2 security under the hood: proof systems, upgrade keys, and what actually protects your funds
17 min read
AI trading bot security: 5 critical attack vectors in DeFi
21 min read
From EVM to SVM: A senior security researcher's guide to Solana in 2026
11 min read
Solana Audit Guide 2026: Firedancer, Token-2022, and Localized DoS
9 min read
AI Agent Wallet Security: 5 Ways Someone Empties It (and the Fix for Each)
20 min read
Uniswap V2 Security: Fork Safely & Avoid Costly Bugs
15 min read
What Is Curve Finance? StableSwap, crvUSD, Risks, and Security
38 min read
OWASP ASI10 Explained: Rogue Agents and Misalignment
OWASP Agentic Top 10 · Part 10 of 10
OWASP ASI08 Explained: Cascading Failures in Agentic Systems
OWASP Agentic Top 10 · Part 8 of 10
OWASP ASI07 Explained: Insecure Inter-Agent Communication
OWASP Agentic Top 10 · Part 7 of 10
OWASP ASI09 Explained: Human-Agent Trust Exploitation
OWASP Agentic Top 10 · Part 9 of 10
OWASP ASI06 Explained: AI Memory & Context Poisoning
OWASP Agentic Top 10 · Part 6 of 10
OWASP ASI03 Explained: AI Agent Identity & Privilege
OWASP Agentic Top 10 · Part 3 of 10
OWASP ASI01 Explained: AI Agent Goal Hijacking
OWASP Agentic Top 10 · Part 1 of 10
Long-Lived Agents: Delayed Execution Risk
14 min read
OWASP ASI05 Explained: AI Agent RCE Patterns
OWASP Agentic Top 10 · Part 5 of 10
AI Agent Outbound Authority: Audit Checks
13 min read
OWASP ASI02 Explained: AI Agent Tool Misuse Attacks
OWASP Agentic Top 10 · Part 2 of 10
OWASP ASI04 Explained: Agentic Supply Chain Attacks
OWASP Agentic Top 10 · Part 4 of 10
When AI controls DeFi vaults, prompt injection becomes remote code execution
16 min read
Still building? What to settle before you scope an audit
14 min read
The Pre-Audit Checklist: How to Save 30% on Your Smart Contract Audit
8 min read
Signer compromise: why clean audits don't stop key hacks
20 min read
Pre-audit readiness engine: how Krait catches 12 findings that cost teams 30% more
16 min read
Smart Contract Upgradeability: UUPS vs Transparent vs Beacon
19 min read
A $292M Bridge Hack Came Down to One Verifier: 5 Checks Before Launch
17 min read
How to Harden an MCP Server Before It Becomes a Master Key to Your Infrastructure
21 min read
Indirect prompt injection: the Web3 agent attack chain
26 min read
The Weakest Link in DeFi Isn't the Smart Contract — It's the Web App
15 min read
Agentic DeFi security: when AI agents control treasury, trading, and liquidations
21 min read
EIP-7702 wallet security: what auditors check after Pectra
26 min read
MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index
14 min read