Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
Zealynx research

Security Research.

Public write-ups on the bugs, patterns, and protocols we audit. Engineer-to-engineer, no fluff.

48 results for "Solidity"

Search.

Clear search
Solidity Smart Contract Audit 2026: Pricing, AI & Readiness Manifesto
Audit opsFeb 4

Solidity Smart Contract Audit 2026: Pricing, AI & Readiness Manifesto

9 min read
Overflow & Underflow in Solidity: Real Audit Findings, Code Examples & Practice Exercise
Attack vectorsJun 13, 2023

Overflow & Underflow in Solidity: Real Audit Findings, Code Examples & Practice Exercise

19 min read
Inline Assembly Gas Tricks: Hashing, Loops & Storage Writes That Save 30%+ in Solidity
Smart contractsApr 23, 2023

Inline Assembly Gas Tricks: Hashing, Loops & Storage Writes That Save 30%+ in Solidity

5 min read
Solidity Gas Optimization: Understanding How EVM Works Can Save You Gas
Smart contractsMar 1, 2023

Solidity Gas Optimization: Understanding How EVM Works Can Save You Gas

5 min read
Reentrancy Attacks in Solidity — Understand Them and Prevent Them
Attack vectorsFeb 28, 2023

Reentrancy Attacks in Solidity — Understand Them and Prevent Them

11 min read
Move vs. Rust vs. Solidity: The Ultimate L1 Blockchain Security Comparison (2026)
Smart contractsJan 23

Move vs. Rust vs. Solidity: The Ultimate L1 Blockchain Security Comparison (2026)

12 min read
Write a Custom Aderyn Detector in Rust: Catch Division-Before-Multiplication Bugs in Solidity
Smart contractsMay 15, 2025

Write a Custom Aderyn Detector in Rust: Catch Division-Before-Multiplication Bugs in Solidity

8 min read
Phishing Attack in Web3: Why You Should Never Use tx.origin
Attack vectorsMar 7, 2023

Phishing Attack in Web3: Why You Should Never Use tx.origin

6 min read
Tokenizing Intellectual Property on EVM: Solidity Patterns for Programmable IP Rights
DeFi analysisFeb 13

Tokenizing Intellectual Property on EVM: Solidity Patterns for Programmable IP Rights

9 min read
EIP-7702 Security: 5 Delegate Contract Bugs and the Fix for Each
Smart contractsOct 25

EIP-7702 Security: 5 Delegate Contract Bugs and the Fix for Each

18 min read
GENIUS Act Stablecoin Security: 5 Things Your Contract Must Get Right
Smart contractsOct 19

GENIUS Act Stablecoin Security: 5 Things Your Contract Must Get Right

16 min read
ERC-4626 inflation attack: how it works and how to stop it
Attack vectorsJul 2

ERC-4626 inflation attack: how it works and how to stop it

20 min read
Uniswap V2 Code Deep Dive: Router, Factory, Pair & Security Risks
DeFi analysisFeb 18

Uniswap V2 Code Deep Dive: Router, Factory, Pair & Security Risks

11 min read
Uniswap V2 Router Explained — addLiquidity Line by Line
DeFi analysisOct 16, 2023

Uniswap V2 Router Explained — addLiquidity Line by Line

10 min read
Liquity Protocol — DeFi Protocol Explained from Its Smart Contracts (Part 1)
DeFi analysisApr 2023 · Updated Dec 2023

Liquity Protocol — DeFi Protocol Explained from Its Smart Contracts (Part 1)

Liquity Protocol · Part 1 of 2
Real-Life Denial of Service Attacks on Smart Contracts
Attack vectorsApr 26, 2023

Real-Life Denial of Service Attacks on Smart Contracts

10 min read
How to Build Uniswap V2 From Scratch (Line by Line, 207 Tests)
NewsApr 24 · Updated Apr 29

How to Build Uniswap V2 From Scratch (Line by Line, 207 Tests)

18 min read
Flash loan attacks: anatomy of nine-figure DeFi exploits
Attack vectorsApr 29

Flash loan attacks: anatomy of nine-figure DeFi exploits

37 min read
Implement Uniswap v4 swaps & avoid critical mistakes
DeFi analysisFeb 2

Implement Uniswap v4 swaps & avoid critical mistakes

13 min read
EIP-7702 wallet security: what auditors check after Pectra
Smart contractsMay 18

EIP-7702 wallet security: what auditors check after Pectra

26 min read
Smart Contract Upgradeability: UUPS vs Transparent vs Beacon
Smart contractsJan 29

Smart Contract Upgradeability: UUPS vs Transparent vs Beacon

19 min read
ERC-20 Transfers Need Three Proofs, Not One
ResearchOct 12

ERC-20 Transfers Need Three Proofs, Not One

16 min read
Beyond Static Checklists: A Defense‑in‑Depth Workflow for Smarter Smart Contract Audits
Audit opsFeb 17

Beyond Static Checklists: A Defense‑in‑Depth Workflow for Smarter Smart Contract Audits

8 min read
Liquity Protocol — Stability Pool, Liquidations & Redemptions (Part 2)
DeFi analysisMay 2023 · Updated Dec 2023

Liquity Protocol — Stability Pool, Liquidations & Redemptions (Part 2)

Liquity Protocol · Part 2 of 2
Floor Is Not Truncation: The Uniswap V3 TickBitmap
DeFi analysisAug 17

Floor Is Not Truncation: The Uniswap V3 TickBitmap

Uniswap V3 · Part 5 of 9
DAO governance attacks: how flash loans and vote manipulation drain treasuries
Attack vectorsMar 23

DAO governance attacks: how flash loans and vote manipulation drain treasuries

21 min read
When Operator Approval Stops Meaning Consent
ResearchOct 15

When Operator Approval Stops Meaning Consent

18 min read
When a Safe View Becomes an Unsafe Settlement Input
ResearchOct 8

When a Safe View Becomes an Unsafe Settlement Input

14 min read
Fee Growth Outside: The Uniswap V3 Trick Nobody Explains Well
DeFi analysisAug 12

Fee Growth Outside: The Uniswap V3 Trick Nobody Explains Well

Uniswap V3 · Part 4 of 9
Uniswap V3 Does Not Store the Price
DeFi analysisAug 8

Uniswap V3 Does Not Store the Price

Uniswap V3 · Part 2 of 9
How to Prevent Front-Running in ERC20 Smart Contracts
Attack vectorsMay 21, 2024

How to Prevent Front-Running in ERC20 Smart Contracts

11 min read
Who Eats the Wei: Rounding as a Security Boundary in Uniswap V3
DeFi analysisAug 10

Who Eats the Wei: Rounding as a Security Boundary in Uniswap V3

Uniswap V3 · Part 3 of 9
Uniswap v4 hook attacks: 4 exploit patterns with PoCs
DeFi analysisMay 25

Uniswap v4 hook attacks: 4 exploit patterns with PoCs

25 min read
Zealynx Academy vs Cyfrin Updraft, Alchemy University, and LearnWeb3: Honest Comparison
NewsMay 21

Zealynx Academy vs Cyfrin Updraft, Alchemy University, and LearnWeb3: Honest Comparison

13 min read
OWASP Smart Contract Top 10 2026: changes and audit guide
IndustryMay 4

OWASP Smart Contract Top 10 2026: changes and audit guide

29 min read
ERC-4337 Smart Accounts: Six Failure Modes We're Already Seeing in Audits
Smart contractsMar 12

ERC-4337 Smart Accounts: Six Failure Modes We're Already Seeing in Audits

14 min read
Uniswap’s Q64.96 Explained: Essential Security Tips for Hook Developers
DeFi analysisJan 30

Uniswap’s Q64.96 Explained: Essential Security Tips for Hook Developers

11 min read
Bug Bounty Win: How We Placed Top 5 in the Cyfrin CodeHawks Contest
NewsApr 30, 2024

Bug Bounty Win: How We Placed Top 5 in the Cyfrin CodeHawks Contest

13 min read
Auditing a Live Protocol: Lessons from the Juicebox Buyback Delegate Security Review
DeFi analysisMay 2023 · Updated Dec 2023

Auditing a Live Protocol: Lessons from the Juicebox Buyback Delegate Security Review

7 min read
Aave V3 Pool.sol Deep Dive: Supply, Borrow & Withdraw Logic Every Auditor Must Know
DeFi analysisApr 18, 2023

Aave V3 Pool.sol Deep Dive: Supply, Borrow & Withdraw Logic Every Auditor Must Know

8 min read
How to Build Compound V2 From Scratch (18 Sections, Line by Line)
DeFi analysisMay 28

How to Build Compound V2 From Scratch (18 Sections, Line by Line)

13 min read
Introducing Your First 90 Days in Web3: A Free, Guided Path to Actually Understand the Space
NewsJul 1

Introducing Your First 90 Days in Web3: A Free, Guided Path to Actually Understand the Space

16 min read
Agentic DeFi security: when AI agents control treasury, trading, and liquidations
AI securityJun 1

Agentic DeFi security: when AI agents control treasury, trading, and liquidations

21 min read
How to Scope a Smart Contract Audit: What Auditors Need
Audit opsApr 23

How to Scope a Smart Contract Audit: What Auditors Need

23 min read
Zealynx Academy Is Public: Build, Audit, and Launch Web3 Protocols
NewsApr 23

Zealynx Academy Is Public: Build, Audit, and Launch Web3 Protocols

20 min read
When AI controls DeFi vaults, prompt injection becomes remote code execution
AI securityMar 25

When AI controls DeFi vaults, prompt injection becomes remote code execution

16 min read
Cut Your Audit Cost by 30%: The Pre-Audit Prep Checklist for Protocol Teams
Audit opsFeb 20, 2024

Cut Your Audit Cost by 30%: The Pre-Audit Prep Checklist for Protocol Teams

11 min read
When Every Check Passes but a Protocol Is Underbacked
ResearchSep 1

When Every Check Passes but a Protocol Is Underbacked

20 min read