Insights

Blog & Media

Security insights, audit findings, videos, and expert perspectives on blockchain and AI security.

ArciumMPCSolanaConfidential ComputingCryptographySecurity

Cross-Context Ciphertext Replay: A Confidentiality Pitfall in Arcium MXEs

An encrypted input on Arcium is a bearer token bound to the MXE key and nothing else. Replaying a victim's public ciphertext into a different computation in the same MXE turns an auction resolution into a decryption oracle — and revealing less doesn't fix it.

Jul 17, 2026JecikPo

PDA Seed Collision: How a Sequential Counter Affected Account Isolation on Solana

During a review of the TokenTable Solana Unlocker V2 program, we observed a scenario in which token allocations associated with cancelled accounts could be accessed in an unintended sequence, without requiring privileged permissions.

Mar 29, 2026JecikPo

The Bug That Slipped: Stale Balance Accounting in YieldBasis (Sherlock Contest)

How a simple staleness issue in a gauge contract went unnoticed by professional auditing firms due to isolated audit scope.

Mar 13, 2026Talfao

Implementation and Security Pitfalls of LST on Hyperliquid

While LSTs on Hyperliquid open exciting opportunities for decentralised staking, they also introduce hidden technical and security pitfalls that can silently undermine a protocol if left unchecked.

Mar 12, 2026Talfao

The Bug That Could Prevent Withdrawal: Merkle Tree Corruption in a Cairo Privacy Mixer

A subtle edge condition in a Cairo-based privacy mixer caused the 1,025th deposit to silently corrupt the Merkle tree state, invalidating withdrawal proofs for earlier depositors without any on-chain error.

Mar 19, 2026Talfao & Kalogerone

Zero to Hero: Hackathon Workshop at CTU Prague

CODESPECT co-hosted the first "Zero to Hero" hackathon workshop at ChainLab CTU. We helped students go from idea to MVP and start building for the Solana Colosseum Hackathon.

Mar 6, 2026Solana CZE x CODESPECT

Security Workshop with La Familia

A hands-on security session covering how to prepare for a real audit, the most common mistakes in programs, and how to strengthen your project for Colosseum.

Oct 20, 2025La Familia x CODESPECT

Talfao on Starknet Security

Watch Talfao present on Starknet security covering common vulnerabilities, audit insights, and best practices for building secure contracts on Starknet.

Mar 1, 2026Talfao

Start here

Ready to secure your project?

Get a free 30-minute security assessment. We’ll review your codebase scope and flag the top 3 risk areas.

No commitment required · Typical audits start within 1–2 weeks

Get Free Pre-Assessment audits@codespect.xyz