Formal verification is a process that mathematically proves the correctness of a system, ensuring it behaves exactly as intended under all defined conditions.

We explore exactly what’s involved in applying formal verification to a zero knowledge virtual machine (zkVM).

When it comes to crypto compliance, being the incumbent comes with its own set of challenges, including a potential disconnect from the evolving needs of users. SkyInsights is a superior choice for those looking to make a shift from the escalating costs and constraints associated with services like Chainalysis.

At CertiK, we believe in the strength of community involvement to improve security and build a safer Web3 world. That’s why we’re excited to announce an opportunity to let your voice be heard and get your choice rewarded.

As a user, you want to know that the team behind the contracts you’re interacting with is legitimate and willing to stand behind their platform. And as a builder, you want to stand out from the crowd and demonstrate your integrity. Here’s how CertiK KYC serves both users and builders.

Our custom formal verification service involves five main steps: writing customized specifications, translating these to the verification language, interactive verification, triaging results and creating reports, and continuous verification.

Skynet is a security data platform designed for crypto projects looking to showcase their security and users who want to verify this data. Two features are key to this: Insight and Active Monitor.

The Financial Crimes Enforcement Network (FinCEN) is a bureau of the United States Department of the Treasury, established to guard against and investigate money laundering, terrorism financing, and other financial crimes.

SkyInsights is the most streamlined, resource-efficient platform for maintaining crypto compliance. By addressing the critical pain points of illicit on-chain activities, sanctions exposure, and the maze of global crypto regulations, SkyInsights gives builders the tools they need to stay firmly on the right side of the law.

In early 2022, CertiK confirmed that a project named MuskSwap was an exit scam resulting in millions in losses. We then monitored the malicious wallets and observed the transfer of approximately $3.5 million into Tornado Cash over a period of 4 months.

A total of $502,522,934 was lost to 223 hacks, scams, and exploits throughout the first quarter of 2024. Check out our comprehensive report for all the statistics, data, and analysis you need to understand the current state of onchain security.

Compliance is crucial for organizations deemed virtual asset service providers (VASPs) by the patchwork of regulations that apply to the blockchain industry. Yet as requirements grow, so too do the costs of the infrastructure and tools needed to meet regulatory guidelines.

On 28 March, Prisma Finance was exploited by multiple addresses leading to a loss of approximately $12.3 million. Three attackers took advantage of a vulnerability in the Prisma Finance MigrateTroveZap contract which allowed them to manipulate a migration process. Since the exploit occurred, a wallet that received funds from the main exploiter has reached out to the Prisma Finance deployer declaring that their actions were a white hat rescue.

On 24 February, GambleFi project RiskOnBlast is thought to have become the first confirmed exit scam to occur on the Blast ecosystem, a layer-2 project on Ethereum.

A detailed post-mortem analysis of the Munchables incident on the Blast mainnet, focusing on the methods used by attackers, the vulnerabilities exploited, and the subsequent community and project response to recover lost assets and enhance security measures.

From 12 March to 16 March we have seen nine private key compromises (PKC) that have led to a combined loss of at least $22.96 million in March, with five of those incidents incurring losses over $1 million. These incidents showcase the continued devastation that private key leakages can have on the Web3 ecosystem which has already seen approximately $239 million lost to this type of attack in 2024.

As digital assets go mainstream, it's more crucial than ever to make sure blockchain projects are secure. Just as important as this is finding ways to communicate security to users. For over five years, we’ve been building a suite of tools designed to both improve projects’ security as well as raise the level of education and understanding of security in the broader community.

As the cryptocurrency markets surge back to life after a long winter, the need for firms to implement a comprehensive compliance solution has never been more critical.