Research

The ack3 research hub.

Articles and research reports from the team.

Straight from the work.

From the engineers who build Wake and run the audits.

A Wake printer visitor beside an IR filtering graph that narrows contract functions to final public and external implementations forming the callable attack surface.

Technical guide November 6, 2025

Mastering Wake Printers for Solidity Security Analysis

Learn how to build custom Wake printers for smart contract analysis, uncover vulnerabilities, and speed up Solidity security reviews.

Naoki Yoshida

read →

A Wake four-phase flow-function skeleton beside three human verification gates for assertion meaning, values derived from pre-transaction Python state, and execution branches confirmed by coverage.

Technical guide October 30, 2025

Vibe Fuzzing Guide for Wake’s Manually-Guided Fuzzing

Boost smart contract security with AI-guided fuzz testing in Wake. Learn what to automate, what to verify, and how to write effective tests in Python.

Naoki Yoshida

read →

A comparison table showing Foundry removing transactions top-down, Echidna removing transactions and simplifying parameters, and Wake removing flow kinds then individual flows with snapshots and shortcuts.

Security research October 7, 2025

Shrinking Algorithm Differences Between Foundry, Echidna, and Wake

Comparing how Foundry, Echidna, and Wake shrink fuzzing failures. Learn which tool offers the best balance of speed, precision, and debugging clarity.

Naoki Yoshida

read →

A Wake Python owner invariant beside an execution graph showing setup, a randomized flow, Python state updates, and the invariant comparing the model with contract state after every flow.

Technical guide September 9, 2025

A Beginner’s Guide to Manually Guided Fuzzing

Learn Manually Guided Fuzzing (MGF) with the Wake framework to find critical smart contract vulnerabilities through systematic testing and defined invariants.

Naoki Yoshida

read →

A CREATE2 race graph showing the victim callback deployment path and an attacker-controlled direct path producing the same salt and address, with the attacker deploying first and the victim transaction failing.

Security research September 3, 2025

Uncovering Front Running Vulnerability with Manually Guided Fuzzing

Learn how Wake's Manually Guided Fuzzing detects front-running vulnerabilities using differential fuzzing. Includes real examples and best practices.

Naoki Yoshida

read →

Solidity withdrawal code beside a call graph showing control passing to an attacker and re-entering withdraw while the balance is still non-zero.

Technical guide August 21, 2025

Complete Reentrancy Hands-on Guide

This guide provides a comprehensive analysis of reentrancy vulnerabilities with examples. Learn how reentrancy works and how to identify it in real protocols.

Naoki Yoshida

read →

An ERC-1155 callback flow showing create of 1000 tokens at 1 wei, re-entry before the ID counter advances, a second create of one token at 1 ETH using the same ID k, and withdrawal of 1001 tokens at the overwritten high price.

Technical guide August 11, 2025

Reentrancy Attack in ERC-1155

Learn how attackers can exploit reentrancy vulnerabilities in ERC-1155 implementations to drain vault contracts, with an example real-world attack scenario.

Naoki Yoshida

read →

An ERC-721 mint loop graph showing a 20-token batch validated at supply N, the first safe mint invoking onERC721Received at N plus 1, and a re-entered batch passing its supply check before the outer loop finishes.

Technical guide August 4, 2025

Reentrancy Attack in ERC-721

In this article, we'll examine how attackers can manipulate the _safeMint function's external call to bypass minting limits and drain NFT collections.

Naoki Yoshida

read →