Research

The ack3 research hub.

Articles and research reports from the team.

Straight from the work.

From the engineers who build Wake and run the audits.

A Wake data dependency graph tracing validateUserOp sender through function calls, assignments, and casts to a mapping key or Yul storage argument before checking ERC-4337 storage restrictions.

Security research May 15, 2024

Wake ERC-4337 Detector

Ackee is finalizing an ERC-4337 detector to identify the use of forbidden opcodes and storage access, turning a very labor-intensive manual review into an automated…

Michal Převrátil

read →

A GitHub Actions job graph splitting pull requests into Wake tests and vulnerability detection before merge, while pushes to master load a secret and deploy to Holesky.

Technical guide December 7, 2023

On the wave of CI/CD for Web3

So you want to write and deploy a smart contract, huh? Let’s set up this environment for a sample project from scratch

Jan Kalivoda

read →

An Ackee Blockchain public-audit archive summary shows 66 linked audit-summary entries for 41 organizations across Ethereum, EVM-compatible networks, and Solana.

Security research May 20, 2023

List of Ackee Blockchain Public Audits

An archived index of Ackee Blockchain public Ethereum, EVM, and Solana audit summaries, covering 41 organizations and 66 linked entries.

Josef Gattermayer

read →

A two-column pre-audit checklist covers freezing and compiling the project, auditor access, documentation, a walkthrough, style compliance, tests, static analysis, and previous reports.

Technical guide March 17, 2023

How to prepare for a smart contract audit

How to prepare for a smart contract audit The pre-audit part is essential for a smooth audit, and we will now guide you through it.

Jan Kalivoda

read →

A selector-resolution graph shows a call intended for clash550254402 reaching an Axelar proxy, colliding with proxyOwner, and executing the proxy function instead of the upgradeable implementation.

Security research November 11, 2022

Testing Axelar contracts using open-source tools

Building projects on top of cross-chain solutions may lead to security issues in the code. Open-source tools can automatically detect many issues or help test the…

Michal Převrátil

read →