A tip vault, an eventful counter, and a delegatecall proxy: three callable EVM contracts in 31 bytes of 5/7/5/7/7-byte phrases, tested with Wake.
Research topic
Ethereum
32 ack3 research articles about Ethereum, with linked authors, definitions, and primary technical context.
Google and Janelia released the complete fruit-fly connectome on 3 September. Wired to the Daedaluzz mazes beside Echidna and Wake, how far does it get?
Three EVM fuzzers ran eight hours per maze against 153 reachable Daedaluzz assertions; an agent-written harness ran once. The deciding variable was not speed.
NEST automates LDO buybacks funded by Lido DAO treasury earnings. Our security review covered the contracts, the fixes, and the verified mainnet deployment.
Master Wake's debugging tools: console logging, Python fuzzing, ipdb integration, and performance profiling for Solidity smart contract development.
Inspect EIP-712 type strings and preimage bytes in Wake to match Solidity exactly, catch schema errors early, and prove signatures before deployment.
Test upgradable proxy contracts in Wake's Python framework. Catch initialization bugs, storage collisions, and access control issues before mainnet.
Learn how to sign raw, structured, and hashed messages in Wake tests. Validate EIP-712, EIP-191, and permit flows with clear examples and reliable verification.
Learn how Balancer’s StableSwap math failed and how differential fuzzing in Python detects precision bugs in DeFi swap logic for safer smart contract design.
Learn how to build custom Wake printers for smart contract analysis, uncover vulnerabilities, and speed up Solidity security reviews.
Boost smart contract security with AI-guided fuzz testing in Wake. Learn what to automate, what to verify, and how to write effective tests in Python.
Comparing how Foundry, Echidna, and Wake shrink fuzzing failures. Learn which tool offers the best balance of speed, precision, and debugging clarity.
Learn Manually Guided Fuzzing (MGF) with the Wake framework to find critical smart contract vulnerabilities through systematic testing and defined invariants.
Learn how Wake's Manually Guided Fuzzing detects front-running vulnerabilities using differential fuzzing. Includes real examples and best practices.
This guide provides a comprehensive analysis of reentrancy vulnerabilities with examples. Learn how reentrancy works and how to identify it in real protocols.
Learn how attackers can exploit reentrancy vulnerabilities in ERC-1155 implementations to drain vault contracts, with an example real-world attack scenario.
In this article, we'll examine how attackers can manipulate the _safeMint function's external call to bypass minting limits and drain NFT collections.
This analysis examines the 42M attack on the GMX protocol. We provide details of the vulnerability with a working reproduction of the attack scenario.
In this blog, we describe reentrancy attacks in the ERC-777 standard. ERC-777 is a standard for fungible tokens with a hook for transferring – learn more here.
Flash loans enable borrowing without collateral and repaying within a single transaction. While effective, they also introduce security risks – learn more here.
A cross-chain reentrancy attack is an exploit that targets smart contract function calls. Learn about this vulnerability to keep your code safe from attackers.
A read-only reentrancy attack manipulate a smart contracts to extract value. Let's take a closer look at this vulnerability and how to prevent it.
Learn how manually guided fuzzing combines stateful, white-box testing with flows and invariants to test complex smart contracts more efficiently.
Safe Smart Accounts are the most audited and battle-tested smart contracts on Ethereum securing over $100 billion in assets. The Safe Social Recovery Module is a…
This research article reviews how cross contract reentrancy attacks work, an attack example, and guidance on how to prevent cross contract reentrancy attacks.…
What is a cross function reentrancy attack? Cross-function reentrancy attacks use multiple functions to execute the attack, which can occur when inappropriate…
![The vulnerable Vault withdrawal code beside a recursive call-stack graph showing repeated withdraw frames reading the same balance before any frame reaches balances[msg.sender] equals zero.](/_astro/hero.BjCEFGsd_2u77Pn.png)
What is a reentrancy attack? A reentrancy attack is very specific to smart contracts due to the nature of external calls. When a contract interacts with another…
Ackee is finalizing an ERC-4337 detector to identify the use of forbidden opcodes and storage access, turning a very labor-intensive manual review into an automated…
So you want to write and deploy a smart contract, huh? Let’s set up this environment for a sample project from scratch
An archived index of Ackee Blockchain public Ethereum, EVM, and Solana audit summaries, covering 41 organizations and 66 linked entries.
How to prepare for a smart contract audit The pre-audit part is essential for a smooth audit, and we will now guide you through it.
Building projects on top of cross-chain solutions may lead to security issues in the code. Open-source tools can automatically detect many issues or help test the…