Blog - jcsec.io

I invest my time and money in being updated with what is up in Web3 security. I try to share what I learn here.

CosmWasm security spotlight #4

Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge...

Mar 11, 2024 / Read More

Neutron Partners With Oak Security for CosmWasm Security Audits

At Oak Security, we have been working on elevating the security standards of the Cosmos ecosystem for a while now, auditing some of the b...

Dec 14, 2023 / Read More

Announcing our strategic partnership between Oak Security and Range

We are proud to announce a strategic partnership to further increase the security in the IBC ecosystem between Oak Security and Range.

Nov 24, 2023 / Read More

CosmWasm security spotlight #3

Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge...

Oct 09, 2023 / Read More

Capture The Flag ️Writeups — AwesomWasm 2023 Pt. 2

Welcome to our official solutions for all the Oak Security CosmWasm CTF challenges! This post is the second part of two, please visit Par...

Sep 26, 2023 / Read More

Capture The Flag ️Writeups — AwesomWasm 2023 Pt. 1

Welcome to our official solutions for all the Oak Security CosmWasm CTF challenges! This post will be the first part of two, enjoy our wr...

Sep 19, 2023 / Read More

Give me Warnings! Tornado Cash’s Proposal Incident

In DeFi, we keep learning our lessons the hard way. That is, losing assets to a properly crafted scam, exploit or trick. The most recent ...

Jun 06, 2023 / Read More

CosmWasm security spotlight #2

Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge...

Apr 17, 2023 / Read More

CosmWasm security spotlight #1

Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge...

Apr 03, 2023 / Read More

CosmWasm security spotlight #4
Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge? Then keep reading!There is a lot of great content about security findings and auditing of Solidity Smart Contracts. Sadly, that is not the case for CosmWasm… yet!Rounding issuesMathematical operations are the bread and butter […]
JCsec
Neutron Partners With Oak Security for CosmWasm Security Audits
At Oak Security, we have been working on elevating the security standards of the Cosmos ecosystem for a while now, auditing some of the biggest projects. Not so long ago, Neutron mainnet finally launched, allowing a new wave of CosmWasm projects to deploy on cutting-edge Interchain technology.Neutron and Oak Security partnershipWe are proud to announce […]
JCsec
Announcing our strategic partnership between Oak Security and Range
Range and Oak Security partnershipWe are proud to announce a strategic partnership to further increase the security in the IBC ecosystem between Oak Security and Range.Oak Security offers security auditing and cyber security advisory services with a special focus on third-generation blockchains such as the Cosmos SDK and CosmWasm, Polkadot and Substrate, Solana, NEAR, and Flow […]
JCsec
CosmWasm security spotlight #3
Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge? Then keep reading!There are loads of great content about security findings and auditing of Solidity Smart Contracts. Sadly, that is not the case for CosmWasm… yet!Address validation and normalizationHandling addresses is a key piece […]
JCsec
Capture The Flag ️Writeups — AwesomWasm 2023 Pt. 2
Capture The Flag ️Writeups — AwesomWasm 2023 Pt. 2Welcome to our official solutions for all the Oak Security CosmWasm CTF challenges! This post is the second part of two, please visit Part 1 if you haven’t done so. Enjoy our writeups for challenges 6 to 10.Photo by Gabriel Crismariu on UnsplashChallenge 06: HofundPurposeThe main purpose of this contract is to allow […]
JCsec
Capture The Flag ️Writeups — AwesomWasm 2023 Pt. 1
Capture The Flag ️Writeups — AwesomWasm 2023 Pt. 1Welcome to our official solutions for all the Oak Security CosmWasm CTF challenges! This post will be the first part of two, enjoy our writeups for challenges 1 to 5.Photo by Gabriel Crismariu on UnsplashChallenge 01: MjolnirPurposeThe main purpose of this contract is to allow users to lock their funds for a predetermined […]
JCsec
Give me Warnings! Tornado Cash’s Proposal Incident
Yet another post on Tornado Cash’s incident, but the problem is much bigger.In DeFi, we keep learning our lessons the hard way. That is, losing assets to a properly crafted scam, exploit or trick. The most recent event that highlights that even technical folks are being tricked into trusting is the Tornado Cash governance incident.On the […]
JCsec
CosmWasm security spotlight #2
Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge? Then keep reading!There are loads of great content about security findings and auditing of Solidity Smart Contracts. Sadly, that is not the case in CosmWasm… yet!Access ControlsAccess controls are one of the main concerns […]
JCsec
CosmWasm security spotlight #1
Are you a CosmWasm Smart Contract developer? A random Cosmonaut peeking into this cool tech? A Solidity auditor looking for new knowledge? Then keep reading!There are loads of great content about security findings and auditing of Solidity Smart Contracts. Sadly, that is not the case in CosmWasm… yet!My name is JC and I have been auditing […]
JCsec