Understand the permissions and smart-contract risks behind everyday Web3 actions.
A cross-chain bridge adds smart-contract, validator, liquidity and destination-token risk to an ordinary transfer. Use the project’s verified interface, confirm the source and destination…
Read guide
A smart contract exploit abuses a flaw in code, economic design, permissions or an external dependency to produce an unintended result—often draining or freezing assets. It differs from…
Read guide
A drainer is malicious infrastructure designed to turn wallet signatures, approvals or deceptive transactions into asset theft. It may target tokens, NFTs or native assets and can…
Read guide
Read the scope, commit hash, deployment address, severity definitions, unresolved findings and testing limitations before looking at the badge. An audit is useful only when it covers the…
Read guide
Unlimited approval lets a spender contract transfer the approved token up to an extremely high cap without asking for a new allowance each time. If that spender is malicious or compromised,…
Read guide