Blogs
Technical analysis for teams responsible for smart contract, protocol, and blockchain security.
Featured research
Billions of dollars continue to move through immutable smart contracts, while security incidents show that one overlooked assumption, compromised key, unsafe integration, or operational failure can create catastrophic loss. This evidence-led comparison examines ten leading audit providers, the models they use, and the situations each is best equipped to handle.
Read the articleResearch library
Focused analysis for engineers and decision-makers responsible for protocol security.
Billions of dollars continue to move through immutable smart contracts, while security incidents show that one overlooked assumption, compromised key, unsafe integration, or operational failure can create catastrophic loss. This evidence-led comparison examines ten leading audit providers, the models they use, and the situations each is best equipped to handle.
Read article
Robinhood Chain is EVM-compatible, but a credible review cannot stop at familiar Solidity checks. Its security surface extends into L2 operations, first-come-first-served sequencing, cross-chain messaging, Stock Token accounting, oracles, account abstraction, governance, and off-chain financial data.
Read article
Seven days, six security researchers, five scoped Solidity files, and a leveraged position flow connected to a protocol with more than $328M in public TVL during the review window. This is what the engagement actually covered and what the report documented.
Read article
Major Web3 exploits often begin with a small mismatch between intended behavior and what the code actually permits. These five published findings show how cross-asset accounting, replay protection, reentrancy, share conversion, and state recording can become direct security boundaries.
Read article
Attackers rarely think about a function in isolation. They search for a state they can manipulate, an assumption the code does not enforce, and a transition that converts that mismatch into control or value.
Read article
Midnight expands the application security boundary across Compact contracts, private state, client-side proofs, TypeScript providers, wallets, indexers, and backend infrastructure.
Read article
A security audit may start with one codebase, but strong security relationships rarely end with one report. Continuity gives researchers deeper context as protocols evolve.
Read article
Canton changes the unit of security analysis. Reviewers must reason about Daml workflows, selective visibility, participant infrastructure, and multi-application outcomes as one system.
Read article
Zenith is not best understood as a conventional token bridge. It embeds Reth-based EVM execution into a Canton-mediated validation and settlement flow, expanding the security boundary across Solidity, Daml, validators, and infrastructure.
Read article
AI can accelerate triage and repeatable checks, but model output is not an audit result. Effective use pairs automation with protocol context and human validation.
Read article
A security audit is more than a pre-launch checkbox. Its scope, findings, and remediation process shape technical risk and business credibility alike.
Read article
Security is an engineering discipline. See how Kann Audits approaches scope, manual review, reporting, and fix verification across onchain systems.
Read articlePlan a review
Share the system, target date, and review scope. Kann Audits will follow up with the context needed to plan an engagement.
