Blogs
Technical analysis for teams responsible for smart contract, protocol, and blockchain security.
Featured research
Billions of dollars continue to move through immutable smart contracts, while security incidents show that one overlooked assumption, compromised key, unsafe integration, or operational failure can create catastrophic loss. This evidence-led comparison examines ten leading audit providers, the models they use, and the situations each is best equipped to handle.
Read the articleResearch library
Focused analysis for engineers and decision-makers responsible for protocol security.
Kann Audits is now a Certified Member of the Circle Alliance Program, listed as a security partner in Circle's Alliance Directory with support for Arc. As part of that commitment, every protocol building on Arc can receive free AI security scans through Kann AI.
Read article
Smart contract audits are now tool-assisted but researcher-led. This guide explains what each class of security tooling actually contributes, where AI security skills fit into the workflow, and why every result still needs human reproduction before it becomes a finding.
Read article
The quality of a smart contract audit is decided by the people who read the code. That is why Kann Audits sets a clear, verifiable bar for every researcher it works with, and why that bar is built on results from bug bounties and competitive audits rather than titles.
Read article
Smart contracts hold real value, run in public, and are hard to change once deployed. A smart contract security audit is how a team finds the flaws an attacker would exploit before the code goes live. This guide explains what auditors look at, how audits differ, what you receive, and where an audit's limits are.
Read article
An audit is more than a few weeks of code reading. It starts before the review with scoping and preparation, and it ends only after the fixes have been verified. This guide walks through each stage, what happens in it, and what your team should have ready.
Read article
Audit pricing confuses many teams because two quotes for the same repository can look nothing alike. This guide explains what actually drives the cost of a smart contract audit, how the common pricing models compare, and how to lower the bill without lowering the quality of the review.
Read article
The right auditor for a Solidity lending market may be the wrong one for a Move-based asset system or a zero-knowledge bridge. This checklist helps protocol teams compare providers on the things that actually change the outcome of an audit.
Read article
Every protocol team eventually asks whether an audit is really necessary, especially when budgets are tight and the launch date is close. The short answer is that for any contract holding real value, an audit is one of the highest-return security decisions a team can make. Here is why, and where its limits are.
Read article
Uniswap v4 turned the most used AMM into a platform: anyone can attach custom code to a pool. That flexibility is why hooks are exciting, and why they deserve careful security review. This guide explains how hooks work and the mistakes auditors look for first.
Read article
EIP and ERC are two of the most used acronyms in Ethereum development, and two of the most often confused. This guide explains how they relate, how a proposal moves from idea to final standard, which standards you meet in almost every codebase, and where implementing them goes wrong.
Read article
Billions of dollars continue to move through immutable smart contracts, while security incidents show that one overlooked assumption, compromised key, unsafe integration, or operational failure can create catastrophic loss. This evidence-led comparison examines ten leading audit providers, the models they use, and the situations each is best equipped to handle.
Read article
Robinhood Chain is EVM-compatible, but a credible review cannot stop at familiar Solidity checks. Its security surface extends into L2 operations, first-come-first-served sequencing, cross-chain messaging, Stock Token accounting, oracles, account abstraction, governance, and off-chain financial data.
Read article
Seven days, six security researchers, five scoped Solidity files, and a leveraged position flow connected to a protocol with more than $328M in public TVL during the review window. This is what the engagement actually covered and what the report documented.
Read article
Major Web3 exploits often begin with a small mismatch between intended behavior and what the code actually permits. These five published findings show how cross-asset accounting, replay protection, reentrancy, share conversion, and state recording can become direct security boundaries.
Read article
Attackers rarely think about a function in isolation. They search for a state they can manipulate, an assumption the code does not enforce, and a transition that converts that mismatch into control or value.
Read article
Midnight expands the application security boundary across Compact contracts, private state, client-side proofs, TypeScript providers, wallets, indexers, and backend infrastructure.
Read article
A security audit may start with one codebase, but strong security relationships rarely end with one report. Continuity gives researchers deeper context as protocols evolve.
Read article
Canton changes the unit of security analysis. Reviewers must reason about Daml workflows, selective visibility, participant infrastructure, and multi-application outcomes as one system.
Read article
Zenith is not best understood as a conventional token bridge. It embeds Reth-based EVM execution into a Canton-mediated validation and settlement flow, expanding the security boundary across Solidity, Daml, validators, and infrastructure.
Read article
AI can accelerate triage and repeatable checks, but model output is not an audit result. Effective use pairs automation with protocol context and human validation.
Read article
A security audit is more than a pre-launch checkbox. Its scope, findings, and remediation process shape technical risk and business credibility alike.
Read article
Security is an engineering discipline. See how Kann Audits approaches scope, manual review, reporting, and fix verification across onchain systems.
Read articlePlan a review
Share the system, target date, and review scope. Kann Audits will follow up with the context needed to plan an engagement.
