PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

We’re partnering to strengthen TON’s DeFi ecosystem

blog.trailofbits.com | blog | #web3 | #defi | #partnership | #blockchain | #trail-of-bits | #ton | #tvm-ventures | #security-services
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits becomes TVM Ventures' preferred security partner for TON, offering design reviews, threat modeling and fix reviews to contest winners while co-developing DeFi protocol standards.
Published
Collected

Related coverage

blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · blog.trailofbits.com
Building secure Uniswap v4 hooks
Uniswap v4 hooks can satisfy PoolManager settlement invariants while still violating application-level accounting or authorization assumptions. The seven recurring failure patterns form a practical review checklist for hook developers and auditors.
blog · hackenproof.com
DeFi Lending Protocols: Attack Vectors and How to Secure Them
How DeFi lending protocols work, the attack vectors behind recent exploits like Kelp-Aave and Tectonic, and the controls that keep lending markets secure.
blog · certik.com
Morpho Reached a New High While DeFi Remained Below Its Peak
Morpho surpassed its previous TVL high while DeFi remained below its 2025 peak, supported by growth across Robinhood Chain, Arc, and real-world asset lending.
blog · certik.com
Circle’s Arc Mainnet: From a USD 74 Billion USDC Supply to Native Settlement
Circle's Arc mainnet opens 16 September 2026 with USDC as gas and settlement asset: EVM compatibility, a permissioned institutional validator set, and a $74.22B USDC supply as launch context.
blog · certik.com
Tolk Security Explained: From FunC’s Engineering Pain Points to New Audit Considerations
CertiK contrasts FunC and Tolk in code, showing how typed schemas, auto-serialization, and lazy loading shift TON contract security, and lists residual authorization, replay, and accounting risks.
Back