PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bitcoin Core audit

blog.quarkslab.com | research | #web3 | #vulnerability-research | #cryptocurrency | #audit | #blockchain | #security | #ostif | #bitcoin
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's first public security audit of Bitcoin Core, funded by Brink and coordinated by OSTIF, combining static and dynamic analysis to strengthen the ecosystem's security posture.
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
blog · hackenproof.com
Smart Contract Security in 2026: Risks, Best Practices, and Audits
Top smart contract security risks in 2026, best practices that prevent exploits, and when to audit your contracts. A practical guide for founders and CTOs.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
incident · certik.com
Liquid Network Incident Analysis
On 6 September 2026, attackers primed the Elements rangeproof cache and reused a cached validation result to mint unauthorized L-BTC, then pegged out roughly 3,998.5 L-BTC worth about $318.7 million.
blog · certik.com
Tolk Security Explained: From FunC’s Engineering Pain Points to New Audit Considerations
CertiK contrasts FunC and Tolk in code, showing how typed schemas, auto-serialization, and lazy loading shift TON contract security, and lists residual authorization, replay, and accounting risks.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
Back