PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Strengthening decentralized security: Bugcrowd’s VRT 1.15 update

bugcrowd.com | blog | #cloud | #web3 | #smart-contracts | #defi | #bugcrowd | #vrt | #blockchain | #zero-knowledge | #vulnerability-rating
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's VRT 1.15 adds blockchain and crypto vulnerability ratings covering dApps, smart contracts, DeFi threats like flash loan attacks, oracle manipulation, and zero-knowledge implementations.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Building secure Uniswap v4 hooks
Uniswap v4 hooks can satisfy PoolManager settlement invariants while still violating application-level accounting or authorization assumptions. The seven recurring failure patterns form a practical review checklist for hook developers and auditors.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
1inch Bug Bounty Report: Aqua Edition, H1 2026
This report highlights common smart contract and DeFi logic vulnerabilities discovered through crowdsourced security testing.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · hackenproof.com
DeFi Lending Protocols: Attack Vectors and How to Secure Them
How DeFi lending protocols work, the attack vectors behind recent exploits like Kelp-Aave and Tectonic, and the controls that keep lending markets secure.
Back