Since 2014 protecting critical decentralized systems: L1 nodes, smart contracts audits, wallets, web3 dApps, exchanges, bridges.
Last 6 months · Weekly commits
🚀 Try the Learn EVM Explorer we just launched!!!
Coinspect created a standard security checklist to provide transparent, objective insights into the most sec…
Coinspect Publications: audit reports and research.
Data repository for the Wallet Security Ranking project.
Verifiable Frontends for dApps
ICYMI: If you don’t remember how your wallet seed phrase was generated, you don't know how secure the generation process was: 1. Dice, a hardware wallet, and old wallet software are not the same. If you're unsure, consider moving your funds to a new securely generated seed.
If you don't remember how your seed phrase was generated, you don't fully know how secure are your funds. Dice, a hardware wallet, and an old discontinued software wallet are not the same. If you don’t remember, consider migrating to a new seed you can trust.
crypto-js: * no longer maintained * history of security weaknesses Still widely used: * NPM: ~15k dependents, ~18M weekly downloads * GitHub: ~2.5k forks, ~1M dependent repositories The weak PRNG behind Ill Bloom (CVE-2026-71851) was WordArray.random() in versions <4.0.0. A…
🎉Ill Bloom CVE issued, now downstream projects can be identified by security scanners. Bug introduced 12 years ago fixed in CryptoJS 4.x 6 years ago. 3.x kept being used for compatibility. This was possible thanks to the maintainer responding to our disclosure this week.
