Blog

Web3 security research articles, guides and updates from Dedaub. Subscribe to be the first to know about new content.

NEW

Tech Deep Dive

You Pay For What You Touch: Locality as Ethereum's Next Cost Model

This post is based on a talk given by Neville Grech at the Stateless Summit 2026, drawing on a 2021 study Dedaub conducted for the Ethereum Foundation …

10 April 2026

START READING

NEW

Tech Deep Dive

You Pay For What You Touch: Locality as Ethereum's Next Cost Model

This post is based on a talk given by Neville Grech at the Stateless Summit 2026, drawing on a 2021 study Dedaub conducted for the Ethereum Foundation …

10 April 2026

START READING

CLEAR

Company Announcements

VIEW ALL

News

Dedaub at EthCC[8] | Smart Contract Security Before and After Deployment

Dedaub is heading to Cannes! As a WAGMI sponsor at EthCC[8], we’re bringing end-to-end smart contract security, …

11 June 2025

A Discussion on the Immunefi Firewall: Design, Use Cases, and Real-World DeFi Security

DeFi Needs Firewalls: From Program Analysis to Real-World Defense A conversation between Mitchell Amador (CEO, Immunefi) and Yannis Smaragdakis (Co-founder, Dedaub) Introduction In this conversation, Dedaub co-founder Yannis Smaragdakis and Mitchell Amador (CEO of Immunefi) discuss the evolution of smart contract security, drawing on decades of program analysis research and hands-on experience securing real-world DeFi protocols.

15 January 2026

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

Introduction to Move The Move language is a next-generation smart contract programming language originally designed for the Libra (later Diem) blockchain, a project since discontinued. Today, Move powers platforms like Aptos and Sui. Its hallmark is a focus on safety and expressiveness, particularly regarding digital assets. It enforces strong resource semantics, making it difficult to accidentally lose or duplicate tokens, a significant advantage over traditional smart contract languages. The Early Days: Move and (the Lack of) Reentrancy In web3 security, reentrancy vulnerabilities are notorious for enabling high-profile exploits (such as the DAO hack on Ethereum). Reentrancy refers to the execution of a second call to a contract before the first invocation is completed. Move, by design, did not support reentrancy in its early versions.

17 September 2025

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At the same time, ERC-20 transfers on Ethereum YTD are up ~36% vs. 2024 (same period), with over 660M transfers expected by end-2025. Bar chart comparing the number of ERC-20 tokens created on Ethereum between January 1 and September 3 over two years. In 2024, 160,807 tokens were created, shown as a purple bar. In 2025, 185,745 tokens were created, shown as a cyan bar.

9 September 2025

Dedaub at EthCC[8] | Smart Contract Security Before and After Deployment

Dedaub is heading to Cannes! As a WAGMI sponsor at EthCC[8], we’re bringing end-to-end smart …

11 June 2025

Dedaub Partners with Immunefi to Bring Native Firewall Capabilities to Magnus

Dedaub Partners with Immunefi to Bring Native Firewall Capabilities to Magnus Dedaub has joined …

5 May 2025

Dedaub at ETHDenver 2025 | Showcasing Real-Time Security Monitoring

Dedaub is excited to sponsor ETHDenver once again! This year, we will showcase the Dedaub Security …

18 February 2025

Dedaub Security Suite Updates Q4-24

FREE MONITORING for all! The Dedaub Security Suite continues to evolve with features designed to …

12 December 2024

Research

VIEW ALL

A Discussion on the Immunefi Firewall: Design, Use Cases, and Real-World DeFi Security

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Transient Storage in the wild: An impact study on EIP-1153

With the recent introduction of transient storage in Ethereum, the landscape of state management within the Ethereum Virtual Machine (EVM) has evolved once again. This latest development has prompted us at Dedaub to take a fresh look at how data is stored and accessed in the EVM ecosystem, as well as analyze how the new transient storage is used in real-world applications. It’s important to note that even though transient storage has properly been integrated into the EVM, the transient modifier is still not yet available in Solidity. Therefore, all usage of transient storage is directly from the TSTORE and TLOAD opcodes using inline assembly, meaning usage is not that widespread yet, and could also be at a higher risk of vulnerability.

A Discussion on the Immunefi Firewall: Design, Use Cases, and Real-World DeFi Security

DeFi Needs Firewalls: From Program Analysis to Real-World Defense A conversation between Mitchell …

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At …

Transient Storage in the wild: An impact study on EIP-1153

With the recent introduction of transient storage in Ethereum, the landscape of state management …

TECH DEEP DIVE

With more than 200 Security audits, see how we've helped some of the most prominent names in Web3.

VIEW ALL DEEP DIVES

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

TECH DEEP DIVE

With more than 200 Security audits, see how we've helped some of the most prominent names in Web3.

VIEW ALL DEEP DIVES

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

All Posts

VIEW ALL

Research

A Discussion on the Immunefi Firewall: Design, Use Cases, and Real-World DeFi Security

DeFi Needs Firewalls: From Program Analysis to Real-World Defense A conversation between Mitchell Amador (CEO, …

15 January 2026

Tech Deep Dive

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

Introduction to Move The Move language is a next-generation smart contract programming language originally designed for …

17 September 2025

Research

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At the same time, ERC-20 …

9 September 2025

Research

A Discussion on the Immunefi Firewall: Design, Use Cases, and Real-World DeFi Security

DeFi Needs Firewalls: From Program Analysis to Real-World Defense A conversation between Mitchell …

15 January 2026

Tech Deep Dive

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

Introduction to Move The Move language is a next-generation smart contract programming language …

17 September 2025

Research

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At …

9 September 2025

VIEW ALL