Certora Blog
Technical research and practical perspectives for financial institutions, regulators and builders.
Formal Verification
A vulnerability in the Soroban SDK caused equivalent cryptographic values to compare as different, potentially allowing double withdrawals in affected contracts. This case study explores CVE-2026-32322, shows how Certora's Sunbeam Prover reproduces the issue with a simple formal verification rule, and explains what developers should check when using affected SDK versions.
Smart Contract Security
Cross-chain swaps depend on more than bug fixes. This post explores how Certora's security review of 1inch's commit–reveal mechanism helped harden timing windows, deposit infrastructure, and fee configuration — so users can swap across chains with confidence.
Smart Contract Security
On July 9th, the Texture team detected that the audited Texture Vaults contract was compromised. Within minutes, the Texture and Certora teams developed and validated a fix via multiple rounds of manual review.
Smart Contract Security
On June 25th, the Silo team informed us that an incident occurred in which overly broad approvals inadvertently enabled a borrow manipulation exploit. Importantly, this module is entirely separated from the core Silo contracts - no vaults, markets, or user funds were affected or at risk.
Smart Contract Security
Learn how Certora’s formal verification secures Uniswap v4, ensuring the safety of billions in user funds through mathematical proofs and advanced security measures.
Smart Contract Security
Certora’s rigorous audit and formal verification strengthened Symbiotic’s protocol, addressing issues and ensuring secure mainnet deployment.
Smart Contract Security
AAVE started in 2017, which in the world of DeFi, a domain that has been popular since only 2017, is considered OG. Aave, or in its former name ETHLend, started as a P2P lending protocol, but later transformed into a liquidity pool-based protocol in early 2020. Back then, Certora, a small company with major talent and advanced-yet-unripe technology, aspired to enhance the security of an innovative protocol that prioritizes safeguarding against breaches.