Certora Blog
Technical research and practical perspectives for financial institutions, regulators and builders.
Smart Contract Security
Moonwell checked its 20M MAMO supply cap on deposits only. The attacker deposited 15M MAMO, sent 53M more straight to the market, pumped the price and borrowed $11M. We gave AutoProver the code as it stood three days before the attack.
Smart Contract Security
On September 24, 2026, Payy lost $1.92 million in USDC after forged zero-knowledge proofs passed its verifier. This analysis reconstructs the Barretenberg soundness bug, the fix released 73 days before the exploit, and a Lean model demonstrating the missing constraint.
Smart Contract Security
Auditing Stellar smart contracts requires understanding both application logic and Soroban’s execution model. Drawing on Certora’s audit findings, this article examines authorization, storage lifetime, cross-contract calls, asset accounting, and cross-chain messaging. It shows how inconsistencies between components can strand transfers or prevent message execution, and explains which invariants teams should define before an audit.
Smart Contract Security
The Bitget hack resulted in approximately $387.5 million in stolen assets after attackers exploited a zero-day in a third-party security product and compromised Bitget’s wallet infrastructure. Rather than stealing private keys, the attackers forged withdrawal requests that Bitget’s own signing system accepted as legitimate, allowing valid signatures over unauthorized transfers.
Smart Contract Security
The Tectonic exploit combined exchange-rate manipulation with TONIC price manipulation to inflate collateral and borrow approximately $120.4M across nine markets. This analysis breaks down the exploit, the property verified by Certora Prover, and how the accounting issue can be prevented.