Blog

Insights, research, and analysis from the HasFocus security team.

ERC20 Patterns Through an Auditor's Lens: Receipt Tokens, Ownership, and Checks-Effects-Interactions
General

ERC20 Patterns Through an Auditor's Lens: Receipt Tokens, Ownership, and Checks-Effects-Interactions

Given that ERC-20 is the blueprint for fungible tokens, it is not surprising that issues involving ERC20 are incredibly common in Web3 projects and...

May 28, 20269 min read
Access Control Vulnerabilities: Field Notes from the Auditor's Desk
General

Access Control Vulnerabilities: Field Notes from the Auditor's Desk

If I had to pick the single category of bug that I find most often in production Solidity, it would be broken access control. The mistakes are rarely glamorous...

May 24, 20269 min read