Few applications need blockchains. Distributed consensus makes each computational step very expensive. Only apps for which users are willing to pay such a cost will make sense in the new decentralized paradigm. But what makes an app need a blockchain? A Brief History of Computer Innovation The first such app was bitcoin, the first free currency…

Zeppelin is proud to be sponsoring Devcon3. To celebrate, we are releasing a CTF hacking game at the start of the conference, on November 1st. The contest includes multiple stages consisting of security challenges and puzzles designed to test your smart contract hacking skills. Each consecutive stage increases in difficulty…

Last week, we announced zeppelinOS, the operating system for smart contract applications. We highlighted that “the rate of innovation in building decentralized applications is limited by the manual and duplicative efforts developers must make to ensure basic usability and security.” zeppelinOS aims to solve this problem. Based on our experience…

Last week, we saw one of the biggest hacks in the history of smart contract applications. ~30M USD were lost due to a simple programmer error, leaving critical functions open for anyone to call. …

The Storj team asked us to review and audit their new Storj Token (STORJ) code. We looked at their contracts and now publish our results. The audited contracts can be found in their storj-contracts repo. The version used for this report is commit 2bdeb27c0216d2f0889b6e7363d8a84b54cd7f39. Code quality is very good. Functionality…

The Brave team asked us to review and audit their new BAT Token contract code. We looked at their contracts and now publish our results. The audited contracts can be found in their basic-attention-token-crowdsale repo. The version used for this report is commit 17a5f8440a256a6dc5d8dd894b9615182c2901b2. Here’s our assessment and recommendations, in…

The Moeda team asked us to review and audit their new Moeda Token code. We looked at their contracts and now publish our results. The audited contracts can be found in their moeda repo. The version used for this report is commit b2bf23119d563e251b6f16b29b642bac43e76a64. The main contracts are MoedaToken.sol and Crowdsale.sol. …

As you may know from reading our blog, we do lots of security audits for blockchain-based projects. All projects in the space need someone external to take a fresh, unbiased, and skeptic look at their code. OpenZeppelin is an open repository of reusable smart contract modules. Since we started the…

The Wings team asked us to review and audit their new Token contract code. We looked at their code and now publish our results. The audited contract is at their contracts GitHub repo. The version used for this report is commit 1b308105a31c5b005c21fbbda3b1ff5b3fac9bae. The main contract file is Token.sol. Code quality…