What I'd check before depositing into a Morpho vault
Steakhouse USDC spreads deposits across lending markets. Its oracle dependencies and withdrawal queue raise questions the yield figure doesn't answer.
Read the writeupArticles & writeups
Security research, DeFi risk analysis and practical crypto tools.
Binance's $6.3B hack: the developer compromises and what happened next
Compromised developer devices, a stolen deployment token, and an Ethereum permission that kept the wallet exposed. My analysis of the reported attack and Binance's response.
Read the writeup
The key is secure. What can the bot make it sign?
A compromised bot can request harmful signatures while the private key stays securely stored. The signer and contract determine what those requests can do.
Read the writeup
How I'd test a DeFi wallet policy
An approved swap router can still send the proceeds to the wrong wallet. One recipient field exposes the gap in an otherwise reasonable policy.
Read the writeup
How I'd build DeFi monitoring that a team can actually use
Your monitors can spot a vault change. Who receives the alert, and what can they actually do about it?
Read the writeup
The DeFi audit is there. Is it the code we're actually using?
An audit covers a particular version of the code. Does it match the contracts and strategy currently handling your deposit?
Read the writeup
DeFi security due diligence: a vault review
Before a treasury deposits $250,000 into a vault, it needs to know where the money goes, who can change the rules and whether it can withdraw.
Read the writeup
EtherFi Cash card: is it worth it?
Spend supported balances directly or borrow against crypto? EtherFi Cash offers both, with different costs and risks behind the cashback rate.
Read the writeup