Introducing Sherlock AI V2.2

Join Our Community
and Stay Up to Date

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Vulnerability Analysis: Numa Price Manipulation (August 2025)

On August 10th, 2025, Numa was exploited through a price manipulation in its synthetic minting logic. Our postmortem explains how the attack unfolded, the technical root cause, and lessons for builders.

Sep 17, 2025

The Top 10 Most Threatening Vulnerabilities in Web3 Protocols: #10 Integer Overflow/Underflow

Maintaining numerical integrity is essential to protocol security. Without bounded and validated operations, protocols lose system assurance and expose themselves to silent failures that corrupt state, halt execution, or distort incentives. Robust arithmetic is not an optimization detail - it’s a core requirement for trustworthy DeFi.

Aug 29, 2025

5 Steps to Becoming a Top-Level Smart Contract Auditor

A proven, five-step blueprint from Sherlock’s top auditors on how to start earning money as a smart contract auditor in under a month. Learn how to master codebases, build your checklist, think like an attacker, and accelerate your growth through fast feedback.

Aug 5, 2025

GMX Exchange Hack Explained

GMX Exchange Hack Explained: $42M Drained via Re-Entrancy Exploit. Written in collaboration with Blackthorn Lead Security Partner, Panprog.

Jul 17, 2025

When Audits Go Head-to-Head: How Case Studies Reveal the Most Effective Methodology

When it comes to the blockchain, securing trust requires bulletproof auditing. But how can teams determine which provider delivers truly rigorous security reviews?

Jun 2, 2025

Why Careful Validation Matters: A Vulnerability Originating in Inline Assembly

At Sherlock, one of the top Lead Senior Watsons, recently uncovered and helped to resolve a vulnerability related to the lack of overflow protection in Solidity's inline assembly. Read on for the details behind the vulnerability that was detected, allowing the arbitrary call of functions from a vulnerable smart contract.