The Quantstamp Blog

Quantstamp Labs

What is a Re-Entrancy Attack?

Computer scientists say that a procedure is re-entrant if its execution can be interrupted in the middle, initiated over (re-entered), and both runs can complete without any errors in execution. In the context of Ethereum smart contracts, re-entrancy can lead to serious vulnerabilities.

August 19, 2019
Read more
Quantstamp Labs

Open Sourcing Our Bounty Protocol

We are open sourcing the code for our Bounty Protocol. A bounty protocol is a marketplace for developers to identify bugs in smart contracts that automation cannot detect. The Bounty Protocol has the potential to leverage software engineering talent from around the world to add an essential layer of infrastructure for blockchain security.

August 13, 2019
Read more
Quantstamp Announcements

Quantstamp Secures Binance's First Stablecoin

Quantstamp, a Y Combinator-backed blockchain security company, recently completed the audit of leading global cryptocurrency exchange Binance’s GBP-backed stablecoin, Binance GBP (BGBP). The BGBP token joins other stablecoins in the market including Coinbase’s USDC, Facebook’s Libra, MakerDAO’s Dai, and Bitfinex’s Tether, and is one of the first major stablecoins to be pegged to the British pound.

July 23, 2019
Read more
Quantstamp Announcements

Quantstamp Audits Ampleforth, a Digital-Asset-Protocol for Smart Commodity-Money

Quantstamp recently completed an audit of Ampleforth, a digital-asset-protocol for smart commodity-money and the first IEO on Tokinex (Ethfinex/Bitfinex IEO platform).

July 17, 2019
Read more
Quantstamp Labs

Economics of the Quantstamp Security Network

This post will explain the economics behind how the Quantstamp Security Network currently is designed so we can understand how node operators can earn QSP and how much smart contract scans cost for users. The two major influences to the economics of the Quantstamp Security Network are the price floor, and supply and demand.

July 11, 2019
Read more
Quantstamp Announcements

Quantstamp Audits Kakao's Blockchain Platform Klaytn

Quantstamp, a Y Combinator-backed blockchain security company, has completed its audit of smart contracts for Klaytn, the blockchain platform created by Kakao, the operator of South Korea’s dominant messaging platform KakaoTalk. Built by GroundX, a Kakao subsidiary, Klaytn is a business-centric blockchain platform designed for mass adoption.

July 9, 2019
Read more
Quantstamp Announcements

Quantstamp Joins Alliance Unveiling First Social Impact Stablecoin on Binance

Quantstamp is proud to announce that we are contributing to the Binance Charity Foundation’s Pink Care Token Project, which aims to increase opportunities for women in underdeveloped countries by providing them with feminine care products.

July 4, 2019
Read more
Quantstamp Labs

The Quantstamp Security Network V2 is Now Live on Ethereum Mainnet

Our latest release features an enhanced user experience and is designed to allow individuals to run a node without needing to be whitelisted by Quantstamp.

June 20, 2019
Read more
Quantstamp Announcements

Fundamentals of Smart Contract Security Released

Fundamentals of Smart Contract Security, the world’s first book dedicated to the subject of the security of blockchain applications, has been released. The book is written by smart contract security experts at Quantstamp.

June 13, 2019
Read more
Preview
Engineering Smart Contract Families for Solidity

Engineering Smart Contract Families for Solidity

Decentralized applications (dApps) (e.g., DEXes) increasingly span multiple Ethereum-compatible chains, such as a number of L2s. Although these chains are intended to be compatible with the Ethereum Virtual Machine (EVM), subtle differences in opcode implementations can significantly alter smart contract behavior and security. This poses an important question: how can developers efficiently code and manage smart contracts targeting different chains?

Quantstamp Announcements
April 24, 2025
Preview
Will EIP-7702 Affect Your Code?

Will EIP-7702 Affect Your Code?

The upcoming EVM hardfork, Pectra, amongst other changes, will implement EIP-7702, a proposal introducing a new transaction type that allows Externally Owned Accounts (EOAs) to delegate—and later undelegate—their behavior to smart contracts. While this upgrade enhances flexibility, it also disrupts long-standing security assumptions in many deployed contracts. With the risk that malicious actors may exploit these changes once Pectra is enabled, it is crucial to assess whether your codebase might be negatively impacted.

Quantstamp Announcements
April 4, 2025
Preview
When AI Meets Blockchain: A Guide to Securing the Next Frontier

When AI Meets Blockchain: A Guide to Securing the Next Frontier

In recent months, AI agents have attracted significant attention by the promise of assisting users and automating complex processes across diverse applications. The rapid performance improvements of Large Language Models (LLMs) in natural language processing (NLP) tasks drive this trend. However, as the capabilities and reach of these agents expand, so do the risks. The rapid pace of development, combined with the intricacies of integrating LLMs into real-world infrastructures—especially in dynamic fields like blockchain—has created an urgent need to scrutinize them for security, compliance, and operational integrity.

Quantstamp Announcements
January 8, 2025
Preview
Monthly Hacks Roundup: March 2024

Monthly Hacks Roundup: March 2024

March was a volatile month for the web3 security landscape, with significant security breaches totalling over $152 million in losses. Read on as we dive into four major security incidents and the trends from last month 👇

Quantstamp Announcements
April 19, 2024
Preview
Modular Account: How Audits Can Help Shape Standards And Catalyze Mass Adoption

Modular Account: How Audits Can Help Shape Standards And Catalyze Mass Adoption

Quantstamp recently conducted a smart contract audit for Alchemy’s Modular Account, a wallet implementation designed from the ground up for ERC-4337 and ERC-6900 compatibility including two plugins

Quantstamp Announcements
February 22, 2024
Preview
Quantstamp 2023 Web3 Security Year In Review

Quantstamp 2023 Web3 Security Year In Review

As the year comes to a close, we wanted to take a moment to reflect on this year’s biggest hacks, root causes, and noteworthy trends.

Quantstamp Announcements
January 8, 2024