QuillAudits Team

Read Time: 6 minutes We know smart contracts are lines of code on the blockchain that execute transactions automatically. These contracts are known for their immutable nature, and once they’re set in action, they stay that way forever.  On the other hand, we’ve got something called upgradable contracts. It means developers can tweak the code if needed. Bugs show

Read Time: 5 minutes It’s been a significant year for Account Abstraction(AA) with the introduction of the ERC-4337 Ethereum standard, signalling new possibilities for all the users of the network.  Now, while ERC-4337 was making waves, Ethereum’s community were hard at work creating Ethereum Improvement Proposals (EIPs) that aimed to fine-tune and optimize the deployment of AA.  These proposals

Read Time: 4 minutes Summary: On the 7th of November 2023, TrustPad was attacked. The attack was made possible due to a logical flaw in the staking contract. Around $151k worth of tokens were stolen by the attacker. About Project: TrustPad is a multi-chain launchpad. For more information, check out their website. Vulnerability Analysis & Impact: On-Chain Details: Attacker

Read Time: 4 minutes Over the past three quarters in 2023, the web3 losses totalling a  whopping $1.4 billion. These losses were caused by various attacks that took a toll on digital investments. Rug pulls, smart contract vulnerabilities and private key compromises were the main commonly observed attack vectors from all these hacks.  In this blog, let’s take a

Read Time: 6 minutes According to Binance research, as of August 2023, Telegram trading bots have been orchestrating transactions worth a staggering $283M. It’s a sum that might get you curious, but the question is: how did these bots suddenly find themselves in the crypto-verse spotlight? The story unfolds with trading bots like Maestro and UNIBOT igniting a FOMO(Fear

Read Time: 3 minutes As the Asian web3 market garners attention, piercing through the blockchain industry’s elite 1% might seem formidable, particularly amidst the flux of the current bear market. Nevertheless, for the truly devoted and visionary founders, Graviton’s upcoming second cohort beckons as a golden ticket to exponential growth. Interested in how? Let’s unveil. Graviton’s Distinct Edge: Why

Read Time: 3 minutes Summary: On the 18th of October 2023, HopeLend Protocol on the Ethereum chain was attacked. The attack was made possible by a Precision Loss vulnerability. Around $835k was stolen from the exploit. About Project: HopeLend is a decentralized, non-custodial lending protocol. To learn more about them, check out their documentation. Vulnerability Analysis & Impact: On-Chain