Smart-Contracts on CuraSec

DeFi Audit Scope Gap: 67.6% of H1 2026 Attack Paths Outside Audit Coverage

Mon, 17 Aug 2026 13:03:16 +0000

Engineer — Skip
SOC/IR — Skip
Leader — Learn: Research across 135 DeFi incidents shows that the ‘audited’ label routinely overstates project-wide assurance — 67.6% of attack paths fell outside all identified pre-incident audit scopes. Useful context when evaluating what your own audit attestations actually cover in board or customer conversations.

Transaction Simulation Phishing Bypasses Crypto Wallet Defenses

Mon, 03 Aug 2026 15:12:30 +0000

Engineer — Learn: Novel attack class showing how state-dependent smart contracts can make malicious transactions appear benign during wallet simulation previews; relevant for teams building Web3 integrations or DeFi applications, but no patch or configuration action is available for typical enterprise stacks.
SOC/IR — Skip
Leader — Skip

LLM + Code Slicing for NFT Smart Contract Vulnerability Detection

Mon, 27 Jul 2026 15:10:27 +0000

Engineer — Learn: Interesting research combining code slicing with LLM analysis to detect reentrancy and overflow in ERC-721 contracts, but no tooling release or actionable change to running systems today.
SOC/IR — Skip
Leader — Skip

KASS: Multi-Agent Framework Automates Smart Contract Exploit Generation

Mon, 20 Jul 2026 14:31:24 +0000

Engineer — Learn: Research demonstrates a multi-agent pipeline that auto-generates executable exploits for 94% of tested smart contracts, a meaningful capability jump over prior tools; worth evaluating if your team ships or audits Solidity code, but no running-system action needed today.
SOC/IR — Skip
Leader — Skip