Amber Group’s security team participated in the NumenCTF and secured third place by solving 13 out of 16 challenges.

Overview of Decentralized Social Networks — Earlier this year, Twitter axed third-party apps without warning. A few weeks later, it removed free API access — its cheapest package now costs $42k per month. Most users are attuned to this reality by now. Our most important social media apps, from Facebook and TikTok to WeChat and Grab…

Introduction Ethereum will complete the final stage of its transition to proof of stake in a month. After the upcoming “Shapella” upgrade (a portmanteau of “Shanghai” and “Capella”), over 16 million ETH of staked Ether can be withdrawn from the Beacon Chain. …

Introduction About a decade ago, the world saw a rise in the growth of mobile smartphones. At the time, some large companies thought they could revolutionize smartphones by introducing modular architectures. In 2013, Google announced Project Ara, a new smartphone with a modular design. Unlike today’s “monolithic” phones, made of sealed-off…

Smart contracts aren’t that smart When someone purchases a digital asset stored on a blockchain, it may seem like moving it to a different blockchain is a safe and easy process. After all, in the world of traditional finance, moving money or assets from one database to another is a generally straightforward, even trivial process…

We must continue to evolve When someone first decides to plunge into decentralized finance, NFTs, or any other type of on-chain activity, they are hit with the realization that they first need to acquire a wallet. Unfortunately, the experience of using an on-chain wallet is much different than the user experience most people are accustomed…

In the past three years, we have witnessed hundreds of blockchain hacks resulting in losses of billions of dollars. Although many of them are related to smart contracts, the underlying blockchain client software is the crucial component to the achievement of consensus and the protection of the network. According to…

The CTF MOVEment is a major Move security competition for security professionals and developers who are interested in the Move language and the Move ecosystem. Sponsored by Aptos Foundation and hosted by MoveBit on 10–12 December, the CTF consisted of 5 challenges and attracted a total of 102 participants around…

On Oct 18th 2022, the blockchain security team at Amber Group discovered a critical vulnerability in two Mai Finance’s vaults (SCSEMVT and YCSEMVT). This vulnerability would allow an attacker to manipulate the collateral price, borrow all the funds from the pool, and walk away with bad debts. We reported the…