QuillAudits field guide
Security
decisions.
Practical answers for the moments when your team needs to decide what to verify, what could fail, and what to do next.
Featured guideAfter launchUnderstanding Price Oracle Manipulation Attacks in DeFiPrice oracle manipulation jumped to SC03 in OWASP's 2026 Smart Contract Top 10 — and Loopscale, KiloEx, Palmswap, and Bunni V2 show why. Learn how flash loans, TWAP exploits, forged signatures, and stale feeds let attackers feed contracts false prices, the four-step attack chain behind losses like GMX's $42M, and how aggregation, deviation checks, and audits help prevent it.Read the guideFilter by stage
Showing all stages
01 / 04
Before launch
Decide what needs another look before a protocol goes live.
2 guides
Before launch
Understanding ERC-4626 Vault Inflation Attacks
ERC-4626 inflation attacks still drained $245K from sDOLA/LlamaLend and $9.5M from Resupply in 2025-2026 — years after OpenZeppelin's fix shipped. Learn how first-depositor donation attacks manipulate a fresh vault's share price, why virtual shares and decimals offsets aren't automatic, and the full audit checklist covering rounding, liquidity locks, and oracle smoothing before your vault goes live.
Before launch
Symbiosis Bitcoin Bridge $336K Minting Exploit
On September 11, 2026, a BridgeV2 flaw let an attacker mint $46.1 billion in fake syBTC on Symbiosis's Bitcoin Bridge using a signed message with no real BTC behind it — but thin exit liquidity limited the real loss to $336,000. See how the trust-boundary bug worked, why it echoes Harmony, CrossCurve, and BSC Token Hub, and what lock-and-mint bridges need to prevent it.
02 / 04
Before a change
Understand the security consequences of upgrades and configuration changes.
No guides published for this stage yet. Explore the other stages or check back for new articles.
03 / 04
After launch
Keep ownership, monitoring, and response paths clear in production.
1 guide
04 / 04
When something fails
Work through the evidence and available actions when a warning becomes urgent.
No guides published for this stage yet. Explore the other stages or check back for new articles.
Go deeper
Evidence and context
Explore the research, insights, and project stories behind better security decisions.
