https://okcontract.com/ OKcontract Labs researches and builds onchain security infrastructure, from open-source libraries such as Cells to source-available products and verifiable systems. en https://okcontract.com/blog/summer-fi-hack-the-attack-surface-has-moved-to-vault-infrastructure https://okcontract.com/blog/summer-fi-hack-the-attack-surface-has-moved-to-vault-infrastructure Wed, 08 Jul 2026 00:00:00 GMT The $6 million Summer.fi exploit shows how vault accounting, stale asset values, strategy adapters, and operational controls define DeFi's attack surface. OKcontract Labs https://okcontract.com/blog/can-erc-4626-exploits-be-prevented https://okcontract.com/blog/can-erc-4626-exploits-be-prevented Wed, 01 Jul 2026 00:00:00 GMT On July 1, 2026, Edel Finance, an Ethereum-based Aave-fork lending market, suffered an oracle manipulation exploit that caused an estimated loss of $403,000 according to Defimon Alerts. OKcontract Labs https://okcontract.com/blog/valid-signatures-are-not-enough https://okcontract.com/blog/valid-signatures-are-not-enough Tue, 19 May 2026 00:00:00 GMT April was one of the worst months crypto has seen for security losses. PeckShield reported 40 major hacks totaling about $647M in losses, the largest being Drift Protocol and KelpDAO. OKcontract Labs https://okcontract.com/blog/cryptos-biggest-security-failures-in-early-2026-weren-t-smart-contract-hacks https://okcontract.com/blog/cryptos-biggest-security-failures-in-early-2026-weren-t-smart-contract-hacks Fri, 06 Mar 2026 00:00:00 GMT Early 2026 was not defined by one class of exploit. The total losses reported by security analysts varied widely because they counted different perimeters of risk. OKcontract Labs https://okcontract.com/blog/navigating-the-storm-lessons-from-2025-crypto-attacks-in https://okcontract.com/blog/navigating-the-storm-lessons-from-2025-crypto-attacks-in Fri, 23 Jan 2026 00:00:00 GMT A sourced review of 2025 crypto attacks, from software supply chains and protocol exploits to compromised signing infrastructure, with practical security lessons. OKcontract Labs https://okcontract.com/blog/crypto-attackers-dont-take-year-end-holidays https://okcontract.com/blog/crypto-attackers-dont-take-year-end-holidays Mon, 05 Jan 2026 00:00:00 GMT Christmas week has a predictable rhythm onchain: Fewer engineers awake, more retail activity, more “quick checks” on phones, more copying and pasting, more trust placed in familiar interfaces. OKcontract Labs https://okcontract.com/blog/the-38-million-ghost-in-the-machine https://okcontract.com/blog/the-38-million-ghost-in-the-machine Tue, 02 Dec 2025 00:00:00 GMT How a single biased nonce drained Upbit’s Solana hot wallet… and why the fix has been staring us in the face for years. OKcontract Labs https://okcontract.com/blog/it-starts-with-a-totally-normal-npm-install https://okcontract.com/blog/it-starts-with-a-totally-normal-npm-install Tue, 25 Nov 2025 00:00:00 GMT You pull in a familiar SDK on a Monday morning. The command scrolls by, a few extra lines from a preinstall script you don’t really read, and that’s it. No red flags. No flashing lights. OKcontract Labs https://okcontract.com/blog/when-a-feature-file-tripped-the-internet https://okcontract.com/blog/when-a-feature-file-tripped-the-internet Thu, 20 Nov 2025 00:00:00 GMT This post lays out how we think about incidents like Cloudflare’s outage this week, why pure smart‑contract control planes with timelocks change the failure modes, and where zero‑knowledge proofs fit. OKcontract Labs https://okcontract.com/blog/balancer-v2s-overlooked-guard https://okcontract.com/blog/balancer-v2s-overlooked-guard Mon, 03 Nov 2025 00:00:00 GMT Public forensics of the Balancer v2 incident point to a vault-level authorization or state-transition failure—and show why audited systems still need layered controls. OKcontract Labs https://okcontract.com/blog/cisas-f5-alarm-cloud-control-planes-break https://okcontract.com/blog/cisas-f5-alarm-cloud-control-planes-break Mon, 20 Oct 2025 00:00:00 GMT CISA's emergency F5 directive shows why concentrated, opaque control planes create systemic risk—and what observable, delayed, policy-constrained control can change. OKcontract Labs https://okcontract.com/blog/tees-were-never-the-answer-for-signing-blockchain-transactions https://okcontract.com/blog/tees-were-never-the-answer-for-signing-blockchain-transactions Fri, 03 Oct 2025 00:00:00 GMT The splashy piece on Intel and AMD TEEs falling to cheap physical interposers isn’t a plot twist so much as the epilogue. OKcontract Labs https://okcontract.com/blog/casinos-just-showed-airports-how-to-handle-cyber-chaos-crypto-security-is-building-the-next https://okcontract.com/blog/casinos-just-showed-airports-how-to-handle-cyber-chaos-crypto-security-is-building-the-next Wed, 24 Sep 2025 00:00:00 GMT Airport outages and casino recovery plans reveal the same lesson: isolate critical systems, constrain trust, and design deployment and recovery before an incident. OKcontract Labs https://okcontract.com/blog/mpc-doesnt-save-you-from-your-private-api https://okcontract.com/blog/mpc-doesnt-save-you-from-your-private-api Thu, 18 Sep 2025 00:00:00 GMT MPC removes single-key risk, but offchain transaction builders and policy APIs can still tell distributed signers to authorize the wrong operation. OKcontract Labs https://okcontract.com/blog/nih-wasnt-the-sin-outsourcing-every-keystroke-was https://okcontract.com/blog/nih-wasnt-the-sin-outsourcing-every-keystroke-was Tue, 09 Sep 2025 00:00:00 GMT The latest npm compromise showed how a tiny change deep in a dependency supply chain can rewrite what users see, sign, and send. OKcontract Labs https://okcontract.com/blog/wrapping-up-ethsf-ai-meets-blockchain-in-the-bay https://okcontract.com/blog/wrapping-up-ethsf-ai-meets-blockchain-in-the-bay Thu, 10 Apr 2025 00:00:00 GMT This year’s ETHSF brought together builders, researchers, and enthusiasts for a series of events covering both blockchain and AI developments. OKcontract Labs https://okcontract.com/blog/wrapping-up-ethdenver-2025 https://okcontract.com/blog/wrapping-up-ethdenver-2025 Tue, 18 Mar 2025 00:00:00 GMT What ETHDenver 2025 revealed about transactional AI agents, cross-chain liquidity, and the security infrastructure needed for both. OKcontract Labs https://okcontract.com/blog/shaping-the-agentic-future-connecting-smart-contracts-and-ai-agents https://okcontract.com/blog/shaping-the-agentic-future-connecting-smart-contracts-and-ai-agents Tue, 25 Feb 2025 00:00:00 GMT A practical architecture for connecting AI agents to smart contracts with constrained interactions, smart accounts, and verifiable transaction middleware. OKcontract Labs https://okcontract.com/blog/abi2ui-is-here-our-final-milestone-in-the-optimism-rfg https://okcontract.com/blog/abi2ui-is-here-our-final-milestone-in-the-optimism-rfg Thu, 23 Jan 2025 00:00:00 GMT ABI2UI is an open-source interface generator that turns smart-contract ABIs into usable forms, with readable parameters, integer conversion, and reusable constraints. OKcontract Labs https://okcontract.com/blog/product-updates-introducing-okcontract-user-ids-pages-refined-navigation-and-more https://okcontract.com/blog/product-updates-introducing-okcontract-user-ids-pages-refined-navigation-and-more Thu, 16 Jan 2025 00:00:00 GMT OKcontract 2.0 adds multi-account user IDs, shareable pages, clearer ABI navigation, interface refinements, and a set of reliability fixes. OKcontract Labs https://okcontract.com/blog/the-ai-first-future-of-web3-and-why-middleware-matters https://okcontract.com/blog/the-ai-first-future-of-web3-and-why-middleware-matters Tue, 07 Jan 2025 00:00:00 GMT Why AI agents need deterministic, verifiable middleware before they can safely automate DeFi transactions and other onchain operations. OKcontract Labs https://okcontract.com/blog/introducing-fred-a-functional-reactive-editor https://okcontract.com/blog/introducing-fred-a-functional-reactive-editor Fri, 03 Jan 2025 00:00:00 GMT Fred is an open-source functional reactive editor for structured data, built on Cells as part of OKcontract's Optimism ABI2UI research grant. OKcontract Labs