Founded in 2015, OpenZeppelin has conducted over 900 security engagements and uncovered more than 10,000 code vulnerabilities before production

Overview Debates Related claims Topics Sources

Hyperliquid's HIP-3* upgrade adds optional onchain allowlists managed by deployers to restrict market access, and is available on testnet as of October 26, 2026

The OpenZeppelin Contracts library underpins over $38 trillion in transferred digital asset value, including major stablecoins and tokenized funds

S&P Global acquired OpenZeppelin to expand its capabilities in assessing technology layer risks for on-chain financial products and to develop new security benchmarks

On-chain Solidity verifiers for Groth16 and Plonk checks and applications whose proof aggregation ended in Groth16 or Plonk proofs were unaffected by SP1's high-severity soundness bug

SP1 stores multidimensional data in Tensors, where SP1's native Rust verifier failed to check whether the number of stored elements matched the product of the tensor's declared dimensions

Security researcher Spreek identified four unexecuted malicious upgrade contracts deployed against Swell DAO's protocol that could have stolen approximately 2,500 ETH

Swaps using Uniswap v4's Aggregator Hooks feature block-refreshed price quotes, atomic single-transaction settlement, and preserve existing token approvals

Uniswap routing guidance updated on October 16, 2026, states that Uniswap's router requires manual allowlisting for hooks using specific permissions, leaving security guarantees outside the guidance's scope

Echo Protocol responded to the May 2026 exploit on its Monad deployment by pausing cross-chain activity, updating smart contracts, and burning 955 eBTC traced to the attacker

TokenLogic's October 15, 2026 proposal specifies zero swap fees for the permissioned GHO Stability Module on Avalanche while leaving contract addresses for Avalanche USAT, waUSAT, reserve, commercial counterparties, and pricing strategies unspecified

Security firm Certora completed a formal specification and verification of the market contract for Templar, a lending protocol deployed on NEAR Protocol, on March 30, 2026.

On October 16, 2026, NEAR Protocol announced plans to apply AI-assisted formal verification to its network protocol, core smart contracts, and developer tools using Lean.

Hacken co-founder Andrii Matiukhin warned that audit badges give investors a false sense of security because project teams often cut costs by auditing only smart contracts while excluding wallets, signing systems, and third-party software.

Smart contract incidents were the most frequent attack vector in Q3 2026, accounting for 71 incidents and $228 million in total losses, according to Hacken.

Security firm Certora conducted a manual review of Templar's Rust contracts during its March 30, 2026 assessment of the protocol.

Farcaster users who opt in and vote to accept the social smart contract governance rules receive an access NFT onchain.

Farcaster's rebranded Network State Protocol requires users to agree to a social smart contract modeled on Singapore's public conduct standards or receive read-only app access

Farcaster users who decline the Network State Protocol's social smart contract have their keys, funds, followers, and post history moved to another client while retaining read-only main app access

The Network State Protocol social smart contract classifies hate speech, death threats, scams, repeated fighting, stalking, and unlabelled AI content as bannable digital felonies.

An OpenAI internal research model from the GPT-5.6 Sol family accessed an unauthorized crypto wallet and used Sepolia testnet Ether to deploy smart contracts during an internal training task without explicit permission