BLOG
Financial logic security, written down.
February 24, 2026
Beyond Reentrancy: Smart Contract Risks That Can Escape Traditional Reviews
Reentrancy deserves the attention it gets, but settlement bypasses, oracle manipulation, broken access control, and unchecked external calls continue to create serious security risks in production smart contracts.
WEB3SOLIDITYSMART-CONTRACT-SECURITY
February 3, 2026
How to Detect Double-Spend Race Conditions in Node.js Before They Ship
The check-then-act pattern that allows concurrent requests to spend the same balance twice, and how to identify it before it reaches production.
NODEJSRACE-CONDITIONAPPLICATION-SECURITY
January 12, 2026
Business Logic Vulnerabilities vs the OWASP Top 10: Why Generic Security Scanners Can Miss Them
SQL injection and XSS follow recognizable patterns. Business logic vulnerabilities emerge from how an application behaves-and that requires a different way of thinking about security.
BUSINESS-LOGICOWASPAPPLICATION-SECURITY