Introduction to Move The Move language is a next-generation smart contract programming language originally designed for the Libra (later Diem) blockchain, a project since discontinued. Today, Move powers platforms like Aptos and Sui. Its hallmark is a focus on safety and expressiveness, particularly regarding digital assets. It enforces strong resource semantics, making it difficult to accidentally lose or duplicate tokens, a significant advantage over traditional smart contract languages. The Early Days: Move and (the Lack of) Reentrancy In web3 security, reentrancy vulnerabilities are notorious for enabling high-profile exploits (such as the DAO hack on Ethereum). Reentrancy refers to the execution of a second call to a contract before the first invocation is completed. Move, by design, did not support reentrancy in its early versions.

17 September 2025

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At the same time, ERC-20 transfers on Ethereum YTD are up ~36% vs. 2024 (same period), with over 660M transfers expected by end-2025. Bar chart comparing the number of ERC-20 tokens created on Ethereum between January 1 and September 3 over two years. In 2024, 160,807 tokens were created, shown as a purple bar. In 2025, 185,745 tokens were created, shown as a cyan bar.

9 September 2025

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

[by the Dedaub team] A major attack on several prominent DeFi protocols over many blockchains was (largely) successfully mitigated last week. The threat was potentially affecting (at a minimum) tens of millions of overall value, and yet the attacker was waiting for even more before making their move! The most technically-interesting aspects of the threat don’t have to do with the infection method, but with the attack’s clandestine nature: the attack contracts had been hiding in plain sight for weeks, infiltrating (in custom ways!) multiple protocols, while making sure that they remain entirely transparent to both regular protocol execution and to contract browsing on etherscan.

15 July 2025

Dedaub at EthCC[8] | Smart Contract Security Before and After Deployment

Dedaub is heading to Cannes! As a WAGMI sponsor at EthCC[8], we’re bringing end-to-end smart …

11 June 2025

Dedaub Partners with Immunefi to Bring Native Firewall Capabilities to Magnus

Dedaub Partners with Immunefi to Bring Native Firewall Capabilities to Magnus Dedaub has joined …

5 May 2025

Dedaub at ETHDenver 2025 | Showcasing Real-Time Security Monitoring

Dedaub is excited to sponsor ETHDenver once again! This year, we will showcase the Dedaub Security …

18 February 2025

Dedaub Security Suite Updates Q4-24

FREE MONITORING for all! The Dedaub Security Suite continues to evolve with features designed to …

12 December 2024

Research

VIEW ALL

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Transient Storage in the wild: An impact study on EIP-1153

With the recent introduction of transient storage in Ethereum, the landscape of state management within the Ethereum Virtual Machine (EVM) has evolved once again. This latest development has prompted us at Dedaub to take a fresh look at how data is stored and accessed in the EVM ecosystem, as well as analyze how the new transient storage is used in real-world applications. It’s important to note that even though transient storage has properly been integrated into the EVM, the transient modifier is still not yet available in Solidity. Therefore, all usage of transient storage is directly from the TSTORE and TLOAD opcodes using inline assembly, meaning usage is not that widespread yet, and could also be at a higher risk of vulnerability.

EIP-3074 Impact Study

Pectra’s EIP-3074, and its Impact on Deployed Smart Contracts Introduction Ethereum’s end-user experience (UX) is about to be significantly enhanced with the introduction of EIP-3074, which will be part of the upcoming Pectra update. This proposal intends to improve wallets’ functionality by directly enabling more complex operations similar to smart contracts within traditional wallet architectures. It improves blockchain user UX and solves problems like transaction bundling and sponsored transactions. For a study commissioned by the Ethereum Foundation, Dedaub identified the potential impacts of EIP-3074 on all known deployed smart contracts as of the date of the study. The results of our analysis are becoming increasingly relevant as we approach the implementation EIP-3074. You can read the original study here.

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At …

Transient Storage in the wild: An impact study on EIP-1153

With the recent introduction of transient storage in Ethereum, the landscape of state management …

EIP-3074 Impact Study

Pectra’s EIP-3074, and its Impact on Deployed Smart Contracts Introduction Ethereum’s end-user …

TECH DEEP DIVE

With more than 200 Security audits, see how we've helped some of the most prominent names in Web3.

VIEW ALL DEEP DIVES

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

TECH DEEP DIVE

With more than 200 Security audits, see how we've helped some of the most prominent names in Web3.

VIEW ALL DEEP DIVES

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

All Posts

VIEW ALL

Tech Deep Dive

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

Introduction to Move The Move language is a next-generation smart contract programming language originally designed for …

17 September 2025

Research

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At the same time, ERC-20 …

9 September 2025

Tech Deep Dive

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

[by the Dedaub team] A major attack on several prominent DeFi protocols over many blockchains was (largely) successfully …

15 July 2025

Tech Deep Dive

Understanding Reentrancy in Aptos Move: Evolution, Challenges, and Protections

Introduction to Move The Move language is a next-generation smart contract programming language …

17 September 2025

Research

ERC 20 on Ethereum: Growth Risks and Hidden Traps in 2025

Trends New ERC-20 token creation on Ethereum YTD has increased by ~15% vs. 2024 (same period). At …

9 September 2025

Tech Deep Dive

The CPIMP Attack: an insanely far-reaching vulnerability, successfully mitigated

[by the Dedaub team] A major attack on several prominent DeFi protocols over many blockchains was …

15 July 2025

VIEW ALL