# The Quantstamp Blog .png)](/content/blog/may-2026-security-beat/index.html) ## [May 2026 Security Beat](/content/blog/may-2026-security-beat/index.html) $59.52M was lost across 29 crypto incidents, down sharply from April's ~$635M. No single hack carried the month. The bigger story happened off-chain, where a self-propagating npm worm called Mini Shai-Hulud kept resurfacing in new waves through the month, ultimately spanning more than 1,000 malicious package versions across the npm ecosystem. [Read more](/content/blog/may-2026-security-beat/index.html) ## [April 2026 Security Beat: Same Actors, New Targets](/content/blog/april-2026-security-beat-same-actors-new-targets/index.html) April was undoubtedly a rocky month in security. $635M was lost across 28 crypto incidents. The Axios npm package was compromised on day one, exposing an estimated 600,000 installs in three hours. Vercel was breached through a third party. Three major CVEs under active exploitation. Here's the month in security 👇 [Read more](/content/blog/april-2026-security-beat-same-actors-new-targets/index.html) ## [Engineering Smart Contract Families for Solidity](/content/blog/engineering-smart-contract-families-for-solidity/index.html) Decentralized applications (dApps) (e.g., DEXes) increasingly span multiple Ethereum-compatible chains, such as a number of L2s. Although these chains are intended to be compatible with the Ethereum Virtual Machine (EVM), subtle differences in opcode implementations can significantly alter smart contract behavior and security. This poses an important question: how can developers efficiently code and manage smart contracts targeting different chains? [Read more](/content/blog/engineering-smart-contract-families-for-solidity/index.html) ## [Will EIP-7702 Affect Your Code?](/content/blog/will-eip-7702-affect-your-code/index.html) The upcoming EVM hardfork, Pectra, amongst other changes, will implement EIP-7702, a proposal introducing a new transaction type that allows Externally Owned Accounts (EOAs) to delegate—and later undelegate—their behavior to smart contracts. While this upgrade enhances flexibility, it also disrupts long-standing security assumptions in many deployed contracts. With the risk that malicious actors may exploit these changes once Pectra is enabled, it is crucial to assess whether your codebase might be negatively impacted. [Read more](/content/blog/will-eip-7702-affect-your-code/index.html) ## [When AI Meets Blockchain: A Guide to Securing the Next Frontier](/content/blog/when-ai-meets-blockchain-a-guide-to-securing-the-next-frontier/index.html) In recent months, AI agents have attracted significant attention by the promise of assisting users and automating complex processes across diverse applications. The rapid performance improvements of Large Language Models (LLMs) in natural language processing (NLP) tasks drive this trend. However, as the capabilities and reach of these agents expand, so do the risks. The rapid pace of development, combined with the intricacies of integrating LLMs into real-world infrastructures—especially in dynamic fields like blockchain—has created an urgent need to scrutinize them for security, compliance, and operational integrity. [Read more](/content/blog/when-ai-meets-blockchain-a-guide-to-securing-the-next-frontier/index.html) ## [Monthly Hacks Roundup: March 2024](/content/blog/monthly-hacks-roundup-march-2024/index.html) March was a volatile month for the web3 security landscape, with significant security breaches totaling over $152 million in losses. Read on as we dive into four major security incidents and the trends from last month 👇 [Read more](/content/blog/monthly-hacks-roundup-march-2024/index.html) ## [Modular Account: How Audits Can Help Shape Standards And Catalyze Mass Adoption](/content/blog/alchemy-modular-account-how-audits-can-help-shape-standards-and-catalyze-mass-adoption/index.html) Quantstamp recently conducted a smart contract audit for Alchemy’s Modular Account, a wallet implementation designed from the ground up for ERC-4337 and ERC-6900 compatibility including two plugins [Read more](/content/blog/alchemy-modular-account-how-audits-can-help-shape-standards-and-catalyze-mass-adoption/index.html) ## [Quantstamp 2023 Web3 Security Year In Review](/content/blog/quantstamp-2023-web3-security-year-in-review/index.html) As the year comes to a close, we wanted to take a moment to reflect on this year’s biggest hacks, root causes, and noteworthy trends. [Read more](/content/blog/quantstamp-2023-web3-security-year-in-review/index.html) ## [DeFi Protection: Compensating Users For DeFi Losses](/content/blog/defi-protection-compensating-users-for-defi-losses/index.html) Quantstamp has developed a framework for compensating users affected by DeFi losses, aiming to set new industry standards. [Read more](/content/blog/defi-protection-compensating-users-for-defi-losses/index.html) ## [Partnering with Toku to Enhance Web3 Security & Payroll Practices](/content/blog/partnering-with-toku-to-enhance-web3-security-payroll-practices/index.html) Quantstamp is thrilled to announce a strategic partnership with Toku, marking a significant milestone in our commitment to web3 security and compliance. [Read more](/content/blog/partnering-with-toku-to-enhance-web3-security-payroll-practices/index.html) ## [Why Bitcoin is Capturing Enterprise Attention](/content/blog/why-bitcoin-is-capturing-enterprise-attention/index.html) MicroStrategy made headlines this summer as the first publicly-traded company to buy Bitcoin as part of its capital allocation strategy. Since then, other companies have followed suit. Learn how current economic conditions and the unique properties of Bitcoin have driven these decisions. [Read more](/content/blog/why-bitcoin-is-capturing-enterprise-attention/index.html) ## [Formally Verifying Hedera Hashgraph's Stablecoin Framework](/content/blog/quantstamp-stablecoin-case-study-formally-verifying-hedera-hashgraphs-stablecoin-framework/index.html) Quantstamp created and formally verified a specification for Hedera Hashgraph stablecoins. This simplifies the process of creating safe stablecoins and also makes easier for partners to safely integrate them. [Read more](/content/blog/quantstamp-stablecoin-case-study-formally-verifying-hedera-hashgraphs-stablecoin-framework/index.html) ## [Quantstamp Completes Audit of 2nd ETH 2.0 Implementation](/content/blog/quantstamp-completes-audit-of-2nd-eth-2-0-implementation/index.html) Quantstamp has now completed its audit of Teku, the Ethereum 2.0 client developed by ConsenSys. Quantstamp also audited Prysm by Prysmatic Labs. [Read more](/content/blog/quantstamp-completes-audit-of-2nd-eth-2-0-implementation/index.html) ## [Ethereum Gas Fees Rising, But L2 Solutions Are Coming](/content/blog/ethereum-gas-fees-rising-but-l2-solutions-are-coming/index.html) Read about the projects developing Layer 2 scaling solutions that can scale Ethereum before ETH 2.0. [Read more](/content/blog/ethereum-gas-fees-rising-but-l2-solutions-are-coming/index.html) ## [Chasing Yield with DeFi Aggregators](/content/blog/chasing-yield-with-defi-aggregators/index.html) The DeFi space has seen impressive innovation and traction over the last two years. As DeFi continues to evolve, DeFi aggregators are emerging as a strong trend. As user-facing products built on decentralized infrastructure, DeFi aggregators unlock the potential for higher yields and a better user experience. [Read more](/content/blog/chasing-yield-with-defi-aggregators/index.html) ## [Quantstamp Audits Binance Smart Chain](/content/blog/quantstamp-audits-binance-smart-chain/index.html) Quantstamp has audited Binance Smart Chain, a blockchain that runs parallel to Binance Chain optimized for DeFi. [Read more](/content/blog/quantstamp-audits-binance-smart-chain/index.html)