Services
Six service lines, all free to constituents during active incidents, all designed for the operational realities of public blockchains.
0xCERT/ir
24/7 triage and containment for active blockchain incidents.
When a protocol is being drained, a bridge is compromised, or a key is leaked, every block matters. Our on-call team coordinates containment with affected projects, validators, sequencers, and centralized off-ramps in real time.
0xCERT/advisories
CVE-style advisories for smart contracts and Web3 infrastructure.
0xCERT issues numbered advisories (0xCERT-YYYY-NNNN) for vulnerabilities affecting smart contracts, wallets, RPC providers, bridges, and node software, coordinating disclosure between researchers and maintainers.
An unchecked external call in a widely deployed settlement adapter allows attacker-controlled tokens to re-enter and double-spend settlement messages. Patched in v2.4.7.
Attackers replaced bundle.js to inject a wallet drainer for ~3.5 hours. Affected users were re-routed to a malicious permit2 signer. IOCs published.
Coordinated phishing campaign using purchased ENS subdomains pointing to drainer kits. Domain list distributed to wallet vendors.
0xCERT/ioc
Curated indicators of compromise for the Web3 attack surface.
We publish machine-readable feeds of malicious addresses, contracts, phishing domains, drainer signatures, and compromised front-ends so wallets, RPCs, and security tools can block known threats at the edge.
0xCERT/takedown
Coordinated takedown of malicious sites and front-end takeovers.
We work with registrars, hosting providers, CDNs, and wallet vendors to remove wallet-drainer infrastructure, fake airdrop sites, and compromised dApp front-ends as fast as possible.
0xCERT/tracing
On-chain forensics to follow stolen assets across chains and mixers.
Our analysts produce evidentiary tracing reports usable by exchanges, law enforcement, and civil recovery teams, covering cross-chain bridges, mixers, and CEX off-ramps.
0xCERT/training
Tabletop exercises and IR training for protocol and infra teams.
0xCERT runs incident response tabletops, key compromise drills, and threat-model workshops for protocol teams, foundations, DAOs, validators, and security service providers.