SecLat Blog
Insights on security and trust in Web3
Explore articles about audits, mitigation strategies, and lessons from our smart contract security team.
Recent posts
Tadeo - SecLat SecurityAugust 13, 2026
BTCPay Server remote Lightning access: treat node credentials as emergency secrets
What BTCPay Server operators should do after the August 2026 active attack affecting remote LND access, including patching, credential rotation, and review steps.
Read article→
Mike B. - SecLat SecurityAugust 12, 2026
Ethernaut Level 1 Walkthrough: Exploiting Access Control in Solidity
In this article, we will analyze and solve Ethernaut Level 1: Fallback.
Read article→
Tadeo - SecLat SecurityAugust 11, 2026
Coldcard and the risk that starts before signing
The reported Coldcard incident shows why key security depends on entropy, build configuration, and a prepared response.
Read article→
Tadeo - SecLat SecurityJuly 31, 2026
Your Smart Contract Can Be Bug-Free and Still Get Hacked: Five Attack Surfaces Audits Cannot Ignore
Five security surfaces protocol teams should include in a review, beyond smart contract logic.
Read article→
Tadeo - SecLat SecurityApril 15, 2026
Silent attacks on VS Code tasks.json: the new vector impacting Web2 and Web3
How attackers manipulate tasks.json to execute malicious code and compromise Web2 and Web3 environments.
Read article→