DeFi & governance
Collateral liquidation
A protocol sells or seizes collateral when health crosses a threshold.
Research · History · Reference
All entries A–Z · 4 / 15
438 · Articles and references
Scam patterns
Compromised package maintainers
An attacker publishes a malicious version through a legitimate package account.
Liquidity, prices and pool rules
Concentrated liquidity: ticks, active capital and fee growth
A pool can hold substantial value while only part of its capital supports the current price.
Market structure
Concentrated liquidity: TVL can sit outside the trading range
The capital recorded in a pool is not necessarily available around the current price.
Blockchain fundamentals
Confirmations and reorganisations
A confirmation places a transaction in a block; consensus may replace recent blocks.
Market structure
Constant-product pools: where price impact comes from
A pool equation makes the execution price depend on the size of the trade relative to available reserves.
DeFi & governance
Contagion: one asset, several dependent products
Protocols can inherit risk through collateral, liquidity and shared counterparties.
Web fundamentals
Content Security Policy: limit what a page may execute
A browser-enforced policy can reduce injection exposure, but its actual directives determine the protection.
Blockchain fundamentals
Contract storage layout
Persistent values occupy locations interpreted by implementation code.
Blockchain fundamentals
Contract storage: the persistent state a transaction changes
Code executes, but balances, permissions and configuration survive in the contract's storage.
Web fundamentals
Cookies: how a website remembers a session
Authentication can depend on a small browser-held identifier rather than a repeated password entry.
MASTR research
Copy trading: the leader's profit is not your result
MASTR's watchlist separates provider snapshots, historical performance and unverified social claims.
KOLs & promotion
Copy-trading execution gaps
Followers receive later fills, different sizes, fees and liquidity than the displayed leader.
Web fundamentals
CORS: a browser reading rule is not API authentication
Understand why an API can fail in a browser yet remain reachable, and why removing a CORS error can create a different problem.
Chains & networks
Cosmos: a framework is not one shared security guarantee
Independent chains can communicate while retaining different validator and governance risks.
Scam patterns
Counterfeit stablecoins
A token copies a major stablecoin name without the issuer's contract or redemption claim.
Crypto history
Cream Finance lending exploits
Cream Finance experienced several exploits involving lending markets and integrated assets.
Blockchain fundamentals
CREATE2: knowing an address before the contract exists
A predictable address commits to deployment inputs. It does not tell you that the resulting application is safe.
Market structure
Creator-wallet mapping
Deployer, treasury, fee and liquidity wallets can be separate addresses under related control.
Blockchain fundamentals
Cross-chain message execution
Destination effects depend on messages accepted from another system.
Scam patterns
Crypto pig-butchering operations
Organised groups combine social engineering with controlled investment interfaces.
Scam patterns
Crypto-ATM impersonation scams
A caller claiming to be a bank or authority orders cash deposited into a crypto ATM.
Crypto history
Cryptopia exchange liquidation
New Zealand exchange Cryptopia suffered a 2019 security breach and later entered liquidation.
Crypto history
Curve Vyper reentrancy incident
Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.
Wallets & security
Custody: what you control and what you depend on
Keys, devices, recovery and withdrawal rights belong in the same decision.
Market structure
Customer-asset rehypothecation
A custodian lends, pledges or invests assets customers expect to withdraw.