What Cold Storage Does and Does Not Protect
Cold storage describes where a key is held. It says nothing about how a transaction gets approved — which is where several…
Guides & reference
Writes Conisec's guides and maintains the glossary. Focuses on checks a reader can run without specialist tooling, and on defining terms precisely enough to be useful during an incident.
An editorial identity. This byline marks the desk answerable for the work; it is not a claim about an individual's verified credentials. How our bylines work
Cold storage describes where a key is held. It says nothing about how a transaction gets approved — which is where several…
Read enough incident records and the same handful of shapes recur. Knowing the shapes is more useful than knowing the individual events.
Whether you own the assets or merely have a claim against the company is decided by paperwork written long before the failure…
An audit badge tells you almost nothing. The scope section tells you nearly everything — which commit was reviewed, which contracts were…
Most deployed contracts are upgradeable, which means someone can change what they do to funds already held. That control chain is public…
"Regulated" is not a property a firm can assert about itself. It means a named authority, a named permission category, and an…
The word "regulated" carries very different weight depending on which regulator, for what, and under which regime. Here is how to read…
Bridges account for several of the largest losses on record. The reason is structural, and it is visible in every one of…
Self-custody removes one category of risk and adds another. Understanding which is which is the whole decision.
The hours after a genuine incident are when fake advisories, fake support and fake recovery tools work best. Here is how to…
Conisec sets no cookies and runs no third-party trackers. Your theme choice is stored in your own browser and never leaves it. How we can say that