Field notes from CredShields
Security research,
decoded.
Practical AppSec, pentesting, compliance, and engineering notes from the team securing modern applications.
Recently Posted
CredShields Blog
Latest articles
CredShields Completes SOC 2 Type II Audit: What It Means for Our Customers and Partners
CredShields has completed an independent SOC 2® Type II audit, conducted by KEN & CO. CPA, LLC. The...
Agentic Systems Are Now a Security Boundary
AI agents must be treated as production infrastructure. Gone are the times when security perimeters used to be...
The OWASP Smart Contract Top 10 (2026): A Production-Focused Security Implementation Guide
Smart contracts do not fail randomly. They fail in patterns. Over the last several years, blockchain systems have...
Security Certifications Required for DeFi Protocol Launches
Launching a Decentralized Finance (DeFi) protocol in 2026 demands more than innovative technology; it requires a robust security...
2025: Why Audits Failed and Control Planes Collapsed
2025 was not defined by new vulnerabilities. It was defined by where losses actually occurred. Despite years of...
Ledger Data Leak: How the Global-e Hack Exposed User Data
In early 2025, Ledger confirmed a customer data leak linked not to its hardware wallets or core infrastructure,...
Trust Wallet Breach: How a Browser Extension Became the Attack Surface
The Trust Wallet breach has sent ripples through the cryptocurrency community. This incident underscores the vulnerabilities inherent in...
Deep Dive: MongoDB Vulnerability (CVE-2025-14847)
Few days ago a serious security vulnerability was disclosed in MongoDB Server, tracked as CVE-2025-14847 and informally referred...
Uniswap V4: A Deep Dive into the Next Generation AMM (Part 1)
Introduction Uniswap V4 represents a fundamental reimagining of automated market maker (AMM) architecture. Built on the foundation of...
Aerodrome/Velodrome Front-End Breach: Understanding the Web2 Attack Surface in Web3 Protocols
On November 22, 2025, Aerodrome (the leading DEX on Base) and Velodrome (the leading DEX on Optimism) suffered...