On July 29, 2024, CertiK, the industry-leading Web3 security firm, was once again recognized by Apple for maintaining outstanding security measures and prioritizing customer protection to foster a robust ecosystem. In addition to its strong technical strength, CertiK maintains a customer security-first philosophy, which is the basis for building mutual trust with Apple.

Apple Recognizes CertiK

Read and Learn

July 29 marked the fifth time Apple has publicly thanked CertiK for assisting the company in discovering and fixing vulnerabilities; CertiK has thus become the Web3 security agency most publicly thanked by Apple.

Apple’s Acknowledgements of CertiK 

- Smart contract audits, which are conducted through a self-developed automated static analysis toolkit, and enhance the detection of potential defects and key risks.

- KYC service, which hinders malicious actors by verifying the identity of project owners and development teams, thus enhancing trust across Web3 and reducing fraud. 


CertiK’s Comprehensive Cybersecurity Solutions

- Skynet Rating system, which provides users with an analytical platform that displays risk factors of various blockchain projects.

- CertiK Alert, which provides real-time updates on security incidents, vulnerabilities, and other critical issues related to blockchain infrastructure and smart contracts.


CertiK’s Comprehensive Cybersecurity Solutions (continued)

CertiK discovered a core vulnerability in iOS 17.6, iPadOS 17.6, macOS Sonoma 14.6, and watchOS 10.6, which could have enabled an attacker to identify the structure of kernel memory. Apple addressed this vulnerability through improved private data editing of log entries.

Core Vulnerability and Exposure (CVE) #1 

CertiK discovered a vulnerability related to ASP TCP in macOS Sonoma 14.6, which could have permitted arbitrary code execution with kernel privileges. Apple addressed this issue by improving buffer overflow through improved memory handling.