From Dev.to
We checked 1,000 DeFi websites: 76% have no CSP and 64% can be framed by another site
A passive look at the front door of DeFi. There were no attacks; we only looked at what every visitor's browser receives. Smart contracts get audited. The website in front of them usually does not. Ye...