Audits
3 notes filed here.
Categories
Filed notes
Automation
1 note filed here.
DeFi
8 notes filed here.
The Aave Integration Trap: When Blue-Chip Liquidity Becomes Your Attack SurfaceThe Share-Price Mirage: Yearn Integration Bugs, False Positives, and the Oracle We Keep RebuildingThe Share-Ratio Trap: Why Lido Integrations Keep Breaking DeFi AccountingPart I: Haunted Pools: The Real Security Footguns in Uniswap v3 IntegrationsPart II: Hooks Do Not Forgive: The Real Security Boundary of Uniswap v4 IntegrationsThe Interface Lies: Token and Chain Incompatibility Bugs in the WildFirst Deposit, Last Withdraw: The Empty-Vault Attack Surface Behind Share-Based ProtocolsWhen One Wei Breaks the Curve: A Research Field Guide to Fixed-Point AMM Failures
Essays
2 notes filed here.
Learning Notes
2 notes filed here.
Privacy
1 note filed here.
Projects
1 note filed here.
Reverse Engineering
1 note filed here.
Security Research
12 notes filed here.
The Aave Integration Trap: When Blue-Chip Liquidity Becomes Your Attack SurfaceThe Share-Price Mirage: Yearn Integration Bugs, False Positives, and the Oracle We Keep RebuildingThe Share-Ratio Trap: Why Lido Integrations Keep Breaking DeFi AccountingPart I: Haunted Pools: The Real Security Footguns in Uniswap v3 IntegrationsPart II: Hooks Do Not Forgive: The Real Security Boundary of Uniswap v4 IntegrationsThe Interface Lies: Token and Chain Incompatibility Bugs in the WildFirst Deposit, Last Withdraw: The Empty-Vault Attack Surface Behind Share-Based ProtocolsWhen One Wei Breaks the Curve: A Research Field Guide to Fixed-Point AMM FailuresWhen Email Becomes a Circuit: zkEmail, zk-Regex, and the Soundness Edge of Proving an InboxMIPS, Merkle, and 0/0: Two Recursion Soundness Bugs in ZirenPico, Proof Boundaries, and the Places zkVMs Really BreakAuditing Jolt: Where zkVM Performance Tricks Meet Security Reality
Tooling
1 note filed here.
Tools
1 note filed here.
Web Experiments
1 note filed here.
Web3
2 notes filed here.
ZK
7 notes filed here.
When Email Becomes a Circuit: zkEmail, zk-Regex, and the Soundness Edge of Proving an InboxPart II: Roots of Trust: The Algebra Beneath Plonky3 and Modern STARKsSemaphore Under the Hood: Roots, Nullifiers, and the Art of Not Doxxing the LeafMIPS, Merkle, and 0/0: Two Recursion Soundness Bugs in ZirenPart I: Plonky3 Deep Dive: Reading a STARK Toolkit From the SourcePico, Proof Boundaries, and the Places zkVMs Really BreakAuditing Jolt: Where zkVM Performance Tricks Meet Security Reality