Imperishable Night, but the boundary between miss and Game Over has been politely postponed. Sometimes the hardest part of a Touhou run is not the bullet pattern. Sometimes it is getting far enough into the game to understand what...
Posts
Recent notes
Fork mainnet, doubt the callback, and never trust a rebasing balance. Abstract Aave is one of DeFi's most composable liquidity protocols. That is exactly why it keeps showing up in security reviews of protocols that are not Aave:...
PPS is not an oracle. Yield is not collateral. Composability is just dependency injection with money. Source boundary This post covers publicly verifiable Yearn related integration issues: official incident disclosures, Code4rena...
Not your shares, not your solvency. Lido is one of the most widely integrated pieces of Ethereum infrastructure, and that is exactly why its integration bugs are interesting. Most of the serious incidents and audit findings around...
Never trust spot. Never trust callbacks. Never trust a pool you did not whitelist. Abstract Uniswap v3 is not merely a swap venue. For protocols that integrate it, it is a callback driven execution environment, a permissionless po...
No invariant, no mercy. Scope This article is not a review of whether Uniswap v4 core is safe. The core protocol has its own security model, audits, bug bounty process, and threat boundaries. The focus here is narrower and, in pra...
There is no such thing as "just an ERC20." Abstract The most dangerous token integration bugs rarely start with an obviously malicious contract. They usually start with a reasonable interface, a familiar symbol, and a hidden assum...
"One wei in, one vault out." Empty liquidity is not a neutral state. The phrase "First Deposit" sounds deceptively narrow. It suggests a bug that only exists in the first transaction of a vault, or a minor edge case that disappear...
If the invariant is not enforced at the boundary, the mempool will prove the counterexample. Scope and thesis This post collects real, public fixed point AMM failures and near failures across production incidents, whitehat disclos...
DYOR, but also read the diff. There is a particular kind of Web3 infrastructure project that is difficult to judge from the outside. It is not obviously fake. It has serious people around it, sometimes real research, sometimes non...
Private bytes, public claims, no unconstrained wires. Version note This article studies the zkSecurity report on zk email and the code versions explicitly covered by that report. All GitHub paths are fixed to the audited commits r...
Commit first. Fold later. If it is not in the transcript, it did not happen. Plonky3 is easiest to misunderstand if we read it as a large Rust repository. The generics are long, the traits are layered, and the concrete examples as...
The chain is the law. The app is merely what the law makes possible. 1. The shift: from smart contracts to systems of power For a long time, I looked at Web3 through the application layer. Which DEX has more volume? Which lending...
Prove the root. Hide the leaf. Burn the nullifier. Semaphore looks deceptively simple from the outside: prove that a user belongs to a group, let the user send a message, keep the user anonymous, and stop the same user from signal...
Bind the witness, or the witness binds you. Introduction Ziren is one of the more interesting zkVM targets we have looked at in a while, partly because it does not follow the now familiar RISC V path. It takes a MIPS32R2 execution...
Small tools, sharp edges, real workflows. I wanted a simple thing: open multiple ChatGPT tabs, give each tab its own list of prompts, and let each tab work through its own queue without talking to the others. No global dashboard....
Commit first. Challenge later. If it is not in the transcript, it did not happen. Plonky3 is best understood as a toolkit, not as a single proving system with one blessed prove() button and one fixed set of cryptographic choices....
If it is not in the statement, it belongs to the prover. Introduction Pico is exactly the kind of zkVM that rewards a close audit. On the surface, the pitch is compelling: a high performance, modular zkVM with multiple proving bac...
In zk systems, every shortcut becomes part of the threat model. Introduction Jolt is one of the more interesting zkVMs to read closely because it is not trying to hide its design tradeoffs. At a high level, Jolt takes a pragmatic...
Welcome to osu! Github Repo: https://github.com/N0zoM1z0/oszillator Live demo: https://n0zom1z0.github.io/oszillator/ Autoplay demo video: https://youtu.be/4uOumV5hzYE / https://www.bilibili.com/video/BV13VRSBFEaS/ https://youtu.b...