We just published a new write up for one of the critical bugs we reported through Immunefi It was for Q Blockchain and marked the beginning of our auditing journey. Read more about it here: medium.com/@blockian/stri…

Introducing the ZK Market Map! We’ve charted 250+ crypto projects advancing zero knowledge (ZK) tech. This detailed map is an extension of our Crypto Market Map meant to showcase the differences between projects within ZK subsectors. Why did we make this and why does ZK matter?

Glad to work with Stefanos Chaliasos on this project! The repo now can be viewed publicly at github.com/zksecurity/zkb…. More bugs coming to the repo 😎

Wrote an article explaining basic gnark concepts to those who already know Circom and how snark proof system works. ret2basic.me/2024/08/10/gna… Tell me if it is helpful :) Planning to write more such articles and make it a series.

Good luck to the judge.

x.com/i/article/1825…

🔥Day 1 HITCON CMT vibe.

Balaji I've criticized Telegram before for not being serious with encryption. But (given the info available so far: the charge seems to be just being "unmoderated" and not giving up people's data), this looks very bad and worrying for the future of software and comms freedom in Europe.

New blog post is up. This one explains how the UUPS proxy pattern works in detail. It includes is a detailed breakdown of the OpenZeppelin implementation and a security checklist at the end. We would like to thank ernestognw.eth from OpenZeppelin for reviewing an earlier draft.

New blog post is up! Deploying and upgrading proxy smart contracts is a multi-step and error-prone process, so it's best done with a tool. Our new article shows how to use the OpenZeppelin Foundry Upgrades Plugin to automate the procedure and catch bugs in the process. This

In need of an audit of your zero-knowledge proof systems, ZK circuit, or something in between? Or you're looking for developers/researchers to work on a zk projects? we (zksecurity.xyz) are what you're looking for!

onchain games will reward those that gather perfect information and know how to use it heres me playing Biomes while crunching coordinates to find the rarest resources in the realm here's how 🧵👇

PoC of Penpie exploit 11,113.6 ETH (~$27,348,259 USD) Not ez replay, what a work!!! github.com/SunWeb3Sec/DeF…

Try it out yourself - demo.reclaimprotocol.org

put together all the zkTLS resources across various approaches and categorized them as beginner, intermediate, advanced should be a good place to start if you are getting started with zkTLS blog.reclaimprotocol.org/posts/zktls-ca…

Can smart auditors outsmart smart wallets? Yes! 🧠 We show how it's done in our latest article about ERC4337 bugs by Adri blog.yacademy.dev/2024-09-09-sec…

This is like paying a base salary to you to cover living expenses. Very positive move!