Writing
Public writeups, vulnerability analyses, audit notes, and technical research across zkVMs, Cairo, FHE, and protocol security.
A curated archive of public research, bug writeups, audit methodology, and technical notes.
Featured writing
A logic flaw in slash fraction calculations allowing negative slashing, validator inflation, and token siphoning.
Breaking LeanMultisig zkVM Shamir (Part 1)Three bugs in LeanMultisig's Fiat–Shamir layer with one shared root cause.
Cairo Security Vulnerabilities ChecklistA practical checklist of common pitfalls and vulnerability patterns in Cairo smart contracts.
Browse all writing
A logic flaw in GOAT Network's slash fraction calculations allowing negative slashing, validator inflation, and token siphoning.
Breaking LeanMultisig zkVM Shamir (Part 1)Three bugs in LeanMultisig's Fiat-Shamir layer — transcript malleability, 32-bit shift panic, and a PoW bypass at max difficulty. All share the same root cause.
Cairo Security Vulnerabilities ChecklistA comprehensive checklist of common security pitfalls and vulnerability patterns in Cairo smart contracts on StarkNet.
ZK-SNARKs Security — Vulnerabilities and Root CausesAn analysis of the most critical vulnerability classes in ZK-SNARK systems, their root causes, and how to reason about them during an audit.
Nova and CycleFoldA deep dive into Nova's recursive proof system and CycleFold's cycle-of-curves folding scheme — how they work, their security assumptions, and trade-offs.
FHE Protocol Security Audit ChecklistA structured checklist for auditing Fully Homomorphic Encryption protocols — covering parameter selection, noise budgets, circuit correctness, and implementation pitfalls.
My Security Audit ProcessA transparent look at how I work with clients — from scope definition and kick-off calls through multi-pass code review, reporting, and fix verification.