Crashing Anvil's OP Deposit Parser
Casting integers is easy to get wrong. One missing bounds check is all it takes
- Independent security researcher
- Ex @Nethermind
- 3x member of the Norwegian National Cybersecurity Team
- CTF at @Norske Nøkkelsnikere
Unsafe Integer Casts in Anvil's JSON-RPC Handler
Five overflow panics across Anvil's RPC surface: gas limits, base fees, block counts etc
Opinions Are Not Vulnerabilities
The fuzzer doesn't hallucinate...
Starknet Is Zcash, Aztec Is Monero
The oldest debate in privacy coins is playing out again in L2s
Compliance in Uniswap v4
When regulations and decentralization collide
Equinor CTF 2024
Writeups and first blood on two challenges at Equinor CTF 2024
The Cost of Complexity and Ownership
Two CodeHawks contests, two high-severity findings, both selected for the final report
Why You Should Care About Zero-Knowledge Proofs
Why ZKPs are important for data privacy and how they work