Writing

Notes and research on ZK cryptography, EVM internals, formal methods, and security.

All zk formal-methods evm audits

Postmortem: Incomplete GG20 Session Binding in tss-lib v2
A postmortem of a tss-lib v2 GG20 migration bug where deterministic SSIDs and a sessionless RangeProofAlice allowed proof transcripts to be replayed across signing sessions.
audits
Apr 25, 20268 min read