Tokio

1/ We're thrilled to welcome @AztecFND as the latest project to take the 1% Pledge 🎉 1% of the AZTEC token supply has been deposited into Protocol Guild's 4-year vesting contract to support 187 Ethereum core contributors across client teams, research, and coordination

41 kidnappings of crypto holders in France in 3.5 months of 2026. Why? 🥖 French tax officials selling crypto owners' data to criminals (Ghalia C.) + massive tax database leaks. Now the state also wants IDs and private messages of social media users. More data = More victims.

The final 100 ETHSecurity Badge holders are in! That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer. Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.

The Ethereum Foundation Bug Bounty Program (bounty.ethereum.org) has increased its maximum payout from $250K to $1M.

Today marks an inflection in the Ethereum Foundation's long-term quantum strategy. We've formed a new Post Quantum (PQ) team, led by the brilliant Thomas Coratger (@tcoratger). Joining him is Emile, one of the world-class talents behind leanVM. leanVM is the cryptographic cornerstone of our entire post-quantum strategy. After years of quiet R&D, EF management has officially declared PQ security a top strategic priority. Our journey began in 2019, with the "Eth3.0 Quantum Security" presentation at StarkWare Sessions. Since 2024, PQ has been central to the @leanEthereum vision. The pace of PQ engineering breakthroughs since then has been nothing short of phenomenal. It's now 2026, timelines are accelerating. Time to go full PQ: → PQ ACD: Antonio Sanso (@asanso) kicks off a bi-weekly All Core Devs PQ transactions breakout call next month. These sessions focus on user-facing security, covering dedicated precompiles, account abstraction, and longer-term transaction signature aggregation with leanVM. → PQ foundations: Today we are announcing a $1M Poseidon Prize to harden the Poseidon hash function. We are betting big on hash-based cryptography to enjoy the strongest and leanest cryptographic foundations. Check out our other $1M PQ initiative, the Proximity Prize. → PQ devnets: Multi-client PQ consensus devnets are live! Shoutout to pioneers @zeamETH, @ReamLabs, @PierTwo_com, @geanclient, @ethlambda_lean, as well as established consensus teams Lighthouse, Grandine, and soon Prysm. This incredible teamwork is coordinated by @corcoranwill via weekly PQ interop calls. → PQ workshops: Building on last year's PQ workshop in Cambridge (see photo), the EF is hosting another 3-day PQ event in October. Top experts from around the world will convene. In addition, a PQ day is set for March 29 in Cannes just ahead of EthCC. → PQ FV and AI: Last week Alex Hicks (@alexanderlhicks) ran a specialised maths AI for 8 hours, at a $200 cost. It one-shotted a formal proof one of the hardest lemmas in the foundations of hash-based snarks. Mind-blowing. Applied cryptography will never be the same. → PQ roadmap: A comprehensive breakdown of the EF's proposed PQ strategy will be shared soon™ on pq[.]ethereum[.]org. The roadmap targets a full transition in coming years with zero loss of funds and zero downtime. Stay tuned :) → PQ education: The ZKPodcast (@zeroknowledgefm) is producing a 6-part video series on Ethereum's PQ strategy. EF Enterprise Acceleration is also preparing material for enterprises and nation-states. Finally, Ethereum is now represented on the PQ advisory board that Coinbase announced yesterday. Believe in something. Believe in PQ security.

The Fusaka upgrade is today. Ethereum is securely scaling.

Been a busy day today... Welcome to Devconnect!

Great quick wins this week from security researchers on Immunefi. Looking to see more from everyone, now that the Hunt Points Program has launched. Now is the time to get in. Small wins, big wins, all count for points.

ePBS breakout call 24 recap! Agenda: github.com/ethereum/pm/is… • New spec release v1.6.0-beta.0 with lots of ePBS updates. • Clients have containers + fork boilerplate implemented. • In 2 weeks we'll know if devnet-0 is possible by end of Oct. • Clients should create an epbs-devnet-0 branch for ethpandaops. • DataColumnSidecar may need a slot field (not a big concern). • Moving blob KZG commitments outside the block looks difficult. • ForkChoiceNode will be converted from a container to a dataclass. • The race to fully implement devnet-0 is on!

LGTM!

🚀 We just released sol-azy on GitHub! A modular CLI for static analysis & reverse engineering of #Solana sBPF programs — with disassembly, CFGs, and Starlark rule support. 🧵 github.com/FuzzingLabs/so… 👀 Docs: fuzzinglabs.github.io/sol-azy/introd… #Solana #RE #Security #Rust

How to be sad in 6 steps: 1. Spot extremely intricate bug 2. Be excited 3. Write a beautiful report for it 4. Read the report and think this is too complex to go without a PoC 5. Write a PoC 6. Not a bug

I’ve been asked this so many times that I decided to turn it into an @EthCC talk See you there! ☀️

Today at @protocol_berg sharing Pavel’s research on the relevance and concept of a monitoring tool covering safety and liveness for the world computer #Ethereum

Uncovering Hidden Threats in Ethereum Virtual Machines 🚨 At #Zer0Con2025, we exposed critical vulnerabilities in Ethereum Virtual Machines (EVMs) using fuzzing. Here’s what you need to know 🧵👇 #Ethereum #EVM #Fuzzing #BlockchainSecurity

I'm at a family dinner, and the subject of privacy and personal data being stolen and used by giants corporations has started. Without me saying anything. Wooow. Guys. it's finally happening.

It's time to learn Rust 🦀

fr fr

ERC-20, ERC-721, ERC-1155: How Token Standards Introduce Unique Security Risks - Understanding ERC Token Standards - Unique Security Risks Introduced by Each Standard - Best Practices to Mitigate Risks securrtech.medium.com/erc-20-erc-721…

~120 team security audit reports published so far. So many vulnerabilities, so much lessons to learn from in here. There are many golden nuggets in those reports. Do not sleep on this, especially if you are not that senior, attack vectors to learn here✌️ github.com/pashov/audits