
ZK | FS
2.9K posts












Fantastic work by the @osec_io team, and a big thank you for their collaboration on this. This was a critical finding, disclosed responsibly and handled with real professionalism from day one. We validated it, fixed it quickly, gave OtterSec the opportunity to review the fix from their side and shipped the release as soon as we could. Give the article a read. It is very in-depth, thorough and a good example of why serious security work AND practices matter when building financial infrastructure. Their finding also accelerated the security work we were doing on the Dusk protocol, which led to Aegis and the upcoming Boreas hard fork.


We found a critical soundness bug in dusk-plonk that let a malicious prover forge proofs for arbitrary false statements. The result: an attacker could mint arbitrary amounts of DUSK out of thin air and bypass every check protecting Dusk's shielded transactions.


RWAs are moving past the narrative cycle. In our recent Space with @ShiftRWA, the discussion kept returning to one point: tokenized assets only matter when the market around them works. That means issuance, settlement, access, privacy, liquidity, and compliance need to fit together. ↓ 1. Tokenization is the first step Most assets entering crypto today are wrappers around existing assets. For many markets, that is the practical entry point. It brings assets into a more open environment while issuers, venues, and regulators adapt. 2. Settlement is the real test Traditional markets still rely on delayed settlement, reconciliation, and intermediated records. Even after the move to T+1 in the U.S., DTCC data still shows fail rates at 3.19% for NSCC and 3.07% for DTC. Onchain settlement can take this further. With atomic delivery-versus-payment, the asset leg and payment leg execute together, or neither does. 3. Regulation is part of the product Regulated assets need market rules built into the system. That means KYC, eligibility checks, transfer controls, auditability, and clear legal accountability. The job is not to route around regulation. The job is to make regulated markets easier to run. 4. Privacy decides whether institutions can use it Public ledgers expose balances, counterparties, and trading activity. That doesn't work for regulated markets. Institutions need confidential transactions with selective disclosure, so auditors and regulators can access the information they need without making every position public. 5. Native issuance is the end state Tokenization brings existing assets into the market. Native issuance moves the asset lifecycle itself onchain: issuance, trading, settlement, servicing, and disclosure. Dusk is built for native issuance, with privacy, compliance controls, deterministic settlement, and infrastructure for regulated financial applications. RWAs don't become financial markets because assets are tokenized. They become financial markets when the market infrastructure is ready.



Building dApps on DuskDS just got simpler. Dusk Connect is a new SDK that lets dApps integrate with any compatible wallet. Alongside the new Dusk Wallet, a first-party wallet for browser extensions, desktop, and mobile. Repos are open for developer preview ↓














