be11pepper

zk.golf by @zksecurityXYZ challenges you to write the cheapest formally verified circuit and prove it correct in Lean 4. For the SHA-256 challenge, we submitted a circuit with 1 witness and 1 constraint. It still verified. Here is how we broke the spec. 🧵

2⃣🫡 x.com/kaizero_ainta/…

@QED_Audit is building continuous security for Ethereum. The Ethereum Foundation has engaged QED to build specialized security agents for the Ethereum protocol. Our work combines 10+ years of security experience, @DARPA AIxCC-winning autonomous vulnerability discovery, and hands-on protocol security across core blockchain infrastructure. We’ll focus on implementation bugs, spec drift, and consensus-critical issues across Lighthouse, Prysm, Geth, Reth, and libp2p. This builds on our work in continuous protocol security and agent-assisted auditing: * qedaudit.io/blog/tachyon/ * qedaudit.io/blog/commonwar… Excited to contribute to Ethereum’s future.

70k tps 400ms finalization browser light client native passkey wallet … now available (for free)

The two THORChain critical bugs we reported in January were found with our AI auditor. Around the same time, there were many AI-generated PRs labeled as P0 security fixes, but they did not catch these issues. A recent Huginn run reported 196 findings. AI can now generate hundreds of plausible findings. The real value is identifying the few bugs that actually put funds at risk.

I found a critical soundness bug in @a16zcrypto's Jolt using our autonomous AI auditor at @QED_Audit. Impact: the verifier could accept a proof for secret A under a commitment to secret B. Discovery to PoC: 100% autonomous by our AI auditor. PoC: gist.github.com/a-qedaudit/fa4… Fix: github.com/a16z/jolt/pull…

Woot! Good job qedbot or whoever submitted this one: github.com/aeyakovenko/pe…