Consensys Diligence

We applied to the Ethereum Security QF round by @Giveth and @thedaofund. Every donation funds PhD and intern positions on ZK fuzzing at @tu_wien. Led by experts in formal methods and zk security: @vwuestholz and @mchri5taki5. This work advances the state of the art in automated fuzzing for zero-knowledge circuit-processing pipelines. The output is specialized OSS fuzzers for large-scale discovery of soundness and completeness bugs and educational content. Support the future of privacy-preserving tools:

another day in the vulnerability mines ⛏️🧨 🤝 @KotyaSec @ConsensysAudits

Many security people doubt AI can find and patch vulnerabilities. That's Fair. We were too. But @ConsensysAudits convinced us to try, and the speed and accuracy enabled by their scaffolding have convinced us this is the right approach for an AI age:

The rash of DeFi hacks last month shows just how much easier (and cheaper) it has become to find critical vulnerabilities with AI. The old security model is too rigid and slow to keep up. That's why @ConsensysAudits is building Chonky, an AI-assisted security system to scale human auditors. Chonky is being deployed on STRATO to pioneer a new security model that keeps pace with modern threats. Learn more about the future of DeFi security in our conversation with Consensys Diligence and @CryptoPandasYT below: youtube.com/watch?v=BE_Y7N…

What does it look like when a privacy-first platform invites the world's best to try and break it? @aztecnetwork is putting that question to the test, with a new bug bounty program on Cantina. Here's what researchers should look at.

What if we could fuzz ZK infrastructure before attackers can? Valentin Wüstholz (@vwuestholz) took that bet early on and built the first fully automated testing tools for ZK pipelines. With researchers at @tu_wien, he turned metamorphic testing and fault injection into scalable methods for finding critical vulnerabilities. Today, his tools have found 30+ critical bugs across ZK compilers and zkVMs, earned a bounty from @RiscZero, and led to peer-reviewed work at CCS 2025 and USENIX Security 2026. The story behind Valentin’s research bet, the fuzzers, and what his work is changing for ZK security. Full piece below ⬇️

With no further ado, meet the final 100 ETHSecurity Badge holders: @404ouch @mzargham @neburo @arik_g @ret2jazzy @0xQuit @simon_jentzsch @zigtur @Hudsonjameson @pashov @PabloSabbatella @GalloDaSballo @tanuki42_ @aviggiano @claudijd @parithosh_j @saxenism @RMacwha @socrates1024 @TrustSecAudits @bbarwik @schaliasosvons @lethalspoons @eladernst @HalbornSteve

The final 100 ETHSecurity Badge holders are in! That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer. Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.