Stefanos Chaliasos

Excited to share our latest work on ZKPs security: "SoK: What don’t we know? Understanding Security Vulnerabilities in SNARKs" (w/ @0xSerious, @infosecual, @cryptodavidw, @MMJahanara, @convoluted_code). URL: arxiv.org/pdf/2402.15293…

And if zkSecurity has audited your code, those audits now live where your scans do: every finding from the report, with severity and your team's responses, side by side with your automated scans. One place for everything we have found in your code.

We are announcing OpenVM 2.0.0, the first production release of OpenVM 2.0. This release is externally audited with expanded formal verification and proves Ethereum mainnet in real time on as few as 8 GPUs. Proving times are down 95x since the first release 18 months ago.

Read out our first blog on AI for securing Cryptography

Today we are releasing zk.golf Part of this project is fueled by my deep distrust of LLMs and the fact that they are annoyingly useful. The answer is to make LLMs formally prove their claims! Try it out, it's fun! ⛳️

Can you build the fastest circuit? Prove it. zkGolf is live. ⛳️

We just released v1.2.0 of zkao, deep research for finding cryptography bugs! If you've never seen what zkao looks like, or what zkao can do for you, take a look!

fresh report off the press from @zksecurityXYZ reports.zksecurity.xyz/reports/genera…

Last month we launched an open, collaborative reference for the implementation mistakes that keep recurring in multi-party computation.Since then we've shipped updates to make MPC bugs easier to find, classify, and document. 🧵

Episode 11 of Honest Majority is live 🎙️ "Do Fees in Rollups Bring Attacks?" @dionyziz sits down with @schaliasosvons, Senior Security Researcher at @zksecurityXYZ and Assistant Professor at @ucl, to discuss how mispriced fees in major rollups enable practical DoS and finality attacks.

I'm still reading about it. Great work by @zksecurityXYZ as always and @cryptodavidw.

It's disheartening to see so many root against Zcash. We owe so much to the courage of the Zcash team: ten years ago, Zcash was a moonshot. They were the 1st to deploy a *fully* anonymous payment system and the 1st to deploy a zkSNARK-based cryptosystem. Rooting against the team being able to recover from this bug is rooting against all other serious privacy efforts for cryptocurrencies: they are all based on the same nullifier techniques via circuit-based zkSNARKs. This is not a zero-sum game. Zcash has been showing us the way for over a decade and will continue to do so. e.g., Zcash will soon be the 1st team to deploy a *formally-verified* zkSNARK circuit implementation for anonymous payments.

looking for a continuous bugfinding AI solution for your cryptography codebase? contact us!

1/ Very happy to share a new paper with Benedikt Wagner on data availability sampling (DAS). In this one we extend FRIDA with our recent findings on FRI FRIDA was a 2024 paper in which they showed that we can construct DAS from proofs of proximity that satisfy 3 conditions

Our team is very grateful for @zksecurityXYZ’s research and tooling for building secure cryptographic software, including formal verification, fuzzing, and extensive auditing expertise.

Groth16 is still the GOAT of zero-knowledge proof. Why can't anyone understand how it works then? Don't worry, we got you :) blog.zksecurity.xyz/posts/groth16/

Read more on how we broke and reported bugs in post-quantum lattice-based zero-knowledge proof systems, link in comment

zkbugs updated website: zkbugs.com giveth link: qf.giveth.io/project/zkbugs…

We recently added more Circom bugs to zkbugs, bringing the total to 70 Circom and 139 ZK bugs. We aim to reach 300 bugs, focusing more on zkVMs. We also began evaluating security tools and are currently building open-source AI tools that the community can use while developing ZK code and before audits. Any contribution to the QF round will help us focus more on it and give opportunities to junior researchers through internships.

Set a reminder and join us. x.com/i/spaces/1OGwb…

With no further ado, meet the final 100 ETHSecurity Badge holders: @404ouch @mzargham @neburo @arik_g @ret2jazzy @0xQuit @simon_jentzsch @zigtur @Hudsonjameson @pashov @PabloSabbatella @GalloDaSballo @tanuki42_ @aviggiano @claudijd @parithosh_j @saxenism @RMacwha @socrates1024 @TrustSecAudits @bbarwik @schaliasosvons @lethalspoons @eladernst @HalbornSteve