Research, incidents, and how systems fail.
Technical notes on smart-contract security, cross-chain systems, vulnerability research, and the occasional detour into decision-making.
Permanent DoS of refunds through 1 wei donation
During a recent security audit of LI.FI's Eco integration, I discovered a denial-of-service (DoS) vulnerability in Eco's Vault contract that could prevent legitimate users from receiving their refunds.
bug bountyAccess Control Flaw in Hyperlane's Rate-Limited ISM and Hook
Analysis of an access control vulnerability in Hyperlane's rate-limited interchain security module and hook implementation.
bug bountyDiscovering a Vulnerability in Relay Bridge's Solver Signature API
Security analysis of a critical vulnerability found in Relay Bridge's solver signature API affecting cross-chain message validation.
bug bountyDiscovering a Vulnerability in Hyperlane's RateLimited ISM
Uncovering a HIGH severity DoS vulnerability in Hyperlane's rate-limited ISM during a warp route assignment interview.
developer notesWriting Cross-Chain PoC Using Pigeon
A comprehensive guide to writing proof-of-concept exploits for cross-chain vulnerabilities using Pigeon framework.
bug bountyPost-Mortem: Colluded Transmitters in Socket DL
Deep dive into a critical vulnerability discovered in Socket's data layer involving colluded transmitters and cross-chain message validation.
bug bountyUnearthing a $7k SocketSurge LootBox Exploit: A Deep Dive
How I claimed $7k from SocketSurge LootBox-II by exploiting Socket DL's defense mechanisms within two hours.
developer notesCross-Chain Immutability: Security Considerations
Understanding the concept of cross-chain immutability and its security implications for bridging protocols and multi-chain applications.
developer notesData Paths: Essential Guide for Cross-Chain Developers
A comprehensive guide to understanding data paths in cross-chain communication for developers building multi-chain applications.
solidityDynamic Memory Arrays in Solidity
A practical guide to understanding and implementing dynamic memory arrays in Solidity smart contracts with code examples.
psychologyDecoding Investing: The Brain Language
Exploring how the Ventromedial Prefrontal Cortex influences investment decisions, fear-greed dynamics, and the psychology behind market behavior.