Security engineer specializing in tokenization, RWAs, and smart contract development at @taurus_hq, CMTAT contributor (@cmta_ch)
Switzerland 🇨đź‡
- Tweets 1,130
- Following 4,513
- Followers 277
- Likes 1,192
Pinned Tweet
Excited and grateful for the opportunity to be at @EthCC to discuss CMTAT!
CMTAT is a tokenization standard developed by CMTA, widely adopted by companies such as Taurus, UBS, or Obligate.
Check out the CMTA implementation here: github.com/CMTA/CMTAT
CC @taurus_hq , @cmta_ch
Security token expert Ryan Sauge (@ADCDIII) breaks down "CMTAT: Engineering a Security Token on EVM, with a Path to Privacy" at the Built on Ethereum track.
This is exactly the kind of infrastructure work that will unlock compliant DeFi for institutional capital.
1
8
1,071
Huge. OpenZeppelin libraries are used by the majority of deployed smart contracts. S&P Global generated $15B in revenue in 2025 (Wikipedia) and owns S&P Global Ratings, one of the three major global credit rating agencies.openzeppelin.com/news/spglob…
Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.
Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance. OpenZeppelin smart contracts facilitated over $37 trillion in value transferred, with the vast majority of the largest DeFi protocols, blockchain networks, stablecoins and tokenized funds relying on them.
With S&P Global, we expect to accelerate the impact of onchain finance, backed by more than a century of trust in global markets, benchmarks, and risk frameworks.
To our clients and to all the users of OpenZeppelin open source tools:
• OpenZeppelin Contracts and all our open source applications and tools remain open source, free, and publicly maintained on GitHub. Building open source standards stays a core priority.
• Audits, engineering work, and ecosystem programs continue with the same team, brand, quality, and customer experience, with what will be the added benefit of S&P Global's research capacity, market data, and institutional reach.
For the last decade, OpenZeppelin has set the security standard for onchain finance. Today begins a new chapter for that mission, together with one of the most trusted names in global markets.
Read the full announcement: openzeppelin.com/news/spglob…
1
96
How does the ERC-7984 OpenZeppelin Confidential Fungible Token implementation, built on #Zama’s FHEVM, work? Unlike ERC-20, where balances and transfer amounts are public state, ERC-7984 stores every balance and amount as an encrypted 64-bit integer. See rya-sge.github.io/access-den…
1
1
89
A euint64 value is not the ciphertext itself. It is a 32-byte pointer (a ciphertext handle) referencing an encrypted value managed off-chain by the Zama coprocessor network. Every arithmetic operation produces a new handle.
1
17
ERC-7984 is the confidential counterpart to ERC-20, designed for tokens where balances and transfer amounts should remain private. Instead of storing token amounts directly, ERC-7984 uses encrypted handles (pointers) to represent them. eips.ethereum.org/EIPS/eip-7…
15
Aztec (Noir) splits a contract into private functions, executed and proved on the sender’s device, and public functions, executed by the sequencer when the block is built.
How to read a public variable inside a private functions ?
rya-sge.github.io/access-den…
1
82
Lot of data breach recently linked to crypto wallets, be aware of phishing emails, never enter your seed phrase in a website. Seel also the post on Trezor website (August / Shipmonk) trezor.io/blog/news/recent-c…
There is currently a phishing email going around that's pretending to come from us.
Please do not follow the instructions in the email!
We are currently investigating.
1
116
We are happy to officially welcome @Nethermind to the CMTA. Nethermind has already contributed to CMTA's work through the FIX-CMTAT connector and its pre-audit AuditAgent tool has been applied to CMTAT contracts.
Looking forward to advancing standards for tokenized capital markets together.
14
2
25
2,712
Next Glamsterdam upgrade will incdude gas repricing. To check if you use Solidity's transfer/send 2,300 gas), hardcoded gas values in calls, logic that branches on gasleft(),... blog.ethereum.org/2026/08/24…
Heads-up for anyone maintaining L1 contracts:
→ The Glamsterdam upgrade will include gas repricings (EIP-8037, EIP-8038) that shift state creation and access costs.
→ Most contracts are unaffected, but a small set may break or degrade without updates. Affected contracts rely on assumptions the new schedule changes, such as hardcoded gas values.
Full context in the overview: blog.ethereum.org/2026/08/24…
2
120
Great book for learning more about the 1929 crash and its lasting impact, notably the creation of the SEC and the passage of the Glass–Steagall Act. It also provides some nice examples of stock manipulation, such as artificially driving up a stock’s price before selling.
2
74
SnapshotEngine v0.5.0 for CMTAT is out
On-chain snapshots for any ERC-20: capture balances and total supply at a record date to correctly determine dividends/interest/rights against a fixed ledger state.
→ schedule / reschedule / unschedule snapshots
→ poke() to materialize at the record date
→ external engine (RBAC or Ownable2Step) or integrated into the token
→ binds to any token exposing balanceOf + totalSupply
Open source, MPL-2.0. (Not audited: verify before production).
Specifications and repository 👇
github.com/CMTA/SnapshotEngi…
cmta.ch/content/fd9c5f6015e0…
2
1
4
164
AccessDenied403 retweeted
ERC8343: Contract deactivation
Interface for permanently deactivating a token contract and exposing its deactivation status
Author: @ADCDIII
github.com/ethereum/ERCs/pul…
1
1
4
93
The Capital Markets and Technology Association (CMTA @cmta_ch) has launched CMTAT Confidential, powered by the Zama Protocol.
Developed by @taurus_hq based on @OpenZeppelin’s confidential smart contracts, CMTAT Confidential extends the CMTAT standard with confidentiality.
13
26
131
12,916
🎉 CMTAT-Confidential has been released!
Built for @zama and independently audited by @OpenZeppelin, it helps bring privacy to tokenized securities and stablecoins.
github.com/CMTA/CMTAT-Confid…
Introducing CMTAT Confidential: on-chain privacy for tokenized securities and stablecoins, built on the @zama Protocol and @OpenZeppelin Confidential Contracts.
Encrypted balances. Encrypted transfers. Regulatory compliance features. Selectively modular.
@taurus_hq
Code: github.com/CMTA/CMTAT-Confid…
Announcement: cmta.ch/news-articles/cmta-l…
1
4
175
AccessDenied403 retweeted
We are pleased to announce that Halborn is now a member of CMTA! 🤝
@cmta_ch defines industry standards to facilitate the use of blockchain in the capital markets industry.
As a member, we will bring our cybersecurity and digital asset custody expertise to their standards work.
2
3
4
10,291
Great to integrate @chainlink ACE into the CMTAT security token framework, adding policy-based on-chain compliance and access control.
Thanks to the Chainlink team for the support!
Check out the implementation on GitHub:
github.com/CMTA/CMTAT-ACE
CC @cmta_ch
Chainlink Adoption Update đź”—
Recently, there were 11 integrations of the Chainlink standard across 6 services and 6 different chains.
Users include @cmta_ch, Fairsquarelab, @KrwqCash, @Lemonjetxyz, @okx, @qivaliseu, @TownSquarexyz, @trize_io, UniKA, @XLayerOfficial, and @YeNoMarkets.
LINK everything.
81
Users, auditors, and developers often lack a standard way to identify which version of a smart contract is deployed on-chain.
Based on the versioning pattern used by ERC-3643 for RWA tokens, ERC-8303 generalizes it into a standardized version() interface for any smart contracts.
ERC8303: Contract version
Interface for exposing a contract implementation version string
Author: @ADCDIII
github.com/ethereum/ERCs/pul…
2
97
I hope Ethereum increases the maximum smart contract code size. The current 24 KB limit makes it significantly more difficult to build many smart contract applications, often forcing developers to split functionality across multiple contracts
See EIP-7907, ethereum-magicians.org/t/eip…
1
2
68
EIP-7907 suggests to increase the limit to 64 KB while EIP-8208 is more conservative with 48 KB. 48 KB would be already a great improvement, even 32 KB. Monad, from example, supports 128 KB.
eips.ethereum.org/EIPS/eip-7…
2
55
ERC-7943 (uRWA) is an official Ethereum standard since May. A flexible, compliance-agnostic interface for tokenized RWA, supporting ERC-20, ERC-721, and ERC-1155. Glad to have contributed to its integration into CMTAT (@cmta_ch) as part of my work at Taurus.
1
3
67
Dumping data to Sentry is not a best practice for protecting users' private keys. The 2022 Slope Wallet breach showed why: private keys and seed phrases were logged and sent to a remote Sentry server, leading to stolen funds. See osec.io/reports/slope-invest… , slope-finance.medium.com/slo…
Honestly @Rabby_io, this is disgusting
Before I even set up my wallet, you are sending my data to
- your matomo instance
- and just in case track me on Google Analytics
- and to be really sure dump my data into Sentry
I hereby kindly inform you that this is a breach of your Privacy Policy (yes, the one that you last looked at 5 years ago) and a gross violation of GDPR Articles 13 and 46.
Please stop tracking me at your earliest convenience. Thank you.
2
155