Best book to understand ZK math for Groth16 hackmd.io/@Sahil4555/zk/%2Fp…

I've spent 3 years building here.build. It's not done yet. Bounty money is out & I need to find work now, but I made things along the way that I think matter. I don't want them sitting in a drawer for 5 years. I'd rather release them under MIT. First: Plexus.

I am looking for a job . If u are protocol/team , looking for a dev with security knowledge or a security engineer . Please reach out

Clean is like a perfect game of Tetris, no gaps! clean.zksecurity.xyz/

Some news: I’m no longer at Aztec following the recent restructuring I’m on the hunt for a new role in DevRel or technical sales, so if you’re hiring, reach out! In the meantime, I will be getting back to making videos again after a much needed rest 🩷

If you don't know the current situation in @code4rena, here is the brief: Code4rena hosted K2 competition, which was the last one before announcing a winding down. After distributing rewards to participants and sending judging fees, two SRs, @MaxZuvex and @0xArav, found what appears to be a Sybil attack. They found that two wardens created their accounts days before the competition ended and submitted findings clearly copied from other wardens' work. One submission belonged to a less-duplicated issue group, which increases their profit, and the other one was a QA report that resembles another warden's QA report and got 1st place. Code4rena Team believes that the Judger is the one responsible for this, as he was one of the few people who had access to the submission before closing. Code4rena was able to recover funds from these 2 newly created accounts (propabbly as KYC process and newly created account payout delays). Code4rena asked the Judger to return the funds, but he has not responded to date. C4 head judge will review the issues, remove duplicate sybil issues, review QA reports, and post the final result, and wardens will receive the amount deducted from their reward.

Unlike selfdestruct, this won't be recorded as a transaction on etherscan

How to send ETH to any address without SELFDESTRUCT? 1. Deposit 32 ETH, create a validator with withdraw credential set to the target address 2. Exit the validator (not EIP 7002 request) 3. 32 ETH + rewards sent to target (silently, no fallback triggered)

I see the data as which companies to be wary of applying for a job Should you became a web3 SR? I would ask 2 questions What skills do I need? Read the descriptions for the open SR roles to understand the skills in demand. How much time and money do I have?

Layoffs data. Very informative cryptojobslist.com/crypto-la…

In Solidity, is it possible to craft a memory array of length 2**256 - 1? Yes -> if function that creates the array is an internal call No -> if function call is external. Reverts with out of gas error. Code github.com/t4sk/notes/blob/m…

Math for vault and rebase token (like SUSDS and aToken) calculate the same redeemable amount with different mechanisms. But in code, precision loss causes these 2 ways of calculations to diverge. Notes github.com/t4sk/notes?tab=re… Code github.com/t4sk/notes/blob/m…

txgraph.org/ - Visualize transaction - Compiles and visualizes Solidity contracts - Code navigation if contract compiled

I've received a fake job recruitment email from zendarox Here are some things I do before clicking on any link. 1. Background check (google the company) 2. Hover over link to see if it matches text 3. Open links in browser's private mode Stay safe

Bug bounty wishlist - onchain Merkle root of reports and scope - SR reveals report incrementally with Merkle proof - Unconfirmed reports made public after 90 days - ZK payments - Reports used to train AI which SRs receive future profit if the AI finds bug and receives bounty

Suggestion for the job application form Disable form submission on keyboard "Enter" I've accidentally submitted an incomplete application form by pressing "Enter" instead of "shift + Enter" while typing out the text area

Yes, hashing to 0 address will take me billions of years. Wish me luck

stETH has a function that - transfers any token and ETH to a vault set by Lido - any user can call Vault address is 0 1. Find a way to set the vault address or deploy code at the 0 address 2. Report bug💰 Lido proxy etherscan.io/address/0xae7ab… Lido impl etherscan.io/address/0x02827…

Incremental Merkle Tree Fast (O(H)) merkle root calculation for 2^H leaf nodes Used by ETH deposit contract to prove ETH deposits to CL Deposit contract etherscan.io/address/0x00000… Python github.com/t4sk/notes/blob/m… Solidity github.com/t4sk/notes/blob/m… Notes github.com/t4sk/notes