A structured OWASP threat model for cross-chain bridges, built from the Ronin 2022, Poly Network 2023, Ronin 2024 and Kelp DAO 2026 incidents, covering assets, trust boundaries, STRIDE analysis, an attack tree and a prioritised threat register.
2026, Jul 31 — 29 minute read
A comparative analysis of ten major cross-chain bridge exploits between 2021 and 2026, grouped into five failure classes, covering the architecture of each bridge, the root cause of each failure, and the destination of the stolen funds.
2026, Jul 31 — 41 minute read
How Rundler implements an ERC-4337 bundler in Rust — the Pool, Builder and RPC tasks, mempool simulation and reputation, the bundle sender state machine, gas estimation, signature aggregation and multi-entry-point support.
2026, Jul 30 — 29 minute read
A walkthrough of Alchemy's ERC-4337 stack — Modular Account V2 and its semi-modular variants, validation selection through the UserOperation nonce, deferred actions, session-key permission modules, the Rundler bundler, and the hosted Wallet APIs.
2026, Jul 30 — 32 minute read
A study guide to the foundational zero-knowledge proof papers. Fifteen technical concepts and fifteen formulas that recur across GKR, Pinocchio, Groth16, Bulletproofs, STARKs, Sonic, Marlin, Spartan, Halo, Nova and Zerocash.
2026, Jul 28 — 26 minute read
How Medusa fuzzes Solidity contracts. Architecture, the corpus and coverage feedback loop, assertion, property and optimization tests, and a step-by-step setup on a real project.
2026, Jul 28 — 30 minute read
How the Gnosis Conditional Tokens contracts model prediction markets, why collection identifiers are elliptic curve points on alt_bn128, and what the 2019 audit found.
2026, Jul 28 — 29 minute read
