Four ATT&CK Techniques for Getting Into Accounts - Valid Accounts, Brute Force, Password Guessing and Password Spraying

How adversaries acquire credentials with Brute Force (T1110), Password Guessing (T1110.001) and Spraying (T1110.003), then abuse them as Valid Accounts (T1078).

2026, Sep 09   —  14 minute read

Three ATT&CK Techniques Behind the Ransomware Endgame - Service Stop, Disable or Modify Tools, and Indicator Blocking

How attackers disable security tools (T1562.001), cut telemetry (T1562.006) and stop services (T1489) before impact, and how defenders detect and stop it.

2026, Sep 09   —  15 minute read

KZG Polynomial Commitments — The Terms and Formulas, From Beginner to Advanced

A layered glossary of KZG polynomial commitments. Thirty terms and their formulas, from binding and hiding to the quotient polynomial, t-SDH and degree bounds.

2026, Sep 09   —  20 minute read

Understanding Hyperliquid - The Vocabulary, from Beginner to Advanced

A layered glossary of Hyperliquid. Thirty terms across three levels, from HyperCore and mark price to auto-deleveraging, portfolio margin and the four HIPs.

2026, Sep 09   —  20 minute read

Inside Circle's UpgradableMSCA — A Modular Smart Contract Account Under ERC-6900

How Circle's UpgradableMSCA implements an ERC-6900 modular account: validation entities, hook ordering, ERC-7201 storage, and the factory that deploys it.

2026, Sep 09   —  24 minute read

Inside Circle's SponsorPaymaster — How a Verifying Paymaster Is Built

A line-by-line reading of Circle's SponsorPaymaster, the ERC-4337 v0.7 verifying paymaster behind gasless Circle wallets, and the design choices behind it.

2026, Sep 09   —  22 minute read

Partial Notes on Aztec — Deferred Completion and Private DeFi Composability

A private function cannot read the price it needs. Partial notes split a note into a private half that fixes the payee and a public half that fixes the amount.

2026, Sep 09   —  22 minute read