BioBind binds biometric deduplication to zero-knowledge authentication
A prototype rejects tested composition attacks; its unlinkable circuit uses 31,445 constraints and about 305,000 gas.
18 stories, newest first · one card per story
A prototype rejects tested composition attacks; its unlinkable circuit uses 31,445 constraints and about 305,000 gas.
TxBench includes 1012 attacks worth $868 million from 602 incidents
From 203 public cases it builds 3,045 detect, exploit, and patch tasks that copied answers solve less often.
Authors score Arbitrum, Optimism, and Base over six months of transactions using user-defined priority profiles.
Study of 36 cross-chain bridges finds 830 verification-vulnerability instances across 11 patterns.
AgentValve bounds Sybil-driven payment loss for AI agents using capacity-limited trust paths on Ethereum.
A verified Ethereum e-invoice contract makes duplicate reimbursement impossible, including for LLM agents.
A study of one million Solana blocks measures transaction mix, fees, programs, and intra-block conflicts.
A Polygon smart-contract design mitigates the last-revealer attack in commit-and-reveal on-chain lotteries.
Paper proposes recursive invariants, a transaction-level logic and typed DSL, to enforce multi-step UTXO workflow rules without shared mutable state.
SkelOT reuses one native AOT artifact per EVM contract family, cutting Base compile units by 47.5%.
MA-HGAT framework detects logic vulnerabilities across smart contract and IoT device firmware layers using multi-agent heterogeneous graph attention.
TasmScan introduces source-free taint analysis for TON smart-contract bytecode, detecting 95.3% of defects with 96.8% precision and 17x speedup.
ZEBRA verifies zkVM constraint systems via branch-and-bound cardinality counting, finding 11 zero-day bugs across five real-world zkVMs and running 51.5x faster than SMT verification.
IntentFuzz protocol-aware fuzzer recovers bridge structure from unannotated Solidity and confirmed 22 invariant violations across 24 real-world deployments.
TxLucent detects blockchain dApp attacks from transaction function-name sequences using a transformer, achieving 1.56% false negatives without source code.
Researchers formally define smart-contract frontrunning resistance, showing 55% of 393 audited vulnerabilities escape state-of-the-art detection, and find two undisclosed Ethereum flaws.

Checkmarx argues Solidity developers need pre-deployment AppSec because disclosure-to-weaponization time has collapsed from 840 days to 1.6 days.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views