Experience of utilizing a query engine to find replicates of known bugs in any deployed smart contracts within the Ethereum ecosystem.

View Details

Rounding-related hacks are having a moment in the spotlight. Yet, they're one of the most misunderstood class of vulnerabilities. In this talk, we explore the history of rounding related exploits, diagnose root causes, and provide practical mitigations for protocols.

View Details

Threshold cryptography, crucial for blockchain and cryptocurrencies, faces a critical issue: threshold key destruction. This talk will cover how attackers can prevent honest participants from using threshold keys, focusing on three cases: the severe impact of the Forget-and-Forgive attack (BHUSA '20), the risks of missing length checks in Feldman VSS, and the novel method in DKLs23 that exploits honest participants.

View Details

At Runtime Verification, we saw a need for advanced Solidity debugging tools combining traditional breakpoint debugging with symbolic execution. Enter "Simbolik: The Symbolic Solidity Debugger." This tool bridges the gap between user-friendly debugging and powerful formal methods. Developers start with familiar techniques, like setting breakpoints, and gradually integrate formal methods, enhancing the security and reliability of their smart contracts.

View Details