Latent Bugs in Billion-Plus Dollar Code

Attack vectors (and their combinations) over xSushi-like staking, ERC777 tokens

Mass Disclosure of Griefing Vulnerabilities

Issuing warnings to 100 vulnerable accounts via Etherscan chat

Rari Capital Vulnerability

Multi-hundred million attack prevented

Elipmoc: Advanced Decompilation of Ethereum Smart Contracts

Technical paper on the algorithms and techniques employed in the most recent version of our EVM bytecode decompiler/lifter.

Phantom Functions and the Billion-Dollar No-Op

A Six-Year-Old Solc Riddle

In mid-October, we received a request to work on a project unlike any we've had before.

Harvest Finance Vulnerability, $200K Bounty

We disclosed a critical vulnerability to Harvest Finance, through Immunefi. The vulnerability concerns a proxy pattern and was discovered via an interesting automated analysis.

Symbolic Value-Flow Static Analysis of Ethereum Smart Contracts

A technical paper describing our most recent analysis technology, responsible for 7 major vulnerabilities detected in-the-wild.

Verkle tree gas metering impact

We were commissioned by the Ethereum Foundation to study the impact of a new gas cost model, based on Verkle tree access costs.