@NethermindSec

Comprehensive security from @Nethermind, from audits to formal verification. Book now: https://xitter.cf/t.co/dBDIYbokwP

nethermind.io/nethermind-security
Joined September 2024
  • Tweets778
  • Following44
  • Followers1.7K
190Media

Why Your Custom Hash Function Will Get You Hacked

You're building a ZK circuit that needs Merkle tree inclusion proofs. You need a hash function. Poseidon, Blake, or SHA-256.

Article · @NethermindSec
2
2
6
1,063

The Unverified Public Key Attack: When Your ZK Proof Proves Nothing

Most ZK circuit vulnerabilities don't start in the code. They start in the design phase when teams fail to answer three critical questions:

Article · @NethermindSec
3
1
1,927

When Your Zero-Knowledge Proof Rejects Valid Inputs

Over-constrained circuits break the completeness property of ZK proofs: valid inputs fail to generate valid proofs. While less common than under-constraining, this vulnerability stems from an incomple…

Article · @NethermindSec
1
4
673

The Privacy Paradox: When Your Zero-Knowledge Proof Leaks Everything

ZK proofs enable signals to be both private and public. Get this balance wrong and you either break soundness (insufficient public signals) or destroy privacy (excessive public signals).

Article · @NethermindSec
9
1
37
5,923

The Arithmetic Overflow That Breaks ZK Circuits

ZK circuits operate within scalar fields using modular mathematics. This creates a counterintuitive reality: two values can be equivalent within the field even when they're vastly different in standar…

Article · @NethermindSec
1
1
7
1,464

The Circuit Bug That Cost $1.9 Billion

The zkSync Era vulnerability.

Article · @NethermindSec
1
1
5
1,652

What LUKSO Learned Running AI-Assisted Security Analysis on Their Hyperlane Bridge Contracts

@lukso_io is developing a new generation of smart contract standards (LSPs) and Universal Profiles to improve usability and security across Web3. Ahead of launching the LUKSO ↔ Ethereum bridge, the …

Article · @NethermindSec
1
17
3
47
8,113

How Nethermind Security Uses AuditAgent as a “Pair Auditor”

Smart contract vulnerabilities have led to more than $11.8 billion in total value hacked as of July 2025 (according to defillama.com). With the stakes so high, Nethermind Security explored how AI co…

Article · @NethermindSec
1
5
4
13
2,208
Load more