
EVM | DeFi | ZK | DM for audits | prev @cyfrin
Joined April 2019
- Tweets2.8K
- Following283
- Followers26.8K
- Likes17K
clz - opcode to return number of leading 0s in a bit
Before clz
Binary search to find most and least significant bits
With clz
msb = 255 - clz(x)
lsb = 255 - clz(x & -x)
What's x & -x?
See code comment
Code
github.com/t4sk/notes/blob/m…
Binary examples
github.com/Uniswap/v3-core/b…
🐸Smart🐸Contract🐸Programmer🐸 retweeted
See Tamaswap for a good example of a “no free lunch” theorem that states nobody can steal user funds with any chain of actions
github.com/Bacon-labs/tamasw…
🐸Smart🐸Contract🐸Programmer🐸 retweeted
Been learning about ZK-SNARKs lately! The core ideas behind modern hash-based schemes are surprisingly accessible & elegant 🧙♂️
Partly to teach myself, I wrote a post explaining them from scratch for people like me without a deep math background:
xn--2-kmb.com/zk-snarks
Groth16
I will explain the complex equations in the future
Notes
github.com/t4sk/notes
Replying to @GB53F8
> i think i should continue my learning and give it some time
Yup. Use your time to learn the craft that you enjoy.
> Strength
Topics that you deeply understand.
In your example, from Aave v3, I would look into Aave v3 integration, forks, copies on other chains
Replying to @GB53F8
From what I've seen on x, all BBP have unpleasant experience for SRs
High submission fees, many duplicates, ghosting and dismissed as private known issues.
I would pick BBP by your interest, your strength and amount paid.
🐸Smart🐸Contract🐸Programmer🐸 retweeted
🚀 Kann Audits Internship Program 2.0 is here!
We're back with our second paid internship program for Security Researchers!
Looking for motivated hustlers across:
• Solidity
• Rust
• TypeScript / Off-chain
• ZK
We're giving emerging talent the opportunity to work on real security audits, build strong portfolios, collaborate with other researchers, and level up their skills.
Ready to prove yourself?
Apply here: kannaudits.com/internship
Once you've applied, comment "Applied!" below 👇
🐸Smart🐸Contract🐸Programmer🐸 retweeted
yBorg - Week 1 Day 2
Meet @0xFlint_, the newest yBorg mentor. A gigachad security researcher with a diverse background who spends his free time getting lost in massive Rust codebases. He share's his audit methodology and thoughts on AI in a new video.
Today’s yBorg assignment:
- Watch the vid
- Soak up the alpha
- 👉 Think about how you’d turn his process into an AI-assisted workflow
For those who are joining us online, share a diagram in the comments showing how you'd turn Flint's process into an AI-assisted workflow - we'll be sharing examples from the Discord later.
This whole week we are thinking about process, both human and AI. We'll be sharing lots of diagrams and examples throughout the week and by the end of the week, fellows complete a diagram of what they are building!
@0xFlint_ also hosted an AMA on the discord and we can continue that here in the comments if anyone has anything they'd like to ask.
Enjoy the vid and don't forget to share your diagrams and ask questions in the comments!
🐸Smart🐸Contract🐸Programmer🐸 retweeted
We'd love to see you working with the best team onchain.
View 0x open roles now, including Sr Software Engineer on our API team.
jobs.ashbyhq.com/0x/8422810e…
Replying to @rosarioborgesi
Especially protocols with high TVL
Elliptic curve add, scalar mul and pair Solidity examples
Operations are executed by calling precompiles
Reverts if point are invalid
(0, 0) is point at infinity
Code
github.com/t4sk/notes/blob/m…
🐸Smart🐸Contract🐸Programmer🐸 retweeted
Dear staking protocols and delegated stakers of ethereum:native,
Glamsterdam hardfork is approaching @ethereum mainnet, and there is an important new attack on delegated staking that you should be aware of!
👇
Replying to @cryptodavidw
Learning ZK, AI's answer were often incorrect, circular or superficial. Blog posts like yours helped a lot to double check that I was going in the right direction.
But yeah, educative content will fade.
Not much to gain for content creators
Most digestable explanation of Groth16 soundness
building-babylon.net/2026/08…
Compares the coefficients for A, B and C and deduces that the ending equation is the Groth16 equation.
🐸Smart🐸Contract🐸Programmer🐸 retweeted
about to ship the first batch of wedgies
DIY off-the-shelf hardware wallet
signs on a gnosis safe
build your own or order one today
wedgie.dev
I thought about using it to sort collateralized positions in lending and stablecoin protocols so that a liquidation batches from most to least risky positions.
But O(N) find, needed to insert a new position, makes integration clunky
Similar idea used in Liquity V1 and V2
Sorted doubly linked list in Solidity
O(1) insert given the correct index
O(1) removal
O(N) to find the correct insertion index
Code
github.com/t4sk/notes/blob/m…
Test
github.com/t4sk/notes/blob/m…
The last months I realized that income from bug hunting is to unregular for me. Because of this I have decided to move more into private audits and do bug hunt only when I have some free time.
If you are looking for a security researcher feel free to reach out to me here -> t.me/schnilch


















