Twitxy Saved

ETH Bucharest

@ETHBucharest_

First #ETH Conference & Hackathon in Romania

Re-building ๐Ÿšง
Bucharest Joined April 2023
435 Following 2.7K Followers 1.8K Posts

Latest posts 5

ETH Bucharest @ETHBucharest_
Every valid ZK proof looks the same.

So what stops a mixer withdrawal from being replayed?

The nullifier.

New @AdevarLabs piece by @InfectedCrypto on how @TornadoCash , @Zcash , and @penumbrazone build them, and shows in audits when they fail.

Read on ๐Ÿ‘‡
Adevar Labs - Security Audits Verified account @AdevarLabs Sep 29
Every valid ZK proof looks the same. So what stops you from withdrawing a mixer deposit twice? โž” The nullifier.

In our latest article, @InfectedCrypto walks through how Tornado Cash, Zcash and Penumbra build them, and the audit findings that show up when they fail.

adevarlabs.com/functions/blogโ€ฆ
View quoted post on X
ETH Bucharest @ETHBucharest_
Most protocol multisigs fail the same way: every key lives with the same team.

An independent signer with its own nested multisig, hardware keys, metal backups, and a review SLA is how you stop one compromise from becoming a drain.

Read on ๐Ÿ‘‡
Adevar Labs - Security Audits Verified account @AdevarLabs Sep 23
What to expect when we come on as your independent multisig signer (Secure Governance Services):

โ†’ Our key on your multisig is itself a multisig. Each of our signers generates keys on a dedicated hardware wallet, with backups engraved on metal and stored across physically separate locations.

โ†’ We define a clear review and approval process before we sign anything, including turnaround times and escalation paths.

โ†’ We review every proposed transaction, flag concerns, and sign within agreed timeframes. Contract upgrades get reviewed first, and we only sign if the hash of the code being deployed matches the code we reviewed.

โ†’ We maintain defined protocols for emergency operations, key recovery, and signer replacement, so governance keeps working when something goes wrong.

When all the keys on a multisig sit with the same team, one compromise can reach the whole threshold. An independent signer removes that weak link.

Learn More Here: x.com/banescusebi/stโ€ฆ
View quoted post on X