How Zellic found bugs in Zebra that let rejected peer data poison sync state and stall node progress
How 64 missing bits let anyone turn confirmed Relay Protocol BTC deposits into miner fees.
How Zellic formally verified Plonky2 gates for Lighter
A type-confusion vulnerability in Chrome's V8 engine (CVE-2025-2135)
Dissects sBPF execution paths and JIT details, using real vulnerabilities to understand security boundaries
Looking into WebViews and the common pitfalls for mobile developers
A look into Polocolo, a newly designed ZK-friendly hash function
A look into how we were able to retrieve every single contract ever deployed on Ethereum
A look into The Open Network, its unique design choices, and the security considerations for building on TON
A review of common misleading sales tactics used for audit competitions, and the questions you should ask
