The NFT Bounty blog
Posts on NFT Bounty, Meridian Client, security, ZK research and what the team is building and shipping. Newest articles first.
Featured
All posts — page 1 of 13
Showing 5-14 of 120
Go for Security Auditors: Part 2 - Finding The Doors Into A Codebase
The second in a three-part series on auditing Go code, covering how to orient in a large codebase, find entry points and attack surfaces, choose a review strategy, and use static analysis tooling effectively.
AI as a Force Multiplier for Security Engineers
AI has not replaced reviewers. It has made strong reviewers faster and sharper, while also amplifying attackers.
Go for Security Auditors: Part 1 - Syntax That Will Trip You Up
The first in a three-part series on auditing Go code, covering deceptive syntax, common pitfalls like nil maps and slice aliasing, testing gotchas, and compiler pragmas that hide security-relevant behaviour.
Soldøgn Interop Recap: Glamsterdam & ePBS
A recap of Soldøgn Interop, covering NFT Bounty's work on Glamsterdam and progress toward implementing Enshrined Proposer-Builder Separation.
Defensive Protocol Design
This note covers protective steps developers can take to stop protocol exploits through defensive design.
Your first ZK vulnerabilities: From ZeroKnowledge of ZK to OneKnowledge
An introduction to ZK circuit security, exploring fundamental mental models for creating and thinking about ZK circuits. Learn about under-constrained variable vulnerabilities that appear in ZK code through a practical Circom example.
Fusaka's Impact On Smart Contract Security
A summary of Ethereum's Fusaka upgrade and its implications on smart contract functionality.
The Ultimate Guide to the Top for Security NFT Bountyers: Setting Sail
A comprehensive four-part series guide for security researchers who want to rise faster, build reputation, and make lasting impact in the web3 security space, from foundations to mastery and consistent results.
By Shealtielanz
NFT Bounty Team on Trustless Payments
The NFT Bounty team's outlook on removal of Trustless Payments from Fulu
"Fullhouse": NFT Bounty + Reth in a single binary
Exploring NFT Bounty and Reth in one “Fullhouse” binary.