Mehdi Zerouali
@ethzed
Followers
2K
Following
2K
Media
18
Statuses
1K
Co-founder & Director @sigp_io
Sydney, Australia
Joined July 2012
How does Quantum Key Distribution actually secure data? Let's break down the physics behind "unhackable" encryption 🧵
3
8
18
Ethereum hard forks can silently change smart contract behavior. At DSS, Toon Van Hove, Security Engineer at @sigp_io, explains how recent and upcoming forks like Pectra and Fusaka reshape security assumptions and what developers must know to stay safe.
1
5
27
Think implementing nonces is simple? Think again. Whether you're building onchain protocols or offchain infrastructure, proper nonce implementation is one of the trickiest parts of cryptographic security. Let's dive into why replay protection is harder than it looks 👇
5
10
49
We've released Lighthouse v8.0.0-rc.0! The next Ethereum upgrade Fusaka is coming to testnets! 🎉 This upgrade is a major step forward for scaling L2s with more blobs 🦓 If you’re running a holesky / hoodi / sepolia testnet node, you must upgrade before the fork.
5
7
33
A Security Auditor’s Guide to reviewing @SuccinctLabs's SP1 programs. Practical audit patterns, input validation checklist, 32‑bit pitfalls, third‑party deps, overflow checks. For security engineers reviewing SP1/Risc0 guest code. https://t.co/bUjCZb5CEx
blog.sigmaprime.io
Practical security checklist and auditing guide for engineers reviewing SP1/RISC-V guest programs (also useful for Risc0). Covers input...
4
17
97
We just wrapped up a security review of @berachain's dual execution client implementation using Reth SDK + Go-Ethereum for their BRIP-0004 enshrined rewards system. 🛡️ Client diversity wins: ➡️ Differential fuzzing between bera-reth & bera-geth caught consensus bugs that
40
23
155
Next DSS Webinar: Trillion Dollar Security (1TS) initiative by @ethereumfndn, on Sep 23 12:30PM UTC • Speakers: Fredrik (@Fredrik0x) from EF (@ethereumfndn), Mehdi Zerouali (@ethzed) Cofounder, Sigma Prime (@sigp_io) • Moderator: @0xRajeev from @TheSecureum Info & Register⬇️
2
10
41
📖 New blog post out, written by @larkan_gareth The Economics of MEV in Cross-Chain Bridge Exploits: A Game-Theoretic Analysis Check it out below 👇
3
6
25
🔬 Thread: Why the @boundless_xyz zkVM approach to Ethereum consensus verification matters (and the security challenges we found) Traditional cross-chain bridges require trust assumptions. "The Signal: Ethereum" by Boundless eliminates this through cryptographic proofs, but the
32
7
78
Ever stared at 500k+ lines of blockchain node code wondering where to even start? We've been there. Reviewing core node implementations can be particularly challenging due to their complexity and scale.
4
14
126
Lighthouse v7.1.0 Fantabulous is out! This is an exciting release packed with major improvements: 📉 Hierarchical state diffs are now in the hot DB - reducing disk I/O by 4x during normal ops and using 10x less space during non-finality. ⛽ Default gas limit bumped to 45M -
github.com
Summary Lighthouse v7.1.0 is a low-priority maintenance release containing several optimisations and new features. Hierarchical state diffs for hot state: 4x less disk I/O while running, and 10x l...
1
8
37
Lighthouse dev @jimmygchen makes the case for a spec freeze for PeerDAS and lays out a path for mainnet in 2025 🚀
1
4
27
Sigma Prime is hiring 🚀 We’ve just added 3 roles to our GitHub - Blockchain Security Intern - Rust Engineer - DevOps Engineer Help shape the future of web3 with us 👇
20
23
263
A critical division-by-zero vulnerability was discovered by our team in EigenLayer’s sidecar rewards calculation that could have caused DoS for AVSs and operators. The issue was fixed before exploitation by adding explicit checks onchain and in the sidecar.
2
7
90
Introducing Anchor v0.1.0 Our new Rust-based distributed validator technology (DVT) client for @ssv_network. This marks a major milestone for Ethereum decentralisation, bringing more resilience and diversity to the network and to DVT. 👇
5
22
84
Thrilled and honored to join the @ethereumfndn Trillion Dollar Security initiative as a steward. Securing Ethereum for billions of users and trillions in assets is one of the most important challenges of our time. Let’s get to work 🚀
0. Announcing the Trillion Dollar Security (1TS) initiative: an ecosystem-wide effort to upgrade Ethereum’s security to help bring the world onchain.
7
28
216
The Ethereum network has just enabled validator consolidations. If you're running a Lighthouse VC, you can consolidate in just a few clicks with our UI, Siren 😏
1
18
78
Common Vulnerabilities: Oracles and Pricing In this article we explore common missteps that can occur when making use of Oracles and pricing feeds in smart contracts, and steps that can be taken to mitigate these issues.
1
11
32