Nethermind Security
@NethermindSec
Comprehensive security from @Nethermind, from audits to formal verification. Book now:
44 Following 1.6K Followers
We started an audit of @axol_io's PXE Bridge.
It exposes Aztec's shielded settlement to EVM intent solvers over JSON-RPC: solvers request note creation via a simple RPC call, and the bridge's embedded Aztec PXE creates the shielded note and generates the proof on their behalf, so solvers never need to run their own PXE or handle Aztec's private execution model themselves.
Show more
Every pending transaction in the mempool is a statement of intent. Bots read it before it settles and front-run what's worth front-running.
The contract calls 𝘈𝘔𝘔.𝘴𝘸𝘢𝘱(𝘵𝘰𝘬𝘦𝘯𝘐𝘯, 𝘢𝘮𝘰𝘶𝘯𝘵𝘐𝘯, 𝟘). That zero is 100% slippage tolerance. A frontrunner inflates the price, lets the swap settle, sells back at profit. A 10,000 USDC trade returns 1 ETH instead of 5.
𝘳𝘦𝘲𝘶𝘪𝘳𝘦(𝘢𝘤𝘵𝘶𝘢𝘭𝘈𝘮𝘰𝘶𝘯𝘵𝘖𝘶𝘵 >= 𝘮𝘪𝘯𝘈𝘮𝘰𝘶𝘯𝘵𝘖𝘶𝘵) lets the user set their worst acceptable price. If a bot moves the price outside that range, the swap reverts. The attacker burns gas for nothing.
The mempool stays public. Defense lives in the code, or it doesn't exist.
Show more
Tokenised assets fall into three legal categories.
Informational — records a fact about an offchain asset
Certificatory — digital receipt against a custodian
Dispositive — transfer of the token IS transfer of legal title
Most tokenised assets today are certificatory.
Show more
Our Formal Verification team is beginning work on the @brevis_zk Pico RISC-V zkVM, building on our work on SP1 and OpenVM.
We are grateful to the @EthereumFndn for supporting this effort.
Our Formal Verification team led by @PetarMax, with support from @EthereumFndn, has verified in Lean the correctness of the OpenVM RISC-V extension built by @axiom_xyz.
This work proves instruction-level correctness and, for the first time, execution and memory consistency.
🧵
Show more
