AI as a Force Multiplier for Security Engineers
AI has not replaced auditors. It has made strong auditors faster and more powerful, while also amplifying attackers.
By Kirk Baird
Category
security
17 posts
Your first ZK vulnerabilities: From ZeroKnowledge of ZK to OneKnowledge
An introduction to ZK circuit security, exploring fundamental mental models for creating and thinking about ZK circuits. Learn about under-constrained variable vulnerabilities that appear in ZK code through a practical Circom example.
Fusaka's Impact On Smart Contract Security
A summary of Ethereum's Fusaka upgrade and its implications on smart contract functionality.
The Ultimate Guide to the Top for Security Researchers: Setting Sail
A comprehensive four-part series guide for security researchers who want to rise faster, build reputation, and make lasting impact in the web3 security space, from foundations to mastery and consistent results.
By Shealtielanz
SP1 and zkVMs: A Security Auditor's Guide
Practical security checklist and auditing guide for engineers reviewing SP1/RISC-V guest programs (also useful for Risc0). Covers input validation, 32-bit pitfalls, third-party dependency compatibility, overflow protection and verification key handling.
By Kirk Baird
The Economics of MEV in Cross-Chain Bridge Exploits: A Game-Theoretic Analysis
An explanation of how MEV affects cross-chain bridge exploits and the incentives driving them.
Pectra's Impact On Smart Contract Security
A summary of Ethereum's Pectra upgrade and its implications on smart contract functionality.
Live EigenLayer Bug Discovered During Sidecar Security Review
Analysis of a critical division-by-zero vulnerability in the EigenLayer sidecar rewards calculation process, its potential DoS impact, and the implemented fixes.
By Andy Li
A Security Engineer's Guide to Reviewing Core Blockchain Nodes
A comprehensive methodology for conducting security reviews of blockchain infrastructure, using Reth as a practical example
By Kirk Baird
Transitioning from EVM to SVM: Key Concepts for Solana Security Assessments
Key concepts to understand the Solana Virtual Machine (SVM).
By Dimaz Wijaya
Unraveling a Curious Edge Case in EigenLayer's Slashing Accounting
Examining an interesting edge case discovered in EigenLayer's beacon chain slashing calculation that affects withdrawable share calculations.
NEAR Smart Contract Auditing: Storage
In this article, we dive into the storage system of the NEAR blockchain. We'll explore how storage works on NEAR, how to use it securely, and highlight some of the common pitfalls.
Common Vulnerabilities: Liquid Restaking Protocols - Smart Contracts
Liquid Restaking protocols are a big trend in the DeFi space. This article explores the common vulnerabilities in liquid restaking protocols with real-world examples.
Forge Testing Leveling
Enhancing Forge testing with fuzzing and invariant testing for smart contract security.
By Dimaz Wijaya
The Effects of Ethereum's Upgrades on Smart Contracts
A summary of Ethereum's upgrades and their implications on smart contract functionality.
On the Importance of the Security Alliance
About the new Security Alliance and why we support it
Using Proxies: An Essential Guide
A practical guide to safe choices and best practices when deploying proxies for a project
Other categories
Working on something in this space?
Sigma Prime audits Ethereum protocols, smart contracts, and consensus implementations.
Request a scoping callServices
Products
Resources
Company
Social
© Copyright 2026 by Sigma Prime. All Rights Reserved.