Hardening blockchain security
with formal methods

We write about blockchain security,
zero-knowledge proofs, and our bug discoveries

When a Contract Trusts the Caller’s Encoding

Socket’s route trusted the caller to encode the swap, and one of them encoded a transferFrom instead.

Sep 16

| 6 min read

Sep 16

| 6 min read

Sep 16

| 6 min read

When a Contract Trusts the Caller’s Encoding

Socket’s route trusted the caller to encode the swap, and one of them encoded a transferFrom instead.

Sep 16

| 6 min read

Sep 16

| 6 min read

Reentrancy in Reward Accounting: How $27M Was Paid Out on a Deposit

A reward calculation subtracted two balance readings and paid out the attacker’s own deposit as a reward.

Sep 1

| 6 min read

Sep 1

| 6 min read

Subscribe to our blog

Be the first to get the latest from Veridise — including educational articles on ZK and smart contracts, audit case studies, and updates on our tool development. Delivered twice a month.

Veridise Audits the Strategy Contracts Behind Lombard’s Bitcoin Vaults

Veridise reviewed the strategy contracts behind Lombard’s Bitcoin vault infrastructure and caught one high-severity migration-pricing bug before launch.

Aug 28

| 3 min read

Aug 28

| 3 min read

ZK Circuit Equivalence Checking: Introducing LLEQ

Every ZK circuit describes its computation twice and the proof system checks only one. LLEQ proves both agree.

Aug 25

| 10 min read

Aug 25

| 10 min read

Constant Product Manipulation: When a Token Breaks the Pool It Was Built For

A sell tax charged to the liquidity pool instead of the seller, and the reserve invariant it rewrote.

Aug 19

| 6 min read

Aug 19

| 6 min read

Mina Multisig Audit: Veridise Reviews FROST Signing

Veridise completed a manual audit of Mina Multisig’s FROST signature integration, fixing six issues before Nori’s production deployment.

Aug 11

| 4 min read

Aug 11

| 4 min read

Low-Level Call Hijacking: How a Trusted Router Call Cost $3.5M

An attacker supplied the target and payload of a call Arcadia’s Rebalancer made, and pointed a trusted contract’s authority at other users’ accounts.

Aug 5

| 4 min read

Aug 5

| 4 min read

Insolvency Vulnerability: The Euler Finance $197M Exploit

An insolvency vulnerability drained $197M from Euler Finance: one function added in a later upgrade skipped the solvency check every other function ran.

Jul 28

| 7 min read

Jul 28

| 7 min read

Subscribe to our blog

Be the first to get the latest from Veridise — including educational articles on ZK and smart contracts, audit case studies, and updates on our tool development. Delivered twice a month.

Flash Loan Governance Attacks: How Borrowed Voting Power Drains a Protocol

How Beanstalk’s emergencyCommit allowed borrowed capital to satisfy a governance supermajority threshold and drain $182M in one transaction.

Jul 21

| 6 min read

Jul 21

| 6 min read

Bridge Misconfiguration Vulnerabilities: How One Zero Value Cost $190M

Jul 15

| 6 min read

Jul 15

| 6 min read

Proving the Absence of Soundness Bugs in ZKsync Airbender

Shankara Pailoor

Jun 30

| 3 min read

Shankara Pailoor

Jun 30

| 3 min read

Access Control Bugs in Smart Contracts: How a Negated Check Cost $730K

Jun 29

| 5 min read

Jun 29

| 5 min read

The Audit Habit That Would Have Caught Resupplyfi’s $9.6m Bug: The Auditor’s Take

May 13

| 5 min read

May 13

| 5 min read

LLZK Joins Ethereum Security Quadratic Funding Round on Giveth

Apr 28

Apr 28

LLZK V1.0: A New Phase for ZK Shared Infrastructure

Shankara Pailoor

Apr 8

| 7 min read

Shankara Pailoor

Apr 8

| 7 min read

Veridise EthCC 2026: Meet the Team Pushing Blockchain Security Forward

Mar 24

Mar 24

Inside SP1 with Tamir Hemo: Succinct’s Approach to ZK-VM Performance & Security

Feb 23

| 8 read

Feb 23

| 8 read

Common pitfalls when handling records in Aleo: Validations, parity, and privacy

Jan 20

| 15 read

Jan 20

| 15 read

How records work in Aleo: The foundation of private state in Leo

Jan 13

| 12 read

Jan 13

| 12 read

Ethereum’s zkEVM Formal Verification Project: Securing the Ethereum L1 Transition to zkVMs with Alexander Hicks

Dec 11

| 6 read

Dec 11

| 6 read

Proximity Gap and Correlated Agreement

Nov 19

| 15 min read

Nov 19

| 15 min read

AuditHub Launches Platform for Professional Blockchain Audit Firms

Nov 14

| 3 min read

Nov 14

| 3 min read

Introducing AuditHub: Next-generation blockchain security platform for Web3 teams

Sep 23

| 5 min read

Sep 23

| 5 min read

Veridise at CAV 2025: Advancing the science of zero-knowledge verification

Sep 2

| 4 min read

Sep 2

| 4 min read

Announcing LLZK: A unified, open-source intermediate representation (IR) for zero-knowledge languages

Shankara Pailoor

Aug 19

Shankara Pailoor

Aug 19

Inside Stellar’s proactive security approach with Tomer Weller: The Soroban Security Audit Bank

Aug 12

| 6 min read

Aug 12

| 6 min read

Don’t get hacked: Ask these 7 questions before hiring a blockchain security auditor

Jul 30

| 7 min read

Jul 30

| 7 min read

How to write and audit a secure zkVM application: A practical example with RISC Zero

Jul 16

| 10 min read

Jul 16

| 10 min read

Identifying common vulnerabilities in zkVMs

Jul 1

| 10 min read

Jul 1

| 10 min read

An introduction to zero-knowledge virtual machines (zkVMs)

Jun 20

| 7 min read

Jun 20

| 7 min read

Designing secure zkVM applications: A fireside chat with Rami Khalil (RISC Zero)

Jun 4

| 8 min read

Jun 4

| 8 min read

Verifying SP1 circuit determinism with Picus: A collaboration between Veridise and Succinct

Shankara Pailoor

May 17

| 4 min read

Shankara Pailoor

May 17

| 4 min read

Fireside chat with Michael Klein: Inside Noir — Aztec’s ZK language, security and tools explained

May 13

| 2 min read

May 13

| 2 min read

Fireside chat with Jacob Weightman: How RISC Zero achieves provable & continuous zkVM security with Veridise’s Picus tool?

Apr 24

| 2 min read

Apr 24

| 2 min read

Building on Stellar Soroban? Grab this security checklist to avoid vulnerabilities

Alberto Gonzalez

Apr 9

| 4 min read

Alberto Gonzalez

Apr 9

| 4 min read

RISC Zero’s ZK-VM security: How Veridise enabled RISC Zero to achieve provable & continuous ZK security

Shankara Pailoor

Mar 27

| 10 min read

Shankara Pailoor

Mar 27

| 10 min read

Veridise secures Ethereum Foundation grant to develop LLZK: A new Intermediate Representation (IR)

Shankara Pailoor

Mar 12

| 6 min read

Shankara Pailoor

Mar 12

| 6 min read

Mastering o1js on Mina: Four key strategies for secure development

Feb 19

| 9 min read

Feb 19

| 9 min read

Highlights from the Veridise o1js v1 audit: Three zero-knowledge security bugs explained

Feb 4

| 10 min read

Feb 4

| 10 min read

A16Z hosts Isil Dillig: Formal methods for zero-knowledge systems

Jan 8

| 7 min read

Jan 8

| 7 min read

Devcon 2024 week recap: Veridise’s presentations in Bangkok

Dec 7

| 4 min read

Dec 7

| 4 min read

Veridise’s zero-knowledge research: Split Gröbner bases for satisfiability modulo finite fields

Nov 20

| 4 min read

Nov 20

| 4 min read

Announcing Veridise AuditHub: Comprehensive audit platform

Nov 5

| 3 min read

Nov 5

| 3 min read

Meet our team: 10 questions for Shankara Pailoor

Shankara Pailoor

Oct 30

| 8 min read

Shankara Pailoor

Oct 30

| 8 min read

Exploring ZK frameworks: Mastermind game in 5 different ZK languages

Oct 16

| 15 min read

Oct 16

| 15 min read

Meet our team: 10 questions for Alp Bassa

Sep 27

| 8 min read

Sep 27

| 8 min read

Academic research: Findings from our zero-knowledge research

Sep 10

| 6 min read

Sep 10

| 6 min read

Academic research: Findings from our smart contract security research

Aug 28

| 6 min read

Aug 28

| 6 min read

Lessons from the auditing trenches: “What do ZK developers get wrong?”

Aug 7

| 6 min read

Aug 7

| 6 min read

Breakdown of 100 security audits: Key insights from 1605 vulnerability findings

Jul 23

| 9 min read

Jul 23

| 9 min read

Meet our team: 10 questions for Ben Sepanski

Jul 11

| 7 min read

Jul 11

| 7 min read

Developing securely on Aleo blockchain: Common vulnerability patterns

Jun 26

| 3 min read

Jun 26

| 3 min read

Veridise enhances Soroban security: Breaking our teeth on stale dependencies

Evgeniy Shishkin

Jun 13

| 7 min read

Evgeniy Shishkin

Jun 13

| 7 min read

Meet our team: 10 questions for Jon Stephens

May 14

| 5 min read

May 14

| 5 min read

Prep guide: 7 essential tips to prepare for a blockchain audit

Apr 18

| 5 min read

Apr 18

| 5 min read

ZK security workshop recap: Winners and presentations

Mar 26

| 5 min read

Mar 26

| 5 min read

How to develop securely on Soroban? Storage types with unbounded data

Alberto Gonzalez

Mar 16

| 5 min read

Alberto Gonzalez

Mar 16

| 5 min read

ZK fundamentals: Proof systems

Feb 22

| 12 min read

Feb 22

| 12 min read