Constant Product Manipulation: When a Token Breaks the Pool It Was Built For

The Auditor's Take is a weekly series by Jon Stephens, CEO of Veridise. This article is about a class of bug where a token's own transfer logic breaks an invariant of the protocol it was written to work with. New take every week. Find Jon at @FormallyJon.

Custom token implementations that add fees or constraints to events like transfers, mints and...

Read More →

Mina Multisig Audit: Veridise Reviews FROST Signing

Mina Multisig lets Mina and ecosystem projects operate through a threshold signature instead of a single key, adapting the FROST protocol to Mina's Pallas curve and Poseidon hashing. Veridise completed a manual audit of that implementation in June 2026, reviewing the two Rust crates that turn FROST's signing flow into Mina-compatible signatures. The audit found six issues, all fixed, before...

Read More →

Low-Level Call Hijacking: How a Trusted Router Call Cost $3.5M

The Auditor's Take is a weekly series by Jon Stephens, CEO of Veridise. This one is about privileged contracts that forward caller-supplied data straight into a low-level call, and how a senior auditor catches the bug before it ships. New take every week, and you can follow Jon at @FormallyJon.

A protocol can define exactly which contracts may act on its...

Read More →

Insolvency Vulnerability: The Euler Finance $197M Exploit

The Auditor's Take is a weekly series by Jon Stephens, CEO of Veridise. This article is about a solvency invariant that was correctly enforced until a later upgrade, an upgrade that was itself audited. New take every week. Find Jon at @FormallyJon.

A protocol can run the same safety check in every function that moves user funds, then add one new...

Read More →

Flash Loan Governance Attacks: How Borrowed Voting Power Drains a Protocol

The Auditor's Take is a weekly series by Jon Stephens, CEO of Veridise. This week's edition looks at how governance systems that measure voting power instantaneously, rather than from a fixed checkpoint, become exploitable the moment flash loan liquidity is large enough to buy a temporary supermajority, even for a single block. Jon publishes one of these every week; follow...

Read More →

Bridge Misconfiguration Vulnerabilities: How One Zero Value Cost $190M

The Auditor's Take is a weekly series by Jon Stephens, CEO of Veridise. This one is about configuration bugs that live in a value set at deployment rather than in the code itself, and how a senior auditor catches them. New take every week. Find Jon at @FormallyJon.

A protocol can audit its code, ship sound validation logic, and still introduce...

Read More →

Proving the Absence of Soundness Bugs in ZKsync Airbender

Matter Labs engaged Veridise for a tooling-focused security assessment of ZKsync Airbender, the STARK-based RISC-V zkVM that proves execution for the ZKsync ecosystem, ahead of its V2 prover upgrade. Using formal verification to target the soundness bugs that ordinary testing cannot catch, and fuzzing for the ones it can, the engagement verified most of the prover's circuits and found three...

Read More →

Access Control Bugs in Smart Contracts: How a Negated Check Cost $730K

The Auditor's Take is a weekly series by Jon Stephens, CEO of Veridise. This article is about an access control bug that can be easily overlooked since a check is present but effectively does not restrict access. New take every week. Find Jon at @FormallyJon.

A require statement can correctly identify the authorized parties but be implemented in such a way...

Read More →

The Audit Habit That Would Have Caught Resupplyfi’s $9.6m Bug: The Auditor’s Take

In June 2025, ResupplyFi's wstUSR lending market lost $9.6 million in a single transaction. One division operation rounded down to zero at a boundary the solvency check did not anticipate.

The check read the zero as "this borrower is well within their loan-to-value ceiling," and the attacker borrowed the full pool against 1 wei of collateral. The bug class is an...

Read More →

LLZK Joins Ethereum Security Quadratic Funding Round on Giveth

LLZK, the open source compiler framework for zero knowledge circuit verification, has been accepted into TheDAO Security Fund's first decentralized funding initiative on Giveth. The round uses quadratic funding to allocate 500 ETH ($1M) across projects strengthening Ethereum's security ecosystem, and LLZK is one of them.

TLDR

LLZK accepted into TheDAO Security Fund's QF round on Giveth.
500 ETH ($1M) matching...

Read More →