Projects


MLE-PCS

The mle-pcs is a research-driven project focused on the Comparison of Multilinear Polynomial Commitment Schemes. The research is supported by the Ethereum Foundation and aims to provide a comprehensive analysis of different schemes, their design philosophies, security properties, and performance metrics. The repo contains reference implementations of the schemes, interactive tutorials, and comprehensive research notes.

Trust Wallet’s Fomo3D Summer Vulnerability Disclosure

A comprehensive investigation and disclosure of a critical vulnerability in Trust Wallet back to 2018. The vulnerability in the Trust Wallet iOS app, stemming from the misuse of the trezor-crypto library, allowed hackers to steal cryptocurrency from users. The vulnerability originated from a predictable random number generator used to create mnemonic words, which are used to access wallets.

RLN on KZG in Golang

A proof-of-concept implementation of RLN (Rate Limiting Nullifier) using KZG in Golang. This implementation is grounded in the discussion at zkresearch initiated by Wanseob Lim.

MferSafe

This application allows you to freely explore DApps, impersonate any user, inspect transaction traces, manipulate time by turning the clock forward or backward, and easily construct and simulate Gnosis Safe MultiSend transaction bundles. A lite version, known as MferSafe Lite, is also available as a browser extension.

Security Audit for Ethereum KZG Ceremony

Security audit for the specification and implementation of Ethereum’s Powers of Tau (PoT) setup ceremony.

ZKCPlus

Optimized Fair-exchange Protocol Supporting Practical and Flexible Data Exchange. This research builds upon our prior work on zkPoD and has been accepted for publication in CCS ’21.

zkPoD

A decentralized system for data exchange. See our technical paper for more information.

CKB-ZKP (a.k.a. zkp-toolkit-ckb)

Zero-knowledge proofs toolkit for CKB. Under active development and selected as one of the first infrastructure projects to be funded by the Nervos Ecosystem Grants Program. Read the original proposal here.

Clover Protocol

An aSVC based stateless protocol as layer-2 rollup on Nervos network. Developed during the Nervos hackathon.

Learning ZKP

Articles, codes and tools all about zero-knowledge proofs. Read about zkp introduction series from here or check out zkp learning resource list.

Token Libraries with Proofs

Correctness proofs of Ethereum token contracts.

Formal Verification for Decentralized Exchange

Formal Verification for Loopring Protocol Smart Contract version 2.

Security Audit for the First zkRollup DEX Protocol

Security audit for the first zkRollup based decentralized exchange, including smart contracts and zkp circuits.

Awesome Buggy ERC20 Tokens

A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected.

Adelaide

The SECBIT Static Analysis Extension to Solidity Compiler. Find out how to use and currently cupported checks

The Solidity Safe Subset

A safe subset of the Solidity language. Find out how to build and use.