Bypassing Railgun Proof of Innocence The Railgun protocol wants to let users move crypto privately so nobody on the blockchain can see how much ETH (or any token) was sent or who got it. It promises to do that using on-chain tech and zero-knowledge cryptography. After launch, they added a Proof-Of-Innocence technology to verify if
Ethereum HigherOrder Ethernaut challenge writeup This write up walks through the HigherOrder Ethernaut's challenge. The code is quite simple, as well as the objetive. The objetive is to become the commander of the Higher Order! For that, we have to execute the commander = msg.sender line by calling the claimLeadership() function. See the
EVM Metamorphic Contracts This post is a hands-on look at how contract addresses are computed and why that matters for governance and metamorphic contracts. We'll use a tiny factory + child pattern to demonstrate how a contract can be destroyed and then redeployed at the same address, something that was a key
Railgun Trust Me, I’m Reliable: Railgun Broadcasters and the Self-Scored Scoreboard Railgun promises private transfers on public chains (Currently Ethereum, Arbitrum, BSC, and Polygon) using Zero-Knowledge proofs—neat math, fewer prying eyes. In this post I zoom in on a smaller but telling piece of the stack: public broadcasters. They relay your encrypted TX so your public 0x address doesn’t
Ethereum Rekt by One Block: Post-Mortem of a Railgun Broadcaster TL;DR: A Railgun broadcaster was tricked into relaying transactions that always revert on-chain but pass simulation. The trick hinges on a deadline check (require(deadline >= block.number)) combined with the difference between the block used for simulation and the next block when the transaction is actually mined. We
Ethereum Disassembling the EVM Dispatcher Have you ever wondered how a contract decides which function you actually called? Well, you are in luck as I'll show you how I compiled a simple Solidity contract and then I disassembled it with Binary Ninja to understand that. We’ll use a tiny contract compiled with
