hashiman

Blockchain & ZK Researcher

[hashiman @0xhashiman]

@truthixifi @cryptodavidw @zksecurityXYZ Good luck, the learning experience with no hints and no write-ups is amazing.

[hashiman @0xhashiman]

I finally did it after 1 week of full focus, I just solved this beast. Meeting the legend @cryptodavidw at SBC`25 gave me the push I needed to solve this.
This was a fantastic learning experience at every levels thank you @cryptodavidw and @zksecurityXYZ.

[hashiman @0xhashiman]

@cryptodavidw @zksecurityXYZ Thank you, tbh no one deserves to see that message if they didn't solve it lol.

[hashiman @0xhashiman]

@cynthwangg @StanfordCrypto @king_fisher_22 @__billygao Will you be tomorrow at SBC ? Would love to get in touch

[hashiman @0xhashiman]

Thrilled to see folks tackling my blockchain challenges on https://t.co/5OJmozfxZG! This is the first time the platform’s hosting blockchain challenges, so if you’ve got ideas for improvements, hit me up.

[[email protected] @Zardus]

The first edition of the Arizona CTF (this one open just to undergrads in the state's various colleges) is running right now! Just over 100 undergrads pwning at the moment across AZ, 13 challenges solved, 10 challenges and 5 hours to go. First prize is $1337. Hype!

[hashiman @0xhashiman]

Just published a detailed write-up on solving @__zkhack__ 'Double Trouble' puzzle, the third in my series! Dive into Pedersen commitments, Sigma protocol and IPA. Check it out here:
https://t.co/h3ZlIGZ6Qn

[hashiman @0xhashiman]

Some friends mentioned the report link isn't easy to find. Here's the link 🫡
https://t.co/6VQRE2denc

[hashiman @0xhashiman]

I recently made a public contribution to report and fix a security issue in @TrustWallet related to Chalkias Attack. I’m really happy to see that it has finally been published and is now accessible to everyone. Thank you @TrustWallet for your commitment to security, and thanks to @Mysten_Labs for the excellent attack POC and explanation. Also a big shoutout to @__zkhack__ puzzles, without them I wouldn’t have had the patience to accomplish all this.
https://t.co/yEgY7PXkFP

[hashiman @0xhashiman]

I recently made a public contribution to report and fix a security issue in @TrustWallet related to Chalkias Attack. I’m really happy to see that it has finally been published and is now accessible to everyone. Thank you @TrustWallet for your commitment to security, and thanks to @Mysten_Labs for the excellent attack POC and explanation. Also a big shoutout to @__zkhack__ puzzles, without them I wouldn’t have had the patience to accomplish all this.
https://t.co/yEgY7PXkFP

[hashiman @0xhashiman]

As a public commitment and to make it easier for ZK beginners to navigate @__zkhack__ puzzles effectively, I’m sharing a structured plan to solve these challenges from the easiest to the hardest. This plan aligns with my ongoing work on writing the third and fourth articles in the series to guide learners and myself through ZK concepts.
The plan format is Puzzle X -> Skill or knowledge you’ll gain

CHAPTER 1: Necessary ZKP knowledge
Puzzle 1 -> Weaknesses in hash-to-curve operations
Puzzle 2 -> Subgroup attacks on Groth16 trusted setup
Puzzle 3 -> Inner product proofs weaknesses
Puzzle 4 -> KZG commitments weaknesses
Puzzle 5 -> Fiat-Shamir transformation weaknesses
Zk-Hack-V Puzzle 2 -> Weaknesses in range check lookup

CHAPTER 2: Advanced ZKP knowledge
Puzzle 9 -> Weaknesses in the sum-check protocol
Puzzle 10 -> The famous Cheon attack
Puzzle 13 -> Exploiting rogue keys
Zk-Hack-V Puzzle 1 -> Chosen instance attack on Plonk

FYI the more you do the easier and better it becomes.

[hashiman @0xhashiman]

@AnnaRRose @__zkhack__ Yes I’m actually working on those but diving straight in can feel overwhelming. That’s why I made a plan to approach the puzzles and maximize growth without getting lost in overly complex details. I’d be happy to share it for future ZK beginners!

[hashiman @0xhashiman]

@__zkhack__ Thank you for what you and @kobigurk have done to support the zk community, I will surely check the new V2 puzzle.

[hashiman @0xhashiman]

I've just finished solving @__zkhack__ puzzle 3 and partially solving 4. The amount of knowledge you gain from these puzzles is incredible, they provide all the foundations you need to understand modern protocols. I'm extremely excited about the write-ups for these puzzles!

[hashiman @0xhashiman]

Finally published the solution to @__zkhack__ 2nd puzzle, this one covers Subgroup Attack in ZKP trusted setups. This beginner-friendly guide will help you identify and understand this issue with ease.
https://t.co/v1CUX90Ryq

[hashiman @0xhashiman]

Super happy to see my first article made it to #zkMeshMini it was totally unexpected
Thank you @__zkhack__ for the recognition!

[ZK Hack @__zkhack__]

@EPFL @EPFL_en @0xhashiman @SuccinctJT @a16zcrypto @zksecurityXYZ @mjos_crypto @NIST @0xhashiman published a write-up abt the 1st puzzle from our ZK Hack Online events (btw ZK Hack V is coming on Nov 26th!). It covers concepts, algorithms & notations required to understand & solve the challenge.
Tweet: https://t.co/LfYPC8Agyp
Article: https://t.co/Djkta343jt

[hashiman @0xhashiman]

My first @__zkhack__ writeup is now out, it is beginner friendly with all the essential explanations and resources. Enjoy the read anon
https://t.co/zbuRh0ibSJ

[hashiman @0xhashiman]

@RareSkills_io Thanks i really appreciate it, you guys did an amazing job building the zk book. I wouldn't be able to accomplish this without it, i raise my hat to you 🎩

[hashiman @0xhashiman]

After @zachobront final post, i also took the challenge and implement full ZK algorithm from scratch. This was really interesting as you can understand how things happen under the hood in a very simple and efficient way.
https://t.co/kyF7KUXW7k

[SHERLOCK @sherlockdefi]

@AvailProject @IAm0x52 @daniel_arms90 🏆 @AvailProject Audit Contest Results 🏆

4. jasonxiale - $484.79
5. r0ck3tz - $440.65
6. @cawfree - $320.66
7. Bauer - $248.59
8. ck - $242.08
9. pontifex - $228.36
10. @0xhashiman - $213.98

[hashiman @0xhashiman]

Happy to achieve my first high valid finding! This means only one thing, i should keep working,wOrKiNg and WORKING.
Congrats to everyone!!

[SHERLOCK @sherlockdefi]

Top 10 in the @jojo_exchange Audit Contest

Dogs. 🕵️🤝