ProdS3c

Holistic risk consultancy for Web3 Applications, using lessons from the past to help secure the decentralised future

[ProdS3c @ProdS3c]

Stablecoins aren't just for the big boys, they are an enabler for anyone that takes payments or moves money.

If you're interested and are concerned about unforeseen risks - we gotchu https://t.co/2DakH0h0Lu

[ProdS3c @ProdS3c]

https://t.co/HTTUfXI8TK

[ProdS3c @ProdS3c]

https://t.co/Ibi40DdPsw

[ProdS3c @ProdS3c]

https://t.co/lYztXpihXO

[ProdS3c @ProdS3c]

https://t.co/6sSLL0EJa5

[ProdS3c @ProdS3c]

https://t.co/0db0xRDnwm

[ProdS3c @ProdS3c]

Heading to SuiFest to whats cookin'

https://t.co/n4PvVUkbYr

[ProdS3c @ProdS3c]

Saying all the right things but can someone please name a truly decentralised and distributed network that its own token and the blessing of the regulators...

[Base @base]

Base is beginning to explore a network token

We’re in the early phases of exploration, and don’t have any specifics to share around timing, design, or governance. We’re committed to bringing the community along with us, and building in the open.

[ProdS3c @ProdS3c]

@dabit3 If you think flash loans are a wild concept to wrap your head around, you should check out their twisted cousin, flash swaps, we talk about them here 👇

https://t.co/s9GXpLpipB

[ProdS3c @ProdS3c]

Transparency win ✅
Veracity guarantee ❌
Blockchain makes data public & immutable — but it doesn’t prove the data is true in the first place.

[Unchained @Unchained_pod]

⛓️‍💥 The Commerce Department will begin publishing GDP data on blockchain, part of a wider federal push to use distributed ledger technology for transparency and efficiency.

https://t.co/V4H99l6CoP

[ProdS3c @ProdS3c]

@TheOneandOmsy Exciting, more ways to solve problems allows for a wider range of problems to be solved, inverse Maslow's Hammer?

[ProdS3c @ProdS3c]

@phantom its a great way to feel better about yourself

[ProdS3c @ProdS3c]

That report is now live — and we made it available for purchase via x402 itself. 🔄
Talk about testing your own assumptions.
👉 https://t.co/su0g4QljW7

[ProdS3c @ProdS3c]

Just tested x402 — a tool that lets you charge for access to online content without a payment processor. 👀
I decided to look at it through a product security lens… 🧵

[ProdS3c @ProdS3c]

Instead of just reading about it, We integrated x402 into the ProdS3c site as a research exercise. Then created a Product Security Guidance doc to highlight possible integration concerns regarding security and risk posture.

[ProdS3c @ProdS3c]

This is amazing news it is much better to be early to this problem than late and just because no one has *publicly* declared quantum computing capability doesn't mean that it doesn't exist...imo

[Kostas Kryptos @kostascrypto]

🚨 BREAKING: Sui Research just dropped a major breakthrough in quantum transition of "some" blockchains. Unfortunately it works for Sui, Solana, Near, Cosmos and other EdDSA-based chains, but not for Bitcoin and Ethereum 😢

Here is the paper: https://t.co/UixfsQz7wz

*Afaik this is the first backward compatible quantum-safe upgrade path for blockchain wallets to avoid future forks or freezing accounts.

...and why that’s huge 🧵👇

💀 There’s a non-zero chance that today’s wallets could become vulnerable to quantum adversaries in the coming decades.

While I personally doubt we’re anywhere near quantum supremacy that can break cryptography soon, the growing concerns, and new guidance from security agencies recommending algorithm upgrades by 2035, should serve as a wake-up call. Even if much of this is perception-driven, our community must be prepared to eventually transition.

Once quantum computers arrive, millions of wallets, including Satoshi’s, could be drained instantly. If your public key is visible, it will eventually be cracked.

Lost keys, deceased owners, cold storage... all at risk (these will be the first victims).
Billions in crypto sit in “sleeping” wallets that may never be updated or transfer their assets out.

💡 Our solution:
We found a way for wallets using EdDSA (e.g., Sui, Solana, Near and co) to prove ownership securely after quantum, without revealing secrets or touching the wallet to quickly transfer their coins. Surprisingly a small detail on how EdDSA private keys are derived compared to ECDSA makes a huge difference on quantum readiness. TL;DR a simple hash invocation over a seed and not directly picking elliptic curve scalars as private keys saved the game!

🔐 No re-signing. No address change. Zero downtime.
Just a zero knowledge proof that says: “I still control this wallet, but now signing protected against quantum hackers"

🚀 Built on Ed25519 key derivation (SLIP-0010) and zk-STARKs / Ligero

🛡️ Works for sleeping and lost accounts, multisigs, treasuries, and cold storage

📈 Protects real users & institutions, not just future chains, but your today’s mnemonic based wallets too

👨‍🔬 Developed by @SuiNetwork, @Mysten_Labs and @GeorgeMasonU applied and theoretical cryptographers, congrats to Foteini and Arnab whose help was paramount!

*We’re already in contact with the teams behind @ligero_inc and @SoundnessLabs, but we’ll also approach governments and major organizations like Google (which has already begun exploring Ligero ZK proofs) to pursue an implementation, and if possible, make it a global standard.

Maybe those who chose Ed25519 over ECDSA were lucky or just smart. Personally, I want to thank one of my first crypto instructors, Daniel Bernstein (@hashbreaker) the inventor of EdDSA, who taught at the EU ECRYPT summer school in Samos back in 2007. He planted a spark that made me obsess over every detail of the algorithm and maybe without that, I wouldn't be here today as a scientist.

[ProdS3c @ProdS3c]

Web3 innovation is still in its infrastructure innovation phase, this is an exciting time for security teams such as us as we get to experiment with new ideas and experiment with what were once thought only theoretical concepts #SEAL #web3security

[ProdS3c @ProdS3c]

Abstraction from the operational details is what enabled the web2 to explode in adoption, however in some cases it undermined the security model, blockchain does the same but the transparency about how it does this is a major unlock for consumer building trust #web3security #transparency

[ProdS3c @ProdS3c]

How does privacy work on a public blockchain, well the answer to that is, it depends on which public blockchain you are talking about, Moneros approach differs from Sui which differs again from Ethereum, it all depends on where you need privacy in your data flow #privacy #web3security #blockchain