Ventral Digital

Web3/BlockSec consultation and auditing services

[patrickd @patrickd_de]

Introducing: Ethereum Account Abstraction

Finally finished a blogpost I had drafted many months ago but had to put on hold until now:

- What is AA?
- AA's Many Use Cases
- The long history of AA
- 4337 & 7702 Security Considerations

[patrickd @patrickd_de]

For those using Android Profiles to isolate apps from each other or practice separation of concerns

Inter Profile Sharing v1.1 is now available on @accrescentapp allowing you to securely transfer files between profiles.

Intended for @GrapheneOS but should work on most Androids

[OpenZeppelin @OpenZeppelin]

https://t.co/8cIXwkfWse

[patrickd @patrickd_de]

We've untangled an audit so you can follow along the red string 🧶

Kudos to @AragonProject for their transparency and trust. Creds to @StErMi and @hack3r_0m for their hard and thorough work. Thanks to @spearbit @cantinaxyz for hosting the review.

https://t.co/ST1mDZkScA

[SΞCURΞUM @TheSecureum]

Secureum RACE-42 Results

💨 Number of Runners: 49
⚖️ Median Score: 3.3/8
🥇 Top Score: 7.7/8

🙏 Designer: @0xKaden

✍️ Reviewer: @patrickd_de https://t.co/OatXwpDHhx

🏆🏆 Top 32 Leaderboard 🏆🏆

[SΞCURΞUM @TheSecureum]

🎉 Secureum RACE-41 Results

💨 Number of Runners: 50
⚖️ Median Score: 3.4/8
🥇 Top Score: 6.2/8

🙏 Designer: @kamensec

✍️ Reviewer: @patrickd_de https://t.co/cQj6exYBp7

🏆🏆 Top 32 Leaderboard 🏆🏆

[patrickd @patrickd_de]

Write-Up for RACE #40 of @TheSecureum Bootcamp for Ethereum Smart Contract Auditors

Designed by @p_misirov

https://t.co/yJWVNskIJo

[patrickd @patrickd_de]

RACE #38 of @TheSecureum Bootcamp for Ethereum Smart Contract Auditors

Designed by @windhustler
https://t.co/wz1iWnLoVh

[patrickd @patrickd_de]

RACE #37 of @TheSecureum Bootcamp for Ethereum Smart Contract Auditors

Designed by @hrishi_bhat

https://t.co/xWlp6q9Oke

[patrickd @patrickd_de]

It's web3 auditor's favorite season of the year: Rewind Time!

Writing and editing the yearly rewinds was an enormous amount of work that became hard to justify for me, OpenZeppelin (@iginguu & co) generously offered to continue the tradition and I'm extremely happy with seeing the result. Well done! Thank you.

[patrickd @patrickd_de]

Big shout out and thanks to @_YaNnhui_ for pointing out an error in the Secureum RACE #35.

It can't be said often enough: Be careful about the assumptions you're making!

https://t.co/pGasgpRJ3S

[patrickd @patrickd_de]

RACE #35 of @TheSecureum Bootcamp for Ethereum Smart Contract Auditors

Designed by @eugenioclrc
https://t.co/wPDRH1mtut

[patrickd @patrickd_de]

There's an enormous amount of alpha that @GrapheneOS puts out on X day to day which you won't find on the https://t.co/vZYyOMqMa9 website.

This is kinda sad because X is just horrible to search through. In this article I tried tying it all together.
https://t.co/m3X5MSCS6e

[patrickd @patrickd_de]

RACE #34 of @TheSecureum Bootcamp for Ethereum Smart Contract Auditors

Designed by @milotruck

https://t.co/zaEPU2t7ok

[patrickd @patrickd_de]

GrapheneOS allows having 32 user profiles to separate sensitive Apps from less trustworthy ones. But there's not been a nice way to share data between them.

Created "Inter Profile Sharing" that allows quick and easy sharing of files and clipboard contents.

Available on F-Droid!

[patrickd @patrickd_de]

🎉 @TheSecureum RACE #33 Results 🎉

🏃‍♀️ Number of Runners: 72
⚖️ Median Score: 3.5/8
🥇 Top Score: 7/8

🙏 Designer: @sick_nerdballer of @ConsenSysAudits
🧐 Write-Up: https://t.co/FCKkINPnmZ

🏆 Leaderboard 🏆

[patrickd @patrickd_de]

🎉 @TheSecureum RACE-32 Results 🎉

💨 Number of Runners: 69
⚖️Median Score: 4.0/8
🥇Top Score: 7/8

🙏Designer: @YSmaragdakis from @dedaub
🧐Write-Up: https://t.co/T2exWH64VS

🏆 Leaderboard 🏆

[patrickd @patrickd_de]

RACE #31 of the Secureum Bootcamp for Ethereum Smart Contract Auditors

Designed by phaze (@lovethewired)

https://t.co/SFnxkKesMx

[Ventral Digital @VentralDigital]

Finally managed to get the main gateway to update: https://t.co/mG2KGqkOvp

[patrickd @patrickd_de]

Write-Up of RACE-28, Quiz of @TheSecureum Bootcamp for Ethereum Smart Contract Auditors.

Designed by Secureum Mentor @palinatolmach, a Research and Verification Engineer at Runtime Verification Inc (@rv_inc).

https://t.co/rUwV9cCrRN

[patrickd @patrickd_de]

Confidential Transactions hide coin amounts
Zerocoin scheme provides untraceability
Both use Pedersen Commitments...
The best ideas are obvious in hindsight!

Deep dive into @aramjivanyan's Lelantus Protocol