Benjamin Sepanski

Compiling programs at :)

Formerly CSO at Veridise. UTCS MSCS 2022. DOE CSGF 2020 Fellow. BU Math 2020.

[AuditHub @AuditHubDev]

Today we're launching AuditHub for Professional Audit Firms, the comprehensive platform!

Four integrated formal methods tools that handle routine vulnerability detection automatically, enabling audit firms to deliver mathematical guarantees that competitors cannot match.

[Defi Security Summit @summit_defi]

Static analysis is fast but often too generic for real audits. Semantic queries change that.

@bensepanski, Chief Security Officer at @VeridiseInc, will show at DSS how to make static analyzers precise and project-aware.

[AuditHub @AuditHubDev]

🚀 AUDITHUB IS LIVE

The first blockchain security platform that brings usable security tools to web3 development teams.

Your Web3 security deserves more than a PDF.

It deserves continuous, automated protection embedded directly into your workflow. ✨

Here is what AuditHub is and why you should pay attention!
🧵

[RISC Zero @RiscZero]

RISC Zero is building the first formally verified RISC-V zkVM.

Using @VeridiseInc's Picus tool, we're mathematically proving determinism in our circuits.

Our goal: A zkVM that’s both incredibly fast and provably secure, so developers never have to compromise.

[Notion Calendar @NotionCalendar]

PSA: Notion Calendar works with Apple iCloud now! 🍎📅

See all your calendars—Apple and Google—in one tidy spot.

[Benjamin Sepanski @bensepanski]

We really enjoyed working with Edgeless! They were extremely responsive and clearly invested in taking the security of their smart contracts seriously

[Edgeless Network @EdgelessNetwork]

We are pleased to announce that we have successfully completed a security audit with @VeridiseInc.

Veridise is the industry-leading security audit company specializing in formal methods.

Full audit report PDF below 🧵

[Veridise @VeridiseInc]

New blog post live!

Dive into Intermediate Representations! This is the sixth part of the "ZK fundamentals" series.

The article is written by Alp Bassa, our Research Scientist.

Here's a summary 🧵

1/

[Veridise @VeridiseInc]

We had a blast at @PragueDefi & @EthPrague! A few awesome days of networking, hacking and fantastic talks on #DeFi, #interoperability, #zk, and more.
10 out of 10, will be back next year.

[Veridise @VeridiseInc]

Our team had a fantastic time at Consensus this year! Thanks to the Blockchain Research Symposium, @MinaProtocol and @EVMNext for organizing these events & facilitating great conversations!! @iam_jsv @bensepanski @IsilDillig

[Mina Protocol (httpz) 🪶 @MinaProtocol]

ZK 360 Panel – “Future of ZK” 💭

Discussing the rise of ZK, industries poised for adoption, and regulation with:

@bensepanski from @VeridiseInc
Roy Lu from @HashKey_Capital
@Crypto_Texan from @0xPolygonLabs
@waltjsmith from @galaxyhq
@dylankugler from @MinaFoundation

[SΞCURΞUM @TheSecureum]

Secureum RACEs are smart contract security quizzes. Participation is free & requires one-time registering at https://t.co/EYitbkI5Td.

RACE-16 is designed by Secureum mentor @FormallyJon & @VeridiseInc. Top-16 performers will be invited to Veridise Workshop. Details on Discord.

[Veridise @VeridiseInc]

Our CTO @FormallyJon speaking about three of our tools (Picus, zkVanguard, and zkOrca) for proving and finding bugs in ZK circuits. Thanks to @IOSGVC for a wonderful and informative event :)

[Veridise @VeridiseInc]

Our CTO @FormallyJon speaking about Veridise tools for finding ZK bugs at the Delendum Future Computing Workshop! @DelendumV

[Veridise @VeridiseInc]

(1/5) At @VeridiseInc, we are passionate about building security analysis tools in a data-driven way. We recently performed a study of vulnerabilities in ZK circuits and built a tool to detect them:
https://t.co/f6zXWr5nV1

@ethereum @privacyscaling

[Veridise @VeridiseInc]

Please join us at zkDay on Feb 28th in Denver! It will be a fun day full of ZK-related talks, discussions, and activities :) We look forward to seeing you there! @polychaincap @MantaNetwork @Scroll_ZKP @AleoHQ @cysic_xyz @VeridiseInc @nil_foundation @ModulusLabs @HyperOracle

[Veridise @VeridiseInc]

Are you curious to know how audits can go beyond patterns and checklists? Check out our recent blog post about violating invariants in Semaphore: https://t.co/zVfwjJE0g5 @PrivacyScaling

[andyguzman.eth | privacy/acc @AndyGuzmanEth]

📢Semaphore just completed its security audit and formal verification!

We wanted to thank our friends at @VeridiseInc for the amazing work.

Expect a blog post next week with the release of v3.

You can read the full report he
https://t.co/rPdEbHPvfN

[Veridise @VeridiseInc]

ZKPs can be *very* tricky! Read on to learn more about a subtle bug in Circom-pairing and how a Veridise audit managed to catch it: https://t.co/r75wmlEhIm

[Nathan Taylor @ntalyour]

making a proof assistant assistant out of @jocelynqchen's new toy

[Benjamin Sepanski @bensepanski]

@AndersMiltner Memory management issues (at least for me) feel very different in rust than C or C++. I’m usually fighting the borrow rules (at compile time), not dealing with issues at runtime

[Benjamin Sepanski @bensepanski]

@AndersMiltner I really like the rust book https://t.co/s2c9dba3OF I don’t know that it covers memory complexities specifically, but if you try to implement a simple graph library you’ll get a pretty good picture imo