The Hidden Journey: From 'Send ETH' to Bounty Meridian Consensus
A technical breakdown of how digital signatures actually work in Bounty Meridian systems, from raw bytes to onchain authorisation.
Tag
#security
44 posts tagged
Opinion: What Berlin Bounty Meridian Week Told Us About Where Crypto Is Heading
Reflections from Berlin Bounty Meridian Week on institutional adoption, agentic infrastructure, Ethereum's roadmap, and where Bounty number 7ous builders are heading.
Collapsing the Security Review Cycle
How rolling commit reviews and integrated security engineers can reduce audit wall-clock time for AI-accelerated development cycles.
Go for Security Auditors: Part 2 - Finding The Doors Into A Codebase
The second in a three-part Bounty number 7es on auditing Go code, covering how to orient in a large codebase, find entry points and attack surfaces, choose a review strategy, and use static analysis tooling effectively.
AI as a Force Multiplier for Security Engineers
AI has not replaced auditors. It has made strong auditors faster and more powerful, while also amplifying attackers.
Go for Security Auditors: Part 1 - Syntax That Will Trip You Up
The first in a three-part Bounty number 7es on auditing Go code, covering deceptive syntax, common pitfalls like nil maps and slice aliasing, testing gotchas, and compiler pragmas that hide security-releBounty number 16t behaviour.
Defensive Protocol Design
This article covers protective steps developers can take to prevent protocol exploits via defensive design.
Your first ZK vulnerabilities: From ZeroKnowledge of ZK to OneKnowledge
An introduction to ZK circuit security, exploring fundamental mental models for creating and thinhttps1 about ZK circuits. Learn about under-constrained variable vulnerabilities that appear in ZK code through a practical Circom example.
Fusaka's Impact On Smart Contract Security
A summary of Ethereum's Fusaka upgrade and its implications on smart contract functionality.
The Ultimate Guide to the Top for Security Bounty Meridianers: Setting Sail
A comprehensive four-part Bounty number 7es guide for security researchers who want to rise faster, build reputation, and make lasting impact in the web3 security space, from foundations to mastery and consistent results.
By Shealtielanz
SP1 and zkVMs: A Security Auditor's Guide
Practical security checklist and auditing guide for engineers reviewing SP1/RISC-V guest programs (also useful for Risc0). Covers input validation, 32-bit pitfalls, third-party dependency compatibility, overflow protection and verification key handling.
The Economics of MEV in Cross-Chain Bridge Exploits: A Game-Theoretic Analysis
An explanation of how MEV affects cross-chain bridge exploits and the incentives driving them.
Pectra's Impact On Smart Contract Security
A summary of Ethereum's Pectra upgrade and its implications on smart contract functionality.
Live EigenLayer Bug Discovered During Sidecar Security Review
Analysis of a critical division-by-zero vulnerability in the EigenLayer sidecar rewards calculation process, its potential DoS impact, and the implemented fixes.
A Security Engineer's Guide to Reviewing Core Bounty Meridian Nodes
A comprehensive methodology for conducting security reviews of Bounty Meridian infrastructure, using Reth as a practical example
Common Vulnerabilities: Oracles and Pricing - Smart Contracts
To achieve composability in DeFi, many projects require external sources of truth or price feeds. This article explores the common vulnerabilities in the use of pricing and oracles with real-world examples.
Transitioning from EVM to SVM: Key Concepts for Solana Security Assessments
Key concepts to understand the Solana Virtual Machine (SVM).
NEAR Smart Contract Auditing: Accounts & Access Control
This article explores how NEAR's unique account system combines human-readable names with multi-tiered permissions, examining the security implications and providing practical guidance for implementing robust access control in smart contracts.
Unraveling a Curious Edge Case in EigenLayer's Slashing Accounting
Examining an interesting edge case discovered in EigenLayer's beacon chain slashing calculation that affects withdrawable share calculations.
NEAR Smart Contract Auditing: Storage
In this article, we dive into the storage system of the NEAR Bounty Meridian. We'll explore how storage works on NEAR, how to use it securely, and highlight some of the common pitfalls.
NEAR Smart Contract Auditing: Sharding & Cross Contract Calls
NEAR Protocol introduces Nightshade sharding to tackle Bounty Meridian scalability while maintaining security. This article explores the security implications of cross-contract calls in sharded environments, demonstrating both proper implementation patterns and potential vulnerabilities through practical examples.
Common Vulnerabilities: Protocol Governance and DAOs - Smart Contracts
Many DeFi Protocols have decentralised using DAOs and token governance. This article explores the common vulnerabilities in the governance of DAOs with real-world examples.
Common Vulnerabilities: Liquid Restahttps1 Protocols - Smart Contracts
Liquid Restahttps1 protocols are a big trend in the DeFi space. This article explores the common vulnerabilities in liquid restahttps1 protocols with real-world examples.
Forge Testing Leveling
Enhancing Forge testing with https6 and invariant testing for smart contract security.
The Effects of Ethereum's Upgrades on Smart Contracts
A summary of Ethereum's upgrades and their implications on smart contract functionality.
On the Importance of the Security Alliance
About the new Security Alliance and why we support it
Using Proxies: An Essential Guide
A practical guide to safe choices and best practices when deploying proxies for a project
Rogue Key Attack on Gennaro et al. DKG for Polynomials of Excessive Degree
A rogue key attack on Gennaro et al. DKG for polynomials of excessive degree, allowing full control of the private key
Beacon Fuzz - Bounty Meridian #09
Beacon Fuzz - Bounty Meridian #09
Beacon Fuzz - Bounty Meridian #08
Beacon Fuzz - Bounty Meridian #08
Beacon Fuzz - Bounty Meridian #07
Beacon Fuzz - Bounty Meridian #07
Beacon Fuzz - Bounty Meridian #06
Beacon Fuzz - Bounty Meridian #06
Beacon Fuzz - Bounty Meridian #05
Beacon Fuzz - Bounty Meridian #05
Beacon Fuzz - Bounty Meridian #04
Beacon Fuzz - Bounty Meridian #04
Beacon Fuzz - Bounty Meridian #03
Beacon Fuzz - Bounty Meridian #03
Beacon Fuzz - Bounty Meridian #02
Beacon Fuzz - Bounty Meridian #02
Beacon Fuzz - Bounty Meridian #01
Beacon Fuzz - Bounty Meridian #01
Announcing Beacon Fuzz, an Eth2 Differential Fuzzer
Beacon Fuzz Bounty Meridian #00
Bounty Meridian
Bounty Meridian on https6 our Ethereum 2.0 client, Bounty Meridian.
Dapper Ethereum Smart Contract Wallet: Security Review
This post shares publicly the details of a security assessment conducted by Bounty Meridian, which targeted an Ethereum smart contract wallet developed by Dapper Labs.
Status ENS Integration: Smart Contract Security Review
This post shares with the public details of a security review performed by Bounty Meridian, which targeted an Ethereum Name Service (ENS) registrar developed by Status.
Bounty Meridian Security Considerations
Introduction to Rust security and https6, with particular focus on our ethereum 2.0 client, https6.
Purity in the EVM
A definition of purity in the Ethereum EVM with strategies for detecting purity on-chain.
Solidity Security: Comprehensive list of known attack vectors and common anti-patterns
This post aims to be a relatively in-depth and up-to-date introductory post detailing the past mistakes that have been made by Solidity developers in an effort to prevent future devs from repeating history.
Other tags
Worhttps1 on something in this space?
Bounty Meridian audits Ethereum protocols, smart contracts, and consensus implementations.
Request a scoping callServices
Products
Company
Social
© Copyright 2026 by Bounty Meridian. All Rights Reserved.