Lead Security Researcher

@ouicate

Offensive security researcher and systems engineer with over a decade of experience uncovering critical vulnerabilities across L1 blockchain nodes, consensus protocols, zero-knowledge cryptography, and smart contracts.

Audits & security research

  1. In progress

    Zakura

    Protocol architecture, consensus logic, and core implementation.

    In progress
  2. 13 min read

    Decimal-Exponent Bomb in Gonka: Halting Consensus via Pre-Ante Rescaling and authz.MsgExec

    How an unbounded int32 exponent in Gonka's custom Decimal wire type turns shopspring/decimal rescaling into a pre-ante CPU/RAM bomb—and how wrapping it in authz.MsgExec bypasses CheckTx to trigger a post-commit block of death.

    Read →
  3. In progress

    Zcash Voting

    Cryptographic voting protocol, zero-knowledge ballot verification, and tallying rules.

    In progress
  4. 18 min read

    Two Critical Consensus-Divergence Vulnerabilities in Zcash's Zebra Node: Catching Unauthenticated Chain Splits Before Release

    How two Critical consensus-divergence vulnerabilities in Zebra's zcash_primitives transaction refactor (#10461)—an unauthenticated nExpiryHeight bypass across 2.14 billion wire values and an orphaned {2..100}-byte coinbase scriptSig check—would have let any user or miner split Zcash mainnet, and how we caught both on main before they shipped in a release.

    Read →