Independent security research and audits for blockchains, L1 protocols, zero-knowledge systems, and smart contracts. Published audit reports and vulnerability disclosures.https://quorint.xyz/https://quorint.xyz/research/gonka-decimal-exponent-bomb/https://quorint.xyz/research/gonka-decimal-exponent-bomb/How an unbounded int32 exponent in Gonka's custom Decimal wire type turns shopspring/decimal rescaling into a pre-ante CPU/RAM bomb—and how wrapping it in authz.MsgExec bypasses CheckTx to trigger a post-commit block of death.Wed, 14 Oct 2026 00:00:00 GMTgonkacosmos-sdkcometbftconsensusdosgolanghttps://quorint.xyz/research/zebra-pre-release-consensus-divergences/https://quorint.xyz/research/zebra-pre-release-consensus-divergences/How two Critical consensus-divergence vulnerabilities in Zebra's zcash_primitives transaction refactor (#10461)—an unauthenticated nExpiryHeight bypass across 2.14 billion wire values and an orphaned {2..100}-byte coinbase scriptSig check—would have let any user or miner split Zcash mainnet, and how we caught both on main before they shipped in a release.Tue, 22 Sep 2026 00:00:00 GMTzcashzebrazakuraconsensuschain-splitrust