Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

🚨 Securing ZK, Bug by Bug Part 1: Discover the "Code Bug" in our series "A Tale of Two ZK Bugs." Learn how a simple coding error can jeopardize blockchain security. An error in the Load8 instruction can cause improper memory access, compromising ZK transactions. Watch now! 🔐

CertiK

559,924 subscribers

647,778 views • 2 years ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

10 Comments

Kiiroi Hige (💙,🧡)2 years ago

why is your quest page is not working? it constantly wants to be logged in and quiz pages are not going on smoothly..

CertiK Skynet Rating2 years ago

@CertiK Our team is diligently addressing the issue. We appreciate your patience.

Bernardo2 years ago

Bullish on ZK, it is important to be safe!

CertiK2 years ago

Indeed! What's your favorite aspect of ZKs?

Cryptoxxx2 years ago

Can't wait for part 2 !!

Jonathan Smith2 years ago

Is there a part 2??

CertiK2 years ago

There will be! Stay tuned, it will be released soon!

Ken 𓊈𒆜🐙𒆜𓊉 & (Ø,G) !2 years ago

Wow

HungPham Anomage Reddio 🦙🔥2 years ago

Nice information @CertiK

Shanghai Park.(✸,✸)2 years ago

Lfg

Related Videos

Securing ZK, Instruction by Instruction Understanding ZK verification is crucial for blockchain integrity. It’s a complex process that CertiK is pioneering to ensure that every step in a ZK VM Chain’s execution is mathematically verified to be secure and correct. Watch the video & Let’s dive deeper 👇

Securing ZK, Instruction by Instruction Understanding ZK verification is crucial for blockchain integrity. It’s a complex process that CertiK is pioneering to ensure that every step in a ZK VM Chain’s execution is mathematically verified to be secure and correct. Watch the video & Let’s dive deeper 👇

CertiK

86,031 views • 2 years ago

In blockchain governance, undetected bugs can pose significant risks. Our Formal Verification of TON's blockchain contracts had revealed the "Missing Stake Bug," which could have caused loss of staked funds or compromised network security, this issue has since been addressed proactively by the team.

In blockchain governance, undetected bugs can pose significant risks. Our Formal Verification of TON's blockchain contracts had revealed the "Missing Stake Bug," which could have caused loss of staked funds or compromised network security, this issue has since been addressed proactively by the team.

CertiK

340,376 views • 2 years ago

Just wrapped an amazing panel with House of ZK. ZK used to be a PhD-only club. Now, with zkVMs, any dev can build with it. We're solving the performance vs. programmability trade-off so that in 5-10 years, 99% of dApps can run on verifiable off-chain compute. The future is off-chain, verified on-chain. Thanks for having us House of ZK!

Just wrapped an amazing panel with House of ZK. ZK used to be a PhD-only club. Now, with zkVMs, any dev can build with it. We're solving the performance vs. programmability trade-off so that in 5-10 years, 99% of dApps can run on verifiable off-chain compute. The future is off-chain, verified on-chain. Thanks for having us House of ZK!

Brevis

32,095 views • 1 year ago

Diamante Security Success Story🔐 Step into the world of DIAM, where advanced security meets global blockchain adoption. Explore how Diamante continues to excel in blockchain technology with a focus on security, trust, and community. 👇 Discover more below.

Diamante Security Success Story🔐 Step into the world of DIAM, where advanced security meets global blockchain adoption. Explore how Diamante continues to excel in blockchain technology with a focus on security, trust, and community. 👇 Discover more below.

CertiK

24,932 views • 2 years ago

Blockchain’s future depends on solving challenges in confidentiality, scalability, and trust. CertiK is committed to advancing security in ZKP, TEE, and Soft-TEE technologies. Watch now to learn about key bug discoveries shaping secure decentralized systems.

Blockchain’s future depends on solving challenges in confidentiality, scalability, and trust. CertiK is committed to advancing security in ZKP, TEE, and Soft-TEE technologies. Watch now to learn about key bug discoveries shaping secure decentralized systems.

CertiK

138,613 views • 1 year ago

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

Mysk 🇨🇦🇩🇪

87,426 views • 2 months ago

Over $100,000💵 for reporting for a bug🔥⚡️ Cyber samurai, you are officially invited on a journey for a bug-free future of finance! Are you ready to take on your armour and battle with us? #CrossFi Foundation launches the Bug Bounty⚡️ The reward structure is in line with the Warrior Code 🔹Over $100,000 – critical bugs 🔹Over $50,000 – huge 🔹$5,000-$50,000 – medium 🔹Up to $7,500 – low 🔁There are no limits! You can report as many bugs as you can find!!! Read more about the Bug Bounty program on the official CrossFi Foundation website Have you already started your Way of the Crypto Samurai? 📣Submit the bug in this form and get your rewards! #money $XFI #crypto #defi #fintech #finance #blockchain #card #visa #cryptocard #decentralized #crosschain #token #technology #innovation #earn #reward #warrior

Over $100,000💵 for reporting for a bug🔥⚡️ Cyber samurai, you are officially invited on a journey for a bug-free future of finance! Are you ready to take on your armour and battle with us? #CrossFi Foundation launches the Bug Bounty⚡️ The reward structure is in line with the Warrior Code 🔹Over $100,000 – critical bugs 🔹Over $50,000 – huge 🔹$5,000-$50,000 – medium 🔹Up to $7,500 – low 🔁There are no limits! You can report as many bugs as you can find!!! Read more about the Bug Bounty program on the official CrossFi Foundation website Have you already started your Way of the Crypto Samurai? 📣Submit the bug in this form and get your rewards! #money $XFI #crypto #defi #fintech #finance #blockchain #card #visa #cryptocard #decentralized #crosschain #token #technology #innovation #earn #reward #warrior

CrossFi

10,256 views • 2 years ago

🚨 BREAKING: CDC ALERT: DEADLY “KISSING BUG” DISEASE NOW ENDEMIC & SPREADING NATIONWIDE The CDC has just warned doctors that Chagas disease, spread by the face-biting “kissing bug”, is now endemic in 32 states. Even a single kiss from this bug can leave behind parasites in its feces that cause life-threatening illness. Thousands could already be infected without realizing it. If Chagas disease is now endemic in 32 states, how many millions are already infected and don’t even know it?

🚨 BREAKING: CDC ALERT: DEADLY “KISSING BUG” DISEASE NOW ENDEMIC & SPREADING NATIONWIDE The CDC has just warned doctors that Chagas disease, spread by the face-biting “kissing bug”, is now endemic in 32 states. Even a single kiss from this bug can leave behind parasites in its feces that cause life-threatening illness. Thousands could already be infected without realizing it. If Chagas disease is now endemic in 32 states, how many millions are already infected and don’t even know it?

HustleBitch

840,218 views • 1 year ago

🔐OKX Wallet Success Story! Discover how @okxweb3 achieved a top-tier AA security rating and excels in crypto wallet solutions! Witness their journey and see why they are a leader in blockchain security! View the complete video here👇

🔐OKX Wallet Success Story! Discover how @okxweb3 achieved a top-tier AA security rating and excels in crypto wallet solutions! Witness their journey and see why they are a leader in blockchain security! View the complete video here👇

CertiK

37,106 views • 2 years ago

Web3 is a dark forest — and only the sharpest minds can navigate it. At Infini, we take security seriously. In this episode of Infini Spotlight, we sit down with Nolan | ExVul , founder of ExVul , to uncover: - How one bug can freeze an entire blockchain - Why open-source code can become a hidden trap - What could go wrong when AI starts making payments Watch full episode🎥👇

Web3 is a dark forest — and only the sharpest minds can navigate it. At Infini, we take security seriously. In this episode of Infini Spotlight, we sit down with Nolan | ExVul , founder of ExVul , to uncover: - How one bug can freeze an entire blockchain - Why open-source code can become a hidden trap - What could go wrong when AI starts making payments Watch full episode🎥👇

Infini

11,344 views • 1 year ago

DEBATE: ZKVMs or ZK Circuits? 🌶 ZKVMs have made it easy for projects to integrate ZK by offering reduced time-to-market and lower engineering costs. But as applications mature, there’s a growing question: do you stick with the flexibility of ZKVMs, or do you shift toward building custom ZK circuits for the extra boost in efficiency and performance? For today's episode, we met with Uma Roy of Succinct and Vanishree Rao of Fermah to debate the trade-offs between ZKVMs and ZK circuits. Custom circuits can be tailored for specific tasks, potentially offering higher security and efficiency. Yet, they come at the cost of increased engineering effort and complexity. On the flip side, ZKVMs are versatile and flexible for broad optimization across various use cases. Which ZK stack is right for you? Find out in today's episode: 02:20 Introduction to ZK 10:35 Advantages of ZKVMs 12:03 Advantages of Custom ZK Circuits 19:49 Challenges in Auditing ZK Systems 21:29 Choosing Between VMs and Circuits 29:48 The General Impact of ZK 48:05 The Future of ZK Rollups

DEBATE: ZKVMs or ZK Circuits? 🌶 ZKVMs have made it easy for projects to integrate ZK by offering reduced time-to-market and lower engineering costs. But as applications mature, there’s a growing question: do you stick with the flexibility of ZKVMs, or do you shift toward building custom ZK circuits for the extra boost in efficiency and performance? For today's episode, we met with Uma Roy of Succinct and Vanishree Rao of Fermah to debate the trade-offs between ZKVMs and ZK circuits. Custom circuits can be tailored for specific tasks, potentially offering higher security and efficiency. Yet, they come at the cost of increased engineering effort and complexity. On the flip side, ZKVMs are versatile and flexible for broad optimization across various use cases. Which ZK stack is right for you? Find out in today's episode: 02:20 Introduction to ZK 10:35 Advantages of ZKVMs 12:03 Advantages of Custom ZK Circuits 19:49 Challenges in Auditing ZK Systems 21:29 Choosing Between VMs and Circuits 29:48 The General Impact of ZK 48:05 The Future of ZK Rollups

The Rollup

99,717 views • 2 years ago

🔐 Ice Open Network Success Story 🛡️ Ranked #1 in Privacy and #68 overall with a 91.19 CertiK Security Score, Ice Open Network is in the top 10% of blockchain projects globally. 🎥 Watch how their security practices ensure privacy and transparency for users. Explore more:

🔐 Ice Open Network Success Story 🛡️ Ranked #1 in Privacy and #68 overall with a 91.19 CertiK Security Score, Ice Open Network is in the top 10% of blockchain projects globally. 🎥 Watch how their security practices ensure privacy and transparency for users. Explore more:

CertiK

284,971 views • 2 years ago

new game breaking bug dropped... you can now get ssl for free by playing with an invisible car how is this even possible hahahah my friends sent me a group of replays of them getting farmed by trio queues in gc2-3 with invisible cars so it's not a one game bug. this is insane

new game breaking bug dropped... you can now get ssl for free by playing with an invisible car how is this even possible hahahah my friends sent me a group of replays of them getting farmed by trio queues in gc2-3 with invisible cars so it's not a one game bug. this is insane

Josh

25,582 views • 2 years ago

What is Formal Verification and how can it be used for auditing? Let's learn in under a minute in our new Byte Sized Blockchain episode 👇

What is Formal Verification and how can it be used for auditing? Let's learn in under a minute in our new Byte Sized Blockchain episode 👇

CertiK

11,713 views • 3 years ago

Tutorial: How to make a creative coding animation with Claude 2 and OpenProcessing Claude 2 is one of my favorite coding tools. Here's a demo how you can learn programming and write a simple animation with it in minutes. You can run the code at OpenProcessing. Links in comment

Tutorial: How to make a creative coding animation with Claude 2 and OpenProcessing Claude 2 is one of my favorite coding tools. Here's a demo how you can learn programming and write a simple animation with it in minutes. You can run the code at OpenProcessing. Links in comment

Kris Kashtanova

18,369 views • 3 years ago

$Arbitrum embraces ZK Succinct has signed exclusive partnership with Tandem (’ venture arm) to bring ZK proving to Arbitrum chains. Uma Roy: “Every rollup will become a ZK rollup. We gave OP Stack that option with OP Succinct; now Arbitrum’s massive ecosystem gets it too.” What changes for users - Finality: withdrawals and settlements go from 7 days to minutes. - Capital efficiency: funds are no longer locked during week-long challenge periods. - User experience: bridges become smoother, safer, and significantly faster. - Security: execution is enforced by ZK proofs at L1, reducing dependence on sequencer honesty. Steven Goldfeder: “Using ZK proofs brings the network closer to something like Stage 2 decentralization — security enforced at L1, not just by trusting the sequencer.” What changes for the ecosystem - Flexibility: more than 40 Arbitrum chains, including projects like Robinhood and Converge, will be able to choose ZK proving. - Modular design: Succinct provers integrate without requiring a rewrite of the stack. - Governance: Arbitrum One itself is DAO-governed and will not flip overnight, but the stack now supports ZK from the ground up. - Hybrid paths: optimistic and ZK approaches can coexist, giving teams cost and latency trade-offs. What it means for Succinct - SP1 zkVM is already used by 35+ projects including Across, Avail, Celestia, Mantle, Polygon. - Succinct Prover Network, secured and powered by the PROVE token, expands beyond OP Stack chains to cover Arbitrum. - The addressable market effectively doubles. Monetizing even a fraction of Arbitrum’s L2 value could mean hundreds of millions in revenue distributed to provers, stakers, and partners. The ZK era is upon us$

Arbitrum embraces ZK Succinct has signed exclusive partnership with Tandem (’ venture arm) to bring ZK proving to Arbitrum chains. Uma Roy: “Every rollup will become a ZK rollup. We gave OP Stack that option with OP Succinct; now Arbitrum’s massive ecosystem gets it too.” What changes for users - Finality: withdrawals and settlements go from 7 days to minutes. - Capital efficiency: funds are no longer locked during week-long challenge periods. - User experience: bridges become smoother, safer, and significantly faster. - Security: execution is enforced by ZK proofs at L1, reducing dependence on sequencer honesty. Steven Goldfeder: “Using ZK proofs brings the network closer to something like Stage 2 decentralization — security enforced at L1, not just by trusting the sequencer.” What changes for the ecosystem - Flexibility: more than 40 Arbitrum chains, including projects like Robinhood and Converge, will be able to choose ZK proving. - Modular design: Succinct provers integrate without requiring a rewrite of the stack. - Governance: Arbitrum One itself is DAO-governed and will not flip overnight, but the stack now supports ZK from the ground up. - Hybrid paths: optimistic and ZK approaches can coexist, giving teams cost and latency trade-offs. What it means for Succinct - SP1 zkVM is already used by 35+ projects including Across, Avail, Celestia, Mantle, Polygon. - Succinct Prover Network, secured and powered by the PROVE token, expands beyond OP Stack chains to cover Arbitrum. - The addressable market effectively doubles. Monetizing even a fraction of Arbitrum’s L2 value could mean hundreds of millions in revenue distributed to provers, stakers, and partners. The ZK era is upon us

jaehaerys 🪽

17,793 views • 1 year ago

#Bitcoin Rollups: Whiteboard Session. There is a lot of confusion about #ZK #Rollups on Bitcoin. So I mapped out in detail how it works (afaict) under the hood. tl;dr we can use ZKP's (the scaling kind, not the privacy kind) to create an end game scaling solution for #Bitcoin. For now, BitVM enables trust minimized version of ZK Rollups (which is still really dang good). True, fully trustless roll-ups would require a soft-fork.

#Bitcoin Rollups: Whiteboard Session. There is a lot of confusion about #ZK #Rollups on Bitcoin. So I mapped out in detail how it works (afaict) under the hood. tl;dr we can use ZKP's (the scaling kind, not the privacy kind) to create an end game scaling solution for #Bitcoin. For now, BitVM enables trust minimized version of ZK Rollups (which is still really dang good). True, fully trustless roll-ups would require a soft-fork.

David Seroy 🏔️

118,336 views • 2 years ago

New video on format string vulnerabilities. It's the classic printf(user) bug. An attacker can read and write almost any memory in the process, from a single print statement. I walk through all of it in a live GDB session. Leaking the stack with %p, turning %n into an arbitrary write, and overwriting a GOT entry to get a shell. No assumed knowledge. Part 4 of the series, after buffer overflows, canaries, and ROP.

New video on format string vulnerabilities. It's the classic printf(user) bug. An attacker can read and write almost any memory in the process, from a single print statement. I walk through all of it in a live GDB session. Leaking the stack with %p, turning %n into an arbitrary write, and overwriting a GOT entry to get a shell. No assumed knowledge. Part 4 of the series, after buffer overflows, canaries, and ROP.

tetsuo

13,117 views • 1 month ago