# Пов'язані статті щодо Formal Verification

Центр новин HTX надає останні статті та поглиблений аналіз на тему "Formal Verification", що охоплює ринкові тренди, оновлення проєктів, технологічні розробки та регуляторну політику в криптоіндустрії.

Zcash says Ironwood proof rules out undetectable counterfeiting bugs

Zcash researchers have completed formal verification of Ironwood, a new shielded pool introduced via the NU6.3 upgrade. They published a machine-checked proof, written in Lean and comprising over 2,700 theorems, that establishes the pool's "balance integrity." This proof confirms that, under its cryptographic assumptions, Ironwood cannot contain undetectable counterfeiting bugs, ensuring it cannot pay out more value than has publicly entered it. The verification, which took multiple teams over a month, covers the zero-knowledge proof system, circuit rules, and ledger accounting but not Ironwood's separate privacy guarantees. Ironwood was created in response to a theoretical vulnerability in the older Orchard pool that could have allowed undetectable counterfeiting, though there's no evidence of exploitation. Funds migrating from Orchard must pass through a public "turnstile" checkpoint, designed to prevent any hypothetical excess coins from entering the new pool and to provide evidence on whether the old pool was exploited.

cointelegraph07/29 01:15

Zcash says Ironwood proof rules out undetectable counterfeiting bugs

cointelegraph07/29 01:15

Don't Just Focus on Layoffs, The New Structure of the Ethereum Foundation is More Worthy of Appreciation

The Ethereum Foundation (EF) has undergone a significant organizational restructuring, with the most notable change being a strategic refocusing of its priorities rather than just a 20% staff reduction (approximately 54 people). The new structure clearly prioritizes the Protocol and Access layers, which now comprise the largest teams (57 and 34 people, respectively). This signals EF's intent to concentrate its core resources on fundamental, hard-to-outsource aspects of Ethereum: protocol evolution, security, privacy, client development, and the foundational access layer. Key areas within the Protocol layer, led by an architecture group including Vitalik Buterin and Justin Drake, receive heightened emphasis. These include post-quantum security, zkEVM, formal verification, and long-term roadmap development ("Strawmap"). This reflects a shift towards tackling complex, interdependent challenges like scalability, privacy, and future-proofing the protocol, potentially moving from a pure "redundant security" multi-client model towards more specialized clients aided by AI-assisted formal verification. Financially, EF's budget is being reduced by approximately 40%. The goal is to transition from spending about 15% of its remaining funds annually to a more sustainable 5% rate, akin to a long-term endowment, ensuring its longevity. Concurrently, the restructuring involves pushing certain responsibilities—such as application development, adoption, and ecosystem coordination—to external organizations like EthLabs, the Ethereum Apps Guild, and others. This "multi-node" model aims to increase ecosystem resilience by decentralizing functions beyond the EF, though it introduces new coordination challenges. In essence, the reorganization represents EF consciously narrowing its scope to focus on the hardest, most critical protocol-level problems while fostering a more distributed and sustainable ecosystem structure for Ethereum's future growth.

Foresight News06/24 06:05

Don't Just Focus on Layoffs, The New Structure of the Ethereum Foundation is More Worthy of Appreciation

Foresight News06/24 06:05

Capturing 15 Top-Tier Zero-Day Vulnerabilities: A Consensus Protocol Debug Agent Framework Built by 0G Lab in Collaboration with Teams from NUS, PKU, and BUPT

"Agents Capture 15 Critical Zero-Day Bugs: 0G Lab's Multi-Agent Framework Automates Debugging in Consensus Protocols" Distributed consensus protocols are notoriously difficult to debug due to complex, intertwined states. A novel framework, Agora, developed by 0G Labs with researchers from NUS, Peking University, and Beijing University of Posts and Telecommunications, tackles this by fusing deep domain expertise with a collaborative multi-agent LLM architecture. Agora moves beyond the limitations of single LLMs and traditional testing like fuzzing. It employs three specialized agents: an Orchestrator for global state, a Strategy agent for generating attack scenarios using distributed systems knowledge, and a TestGen agent that creates executable tests. A core innovation is its efficient "Succinct Memory & Communication" mechanism and a dynamic test harness. This allows the system to translate abstract hypotheses into concrete tests across languages like Go and Rust, run them, capture failures, and refine the approach in a closed loop—all with minimal token overhead. In rigorous evaluations on production-level protocols including Raft, EPaxos, and components from etcd and Sui, Agora discovered 15 previously unknown deep logic bugs (e.g., execution divergence, liveness violations). In stark contrast, powerful standalone LLMs like GPT-5.2 and Claude 4.5 found zero such bugs. Agora achieved this with a high precision of 73.9% and at an average cost of only about $40 per bug found. The framework demonstrates high generalizability. Its decoupled design allows the "Multi-Agent + Hypothesis-Driven Testing" paradigm to be applied to other complex domains like database concurrency control, OS kernels, and Web3 smart contract auditing. By enabling efficient, automated detection of deep logic flaws, Agora points the way for AI-powered security in critical infrastructure, aligning with the growing trends of agentic systems and automated quality control.

marsbit06/11 07:12

Capturing 15 Top-Tier Zero-Day Vulnerabilities: A Consensus Protocol Debug Agent Framework Built by 0G Lab in Collaboration with Teams from NUS, PKU, and BUPT

marsbit06/11 07:12

Vitalik is Personally 'Dismantling' the Ethereum Foundation

Vitalik Buterin recently published an extensive article addressing core concerns about Ethereum's future direction and the role of the Ethereum Foundation (EF). He clarifies that the EF is not his personal domain nor the central authority of Ethereum; it operates as just one node within the broader ecosystem. The board makes collective decisions, with significant operational work led by Aya Miyaguchi, allowing Vitalik to focus on technical matters. The article critiques the perception that the EF should act like a conventional, fast-moving tech company. Buterin warns that merely chasing higher TPS, lower latency, or better marketing—like other chains—risks diluting Ethereum's foundational values. He draws a parallel to Google's evolution away from its "Don't be evil" ethos. Instead, the EF's renewed mandate is to focus on preserving and strengthening Ethereum's core principles, summarized as CROPS: **C**ensorship-resistance, **R**esistance to capture, **O**pen source, **P**rivacy, and **S**ecurity. The foundation will concentrate its limited resources (holding only ~0.16% of ETH) on these long-term, non-commercializable fundamentals, while ecosystem growth, applications, and market-facing activities should be driven by external teams and capital. Buterin outlines key technical priorities aligned with this vision: 1) Advancing formal verification to mathematically prove the absence of bugs; 2) Enhancing consensus security to maintain operation without reliance on social coordination during outages; and 3) Reducing dependency on intermediaries (like RPCs) to strengthen user sovereignty and privacy. He acknowledges ETH as Ethereum's most valuable asset, crucial for security, but stresses that promoting its value is a task for the wider ecosystem, not the EF. Ultimately, Buterin's message is a strategic refocus: the EF will become a smaller, more focused entity guarding Ethereum's essential, harder-to-achieve properties, ensuring it remains distinct not just in performance but in its commitment to decentralization, resistance, and security.

marsbit05/26 01:48

Vitalik is Personally 'Dismantling' the Ethereum Foundation

marsbit05/26 01:48

Vitalik's Latest Long Read: In the AI Era, How Can Code Become More Secure?

Vitalik Buterin explores the role of formal verification as a critical tool for software security, especially in the AI era and for blockchain systems. He defines formal verification as using machine-checkable mathematical proofs to verify that code meets specified properties, moving beyond manual auditing. The article highlights that while AI can generate code and find vulnerabilities rapidly, it also makes formal verification more accessible by assisting in writing proofs. This is crucial for Ethereum's complex components like STARKs, ZK-EVMs, consensus algorithms, and high-performance EVM implementations, where bugs can lead to irreversible losses. Vitalik argues that formal verification enables a powerful "separation of concerns": AI can write highly optimized (e.g., assembly) code for efficiency, while a separate, human-readable specification defines correctness. A machine-checked proof then verifies their equivalence. This paradigm can create a more secure "trusted core" of software. However, he cautions that formal verification is not a panacea. "Proven correctness" depends on the accuracy of the specifications and proofs themselves, which can be wrong or incomplete. Risks include unverified code sections, hardware-level side-channel attacks, and overlooked assumptions. The true goal is not absolute proof but increased confidence through redundant expressions of intent—using code, tests, types, and formal proofs—and automatically checking their consistency. The article concludes that AI and formal verification are complementary: AI enables scale, while verification ensures accuracy. For critical systems, this combination offers a path toward stronger security in a future with powerful AI adversaries, helping to maintain the defensive advantage essential for a decentralized internet.

marsbit05/19 09:56

Vitalik's Latest Long Read: In the AI Era, How Can Code Become More Secure?

marsbit05/19 09:56

CertiK Sets Sights on Public Listing as Binance Backs Web3 Security Leader

CertiK, the leading Web3 security provider, aims to become the first publicly listed Web3 infrastructure company, backed by a major investment from Binance. The firm is expanding institutional services with its enterprise-grade platform Skynet Enterprise, which offers real-time monitoring and risk visibility for regulators and large institutions. Utilizing AI-driven formal verification technology, CertiK enhances security and scalability for smart contracts. With over $600 billion in assets protected, 5,000+ enterprise clients, and 180,000+ vulnerabilities detected, the $2 billion company is supported by top investors and continues to grow its global presence through strategic expansions and key partnerships.

TheNewsCrypto01/24 05:57

CertiK Sets Sights on Public Listing as Binance Backs Web3 Security Leader