@Wongssh web3 reading list. A reading list for solidity, web3 and Dapp programmers. We use Chinese and English language.
https://www.coinspect.com/blog/balancer-rate-manipulation-exploit/
balancer 被盗 #security 分析
Coinspect Security
Balancer V2 Stable Pools Exploit — Rate Manipulation
Balancer V2 Stable Pools Exploit — Rate Manipulation
An attacker exploited a rounding issue in the calculation of the stable swap invariant, deflating the implied BPT price and extracting value via internal balances and a...
security
Web3ReadList
https://x.com/0xOptimus/status/1981424092818399598 专有 #AMM 的机制与为什么只出现在 solana 上
https://x.com/0xOptimus/status/1985735558711185418
RFQ 与 Prop AMM 对比
X (formerly Twitter)
Optimus ⚡🤖 (@0xOptimus) on X
Prop AMMs vs. RFQs: The Importance of Composability
https://x.com/0xOptimus/status/1981424092818399598
专有 #AMM 的机制与为什么只出现在 solana 上
X (formerly Twitter)
Optimus ⚡🤖 (@0xOptimus) on X
From Solana to the EVM: A New Path for Proprietary AMMs
AMM
https://commonware.xyz/blogs/reshare
一种新的共识协议，文章主要讨论了阈值签名内的 reshare 问题
commonware
Once a Validator, Not Always a Validator
Once a Validator, Not Always a Validator
Many consensus protocols, from Tendermint and HotStuff to our own Minimmit, are defined under a permissioned model where the validator set is fixed and known ahead of time. Safely transitioning from one committee to the next, where validators can be added…
https://medium.com/@laurippeltonen/lagrange-interpolation-for-iq-200-8cec1e99647d
一篇关于 #zk 中常用的 Lagrange interpolation 的介绍
Medium
Lagrange interpolation for IQ < 200
Lagrange interpolation for IQ < 200
Remember those kids’ drawings where you need to connect the dots to form an image? After all these years, you can finally cheat!
zk
https://www.btcstudy.org/2025/10/24/the-scroll-4-intersection-attacks-on-coinjoin-anonymity/
#bitcoin CoinJoin 熵与去匿名攻击
www.btcstudy.org
对 CoinJoin 匿名性的交集攻击
比特币思想的中文集结地
bitcoin
https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation
Cloudflares 椭圆曲线库存在的安全问题
www.botanica.software
CVE-2025-8556 - Cryptographic Issues in Cloudflare’s CIRCL FourQ Implementation
CVE-2025-8556 - Cryptographic Issues in Cloudflare’s CIRCL FourQ Implementation
2 min read
https://www.soliditylang.org/blog/2025/10/21/the-road-to-core-solidity/
core #solidity 路线与未来几个小版本 solidity 的目标
Solidity Programming Language
The Road to Core Solidity | Solidity Programming Language
Posted by Solidity Team on October 21, 2025
solidity
Web3ReadList
https://blog.lambdaclass.com/gkr-protocol-implementation-deep-dive-into-the-code/ GKR #zk 协议实现
https://vitalik.eth.limo/general/2025/10/19/gkr.html
vitalik 关于 GKR 的介绍
https://medium.com/taipei-ethereum-meetup/privacy-pool-0143430da59c
Privacy Pool #zk 原理
Medium
隱私池的設計
隱私池的設計
隱私池（Privacy Pool） 其實也就是改良龍捲風現金，並在背後加上一個人工維護的名單。提款時得先證明自己在允許名單中。人們可以去設計自己的名單，看想要合哪一國的規
zk
https://github.com/flashbots/rblib
Flashbots 模块化 payload 构建
GitHub
GitHub - flashbots/rblib: Modular SDK for building payload builders.
GitHub - flashbots/rblib: Modular SDK for building payload builders.
Modular SDK for building payload builders. Contribute to flashbots/rblib development by creating an account on GitHub.
https://www.adevarlabs.com/blog/preventing-second-preimage-attacks-in-merkle-trees-a-complete-guide
Merkle Tree 的 Second Preimage Attacks
Adevarlabs
Preventing Second Preimage Attacks in Merkle Trees: A Complete Guide | Adevar Labs
Preventing Second Preimage Attacks in Merkle Trees: A Complete Guide | Adevar Labs
A second preimage attack in a Merkle tree occurs when an attacker proves that non-existent data exists by presenting an internal node hash as if it were a leaf. Merkle trees are widely used in DeFi for compact, gas-efficient membership proofs such as token…
https://rrelayer.xyz/
#EVM 交易 relayer
rrelayer.xyz
🦀 rrelayer 🦀
🦀 rrelayer 🦀
rrelayer is a lighting-fast multi chain indexing solution written in Rust
EVM
https://hexens.io/blog/zkvm-dsls
#zk DSL
hexens.io
A Comparison of zkVM DSLs: Halo2, Zirgen, and Plonky3
A Comparison of zkVM DSLs: Halo2, Zirgen, and Plonky3
Deep dive into ZK constraint systems: Halo2's PLONKish circuits, Zirgen's STARK compiler, and Plonky3's direct AIR authoring. Complete with Fibonacci examples.
zk
https://pse.dev/blog/pse-september-2025-newsletter
PSE 月报
pse.dev
PSE September 2025 Newsletter | PSE
PSE September 2025 Newsletter | PSE
A roundup of updates from PSE teams covering our three new focus areas of private writes, private proving, and private reads.
Web3ReadList
https://blog.ethereum.org/2023/08/29/eel-spec Python 描述 #ethereum 规范
https://www.openzeppelin.com/news/how-the-ethereum-execution-layer-works
#ethereum 执行层如何处理运作
Openzeppelin
Inside Ethereum's Engine: How the Execution Layer Actually Works
Inside Ethereum's Engine: How the Execution Layer Actually Works
Learn how Ethereum's Execution Layer Specification (EELS) works. Deep dive into EVM messages, transactions, block execution, and state transitions.
ethereum
https://morpho.org/blog/morpho-vaults-v2-a-new-standard-for-asset-curation/
Morpho vaults v2
morpho.org
Morpho Vaults V2: A new standard for asset curation
Morpho Vaults V2: A new standard for asset curation
Morpho is an open network that connects lenders and borrowers to the best possible opportunities worldwide.
https://express.zkpunk.pro/2509.pdf
#zk paper 月刊
zk
https://cryptologie.net/posts/high-level-intuitions-for-the-bulletproofsipa-protocol/
#zk Bulletproofs
zk
https://blog.wssh.dev/posts/eth2-deposit-withdraw/
#ETH2 存款和提款分析
Wong's Blog
深入探索以太坊共识层:存款与提款
概述
一年前，GCC 基金会使用 Kiln 服务商进行了 128 ETH 质押，但最近 Kiln 服务商出现了可能的安全问题，为了保持用户资金安全，Kiln 选择提取了所有质押者的资金。本文主要介绍以下内容:
ETH2
Before
 
Back to Top