Every two months
Newsletter
A dispatch every two months on our audits, research, and tooling.
September–October 2026
In this issue: zkao 3.0, adversarial testing of Zcash’s Ironwood formal verification, and audits of OpenVM 2.0 and Midnight.
zkao 3.0 adds organizations and an assistant, we test Zcash's Ironwood formal verification by breaking the code under it, and audits of OpenVM 2.0, Midnight and SecondFi.
Read this issueAll issues
September–October 2026
zkao 3.0 adds organizations and an assistant, we test Zcash's Ironwood formal verification by breaking the code under it, and audits of OpenVM 2.0, Midnight and SecondFi.
July–August 2026
zk.golf launches, zkao 2.0 moves to pay-as-you-go, our AI audit pipeline finds bugs in CIRCL, OpenVM and bron-crypto, and an audit of Zcash's Orchard.
May–June 2026
zkao reaches a public 1.0, a critical soundness bug in Jolt's verifier, the launch of mpcsec.org, and four new audits for Aleo, Aptos and Zeko.
March–April 2026
Three broken LaBRADOR implementations, audits of StarkWare's Stwo-Cairo verifier, Mina's treasury and Aptos's encrypted mempool, and a rebuilt zkbugs dataset with more than 100 circom bugs.
January–February 2026
zkao launches in early access, the first real-world ZK circuit exploits get dissected, a Lean4 proof of FRI soundness, and five recent public audit reports.