Devcon 8 opened in Mumbai, and Vitalik's opening talk placed formal verification, open hardware and private communication within Ethereum's mission. Privacy shipped in a cluster: Aztec Tierra (Alpha V6) launched and Privacy Pools v2 was released during Devcon. Binance's preliminary report says that once the attacker controlled its signing service, it set up delegation with EIP-7702 authorizations, and pausing withdrawals could not invalidate them. ethresear.ch looked at the storage cost of nonces and nullifiers.
Announced at 21:01 (@aztecnetwork post). According to the blog, it fixes known vulnerabilities from earlier versions (including a critical issue found in V5), and core components of the proof system are formally verified. Client-side proving on a local device takes about 1 second, twice as fast as the previous version. Message delivery from Ethereum to Aztec drops from about 2 minutes on average to as little as about 12 seconds. The network has more than 3,000 validators, with no privileged viewing keys and no centralized sequencer.
Aztec: Aztec Tierra (Alpha V6) launches, announced at 21:01 (@aztecnetwork post). According to the blog, it fixes known vulnerabilities from earlier versions (including a critical issue found in V5), and core components of the proof system are formally verified. Client-side proving on a local device takes about 1 second, twice as fast as the previous version. Message delivery from Ethereum to Aztec drops from about 2 minutes on average to as little as about 12 seconds. The network has more than 3,000 validators, with no privileged viewing keys and no centralized sequencer.
Published at 21:33. About $6.34 billion of assets were affected and about $2.85 billion has been frozen or intercepted. The attacker first took control of the internal wallet signing service and sent transactions outside the normal withdrawal flow. It then used the signing service to exploit EIP-7702: 50 signed transactions manipulated account nonces and set up a malicious delegation, giving an attacker-controlled contract partial execution rights over hot wallets.
Posted at 04:15 by dlebee. A privacy pool writes a nullifier on every withdrawal, Permit2's `nonceBitmap` and EIP-4337-style 2D nonces write replay flags, and machine settlement writes one flag per session. The most common `mapping(bytes32 => bool)` costs about 22,100 gas per flag (20,000 of it from the zero to non-zero write). ZK batching makes computation nearly free, but these flags cannot be compressed. The post compares packed flag lanes and other approaches and asks whether the protocol could provide a native primitive.
EF Blog: designed for sovereignty, Ethereum for digital public infrastructure, and EF: a proof of concept for a humanitarian aid coordination network, 10:20 (decentralized identity paired with private payment channels).
Paradigm: Solar v0.3, more than 100x faster than solc, 01:41. Its bytecode uses less gas, but it is not yet recommended for production. Foundry v1.9, 04:35, ships with Solar built in.
