Sigma Prime

@sigp_io

Securing critical blockchain systems since 2016. Creators of Lighthouse. Audits for complex, high-stakes Web3 systems, infrastructure, ZK and smart contracts.

Sydney, Australia

sigmaprime.io

Replies Reposts Media Articles

Sigma Prime
@sigp_io
10h
Secstant found a bug in NASA code 🐛 NASA JPL's spacewasm runs WebAssembly on spacecraft. Modules that failed late in compilation leaked memory, so a peer could exhaust a device by sending a stream of them. Fixed in 0.3.3. Advisory below. Waitlist:
Request Security Audit Scoping | Sigma Prime
From sigmaprime.io
2
Sigma Prime
@sigp_io
Sep 24
AI agents are becoming increasingly effective at exploiting cybersecurity vulnerabilities, giving attackers immense capabilities. The good news is that defenders now have powerful AI tools too. No need to use the Government's task force, we know a team.
Anthony Albanese
@AlboMP
Sep 23
00:00
Sigma Prime
@sigp_io
Sep 22
Secstant found a bug in IPFS: a 14 byte block could take down a node 🐛 Malformed blocks got decoded on goroutines with no recovery, so one unauthenticated gateway request killed the whole daemon. Reported to @IPFS, fixed by @ipshipyard in kubo 0.43.0. Advisory 👇
2
Sigma Prime
@sigp_io
Sep 21
Introducing Secstant by Sigma Prime. Pointing LLMs at your code isn't enough to secure it. The cost adds up, the review has no direction and false positives pile up. We built Secstant to fix that. It's already found bugs in repos from NASA and IPFS, all fixed upstream. Here's
6
Sigma Prime
@sigp_io
Sep 16
Article
Lighthouse on Hegotá
Tiers and reasoning for consensus layer Hegotá EIPs Beyond FOCIL and Quick Slots we prefer the CL scope kept narrow. A narrow scope preserves team bandwidth for the decoupled consensus transition...
2