Author: Olivia Martinez

tl;dr: zkAPI lets you pay for a metered API without being known. Deposit credits into an Ethereum vault once, then authorize bounded usage with zero-knowledge proofs instead of an identity. The provider sees the requests, and the payment layer sees the spend. Neither learns the link between them. The Open Anonymity Project built it with the Ethereum Foundation, and it runs on Ethereum Mainnet today. The problem Every AI API call today carries an identity. Your API key points to an account, the account to a payment method, and every prompt you send joins the record attached to both. The…

Read More

The Ethereum Foundation’s Trillion Dollar Security initiative has identified blind signing and transaction uncertainty as a user experience risk, and is exploring native transaction assertions as a next step to enforce a transaction’s final outcome, alongside Clear Signing. This post covers why a valid signature doesn’t always guarantee the transaction result you wanted, how native transaction assertions could protect users where today’s defenses stop, and the design choices behind them, with EIP-7906 (Transaction Assertions via State Diff Opcode) as one possible approach. Two ways a signed transaction can go wrong The problem starts with how Ethereum works. It executes exactly…

Read More

Today, we are excited to announce the start of the Fusaka audit contest, co-sponsored by Gnosis and Lido, hosted on Sherlock, and running for four weeks from September 15th. The goal is simple: maximize scrutiny of the Fusaka upgrade and surface vulnerabilities before they can impact the network. To raise the stakes, valid findings reported in the first week have a 2x multiplier applied to their points rewarded, and those in the second week have a 1.5x multiplier. To help security researchers, we’ve prepared a Fusaka auditor guide. We’re grateful to Gnosis for contributing 100,000 USD and Lido for contributing…

Read More