Web3 Security & Cryptography Blog

Deep dives into smart contract audits, zero-knowledge proofs,
and advanced Web3 security concepts by the Hexens team.

Glider by Hexens: The Code Query Engine for Smart Contract Security at Scale

Glider

Glider by Hexens: The Code Query Engine for Smart Contract Security at Scale

Glider by Hexens turns every verified EVM contract into queryable data. Hunt smart contract vulnerabilities across whole blockchains in minutes, not months.

The Exploit Is the Disclosure: Why On-Chain Hacks Spread Faster Than Patches

Glider

The Exploit Is the Disclosure: Why On-Chain Hacks Spread Faster Than Patches

In web3, the exploit is the disclosure. It starts a race to copy, not to patch. In a couple of weeks we turned 12 live exploits into detection queries and found 198 confirmed-vulnerable contracts still running on Ethereum and BSC.

Understanding Differential Privacy: Part 2

AI

Understanding Differential Privacy: Part 2

A hands-on guide to DP-SGD: how it works, how VaultGemma uses it at LLM scale, and what private vs non-private training actually costs on CIFAR-10.

Understanding Differential Privacy: Part 1

AI

Understanding Differential Privacy: Part 1

A practical guide to differential privacy: the attacks that motivate it, the formal definition, trust models, mechanisms, and privacy accounting.

Gröbner Bases in Cryptanalysis Part2: Attacking Poseidon

Cryptography

Gröbner Bases in Cryptanalysis Part2: Attacking Poseidon

Learn how Gröbner bases break cryptographic hash functions. We attack a reduced-round Poseidon instance, recovering a preimage from its digest using SageMath.

Gröbner Bases in Cryptanalysis Part 1: The Underlying Algebra

Cryptography

Gröbner Bases in Cryptanalysis Part 1: The Underlying Algebra

This post develops the full algebraic machinery, covering polynomial rings, ideals, monomial orderings, and Buchberger's algorithm, and demonstrates the theory with a complete step-by-step example of computing a reduced Gröbner basis and recovering solutions.

Encrypted Vector Databases Without Sacrificing Search

AI

Encrypted Vector Databases Without Sacrificing Search

A technical deep-dive into cryptographically secure vector databases, covering embedding attacks, why exact distance-preserving encryption fails, and the Scale-and-Perturb scheme

Secure Federated Learning with Cryptography

AI

Secure Federated Learning with Cryptography

Federated learning promises privacy by keeping data local, yet model updates remain vulnerable to inference and poisoning attacks. This article examines how cryptography secures federated learning in practice, covering secure aggregation, homomorphic encryption, MPC, differential privacy, and verifiable training with zero-knowledge proofs.

Attacks on Threshold Schemes: Part 2

Security

Attacks on Threshold Schemes: Part 2

Deep dive into protocol-level vulnerabilities in threshold signature schemes: MtA oracle attacks, reshare synchronization flaws, deterministic nonce reuse, and adaptive security challenges in FROST and threshold Schnorr.

Attacks on Threshold Schemes: Part 1

Security

Attacks on Threshold Schemes: Part 1

A technical guide to real-world attacks on threshold signature schemes. Explore implementation bugs like missing checks and proofs, wrong parameters.