Web3 Security & Cryptography Blog

Deep dives into smart contract audits, zero-knowledge proofs,
and advanced Web3 security concepts by the Hexens team.

Glider Monitor: Continuous Smart Contract and Capital Monitoring for Anyone with Assets Onchain

Glider

Glider Monitor: Continuous Smart Contract and Capital Monitoring for Anyone with Assets Onchain

Every exploit elsewhere becomes a check on what you hold onchain: your contracts, your dependencies, your positions. Verified continuously, in production.

Quantum Key Distribution: From Theory to Real-World Attacks

Cryptography

Quantum Key Distribution: From Theory to Real-World Attacks

Explore how Quantum Key Distribution (QKD) works, from the BB84 protocol and quantum principles to real-world attacks such as photon-number splitting and detector blinding, and how newer approaches address these challenges.

Glider by Hexens: The Code Query Engine for Smart Contract Security at Scale

Glider

Glider by Hexens: The Code Query Engine for Smart Contract Security at Scale

Glider by Hexens turns every verified EVM contract into queryable data. Hunt smart contract vulnerabilities across whole blockchains in minutes, not months.

The Exploit Is the Disclosure: Why On-Chain Hacks Spread Faster Than Patches

Glider

The Exploit Is the Disclosure: Why On-Chain Hacks Spread Faster Than Patches

In web3, the exploit is the disclosure. It starts a race to copy, not to patch. In a couple of weeks we turned 12 live exploits into detection queries and found 198 confirmed-vulnerable contracts still running on Ethereum and BSC.

Understanding Differential Privacy: Part 2

AI

Understanding Differential Privacy: Part 2

A hands-on guide to DP-SGD: how it works, how VaultGemma uses it at LLM scale, and what private vs non-private training actually costs on CIFAR-10.

Understanding Differential Privacy: Part 1

AI

Understanding Differential Privacy: Part 1

A practical guide to differential privacy: the attacks that motivate it, the formal definition, trust models, mechanisms, and privacy accounting.

Gröbner Bases in Cryptanalysis Part2: Attacking Poseidon

Cryptography

Gröbner Bases in Cryptanalysis Part2: Attacking Poseidon

Learn how Gröbner bases break cryptographic hash functions. We attack a reduced-round Poseidon instance, recovering a preimage from its digest using SageMath.

Gröbner Bases in Cryptanalysis Part 1: The Underlying Algebra

Cryptography

Gröbner Bases in Cryptanalysis Part 1: The Underlying Algebra

This post develops the full algebraic machinery, covering polynomial rings, ideals, monomial orderings, and Buchberger's algorithm, and demonstrates the theory with a complete step-by-step example of computing a reduced Gröbner basis and recovering solutions.

Encrypted Vector Databases Without Sacrificing Search

AI

Encrypted Vector Databases Without Sacrificing Search

A technical deep-dive into cryptographically secure vector databases, covering embedding attacks, why exact distance-preserving encryption fails, and the Scale-and-Perturb scheme

Secure Federated Learning with Cryptography

AI

Secure Federated Learning with Cryptography

Federated learning promises privacy by keeping data local, yet model updates remain vulnerable to inference and poisoning attacks. This article examines how cryptography secures federated learning in practice, covering secure aggregation, homomorphic encryption, MPC, differential privacy, and verifiable training with zero-knowledge proofs.