Security Research & Vulnerability Disclosures

Original vulnerability research, responsible disclosures, and security publications from the team behind 200+ engagements and zero client exploits.
Tricking the Polygon bridge into withdrawals by forging transaction proofs

Mar 4, 2026

Tricking the Polygon bridge into withdrawals by forging transaction proofs

This is a disclosure of a vulnerability in the Polygon Plasma bridge. The vulnerability has been fixed since July 2024 and the fix has been pushed to the vulnerable library as well.

Read more
TSTORE Poison: The Solidity Compiler Bug That Silently Corrupts Storage

Feb 18, 2026

TSTORE Poison: The Solidity Compiler Bug That Silently Corrupts Storage

TL;DR -- A cache key collision in the Solidity compiler's via-ir code generator causes `delete` on transient variables to emit `sstore` instead of `tstore`, or conversely causes persistent `delete` to emit `tstore` instead of `sstore`. The direction depends on function selector ordering -- neither direction is safe.

Read more