Our Audit of the 4Mica Payment Network
We audited 4Mica's collateral-backed payment network. Its BLS signatures and netting were correct; the serious risks were in settlement and key management.
2 min readCategory
Security
Public audit reports and security advisories from Symbolic Software, including the Telegram MTProto review and the dWallet Labs 2PC-MPC audit. 6 posts in category “Security”.
On Our Telegram MTProto Review
A note on Symbolic Software's technical review of Telegram's MTProto protocol, made public in 2026 through litigation. Covers the auth_key_id tracking vulnerability, the empirical case against Telegram's 'changes regularly' rebuttal, the editorial independence terms of the engagement, and how the document entered the public record.
13 min readSecurity Announcement: Bugs in Noise Explorer's Rust/WASM Code Generation
We've updated Noise Explorer to address two bugs in generated Rust and WebAssembly implementations of Noise Protocol Framework handshake patterns.
2 min read2PC-MPC in Rust: Audit Report
The public report from our audit, with 3MI Labs, of dWallet Labs' 2PC-MPC Rust implementation.
1 min readSecurity Announcement: Variable Timing Issue in Kyber Code
We've updated Kyber-K2SO to address a variable timing logic issue.
3 min readNative Labs Smart-Contract Audit
The public report from our review of the Native Labs smart contracts.
1 min read