All Posts
Building the IT Function at Physical Control Center Inc.: A Founding CTO’s Account
A founding CTO’s account of building PCC’s technical foundation from the ground up, covering the tech stack, systems, and responsibilities behind my work.
TradeXYZ Incident
An analysis of the July 28, 2026 TradeXYZ SKHX mark-price incident, estimated to have liquidated $57.4M in long positions and caused $17.3M in realized losses.
COLDCARD Incident
An analysis of the July 30, 2026 COLDCARD seed-generation vulnerability linked to 1,367.05 BTC (~$88.6M at the time) in reported losses, its attack path, root causes, and defensive opportunities.
JaredFromSubway MEV Bot 2 Incident Analysis
An analysis of the June 20, 2026 exploit against the jaredfromsubway MEV Bot 2 through attacker-controlled routes and lingering token approvals.
The Zcash Orchard Counterfeiting Vulnerability and the Redefinition of Cybersecurity by AI
An analysis of the Zcash Orchard vulnerability discovered on May 29, 2026, and what AI-assisted discovery means for security work.