Smart Contract Security Is Not a Code Problem
A structured look at the four layers of smart contract risk: code, protocol composability, human operations, and the external world.
Kevin Small
Blockchain Systems • Solidity • DeFi • Architecture
Latest posts
Disassembling a Solidity Contract with Pen and Paper: An EVM Opcode-level Walkthrough
An opcode-level breakdown of the SimpleStorage contract.
The Rube Goldberg Risk in Agentic Development
How agentic development tends towards locally correct but globally incoherent systems, and what you can do about it.
Delivery Versus Payment: Atomic Settlements in Solidity
Open-source DVP protocol allowing atomic settlement of digital assets
ZKPs Prove the Maths, But Who Proves the Input?
A clear-eyed look at where zero knowledge proofs genuinely remove trust requirements, and where they quietly push them elsewhere.
Gas Micro-Optimisation using Storage
Using low-level opcode tools to demonstrate gas micro-optimisation using storage.
Gas Micro-Optimisation using Function Names
Using low-level opcode tools to demonstrate gas micro-optimisations with function names.
Gaining an Intuitive Understanding of Bonding Curves
Explore how automated market makers like Uniswap and Curve use bonding curves to enable efficient token swaps. This post gives you an intuitive understanding of how bonding curves work.
Real Address Poisoning
Real world examples of address poisoning attacks.
Input Malleability in Solidity Calldata
Understanding why different calldata can produce the same function execution steps and why you might care.