ResearchZero Blog
Technical notes on smart contract security, tokenized assets, custody, settlement, DeFi, and institutional on-chain finance.
Transient storage is per-transaction state namespaced by address, not a self-cleaning local. This article covers delegatecall slot clobbering, try/catch rollback, the delete corruption bug, and more.
DAML SDK 2.10.4 shipped DA.Math sin and cos with wrong signs across entire quadrants. This article explains the CORDIC sign error and the audit lesson.
How to implement stock splits and reverse splits for tokenized real-world assets using raw balances, raw allowances, and a global split multiplier.
Solidity try/catch catches some external call failures, but it is not a general exception handler. This article explains where the boundary is, with examples.
Create an account, generate an API key, and point your MCP client at the server.
// Questions first? Email ResearchZero — response within 24 hours.