Changelog
A detailed log of changes, research, and additions to DNZN // RESEARCH.
Recent Changes
| DATE | PAGE | BRIEF |
|---|---|---|
| 2026-08-11 | FWA Contract Analysis | An analysis of the FWA contract at 0xb276f62d...1eac1c, the randomized NFT acquisition pool behind fwa.fun, where a depositor's ETH backing sets both a listing's selection odds and the standing bid to buy the NFT back. First contract analysis under the TokenWorks group. Gas: 1.3 mtok. |
| 2026-08-11 | Glossary (Update) | Terminology for the FWA analysis. Ethereum-Specific: Segment Tree, Dividend Accumulator, Harmonic Mean. |
| 2026-08-10 | TokenWorks Project Space | A project space for TokenWorks, a studio shipping numbered onchain works on a release cadence rather than a single protocol. Maps the on-chain footprint across the three fronted works — Fake World Assets, Ten Thousand Tokens, PunkStrategy — and their supporting contracts. Gas: 95 tok. |
| 2026-08-10 | Glossary (Update) | Terminology for the TokenWorks project space. Security Concepts: VRF, Chainlink VRF. Notable Libraries & Organizations: CryptoPunks, TokenWorks. |
| 2026-08-10 | z0r0z (Update) | Added an Affiliation section recording that the zFi and Tacit work is published under SRC.CO (source.wei.is), a collective naming three members, which weakens the sole-authorship inference several analyses draw from a single deployer EOA. Also touched the zFi and Tacit overviews and the glossary. Gas: 15 tok. |
| 2026-08-09 | ZorgConviction Contract Analysis | An analysis of the ZorgConviction contract at 0x0000006d...32a9a8, which implements the bond-zOrgz-for-conviction mechanism the zFi interface describes and the TokenList registry does not contain. Seventh contract analysis under the zFi group. Gas: 385 tok. |
| 2026-08-09 | Glossary (Update) | Terminology for the ZorgConviction analysis. Governance: Conviction Voting, Conviction Half-Life, Vote Escrow, Ragequit. Notable Libraries & Organizations: Moloch. |
| 2026-08-08 | TokenList Contract Analysis | An analysis of the TokenList contract at 0x00000060...531524, an on-chain token registry in which each listing is a soulbound ERC-721 minted to the token contract it describes. Sixth contract analysis under the zFi group. Gas: 1.5 mtok. |
| 2026-08-08 | Glossary (Update) | Terminology for the TokenList analysis. Ethereum-Specific: Token List, Soulbound Token, ERC-5192, ERC-4906, ERC-7572, EIP-170, Minimal Proxy, ERC-1167, Data URI. Security Concepts: Provenance. Notable Libraries & Organizations: MetadataReaderLib. |
| 2026-07-15 | Bonzo Lend Oracle Exploit | A deep dive on the 2026-07-11 drain of ~$9.05M from Bonzo Lend, Hedera's largest lending protocol, where an all-zeros BLS signature passed Supra's pull-oracle verifier and inflated a collateral price by roughly twelve orders of magnitude. Gas: 120 tok. |
| 2026-07-15 | Glossary (Update) | Terminology for the Bonzo Lend analysis. Security Concepts: Pull Oracle. Cryptographic Privacy Primitives: BLS Signature, Bilinear Pairing, Subgroup Check. New Hedera-Specific section: Hedera Token Service (HTS), WHBAR. Notable Libraries & Organizations: Aave, Supra, Bonzo Finance. |
| 2026-07-04 | Zero-Knowledge Virtual Machines (zkVMs) | A low dive on zkVMs — proving correct execution of an ordinary program with a universal on-chain verifier and no per-application trusted setup. Uses Succinct's SP1 as the running example. Gas: 40 tok. |
| 2026-07-04 | Glossary (Update) | Terminology for the zkVM low dive. Cryptographic Privacy Primitives: RISC-V, Guest Program, STARK. |
| 2026-07-03 | ConfidentialPool Contract Analysis | An analysis of the ConfidentialPool contract at 0x00000000...1da8dB, the full Ethereum side of the Tacit meta-protocol — a multi-asset shielded pool carrying a confidential AMM, a cUSD CDP engine and a two-way ETH ⇄ Bitcoin bridge, all validated by SP1 zkVM proofs. Second contract analysis under the Tacit group. Gas: 165 tok. |
| 2026-07-03 | Glossary (Update) | Terminology for the ConfidentialPool analysis. Trading & Liquidity: CDP, Collateralized Debt Position. Cross-Chain & Bridges: Reflection. Cryptographic Privacy Primitives: zkVM, Confidential Pool, cBTC, cUSD. |
| 2026-06-02 | TacitBridgeMixer Contract Analysis | An analysis of the TacitBridgeMixer contract at 0x82eb1246...90cC37, the Ethereum side of a trustless ETH ↔ Tacit bridge that releases funds against a proven Bitcoin burn and adds Tornado-style mixer privacy. First contract analysis under the new Tacit group. Gas: 130 tok. |
| 2026-05-16 | Tacit Project | A project space for Tacit, z0r0z's confidential token meta-protocol on Bitcoin and DNZN's first Bitcoin-side subject. Split into six pages covering the protocol wire format, its cryptographic mechanisms, the mixer, the operation set and the risks. Gas: 195 tok. |
| 2026-05-16 | Glossary (Update) | Two new sections for the Tacit analysis. Bitcoin-Specific: Taproot, BIP-340, BIP-341, P2TR, Witness Data, Script-Path Spend, Key-Path Spend, Commit-Reveal Pattern, Meta-Protocol, Ordinals, Inscriptions, BRC-20, Runes. Cryptographic Privacy Primitives: Pedersen Commitment, Range Proof, Bulletproof, zk-SNARK, Groth16, Trusted Setup, Mixer, Unlinkability, Confidential Transactions, Poseidon Hash, ECDH. |
| 2026-05-16 | z0r0z | An entity profile of z0r0z (ross.wei), the developer behind the zFi stack and the Tacit meta-protocol on Bitcoin. Covers background, modus operandi, and a map of the on-chain footprint from his primary deployer EOA. Gas: 95 tok. |
| 2026-05-16 | Glossary (Update) | A new "Notable Libraries & Organizations" section for the z0r0z profile. Additions: Solady, Zolidity, LexDAO, KaliDAO, NaniDAO, z0r0z. |
| 2026-05-02 | SLOW Contract Analysis | An analysis of the SLOW contract at 0x00000000...feAaBC, a non-custodial timelock-and-co-sign wrapper for ETH and ERC-20 transfers. Senders deposit for a recipient with a chosen delay and receive an ERC-1155 wrapper encoding the token and that delay. Gas: 110 tok. |
| 2026-05-02 | Glossary (Update) | Foundational Ethereum terminology for the SLOW analysis. Additions: ERC1155, SSTORE2, EIP-7702. |
| 2026-04-13 | Lido Harvester Contract Analysis | An analysis of the LidoHarvester contract at 0x00000000...768E22, a ~100-line standalone yield harvester that converts Lido rebase yield to ETH through a permissionless harvest() and an owner-only withdraw(). Gas: 80 tok. |
| 2026-04-13 | Glossary (Update) | Liquid staking terminology for the Lido Harvester analysis. Additions: Liquid Staking, Lido, stETH, Rebasing Token, Basis Counter. |
| 2026-04-04 | CRDTs | A technical overview of Conflict-free Replicated Data Types — structures replicated across nodes, updated independently without coordination, and merged with a mathematical guarantee of convergence. Covers both CRDT families, common types, blockchain applications, and the trade-offs. Gas: 85 tok. |
| 2026-03-29 | XCL Reward Pool Contract Analysis | A bytecode analysis of the Xcellar RewardPoolRegistry at 0xD8706D2D...dC2C2c, a standalone ETH reward ledger with paid registration and off-chain reward crediting by a designated distributor. Gas: 65 tok. |
| 2026-03-29 | Sentinel Treasury Operations (Update) | An update covering Jan 23 – Mar 29, 2026. Treasury balance fell from 550.57 ETH to 225.58 ETH with no new inflows, and a third ETH→USDT cycle went downstream rather than being reversed. Gas: 15 tok. |
| 2026-03-29 | XCL Rewards Contract Analysis (Update) | Updated for the implementation upgrade to v1.0.0 on March 27, 2026, which added a priority snapshot fee mechanism whose fees flow to an EOA rather than to the reward pool. Gas: 85 tok. |
| 2026-03-29 | Sentinel Mites Contract Analysis | A bytecode analysis of the Sentinel Mites contract at 0x99c96efF...Ab2dCC, a custodial trading vault in which a designated keeper executes Uniswap V3 trades on depositors' behalf with no on-chain strategy or consent mechanism. Gas: 75 tok. |
| 2026-03-19 | Uniswap MerkleDistributor Contract Analysis | An analysis of the Uniswap MerkleDistributor at 0x090D4613...1D256e, the canonical airdrop contract that distributed UNI to roughly 250,000 historical users from September 16, 2020. Gas: 45 tok. |
| 2026-03-18 | Merkle Trees | A technical overview of Merkle trees and Merkle proofs, the hash structure underlying transaction verification, state management and gas-efficient token distribution. Covers construction, proof mechanics, SPV clients, Ethereum's Patricia trie, and known vulnerabilities. Gas: 75 tok. |
| 2026-03-18 | Anchoring | A technical overview of blockchain anchoring — committing hashes of off-chain data to a chain as timestamped proof of existence. Covers the mechanics across Bitcoin, Ethereum and Hedera, the major services, and the legal precedents. Gas: 80 tok. |
| 2026-02-28 | zQuoter Contract Analysis | An analysis of the zFi zQuoter contract at 0x658bF1A6...006A5F, a stateless read-only quoter that polls 14 AMM pools across five protocols in a single call and returns the best route plus ready-to-execute zRouter calldata. Gas: 65 tok. |
| 2026-02-28 | zRouter Contract Analysis | An analysis of the zFi zRouter contract at 0x00000000...F600e4, a fully on-chain DEX aggregator covering Uniswap V2/V3/V4, SushiSwap, Curve and zAMM in one standalone Solidity file with no off-chain dependencies. Gas: 95 tok. |
| 2026-02-28 | Contract Analysis Service | A services page describing contract analysis reports available by request — scope, the six standard documents, pricing tiers, and links to published examples. Gas: 5 tok. |
| 2026-02-13 | Doubler Contract Analysis | An analysis of the Doubler contract at 0xfD2487cc...988B4D, a queue-based Ponzi from March 2016 and one of the earliest deployed on Ethereum. Storage verification shows 203 participants permanently stuck with ~32.44 ETH locked. Gas: 75 tok. |
| 2026-02-04 | ZeroMoon zETH Token Contract Analysis | An analysis of the ZeroMoon (zETH) token at 0x41b242c3...FD6532, an ETH-backed ERC-20 with dividend distribution and a refund mechanism that sells tokens back to the contract at 99.9% of backing value. Ownership is renounced. Gas: 75 tok. |
| 2026-02-03 | Batch Sender & Sweeper Contract Analysis | A bytecode analysis of an unverified utility contract at 0x4320b7C7...F5C236 that batches ETH and ERC-20 distribution to many recipients and sweeps assets sent to it by mistake. Gas: 65 tok. |
| 2026-01-24 | SENT Day Percent Manager Contract Analysis | A bytecode analysis of the Sentinel Day Percent Manager at 0x1aa0c77d...14aeb3, an unverified configuration registry holding a 100-day schedule of percentages and amounts. It holds no tokens and serves as a read-only data source for other Sentinel contracts. Gas: 65 tok. |
| 2026-01-24 | Sentinel Treasury Operations | Repositioned the presale fund flow analysis as ongoing treasury operations research, with emphasis on continuous monitoring rather than a static snapshot. |
| 2026-01-24 | Sentinel Treasury Operations (Update) | An update finding that the previously reported 1.84M USDT position was converted back to ETH within hours, through two complete ETH→USDT→ETH cycles run by the beneficiary wallet. Gas: 15 tok. |
| 2026-01-23 | SENT Claim Rewards Contract Analysis | A bytecode analysis of the Sentinel Claim Rewards contract at 0x33184cD3...8A606D, an unverified system tracking reward claim eligibility without holding or moving tokens itself. Gas: 65 tok. |
| 2026-01-21 | Sentinel Project Space | Created the Sentinel project space with a high-level overview and research index. |
| 2026-01-15 | Eth Wallet Analyzer (Bug Fix) | Fixed error handling that failed analysis for addresses with no internal transactions. Etherscan's "No transactions found" response is now treated as an empty result set rather than a hard error. |
| 2026-01-13 | SENT Token Allocation Contract Analysis | A bytecode analysis of the Sentinel Token Allocation contract, an unverified centralized ledger of intended SENT distributions. It is pure accounting — recipient-amount mappings, no custody or transfer. Gas: 65 tok. |
| 2026-01-13 | SENT Hive Registry Contract Analysis | A bytecode analysis of the Sentinel Hive Registry, an unverified UUPS upgradeable membership tracker for SENT holders, reconstructing 33+ functions, the storage layout, and the upgrade mechanism. |
| 2026-01-11 | Eth Wallet Analyzer Tool | A client-side browser tool that reports ETH and ERC-20 inflows, outflows, top counterparties and recent activity for any Ethereum wallet. All processing happens in the browser against Etherscan data. |
| 2026-01-11 | Cross-Linking Across Documentation | Added cross-links throughout the documentation, connecting abstract concepts to real-world examples and technical mechanisms to case studies. |
| 2026-01-11 | BFT (Byzantine Fault Tolerance) | A low dive on Byzantine Fault Tolerance — reaching consensus when some nodes fail or act maliciously. Covers the Byzantine Generals Problem, the 3f+1 requirement, pBFT's three-phase protocol, and modern variants. |
| 2026-01-09 | Privacy Policy | A privacy policy page documenting Google Analytics usage: what anonymous data is collected, confirmation that no personal information is gathered, and options for readers who prefer to block tracking. |
| 2026-01-09 | Market Makers (Revised) | Revised from deep dive length to proper low dive format — roughly halved, redundant case study content removed, diagrams cut from nine to two, and detailed cases replaced with cross-references. |
| 2026-01-09 | Alameda/FTX Collapse | A deep dive on the November 2022 collapse of FTX and Alameda Research — what happens when a market maker operates with privileged exchange access, secret exemptions from risk controls, and other people's money. |
| 2026-01-09 | MOVE Token Scandal | A deep dive on the December 2024 MOVE listing, where Movement Labs executives and their market maker dumped $38M of tokens on retail against internal documents that laid out the plan explicitly. |
| 2026-01-09 | Mantra OM Collapse | A deep dive on the April 13, 2025 collapse of Mantra's OM token — 92% in hours, $5B+ in market cap — and the circular collateralization alleged to have propped up the price beforehand. |
| 2026-01-09 | Glossary (Update) | Market maker terminology for the new deep dives. Additions: Market Maker, Designated Market Maker, DMM. |
| 2026-01-08 | Beanstalk Governance Attack | A deep dive on the April 17, 2022 Beanstalk attack, where a $1B+ flash loan bought 79% voting power and drained $182M in a single transaction via same-block proposal execution. |
| 2026-01-08 | Flash Loans | A low dive on uncollateralized loans that must be repaid within one transaction or revert entirely. Covers mechanics, legitimate uses, providers and fees, the attack patterns they enable, and defences. |
| 2026-01-05 | Jared 2.0 MEV Bot Contract Analysis | A bytecode analysis of the Jared 2.0 MEV bot at 0x1f2f10d1...6df387, the second iteration of the jaredfromsubway.eth sandwich infrastructure — multi-DEX integration and a stateless architecture. |
| 2026-01-04 | jaredfromsubway.eth | An entity profile of one of Ethereum's most prolific MEV operators, who extracted an estimated $22M+ in revenue against $34M in gas during the 2023 memecoin frenzy. Covers attack mechanics, timeline, contracts, and defences available to traders. |
| 2026-01-04 | Proxy Contracts & Upgradeability | A low dive on how upgradeability separates storage from logic, and what that buys attackers. Covers delegatecall, the major proxy patterns, EIP-1967 storage slots, and the vulnerabilities that have cost protocols hundreds of millions. |
| 2026-01-04 | Bridges | A low dive on cross-chain bridges — the trust assumptions that make asset transfer between isolated chains possible, and the $2.8B+ those assumptions have cost since 2022. Covers the three mechanics, the trust spectrum, and a graveyard of exploits. |