Blockchain Infrastructure7 min read
Primer
Your RPC endpoint is part of your attack surface
Frontends and backends trust the node they query. A review of what an untrusted or misconfigured RPC layer can do to an otherwise sound application.
Blockchain infrastructure security
Contracts are only part of a decentralised application. Front-ends and back-ends read the chain through RPC nodes, and transactions reach blocks through a building pipeline. Both layers can change what a user sees or what a transaction does without touching a line of contract code.
In this area
- Publications
- 2
- Reading time
- 13 min
Primers explain a known class of issue with illustrative code. Analyses synthesise public incidents, standards and papers, each cited.
Publications
2 publications on blockchain infrastructure security
These publications cover the infrastructure around on-chain code: what an untrusted or misconfigured RPC endpoint can do to an otherwise sound application, and how transaction ordering becomes protocol risk.
Blockchain Infrastructure6 min read
Technical analysisMEV and protocol risk
Transaction ordering is a resource that someone will sell. How maximal extractable value reaches users through the block-building pipeline, and which protocol designs reduce what can be extracted.
Case studies and research assessments
- Larkspur Wallet SDK research assessment
Research assessment
Apply it
Services and tools that use this research
Want this reasoning applied to your code?
Share the repository, the commit you plan to deploy and your timeline. The first output of any engagement is a written scope.