RiB Newsletter #31
Welcome to the #31 edition of Rust in Blockchain, the monthly newsletter about Rust, distributed systems, cryptography, and other industry topics. Previous: #30.
Thanks
Thanks to contributors: Dan Shields, Harlan T Wood, John Adler, Marcin, Max Wegman, Samuel Dare, Squirrel. Thank you for your help!
RiB needs help to keep up with Rust blockchain projects. If you follow a particular project, or otherwise find information that is beneficial to the Rust & blockchain community, please contribute to the next issue by submitting a PR to the next draft.
Project Spotlight
Each month we like to shine a light on a notable Rust blockchain project. This month that project is…
Arloader is a command line client for uploading files to Arweave. Files published to Arweave are stored forever. The platform is commonly used for storing NFT information. Fees can be paid in either the Arweave native token or SOL.
Interesting Things
Blog Posts
- A breakdown of different Bitcoin output types and their address formats
- Disclosing Shamir’s Secret Sharing vulnerabilities and announcing ZKDocs
- SlowMist: Our review of the blockchain security industry in 2021
Papers
- Alpha-Rays: Key Extraction Attacks on Threshold ECDSA Implementations
- A zk-evm specification
- Efficient and Post-Quantum Zero-Knowledge Proofs for Blockchain Confidential Transaction Protocols
- SoK: Blockchain Light Clients
- SoK: Mitigation of Front-running in Decentralized Finance
- Universal Atomic Swaps: Secure Exchange of Coins Across All Blockchains
- Verifiable Encryption from MPC-in-the-Head
- Zero-Knowledge for Homomorphic Key-Value Commitments with Applications to Privacy-Preserving Ledgers
Projects
- Akula. Ethereum client written in Rust, based on Erigon client architecture.
- Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
- Gear is a Substrate-based smart-contract platform allowing anyone to run dApp in a few minutes.
- gp-v2-services. Off-chain services for Gnosis Protocol v2
- interBTC. A trust-minimized bridge from Bitcoin to Polkadot.
- orion. Usable, easy and safe pure-Rust crypto.
- Pathfinder. A StarkNet full node written in Rust.
- RealTPS measures the current number of transactions per second committed by various blockchains.
- Shade Protocol is an array of connected privacy-preserving dApps built on Secret Network.
- Sway is a language developed for the Fuel blockchain. doc: The Sway Programming Language.
Security Advisories
Monthly security advisories, from RustSec, and GitHub Advisories. Bold entries here are especially relevant to blockchain projects.
- RUSTSEC-2021-0130: Use after free in
lru. - RUSTSEC-2021-0131: Integer overflow in
brotli-sys. - RUSTSEC-2021-0132: Integer overflow in
compu-brotli-sys. - RUSTSEC-2021-0129: Invalid handling of
x509_verify_certinopenssl-src. - RUSTSEC-2021-0128: Incorrect lifetime bounds on closures in
rusqlite. - GHSA-gjrj-9rj4-pgwx: https://github.com/advisories/GHSA-gjrj-9rj4-pgwx.
Most Active in December
Parity: 336 merged PRs (1, 2, 3, 4, 5, 6, 7), 115 closed issues (1, 2, 3, 4, 5), 75 open issues (1, 2, 3, 4)
Solana: 265 merged PRs (1, 2), 46 closed issues (1, 2), 46 open issues (1, 2)
NEAR: 251 merged PRs (1, 2, 3), 51 closed issues (1, 2, 3), 62 open issues (1, 2, 3)
Project Updates
Aleo
110 merged PRs (1, 2, 3), 52 closed issues (1, 2, 3), 30 open issues (1, 2, 3, 4)
Anoma
26 merged PRs (1, 2), 22 closed issues (1), 20 open issues (1)
ChainSafe
36 merged PRs (1, 2), 35 closed issues (1, 2), 17 open issues (1, 2)
COMIT
27 merged PRs (1), 5 closed issues (1), 7 open issues (1)
Concordium
17 merged PRs (1, 2, 3, 4), 4 closed issues (1, 2), 4 open issues (1)
Conflux
21 merged PRs (1), 1 closed issues (1), 1 open issues (1)
DarkFi
2 merged PRs (1), 5 closed issues (1), 12 open issues (1)
Dfinity
18 merged PRs (1, 2, 3, 4), 2 closed issues (1, 2), 8 open issues (1, 2, 3, 4)
Diem
143 merged PRs (1), 20 closed issues (1), 16 open issues (1)
Elrond
41 merged PRs (1), 2 closed issues (1), 3 open issues (1)
Findora
19 merged PRs (1, 2), 9 closed issues (1), 5 open issues (1)
Fluence
24 merged PRs (1, 2, 3), 10 closed issues (1), 3 open issues (1)
Golem
17 merged PRs (1), 7 closed issues (1), 21 open issues (1)
Grin
6 merged PRs (1), 4 closed issues (1), 3 open issues (1)
Holochain
26 merged PRs (1, 2), 5 closed issues (1, 2), 2 open issues (1)
Interledger
1 merged PRs (1), 0 closed issues, 1 open issues (1)
IOTA
10 merged PRs (1), 5 closed issues (1), 2 open issues (1)
Lighthouse
7 merged PRs (1, 2), 5 closed issues (1), 11 open issues (1, 2)
MobileCoin
19 merged PRs (1, 2), 1 closed issues (1), 2 open issues (1)
NEAR
251 merged PRs (1, 2, 3), 51 closed issues (1, 2, 3), 62 open issues (1, 2, 3)
- NEAR 2021: A Year in Review
- NEAR MetaBUILD 2: Join the Hackathon and Build an App
- NEAR Q4: Hackathons, Upgrades and Integrations
Nervos
82 merged PRs (1, 2, 3, 4), 6 closed issues (1, 2), 4 open issues (1, 2, 3, 4)
Parity
336 merged PRs (1, 2, 3, 4, 5, 6, 7), 115 closed issues (1, 2, 3, 4, 5), 75 open issues (1, 2, 3, 4)
Rust Bitcoin
49 merged PRs (1, 2, 3, 4, 5), 24 closed issues (1, 2, 3, 4), 13 open issues (1, 2, 3, 4)
Rust Ethereum
3 merged PRs (1), 2 closed issues (1), 0 open issues
Secret Network
2 merged PRs (1), 19 closed issues (1), 3 open issues (1)
Solana
265 merged PRs (1, 2), 46 closed issues (1, 2), 46 open issues (1, 2)
- Solana internals Part 1: what are the native on-chain programs and why do they matter?
- How to audit Solana smart contracts Part 4: the Anchor framework
- How to audit Solana smart contracts Part 3: penetration testing
- Solana stake pool: a semantic inconsistency vulnerability discovered by Soteria
Spacemesh
6 merged PRs (1), 50 closed issues (1, 2), 64 open issues (1, 2)
Subspace Labs
43 merged PRs (1), 14 closed issues (1), 2 open issues (1)
TezEdge
35 merged PRs (1), 1 closed issues (1), 4 open issues (1)
Zcash
87 merged PRs (1, 2, 3), 58 closed issues (1, 2, 3), 103 open issues (1, 2, 3)
zkSync
0 merged PRs, 1 closed issues (1), 6 open issues (1)
Events
Dec 22, 2021 - Feb 10, 2022 | Online
Feb 5-6, 2022 | Online
Feb 14-18, 2022 | Canada
Financial Cryptography and Data Security 2022
Apr 2022 | Amsterdam
Apr 16 - May 13th, 2022 | Online
Aug 29 - Sep 2, 2022 | Arrillaga Alumni Center, Stanford University
SBC'22: The Science of Blockchain Conference 2022
Careers
DEX Labs | Remote
Parity Technologies | Berlin, Lisbon, or Remote
- Rust Core Engineer - Solidity Compiler (Solang)
- Rust Core Engineer - Smart Contract Platform
- Multiple other Rust / Blockchain Engineering positions
Web3 Foundation | Zug or Remote
More jobs can be found at Job Board.
Want to be included in the next issue? Feel free to submit a PR to the next draft.
Join the discussion on RiB telegram group ❤️