RiB Newsletter #43

Welcome to the #43 edition of Rust in Blockchain, the monthly newsletter about Rust, distributed systems, cryptography, and other industry topics. Previous: #42.

 

Thanks

Thanks to contributors: Erwan, Hunter Beast, Brian Anderson, and Aimee Zhu. Thank you for your help!

RiB needs help to keep up with Rust blockchain projects. If you follow a particular project, or otherwise find information that is beneficial to the Rust & blockchain community, please contribute to the next issue by submitting a PR to the next draft.

 

Project Spotlight

Each month we like to shine a light on a notable Rust blockchain project. This month that project is…

anemo.

This is the p2p networking library used by Sui, running over QUIC. It looks to be much simpler than rust-libp2p, though presumably less powerful.

 

Interesting Things

Blog Posts

• Accelerating zk-SNARKs - MSM and NTT algorithms on FPGAs with Hardcaml
• Solutions to Delay Attacks on Rollups
• ZK Email
• What are zk-SNARKs?
• An audited implementation of Poseidon377, a SNARK-friendly hash function used in Penumbra (private DEX)
• Accelerating Penumbra’s Merkle Tree by up to 4,000,000x

Papers

• SuperNova: Proving universal machine executions without universal circuits
• SoK: Decentralized Finance (DeFi) Attacks
• Glimpse: On-Demand, Cross-Chain Communication for Efficient DeFi Applications on Bitcoin-based Blockchains
• Dory: Asynchronous BFT with Reduced Communication and Improved Efficiency
• Asymptotically Optimal Message Dissemination with Applications to Blockchains

Projects

• zkOS. A new cross-proof-system execution layer.

 

Security Advisories

Monthly security advisories, from RustSec, and GitHub Advisories. Bold entries here are especially relevant to blockchain projects.

• RUSTSEC-2022-0071: rusoto_credential is unmaintained.
• RUSTSEC-2022-0072: Vulnerability in hyper-staticfile.
• RUSTSEC-2022-0073: alloc-cortex-m is unmaintained.
• RUSTSEC-2022-0074: Unsoundness in prettytable-rs.
• GHSA-8r76-fr72-j32w: Creator Verification Error when Bubblegum Activate.
• GHSA-9v25-r5q2-2p6w: Candy Machine Set Collection During Mint Missing Check.
• CVE-2022-23523: linux-loader reading beyond EOF could lead to infinite loop.
• CVE-2022-23507: Tendermint light client verification not taking into account chain ID.
• CVE-2022-46171: Tauri Filesystem Scope Glob Pattern is too Permissive.

 

Most Active in December

Parity: 363 merged PRs, 146 closed issues, 124 open issues

Sui: 359 merged PRs, 63 closed issues, 62 open issues

Solana: 325 merged PRs, 127 closed issues, 36 open issues

Fuel: 226 merged PRs, 147 closed issues, 122 open issues

Filecoin: 193 merged PRs, 134 closed issues, 114 open issues

 

Project Updates

Aleo

33 merged PRs (1, 2, 3, 4), 44 closed issues (1, 2, 3, 4), 24 open issues (1, 2, 3, 4)

Anoma

74 merged PRs (1, 2, 3), 12 closed issues (1, 2), 15 open issues (1)

Aptos

181 merged PRs (1), 114 closed issues (1), 39 open issues (1)

• Securing Move
• The Path to 10x Lower Gas Fees on Aptos with Community-Driven Feedback

Casper

78 merged PRs (1, 2), 56 closed issues (1, 2), 29 open issues (1, 2)

COMIT

6 merged PRs (1), 1 closed issues (1), 0 open issues

Concordium

29 merged PRs (1, 2, 3, 4, 5), 22 closed issues (1, 2, 3), 10 open issues (1, 2, 3)

Conflux

15 merged PRs (1), 2 closed issues (1), 0 open issues

DarkFi

1 merged PRs (1), 5 closed issues (1), 0 open issues

Dfinity

55 merged PRs (1, 2, 3, 4, 5), 6 closed issues (1, 2, 3, 4, 5), 6 open issues (1, 2, 3)

Dusk Network

6 merged PRs (1), 19 closed issues (1, 2), 8 open issues (1, 2, 3, 4)

Elrond

113 merged PRs (1, 2, 3), 3 closed issues (1), 1 open issues (1)

Espresso Systems

42 merged PRs (1, 2, 3, 4, 5, 6, 7), 36 closed issues (1, 2, 3, 4), 11 open issues (1, 2, 3, 4)

Filecoin

193 merged PRs (1, 2, 3, 4, 5, 6, 7), 134 closed issues (1, 2, 3, 4, 5, 6), 114 open issues (1, 2, 3, 4, 5, 6, 7)

• Hacking the Filecoin Ethereum Virtual Machine (FEVM)
• Business Models on the FVM

Findora

34 merged PRs (1, 2, 3, 4, 5), 0 closed issues, 1 open issues (1)

Fluence

62 merged PRs (1, 2, 3, 4, 5), 3 closed issues (1, 2), 1 open issues (1)

Fuel

226 merged PRs (1, 2, 3, 4, 5, 6, 7, 8, 9), 147 closed issues (1, 2, 3, 4, 5, 6, 7, 8), 122 open issues (1, 2, 3, 4, 5, 6, 7, 8, 9)

Golem

15 merged PRs (1, 2, 3), 19 closed issues (1, 2, 3, 4), 26 open issues (1, 2, 3)

Grin

1 merged PRs (1), 1 closed issues (1), 0 open issues

Helium

13 merged PRs (1, 2, 3, 4), 4 closed issues (1, 2, 3), 0 open issues

Holochain

38 merged PRs (1, 2), 6 closed issues (1, 2), 4 open issues (1, 2)

• Dependencies In Progress For Beta-RC

IOTA

68 merged PRs (1, 2, 3), 35 closed issues (1, 2, 3), 25 open issues (1, 2, 3)

Maidsafe

124 merged PRs (1, 2, 3, 4), 6 closed issues (1), 7 open issues (1)

Mina

0 merged PRs, 0 closed issues, 0 open issues

• Solving for Blockchain’s Critical Security Flaw
• How to Design a Compliant, Privacy-Preserving Fiat Stablecoin via Zero-Knowledge Proofs

MobileCoin

24 merged PRs (1), 14 closed issues (1), 16 open issues (1)

NEAR

102 merged PRs (1, 2, 3, 4, 5, 6, 7, 8, 9), 29 closed issues (1, 2, 3, 4, 5, 6), 58 open issues (1, 2, 3, 4, 5, 6)

• NEAR 2022: A Year in Review

Nervos

63 merged PRs (1, 2, 3, 4), 3 closed issues (1, 2), 6 open issues (1, 2, 3)

• Nervos, Beyond Account Abstraction

Oasis

11 merged PRs (1, 2), 0 closed issues, 0 open issues

Parity

363 merged PRs (1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12), 146 closed issues (1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11), 124 open issues (1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)

• Polkadot 2022 Roundup

Radix

65 merged PRs (1, 2), 4 closed issues (1), 1 open issues (1)

Secret Network

15 merged PRs (1, 2, 3), 1 closed issues (1), 1 open issues (1)

Solana

325 merged PRs (1, 2), 127 closed issues (1, 2), 36 open issues (1, 2)

• Looking forward: What the Solana community will tackle in 2023 and beyond
• Solana Network Upgrades
• Neon EVM’s Mainnet Launch: Community Update
• Detailed Post-Mortem and Next Steps
• Solana rBPF Vulnerability Case Study

Subspace Labs

52 merged PRs (1), 14 closed issues (1), 13 open issues (1)

Sui

359 merged PRs (1), 63 closed issues (1), 62 open issues (1)

• Cryptography in Sui: Cross-chain Signature Verification

Zcash

55 merged PRs (1, 2, 3, 4, 5, 6), 36 closed issues (1, 2, 3), 39 open issues (1, 2, 3, 4)

• ZecSec: Security Audit Process

 

Rust in Bitcoin

Happy New Year! Last month, the RGB team released version 0.9 of all their core crates. In 0.10, there are some consensus-breaking changes planned for RGB contracts, and in 0.11, WASM support is planned. RGB also has a new info site, in addition to developer documentation. The RGB project is also busy rewriting their specs in Contractum, and RGB nodes will soon have the ability to run generalized contract interfaces. Nostr has started making a really big showing as the social layer for Bitcoin, much like Lightning is Bitcoin’s payments layer, and it has an excellent relay implementation in Rust. There’s a new Lightning node that can run within a mobile browser: mutiny-web.

Rust Bitcoin has better methods for calculating tx input and output weight unit calculation, see this PR. It also added the Kani verifier to prove certain math ops are safe with this PR.

LDK released version 0.113, and they’re hard at work towards getting support for BOLT-12 Offers (“invoice requests”) implemented.

For discussion join the Rust in Bitcoin Telegram group. We’ve gotten a lot of newcomers lately! Definitely feel free to introduce yourself and ask questions.

BDK

28 merged PRs (1, 2, 3), 17 closed issues (1, 2, 3), 10 open issues (1, 2, 3, 4, 5)

BitMask

9 merged PRs (1), 1 closed issues (1), 0 open issues

Electrs

5 merged PRs (1), 2 closed issues (1), 2 open issues (1)

Fedimint

90 merged PRs (1), 20 closed issues (1), 29 open issues (1)

LDK

32 merged PRs (1), 9 closed issues (1), 7 open issues (1)

LNP/BP

6 merged PRs (1, 2, 3), 10 closed issues (1, 2, 3, 4), 11 open issues (1, 2)

Nomic

1 merged PRs (1), 0 closed issues (), 0 open issues ()

RGB

8 merged PRs (1, 2, 3), 0 closed issues, 3 open issues (1, 2)

Rust Bitcoin

75 merged PRs (1, 2, 3, 4, 5), 44 closed issues (1, 2, 3, 4, 5), 38 open issues (1, 2, 3, 4, 5)

Rust Simplicity

2 merged PRs (1), 0 closed issues, 0 open issues

Talaia

8 merged PRs (1), 7 closed issues (1), 1 open issues (1)

If we’ve missed any other notable Rust Bitcoin projects or ecosystems, feel free to contribute!

 

Rust in Ethereum

Ethers-rs

49 merged PRs (1), 6 closed issues (1), 9 open issues (1)

Foundry

76 merged PRs (1), 50 closed issues (1), 65 open issues (1)

Lighthouse

37 merged PRs (1, 2), 13 closed issues (1), 17 open issues (1, 2)

Rust Ethereum

1 merged PRs (1), 0 closed issues, 1 open issues (1)

zkSync

0 merged PRs, 0 closed issues, 0 open issues

• A Year of Growth for zkSync

If we’ve missed any other notable Rust Ethereum projects or ecosystems, feel free to contribute!

 

Events

Feb 24 — Mar 5 | Denver, USA

ETHDenver 2023

Mar 20-24 | Paris, France

Paris Blockchain Week

Mar 26 | Tokyo, Japan

FHE.org conference 2023

Mar 27-29 | Tokyo, Japan

RWC 2023

 

Careers

More jobs can be found at Job Board.

 

Want to be included in the next issue? Feel free to submit a PR to the next draft.

Join the discussion on RiB telegram group ❤️