Posts from 2026
427 transfers, one destination: what a Taiwanese bank's "program error" leaves unexplained
Bank SinoPac reported abnormal transfers affecting 419 customers in Taiwan. What the reported 427 transfers should leave on record, and what remains unknown.
Why multisig can still fail at one point: how Ronin's 5 of 9 came together
A threshold should count independent controllers. How Ronin's 5 of 9 was assembled through one company, with acceptance checks for multisig designs.
Last year Chunghwa Telecom, this year TWCA: what to check before the 6 November deadline
TWCA's old intermediate CA must be revoked by 6 November 2026. What ops teams should replace, how to check the served chain, and what remains unknown.
Secret store and database write ordering: what a failure leaves behind, and how a retry resumes
Without a shared transaction, write order affects the state left after failure. SQLite examples cover secret overwrites, pending rows and retries.
Who can press the stop button? Freezes, chain halts and hard forks act at different layers
Binance's 2026 freezes came from several parties at different layers. This post separates exchange pauses, issuer blacklists, validator halts and hard forks.
Exchanges say the assets are back. What can users actually verify?
Binance's recovery updates show what Proof of Reserves can verify, and why account inclusion alone cannot establish complete liabilities or withdrawal access.
Setting tolerances for Monte Carlo tests: standard error, false rejections and bit-exact replay
Monte Carlo tolerances can use z times the standard error plus an approximation allowance. Fixed limits may reject valid results or miss bias as N changes.