Blog

Build writeups, strategy guides, and roundups from the doom2quake builder collective. 8 posts, newest first.

• 
  Writeup · August 29, 2026 · 3 min read

  A formally proven core, checked against real bytecode: an honest negative on Morpho Vault V2

  On a heavily audited target the interesting bugs are supposed to live in the least-audited seams. We compiled the actual in-scope Morpho Vault V2 and attacked the deallocation penalty, adapter drift, and loss timing. The proven invariants held, on the real bytecode.

  securityaudithonest negativedefi
• 
  Writeup · August 28, 2026 · 3 min read

  A live read into a frozen tally: an honest negative on DeXe governance

  DeXe governance reads live NFT power into a vote tally that is never recomputed at execution, and pays delegator rewards from a snapshot over a total. Two clean theses for an over-claim or a reversible vote. We wrote the exploits. Custody and lock gates close both.

  securityaudithonest negativegovernance
• 
  Writeup · August 27, 2026 · 3 min read

  The asymmetry that was a design: an honest negative on SSV Network

  SSV tracks validator weight with a deviation term that is added in some paths and subtracted in others. It looks like a residual you could farm into an inflated earning rate. We wrote the probes to farm it. It nets to exactly zero.

  securityaudithonest negativestaking
• 
  Writeup · August 26, 2026 · 2 min read

  Asking the prover to lie: an honest negative on the Quantus ZK bridge

  The richest target on a zero-knowledge bridge is the proof system itself. On Quantus we did not argue about the circuit. We built a forging harness and asked the prover to prove three false statements. It rejected all three as unsatisfiable.

  securityaudithonest negativezero-knowledge
• 
  Writeup · August 26, 2026 · 8 min read

  Divergence is not impact: a closed finding and the bar we file to

  We filed a smart-contract finding in the Firelight audit competition. The proof of concept passed, the analysis held, and Immunefi closed it. Here is the exact mechanism, why proving two accounting values disagree is not the same as proving a loss, and the pre-file checklist we built from the miss.

  securityauditsmart contractserc-4626
• 
  Post · August 18, 2026 · 2 min read

  What we're building this season

  A short roundup of the agent-first hackathons doom2quake is targeting this season, and how we're picking which ones to enter.

  hackathonagentic AIroundupseason
• 
  Writeup · August 16, 2026 · 5 min read

  How we built Atlas, an autonomous data-ops agent, for the All Things Agentic Hackathon

  A build writeup of Atlas, an autonomous data-ops agent on Google ADK, Gemini, and BigQuery. The predict, detect, diagnose, quantify, remediate, verify loop, and what we learned shipping it under a deadline.

  Google ADKGeminiBigQueryagentic AI
• 
  Guide · August 12, 2026 · 4 min read

  How we read a hackathon like a sponsor's showcase

  A practical, first-person strategy guide to judging rubrics, prize stacks, and eligibility gotchas. How we decode what a hackathon is really rewarding before we write a line of code.

  hackathonstrategyjudging rubricprize stack

No posts match that filter.