Security engineer specializing in tokenization, RWAs, and smart contract development at @taurus_hq, CMTAT contributor (@cmta_ch)
Switzerland 🇨🇭
Joined June 2022
- Tweets1.1K
- Following4.5K
- Followers286
- Likes1.2K
Pinned Tweet
Excited and grateful for the opportunity to be at @EthCC to discuss CMTAT!
CMTAT is a tokenization standard developed by CMTA, widely adopted by companies such as Taurus, UBS, or Obligate.
Check out the CMTA implementation here: github.com/CMTA/CMTAT
CC @taurus_hq , @cmta_ch
Security token expert Ryan Sauge (@ADCDIII) breaks down "CMTAT: Engineering a Security Token on EVM, with a Path to Privacy" at the Built on Ethereum track.
This is exactly the kind of infrastructure work that will unlock compliant DeFi for institutional capital.
#Binance Hack: For scale: about $6.28B at theft-time prices (estimation), 4.2x Bybit ($1.5B, Feb 2025) and more than all hacks of 2025 combined ($2.67B, PeckShield). Of Binance's loss, $2.70B is frozen, mostly stablecoins. Bybit lost ETH: 5.3% recovered or frozen in 18 months.
ALT Horizontal bar chart of the largest crypto hacks. The Binance drain is 6.28 billion dollars, split into 2.70 billion frozen, 32 million rescued and 3.55 billion not frozen. Bybit follows at 1.5 billion, with 30.5 million frozen and 48.4 million recovered, then Ronin, Poly Network and smaller incidents below 0.7 billion. Dashed lines mark all hacks of January to September 2026 at 2.08 billion and of 2025 at 2.67 billion.
AccessDenied403 retweeted
i decompiled the contract that drained binance wallet 14
gist.wavey.info/Ta3FgAxastgj…
1/7 Binance hot-wallet drain, current timeline (UTC) based on the different source I found (x and onchain).
ALT Timeline from 20:00 to 00:30 UTC with one row per chain. Drains start on the XRP Ledger at 20:05, Solana at 20:10, Tron and Bitcoin at 20:20, Ethereum at 20:21, Arbitrum and Avalanche at about 20:30, and Polygon at 23:06. Freezes follow on Tron at 21:09 and 21:21, on Ethereum from 21:05, and on Polygon at 23:25. A deposit is swept from Binance 14 at 23:56, and the Arbitrum Security Council rescues funds at 00:18.
5/7 Bitcoin: 18,270.2 BTC left a hot wallet in 11 txs, all in block 973,732. Pre-signed child txs in the same block split them into 17 x 1,000 BTC plus two remainders.
None had moved at 00:00 UTC. Address flagged by @Rob1Ham; Binance lists it among its own wallets.
Interested in how Transformers, LLMs, and AI agents work? @Stanford has a 2026 course covering these topics:
cme295.stanford.edu/syllabus…
Great to see high-quality courses like this being made freely available to everyone.
Looking forward to participating in this BSA hackathon (EPFL/Lausanne/10-11 oct)! Always a great ambiance and experience🔥
If you are interested too, see below
🚨 THE HACKATHON IS COMING. 🚨
36 hours. One project. One mission: BUILD.
On October 10-11, the BC Building at EPFL 🇨🇭 turns into a playground for builders, hackers, designers, and anyone crazy enough to turn an idea into something real.
✈️ Travel grants for foreign students
🍕 Free food to keep you alive
👾 Build from scratch
Cash Prize + Sponsors TBA...
Are you in? 👀
luma.com/d5gqew38
Great panel on tokenized funds at @EBlockchainCon with the following topics: regulation (dora, mica), custody (third party, self custody,..), transfer agent, practical use case, risk model,...youtu.be/tiOAGVnyqhc?is=ZEM3…
AccessDenied403 retweeted
Why now? Smriti Verma (@OpenZeppelin) set out the institutional exposure problem and the tech landscape: FHE, ZK proofs and private state.
Ryan Sauge @ADCDIII (@taurus_hq ) presented CMTAT Confidential, an implementation of the CMTAT token standard for confidential securities, built on @zama.
Dominik Bepple (Seturion) showed confidential DvP in production: atomic settlement on public rails, with both the asset and cash legs encrypted in a single onchain transaction.
Jimmy Tahoulas (@Swissquote) looked at what a public ledger means for client privacy.
Pavel Jakovlev (@AMINABankGlobal) summed up what banks want: the regulator and counterparties see what they need, everyone else sees nothing.
Huge. OpenZeppelin libraries are used by the majority of deployed smart contracts. S&P Global generated $15B in revenue in 2025 (Wikipedia) and owns S&P Global Ratings, one of the three major global credit rating agencies.openzeppelin.com/news/spglob…
Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.
Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance. OpenZeppelin smart contracts facilitated over $37 trillion in value transferred, with the vast majority of the largest DeFi protocols, blockchain networks, stablecoins and tokenized funds relying on them.
With S&P Global, we expect to accelerate the impact of onchain finance, backed by more than a century of trust in global markets, benchmarks, and risk frameworks.
To our clients and to all the users of OpenZeppelin open source tools:
• OpenZeppelin Contracts and all our open source applications and tools remain open source, free, and publicly maintained on GitHub. Building open source standards stays a core priority.
• Audits, engineering work, and ecosystem programs continue with the same team, brand, quality, and customer experience, with what will be the added benefit of S&P Global's research capacity, market data, and institutional reach.
For the last decade, OpenZeppelin has set the security standard for onchain finance. Today begins a new chapter for that mission, together with one of the most trusted names in global markets.
Read the full announcement: openzeppelin.com/news/spglob…
How does the ERC-7984 OpenZeppelin Confidential Fungible Token implementation, built on #Zama’s FHEVM, work? Unlike ERC-20, where balances and transfer amounts are public state, ERC-7984 stores every balance and amount as an encrypted 64-bit integer. See rya-sge.github.io/access-den…
A euint64 value is not the ciphertext itself. It is a 32-byte pointer (a ciphertext handle) referencing an encrypted value managed off-chain by the Zama coprocessor network. Every arithmetic operation produces a new handle.
ERC-7984 is the confidential counterpart to ERC-20, designed for tokens where balances and transfer amounts should remain private. Instead of storing token amounts directly, ERC-7984 uses encrypted handles (pointers) to represent them. eips.ethereum.org/EIPS/eip-7…
Aztec (Noir) splits a contract into private functions, executed and proved on the sender’s device, and public functions, executed by the sequencer when the block is built.
How to read a public variable inside a private functions ?
rya-sge.github.io/access-den…
Lot of data breach recently linked to crypto wallets, be aware of phishing emails, never enter your seed phrase in a website. Seel also the post on Trezor website (August / Shipmonk) trezor.io/blog/news/recent-c…
AccessDenied403 retweeted
We are happy to officially welcome @Nethermind to the CMTA. Nethermind has already contributed to CMTA's work through the FIX-CMTAT connector and its pre-audit AuditAgent tool has been applied to CMTAT contracts.
Looking forward to advancing standards for tokenized capital markets together.
Next Glamsterdam upgrade will incdude gas repricing. To check if you use Solidity's transfer/send 2,300 gas), hardcoded gas values in calls, logic that branches on gasleft(),... blog.ethereum.org/2026/08/24…
Heads-up for anyone maintaining L1 contracts:
→ The Glamsterdam upgrade will include gas repricings (EIP-8037, EIP-8038) that shift state creation and access costs.
→ Most contracts are unaffected, but a small set may break or degrade without updates. Affected contracts rely on assumptions the new schedule changes, such as hardcoded gas values.
Full context in the overview: blog.ethereum.org/2026/08/24…
