Grace Tanaka
Smart contract auditor turned security journalist. Covers DeFi exploits, bridge hacks, and protocol vulnerabilities. Her post-mortems are the ones developers actually read.
Articles by Grace Tanaka
Vultisig's August Patch Fixed a Key Leak That Needed Only One Compromised Signer
A stop condition in Vultisig's ECDSA signing flow was being ignored, which meant one already-compromised signer could feed the wallet malicious messages until it leaked enough to recover a private key. The fix shipped in the August updates. The bug class is a bigger problem than the bug.
Circle's Gateway Adds cirBTC and EURC, But the 500ms Speed Claim Has an Asterisk
Circle expanded Gateway beyond USDC on October 23, adding its wrapped Bitcoin token and the euro stablecoin. The unified interface is real progress for treasury teams, but the route matrix is lopsided and the sub-500-millisecond pitch only starts counting after deposits finalize.










