Sign in

Least Authority

@leastauthority.bsky.social
75 followers 19 following 128 posts

We're committed to building & supporting the development of technology solutions that advance digital security and preserve privacy as a human right.

PostsRepliesMedia
Least Authority @leastauthority.bsky.social · 22/09/2026
The report from our security audit of PropAMMRouter for LambdaClass is now public. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
LambdaClass - PropAMMRouter - Least Authority
Security audit report by Least Authority of PropAMMRouter for LambdaClass.
000
Least Authority @leastauthority.bsky.social · 17/09/2026
The report from our security audit of P-DART for Polymesh is now public. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Polymesh - P-DART - Least Authority
A security audit report of P-DART, a Rust-based confidential assets protocol built for the Polymesh ecosystem.
010
Least Authority @leastauthority.bsky.social · 11/09/2026
Moving quickly and maintaining strong security practices are often treated as competing goals. For an evolving ecosystem like @z.cash the challenge can be finding ways to accelerate development while maintaining the high security standards users expect.
110
Least Authority @leastauthority.bsky.social · 09/09/2026
Privacy laws create rights and obligations. Encryption makes guarantees. A June 2026 U.S. Supreme Court ruling unsettled one pillar of the EU–U.S. Data Privacy Framework's adequacy decision, illustrating why that distinction is not merely doctrinal. leastauthority.com/blog/what-tr...
leastauthority.com
What Trump v. Slaughter Reveals About the Limits of Legal Privacy Protections - Least Authority
As of June 2026, the U.S. Supreme Court cast doubt on one of the pillars holding up the EU–U.S. Data Privacy Framework.
000
Least Authority @leastauthority.bsky.social · 21/08/2026
The report from our security audit for Espresso Systems of its batch authenticator contract is now public. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Espresso - Batch Authenticator Contract - Least Authority
Our team performed a review of the Batch Authenticator Contract for Espresso Systems.
010
Least Authority @leastauthority.bsky.social · 21/08/2026
The report from our security audit for Espresso Systems, covering derivation pipeline changes for the OP Stack, is now public. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Espresso - Derivation Pipeline Changes - Least Authority
Least Authority performed a review of the integration of Espresso's confirmation layer with Celo, an OP Stackrollup.
010
Reposted by Least Authority
zooko2.bsky.social @zooko2.bsky.social · 19/08/2026
The next Zcash Crosslink workshop! Come one, come all! :-) ❤ forum.zcashcommunity.com/t/crosslink-...
022
Least Authority @leastauthority.bsky.social · 19/08/2026
Our team recently completed a security audit of Serai distributed key generation (DKG) for MAGIC Grants. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Serai - Distributed Key Generation - Least Authority
A security audit of the implementation of Serai’s Distributed Key Generation (DKG), which is premised on Publicly Verifiable Secret Sharing.
101
Least Authority @leastauthority.bsky.social · 19/08/2026
The report from our security audit of ZK Prover for Tools for Humanity is now public. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Tools for Humanity - ZK Prover - Least Authority
Least Authority was requested by Tools for Humanity to perform a security audit of its ZK Prover.
010
Least Authority @leastauthority.bsky.social · 14/08/2026
Preparing for a security audit? Our process is collaborative from the start. We work with your team to define scope, review your system, document findings, support remediation, and verify fixes. Our process is outlined here: leastauthority.com/blog/navigat...
leastauthority.com
Navigating the Audit Process: Client Engagement and Technical Methodology - Least Authority
In today's rapidly evolving tech landscape, ensuring robust security is more than a checklist — it's a collaborative journey.
010
Least Authority @leastauthority.bsky.social · 09/07/2026
The MiCA transition period has ended. For crypto-asset service providers, compliance is no longer about preparing for regulation. It's about operating within it by maintaining effective security controls, managing risk, and adapting as systems evolve. leastauthority.com/blog/strengt...
leastauthority.com
Strengthening Crypto Security via MiCA Compliance
We can help Crypto-Assets Service Providers safely navigate the new MiCA regulation compliance environment and improve security.
001
Least Authority @leastauthority.bsky.social · 07/07/2026
The Least Authority team has presented at conferences and community events around the world, sharing insights on security auditing, advanced cryptography, privacy engineering, zero-knowledge systems, and more. Browse our talks and presentations on YouTube: youtube.com/@leastauthor...
youtube.com
Least Authority
000
Least Authority @leastauthority.bsky.social · 06/07/2026
Our team recently completed a security audit of Argos for Sovright. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Sovright - Argos - Least Authority
A security audit of Argos for Sovright, a recovery workspace for legacy ZecWallet Lite seeds.
000
Least Authority @leastauthority.bsky.social · 03/07/2026
We're pleased to share that Least Authority CEO & Managing Director Liz Steininger has joined the Global Fintech Institute Digital Assets Security and Compliance Subcommittee. globalfintechinstitute.org/publications...
globalfintechinstitute.org
Introducing the Digital Assets Security and Compliance Subcommitteeundefined
The Global Fintech Institute is convening the Digital Assets Security and Compliance Subcommittee to advance institutional thinking on cybersecurity, compliance, and operational resilience within digi...
010
Least Authority @leastauthority.bsky.social · 01/07/2026
Tailored security support. From comprehensive audits to timeboxed consultations, we adapt to each project’s needs and help strengthen systems against unauthorized access and manipulation. leastauthority.com/security-con...
leastauthority.com
Security Consulting - Least Authority
Our expert team delivers comprehensive security consulting services. We conduct audits and reviews of cryptographic protocols and distributed system architectures to ensure robust and reliable impleme...
000
Least Authority @leastauthority.bsky.social · 24/06/2026
Not all security testing approaches answer the same questions. Security audits, managed crowdsourced testing, and bug bounty programs each play a valuable role, but they are not interchangeable. Our recent blog examines where each is most effective. leastauthority.com/blog/securit...
leastauthority.com
Security Audits, Managed Crowdsourced Security, and Bug Bounty Programs: Complementary, Not Interchangeable
A well-planned security strategy requires understanding how audit approaches differ and where each is most effective.
000
Least Authority @leastauthority.bsky.social · 19/06/2026
Balancing accountability with privacy is a challenging problem in system design. @Phreeli's whitepaper explores an architecture intended to support continuity and accountability without creating identifiers that can be used to track people across interactions. www.phreeli.com/files/Phreel...
phreeli.com
131
Least Authority @leastauthority.bsky.social · 16/06/2026
This engagement explored how AI-assisted workflows can help scale security reviews while maintaining the rigorous human analysis and verification required for high-confidence findings. leastauthority.com/blog/ai-assi...
leastauthority.com
AI-Assisted Security Auditing in the Zcash Ecosystem - Least Authority
Explore Least Authority's AI-assisted security audit of the Zcash ecosystem, including methodology, tooling, findings, and human-led verification.
000
Least Authority @leastauthority.bsky.social · 12/06/2026
How do we build infrastructure that is open, resilient, and privacy-preserving? Join Least Authority CEO Liz Steininger and fellow panelists at the Neo-cypherpunk Summit (June 14) as they explore self-hosted, peer-to-peer, and decentralized technologies across the stack. talx.dod.ngo/neocypherpun...
talx.dod.ngo
Building the Stack: Self-Hosted, Mesh and Decentralized Infrastructure in Practice Neocypherpunk Summit
Uniting technical and cultural perspectives on stewarding p2p, self-hosted, and decentralized technologies, from a diverse panel of builders with expertise spanning "the stack". From the networked l...
020
Reposted by Least Authority
web3privacy.info @web3privacy.info · 12/06/2026
So happy to see how many people want to celebrate freedom in Berlin. Neo-Cypherpunk Summit will be host thousand of people, 80 speakers, communal partners, anti-surveillance merch, pro-privacy board game, books, music & so much more. s26ber.web3privacy.info
032
Least Authority @leastauthority.bsky.social · 02/06/2026
"Without privacy there is no democracy." We're looking forward to the Neo-cypherpunk Summit in Berlin on June 14, where researchers, builders, and advocates will gather to discuss the future of privacy and digital rights. More on our talk soon: s26ber.web3privacy.info
s26ber.web3privacy.info
Neocypherpunk Summit #1
14 Jun 2026 - 2025 was an exceptional year: 10000 people, 130 speakers from Eva Galperin (EFF) to Roger Dingledine (Tor) speaking. We decided to make a sequel and strengthen Cypherpunk activism, cultu...
000
Least Authority @leastauthority.bsky.social · 08/05/2026
Our team recently completed a security audit of Ethrex for LambdaClass. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
LambdaClass - Ethrex - Least Authority
A security audit of Ethrex for LambdaClass. Ethrex is a Rust implementation of the Ethereum protocol, designed to support ZK proofs and L2 execution.
000
Least Authority @leastauthority.bsky.social · 05/05/2026
Consent must be freely given, informed, and unambiguous under GDPR. But when systems are designed without real choice, consent becomes a patch for a deeper problem. We should be building systems that deserve consent. leastauthority.com/blog/buildin...
leastauthority.com
Building Systems That Deserve Consent - Least Authority
Consent must be freely given, specific, informed, and unambiguous, reflecting a clear expression of the data subject’s wishes.
010
Least Authority @leastauthority.bsky.social · 29/04/2026
Tailored security support. From comprehensive audits to timeboxed consultations, we adapt to each project’s needs and help strengthen systems against unauthorized access and manipulation. leastauthority.com/security-con...
leastauthority.com
Security Consulting - Least Authority
Our expert team delivers comprehensive security consulting services. We conduct audits and reviews of cryptographic protocols and distributed system architectures to ensure robust and reliable impleme...
000
Reposted by Least Authority
web3privacy.info @web3privacy.info · 20/04/2026
It is our pleasure to welcome @liz315.bsky.social as a speaker at the Neocypherpunk Summit in Berlin. CEO of @leastauthority.bsky.social, she is working at the forefront of privacy, security, and programmable cryptography. Register for Neocypherpunk Summit at s26ber.web3privacy.info
053
Reposted by Least Authority
Electronic Frontier Foundation @eff.org · 13/04/2026
PSA 🎧 EFFector is out now on your favorite podcast player! Bi-weekly episodes covering privacy, free speech, and your digital rights—explained by the people fighting for them. www.eff.org/deeplinks/2...
eff.org
👁 Selling Mass Surveillance | EFFector 38.7
Time and time again, we've seen police surveillance suffer from 'mission creep'—technology sold as a way to prevent heinous crimes ends up enforcing traffic violations, tracking protestors, and more.
1379
Least Authority @leastauthority.bsky.social · 10/04/2026
Join us at the CAW (May 10, Rome), where two of our cryptographers will present: “A Real-World Case Study: Consulting Phreeli on Unlinkable–Linkable Identifiers” A deep dive into designing privacy-preserving systems under real-world constraints. caw.cryptanalysis.fun#program
caw.cryptanalysis.fun
CAW
Cryptographic Applications Workshop
000
Least Authority @leastauthority.bsky.social · 08/04/2026
Our latest post links “knowledge collapse” to Doctorow’s “centaur” model: AI should assist humans, not erode expertise. Humans must stay in charge of judgment and accountability. leastauthority.com/blog/avoidin... #Security #AI #Cybersecurity #SecurityAudits #Privacy
leastauthority.com
Avoiding Knowledge Collapse in Artificial Intelligence-Assisted Security Audits - Least Authority
Can we use AI to produce better audits while preserving and compounding the human capability that makes audits valuable?
110
Least Authority @leastauthority.bsky.social · 01/04/2026
In this podcast, Nick Merrill, founder of @phreeli.bsky.social, explains how a mobile phone service can work while knowing almost nothing about the user. podcast.firewallsdontstopdragons.com/2026/03/02/d...
podcast.firewallsdontstopdragons.com
Double Blind Armadillo - Firewalls Don't Stop Dragons Podcast
Cellular providers need to know your location in order to deliver calls and text message to your phone. But it turns out that they...
100
Least Authority @leastauthority.bsky.social · 13/03/2026
Join us at EthCC as Least Authority CEO @liz315.bsky.social explores how privacy can create real economic value, reshape incentives, and open new paths for sustainable Web3 businesses. 📅Mar 31, 14:40 CEST 📍Cannes, FR ethcc.io/ethcc-9/agen...
ethcc.io
Agenda | EthCC[9]
Explore the EthCC[9] programme.
010
Least Authority @leastauthority.bsky.social · 05/03/2026
Want to connect with our team and explore how we can strengthen your project's security? Meet us at these upcoming events: 📅 High-Assurance Crypto Software (HACS) — March 6–8 📅 @fheorg.bsky.social — March 8 📅 @rwc.iacr.org — March 9–11
Banner reading “Meet Us in Person” with the Least Authority logo over a blurred photo of a conference crowd.
010
Least Authority @leastauthority.bsky.social · 20/02/2026
In 2014, we published our first public security audit. Since then, we’ve published nearly 200. Each one reflects our ongoing commitment to strengthening security, advancing privacy, and supporting transparency in open systems. Our first audit: leastauthority.com/blog/least-a...
leastauthority.com
SpiderOak - Least Authority
A security audit of the SpiderOak Crypton.io framework.
000
Reposted by Least Authority
FHE.org @fheorg.bsky.social · 13/02/2026
FHE.org would like to thank @leastauthority.bsky.social for their continued sponsorship this year (and last!) of the FHE.org 2026 conference. #FHE #HomomorphicEncryption #FHE2026 #LeastAuthority
122
Reposted by Least Authority
Real World Crypto Symposium @rwc.iacr.org · 02/02/2026
Don’t miss the early registration deadline for Real World Crypto 2026 on February 6. rwc.iacr.org/2026/registr...
rwc.iacr.org
RWC 2026 registration
Real World Crypto Symposium
011
Least Authority @leastauthority.bsky.social · 03/02/2026
Privacy protections around user data aren’t static. They have to endure incidents, scale, enforcement pressure, and incentive shifts. leastauthority.com/blog/what-ma...
leastauthority.com
What Makes Privacy Possible, and What Produces It? - Least Authority
What makes privacy happen, and what makes it possible? A look at how law creates obligations, but system architecture determines real privacy outcomes.
021
Least Authority @leastauthority.bsky.social · 28/01/2026
This #DataPrivacyDay we recognize the global community working to build safer, more private digital systems. From privacy engineers to open-source maintainers, your work empowers users and protects rights.
000
Least Authority @leastauthority.bsky.social · 14/01/2026
At Funding the Commons (Berlin 2025), our CEO Liz Steininger makes the case that privacy is a missing native feature of Web3 and a prerequisite for true autonomy in decentralized systems. youtu.be/vjEifN52gLg?...
youtu.be
User Autonomy and Privacy-by-Default through Distributed, Resilient Systems
YouTube video by Least Authority
010
Least Authority @leastauthority.bsky.social · 08/01/2026
The MiCA “grandfathering” period ends July 1, 2026, and some EU states have earlier deadlines. Cross-border CASPs must meet the earliest one. Now is the time to get your compliance strategy on track. leastauthority.com/blog/strengt...
leastauthority.com
Strengthening Crypto Security via MiCA Compliance
We can help Crypto-Assets Service Providers safely navigate the new MiCA regulation compliance environment and improve security.
000
Least Authority @leastauthority.bsky.social · 10/12/2025
We believe that people have a fundamental right to privacy and that the use of secure solutions enables people to more freely use the Internet and other connected technologies. Privacy by design is not just a principle, it’s a responsibility. www.un.org/en/observanc...
un.org
Human Rights Day | United Nations
Human Rights Day commemorates the day on which, in 1948, the United Nations General Assembly adopted the Universal Declaration of Human Rights.
000
Least Authority @leastauthority.bsky.social · 26/11/2025
We recently discovered an unauthorized, modified version of one of our audit reports shared online via a deceptive URL. While we quickly resolved the issue, it served as a reminder of the importance of authenticity and provenance in security reporting. leastauthority.com/blog/lessons...
leastauthority.com
Lessons Learned from a Typosquatted Audit Report - Least Authority
We identified and addressed a typosquatting issue promptly, but the incident reinforced why authenticity and provenance matter deeply in security reporting.
011
Least Authority @leastauthority.bsky.social · 19/11/2025
Our team recently completed a security audit of Zebra's NU6.1 Network Upgrade for @zfnd.org. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Zcash - NU6.1 Network Upgrade - Least Authority
Least Authority reviewed the changes made to Zebra that will be introduced in the NU6.1 network upgrade.
032
Least Authority @leastauthority.bsky.social · 20/10/2025
Anonymized data is often treated as exempt from privacy obligations. However, the rise of anonymity washing, where organizations exaggerate anonymization to avoid regulation, is becoming a serious concern. leastauthority.com/blog/anonymo...
leastauthority.com
Anonymous Data in the Age of AI: Hidden Risks and Safer Practices - Least Authority
Data protection laws often do not apply to the lesser-known category of “anonymous data”. There are misleading claims and new risks.
000
Least Authority @leastauthority.bsky.social · 01/10/2025
Least Authority is now listed as a trusted provider for the Avalanche Security Marketplace on Areta, where we bring our expertise to support developers and builders. areta.market/avalanche See our Avalanche audit experience here: leastauthority.com?s=Avalanche
areta.market
Areta Market
Areta Market connects builders to top-tier auditors through a streamlined quoting and pricing process. Built to cut costs and simplify the process.
000
Least Authority @leastauthority.bsky.social · 19/09/2025
Our team recently completed a second security audit of Operator AVS and smart contracts for Aligned Layer. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Aligned Layer - Layer Operator AVS + Smart Contracts (2nd review) - Least Authority
Aligned Layer has requested that Least Authority perform a second security audit of their Operator AVS and smart contracts.
000
Least Authority @leastauthority.bsky.social · 17/09/2025
Since @zooko2.bsky.social founded Least Authority in 2011, our mission has stayed true: advancing digital autonomy through privacy & cryptography. With 300+ completed audits, we continue to build on that vision for secure, freedom-compatible systems. hackernoon.com/cypherpunks-...
hackernoon.com
Cypherpunks Write Code: Zooko Wilcox & Zcash | HackerNoon
Zooko Wilcox grew up coding and questioning systems, and that path led him to create the privacy coin Zcash. Let's see more of this story!
010
Least Authority @leastauthority.bsky.social · 10/09/2025
We’re celebrating a milestone: the MoonMath Manual has been downloaded 15,000 times! It’s a free resource for anyone curious about zk-SNARKs. Have you read it yet? We’d love to hear what you think: leastauthority.com/community-ma...
leastauthority.com
MoonMath Manual - Least Authority
The MoonMath Manual is a resource for anyone interested in understanding and unlocking the potential of zk-SNARKs.
000
Least Authority @leastauthority.bsky.social · 28/08/2025
Privacy matters. So does compliance. But can we have both? Yes - we can. leastauthority.com/blog/balanci...
leastauthority.com
Balancing Privacy-Enhancing Technologies and Legal Disclosure Obligations - Least Authority
Privacy-enhancing technologies, in particular Zero-Knowledge Proofs (ZKPs), can challenge, reinforce, or redefine these disclosure obligations.
000
Least Authority @leastauthority.bsky.social · 07/08/2025
Our team recently completed three security audits of Permuto for @chia.net. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...
leastauthority.com
Chia Network - Permuto - Least Authority
Chia Network has requested that Least Authority perform security audits of Permuto.
001
Least Authority @leastauthority.bsky.social · 05/08/2025
The MoonMath Manual breaks down the math behind Zero-Knowledge Succinct Non-Interactive Arguments of Knowledge in an approachable, structured way. Whether you're new to ZK or want to deepen your understanding, this free resource is a great place to start. leastauthority.com/community-ma...
leastauthority.com
MoonMath Manual - Least Authority
The MoonMath Manual is a resource for anyone interested in understanding and unlocking the potential of zk-SNARKs.
010
Least Authority @leastauthority.bsky.social · 23/07/2025
With 300 completed security audits on the horizon, we're celebrating the journey - 11 years of security consulting shaped by technically challenging reviews, high-impact ecosystems, and projects with global reach. leastauthority.com/blog/turning...
leastauthority.com
Turning Milestones Into Meaning: The Depth Behind Our Audits - Least Authority
300 audits completed reflects trust and experience, but our priority remains audit quality, not quantity.
010