Yu Feng
Cofounder & CEO at Veridise
Motivation
As the co-founder of Veridise, I've been working on ensuring the robustness and security of mainstream L1/L2 systems (Ethereum/Scroll/Aleo/Manta, etc.) since 2017 via both academia and industry. As a faculty member at UCSB, I maintain a strong track record in formal methods and software security. I'm running for election on the council, because I want to protect users in Arbitrum as well as enhance the safety and robustness of Arbitrum ecosystem through my expertise in cybersecurity and formal methods research.
Experience
- +10 years of experience in cybersecurity in academia and industry
- Assistant Professor in computer science at University of California, Santa Barbara
- Exclusively published +30 peer-reviewed papers at leading academic venues in formal methods, programming languages, software engineering, and security with numerous of awards. Here are some of the representative works in Web3:
Automated Detection of Under-Constrained Circuits in Zero-Knowledge Proofs: https://dl.acm.org/doi/pdf/10.1145/3591282
Practical Security Analysis of Zero-Knowledge Proof Circuits: https://eprint.iacr.org/2023/190
SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds: https://fredfeng.github.io/papers/sailfish.pdf
Certifying Zero-Knowledge Circuits with Refinement Types: https://eprint.iacr.org/2023/547
- Co-founder and CEO at Veridise, where we have audited almost all top-tier ZK projects in this field and here are some examples:
Semaphore: https://f8t2x8b2.rocketcdn.me/wp-content/uploads/2023/01/VAR-Semaphore.pdf
Succinct: https://f8t2x8b2.rocketcdn.me/wp-content/uploads/2023/04/VAR-Succinct.pdf
Manta: https://f8t2x8b2.rocketcdn.me/wp-content/uploads/2023/09/VAR-Manta-Chain.pdf
Critical bug in circom-pairing: https://medium.com/veridise/circom-pairing-a-million-dollar-zk-bug-caught-early-c5624b278f25
Critical bug in semaphore: https://medium.com/veridise/breaking-the-tree-violating-invariants-in-semaphore-4be73be3858d
- Deep knowledge of L2 protocols and core contributor to Veridise’s ZK security tooling including static analysis, formal verification, and fuzzing
https://github.com/Veridise/picus
Skills
Cybersecurity
PhD in computer science.Strong expertise in software security and web security since 2011 One of the highest cited paper in Android security, used by Google Play. https://fredfeng.github.io/papers/fse14.pdf First synthesizer for layout engine, joint work with mozilla: https://fredfeng.github.io/papers/hecate.pdf The most comprehensive security analysis for reentrancy bugs, sponsored by Ethereum Foundation: https://fredfeng.github.io/papers/sailfish.pdf
Projects
Cofounder & CEO at Veridise