About
Antoine James
Security Researcher at Ethereum Foundation
Finding vulnerabilities in Ethereum clients and protocol specifications. Transitioned from web2 security and Rust development to focus on blockchain infrastructure after dropping out of my Master's program.
Experience
Ethereum Foundation
Security ResearcherPart of the Protocol Security Team, conducting security research on Execution Layer clients, Consensus Clients, Ethereum Specifications and EIPs. Focus on identifying vulnerabilities and improving protocol security.
Spearbit
Rust EngineerBackend development for the Cantina platform, a competitive audit platform. Worked on proposing and implementing new features, bug fixes, and system improvements.
Formal Land
Security ResearcherFormal verification of the Sui blockchain type-checker and Keccak implementation. Contributed to translating Rust code to Coq proofs for critical blockchain components.
Vulnerabilities
Payment system vulnerability allowing unauthorized premium subscription access.
Missing nonce validation in transaction processing allowing invalid transactions to enter the pool.
Incorrect gas limit configuration deviating from network consensus parameters.
Missing on-curve validation in P256Verify implementation causing block import failures with invalid public keys.
Verkle testing constant doesn't match the hardcoded EIP-2935 bytecode value of 0x1FFF.
Missing implementation for punishing malicious peers who send unwanted transaction hashes in the network layer.
