Devcon Archive logo
Devcon Devconnect Forum Blog
  • Watch
  • Event
    Event: background logo
    • Devcon 7
    • Devcon 6
    • Devcon 5
    • Devcon 4
    • Devcon 3
    • Devcon 2
    • Devcon 1
    • Devcon 0
    • Devconnect ARG
  • Categories
    Categories: background logo
    • Cryptoeconomics
    • Devcon
    • Developer Experience
    • Coordination
    • Core Protocol
    • Layer 2s
    • Real World Ethereum
    • Cypherpunk & Privacy
    • Security
    • Applied Cryptography
    • Usability
  • Playlists

Suggested

Loading results..

View all

About Devcon —

Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.

An intensive introduction for new Ethereum explorers, a global family reunion for those already a part of our ecosystem, and a source of energy and creativity for all.

  • Watch
  • Devcon
  • Devconnect
  • Forum
  • Blog

Get in touch

devcon@ethereum.org

Subscribe to our newsletter

Crafted with passion ❤️ at the Ethereum Foundation

© 2026 — Ethereum Foundation. All Rights Reserved.

devcon8 / is this binary actually built from that public source code

  • YouTube
Is this binary actually built from that public source code? preview
  • Details

Is this binary actually built from that public source code?

Duration: NaN:NaN:NaN

Speaker: Soham Zemse

Type: Lightning Talk

Expertise: No prior knowledge

Event: Devcon

Date: Nov 2026

In this lightning talk, I'd like to share ideas and results from my recent exploration in the opaque binary verification. Talk TLDR 1. Problem: in ecosystems like apple, devs sign compiled binaries with their certificate/pvt key. in some ecosystems like npm, crates, and more user trust that the platform and dev both are legit. 2. How hackers are exploiting the gap. 3. Approaches to binary verification: - self build (no trust assumptions, CPU intensive, hardly anyone does), - delegated build (google's oss rebuild tool) - zk proof of compilation (5000x overhead from feb 2026 study) - builds in TEE - social layer attestations. 4. How social layer attestation can be leveraged today in ethereum consensus/execution client binaries, various design vectors, positives and negatives of this approach. 5. PoC screenshots/GIF verifying an update to ethereum client in a fairly decentralised way.

Categories

DecentralizationOpen SourceSecuritySupply chain