Morteza
Bahmani

Older Posts

• BTCPay Server Hot Wallet Attack: What Broke, What to Do, and the Patch Gap Problem Nov 2, 2026

  BTCPay Server versions through 2.4.1 are confirmed vulnerable to an attack that drained hot wallets. Here is what the architecture makes possible, how to harden your deployment, and why the real probl…

• Native Engineering in TablePro: Zero Shared Code Across Platforms Nov 1, 2026

  An architectural case study on TablePro: why building independent Swift and Rust native codebases outperforms cross-platform runtimes in memory, startup latency, and system integration.

• LightPanda vs Kronos: headless browser vs market data library Nov 1, 2026

  A quick comparison of LightPanda's Zig headless browser and Kronos' Python market data toolkit across integration, performance, and cost.

• LightCraft: Rebuilding the RAW Photo Pipeline in Pure Rust Oct 31, 2026

  Raw photo development remains tied to bloated subscription software and legacy C libraries. LightCraft rebuilds the non-destructive image pipeline in pure Rust with Model Context Protocol support, bri…

• EIP-7702 Account Delegation: Attack Surfaces in Ephemeral Contract Wallets Oct 31, 2026

  EIP-7702 introduces temporary contract delegation to Ethereum EOAs, but persistent designators and blind authorization signatures create critical attack vectors. Here is how delegation attacks work an…

• Dissecting In-Memory Key-Value Stores: Architecture, Kernels, and Replication Oct 30, 2026

  A technical Q&A analyzing in-memory database bottlenecks, kernel page management, replication backlog buffer sizing, and connection pipelining.