# \#security

**URL:** https://collective.flashbots.net/tag/security/43.md

[Latest](https://collective.flashbots.net/latest.md) · [Categories](https://collective.flashbots.net/categories.md) · [Tags](https://collective.flashbots.net/tags.md)

---

## [Security Advisory: Storage Aliasing in Priority Update Registry V1 09/15/26](https://collective.flashbots.net/t/security-advisory-storage-aliasing-in-priority-update-registry-v1-09-15-26/6030)

<div class="topic-metadata">

**Author:** [@Quintus](https://collective.flashbots.net/u/Quintus)\
**Replies:** 0\
**Last updated:** [September 16, 2026, 1:35pm UTC](https://collective.flashbots.net/t/security-advisory-storage-aliasing-in-priority-update-registry-v1-09-15-26/6030 "2026-09-16T13:35:52Z")

</div>

On September 15, 2026, we identified a critical vulnerability in version 1 of the Priority Update Registry, an on-chain contract that trading integrators use to publish and read price updates. The flaw let any address au…

---

## [TDX Security Update 2026.08.11](https://collective.flashbots.net/t/tdx-security-update-2026-08-11/5900)

<div class="topic-metadata">

**Author:** [@mateusz](https://collective.flashbots.net/u/mateusz)\
**Replies:** 0\
**Last updated:** [August 11, 2026, 7:11pm UTC](https://collective.flashbots.net/t/tdx-security-update-2026-08-11/5900 "2026-08-11T19:11:01Z")

</div>

We are aware of four TDX disclosures related to our systems. Two of them: INTEL-SA-01421 and INTEL-SA-01462 are related to Intel’s TDX DCAP verification library and the Intel’s Guest software, which we are not using. T…

---

## [Why TEE.fail is bullish for BuilderNet: Hardening the Path to Permissionless Blockbuilding](https://collective.flashbots.net/t/why-tee-fail-is-bullish-for-buildernet-hardening-the-path-to-permissionless-blockbuilding/5349)

<div class="topic-metadata">

**Author:** [@Quintus](https://collective.flashbots.net/u/Quintus)\
**Replies:** 0\
**Last updated:** [October 28, 2025, 11:17pm UTC](https://collective.flashbots.net/t/why-tee-fail-is-bullish-for-buildernet-hardening-the-path-to-permissionless-blockbuilding/5349 "2025-10-28T23:17:17Z")

</div>

Recently, wiretap.fail, battering RAM and tee.fail attacks were made public. These are not applicable to BuilderNet or any Flashbots products and do not enable frontrunning or unbundling. These attacks do not deviate fro…

---

## [About the Trustless TEEs category](https://collective.flashbots.net/t/about-the-trustless-tees-category/4168)

<div class="topic-metadata">

**Author:** [@Fred](https://collective.flashbots.net/u/Fred)\
**Replies:** 1\
**Last updated:** [April 2, 2025, 2:58pm UTC](https://collective.flashbots.net/t/about-the-trustless-tees-category/4168 "2025-04-02T14:58:58Z")

</div>

This category is dedicate to discussions about hardware-related efforts to improve trust assumptions in secure hardware that leverages remote attestation (TEE for short). Today, there is no TEE available that gives the …

---

## [Network-level Censorship: Understanding the Problem](https://collective.flashbots.net/t/network-level-censorship-understanding-the-problem/4769)

<div class="topic-metadata">

**Author:** [@Moe](https://collective.flashbots.net/u/Moe)\
**Replies:** 4\
**Last updated:** [March 27, 2025, 10:54pm UTC](https://collective.flashbots.net/t/network-level-censorship-understanding-the-problem/4769 "2025-03-27T22:54:58Z")

</div>

Introduction Ensuring censorship resistance is a critical challenge when deploying applications within Trusted Execution Environments (TEEs) like Intel TDX. While TEEs provide strong security guarantees for computatio…

---

## [Zero Trust Execution Environments](https://collective.flashbots.net/t/zero-trust-execution-environments/3966)

<div class="topic-metadata">

**Author:** [@Quintus](https://collective.flashbots.net/u/Quintus)\
**Replies:** 0\
**Last updated:** [October 11, 2024, 8:06pm UTC](https://collective.flashbots.net/t/zero-trust-execution-environments/3966 "2024-10-11T20:06:12Z")

</div>

by Quintus Kilbourn (Flashbots), Sylvain Bellemare (IC3), Jonathan Passerat-Palmbach (Flashbots), Andrew Miller (Flashbots) and friends Recent months have seen an awakening of several large use cases of TEEs, from OpenA…

---

## [Crowdsourcing ideas: Tech Tree](https://collective.flashbots.net/t/crowdsourcing-ideas-tech-tree/4171)

<div class="topic-metadata">

**Author:** [@Quintus](https://collective.flashbots.net/u/Quintus)\
**Replies:** 0\
**Last updated:** [November 26, 2024, 1:58pm UTC](https://collective.flashbots.net/t/crowdsourcing-ideas-tech-tree/4171 "2024-11-26T13:58:11Z")

</div>

Crowdsourcing ideas: started work on a mapping for all the subproblems based on the stuff @gluonix and I have put out. I’ll probably still change it a bunch but was curious what people thought about the format/what s…

---

## [Project T-TEE: From Trusted to Trustless Execution Environments](https://collective.flashbots.net/t/project-t-tee-from-trusted-to-trustless-execution-environments/3541)

<div class="topic-metadata">

**Author:** [@Quintus](https://collective.flashbots.net/u/Quintus)\
**Replies:** 5\
**Last updated:** [September 9, 2024, 8:51am UTC](https://collective.flashbots.net/t/project-t-tee-from-trusted-to-trustless-execution-environments/3541 "2024-09-09T08:51:27Z")

</div>

Recently, there’s been a lot of excitement around TEEs as a means to bolster security for applications in the “crypto”/blockchain space. TEEs in their current form can already add a lot of value to use cases by providing…

---

## [Trustless TEE update. August 24](https://collective.flashbots.net/t/trustless-tee-update-august-24/3763)

<div class="topic-metadata">

**Author:** [@Quintus](https://collective.flashbots.net/u/Quintus)\
**Replies:** 0\
**Last updated:** [August 13, 2024, 10:05pm UTC](https://collective.flashbots.net/t/trustless-tee-update-august-24/3763 "2024-08-13T22:05:20Z")

</div>

It’s been a while since we posted about project Trustless TEE, but there’s been a lot happening on the ground. Many conversations have been had between @gluonix (who has been driving a lot of this), @PradyumnaShome, Fab…

---

## [Identifying Trustworthy Builders and Understanding Subsidies](https://collective.flashbots.net/t/identifying-trustworthy-builders-and-understanding-subsidies/1225)

<div class="topic-metadata">

**Author:** [@DarkForest](https://collective.flashbots.net/u/DarkForest)\
**Replies:** 0\
**Last updated:** [February 7, 2023, 9:48am UTC](https://collective.flashbots.net/t/identifying-trustworthy-builders-and-understanding-subsidies/1225 "2023-02-07T09:48:49Z")

</div>

Dear experts, I am trying to understand how to find trustworthy builders in the Ethereum network. I came across a website (MEV-Boost Builder Profitability | relayscan.io) that shows the top builders and I am wondering i…
