The MiCA transition period has ended. For crypto-asset service providers, compliance is no longer about preparing for regulation. It's about operating within it by maintaining effective security controls, managing risk, and adapting as systems evolve. leastauthority.com/blog/strengt...

Strengthening Crypto Security via MiCA Compliance

We can help Crypto-Assets Service Providers safely navigate the new MiCA regulation compliance environment and improve security.

leastauthority.com

The Least Authority team has presented at conferences and community events around the world, sharing insights on security auditing, advanced cryptography, privacy engineering, zero-knowledge systems, and more. Browse our talks and presentations on YouTube: youtube.com/@leastauthor...

Least Authority

youtube.com

Our team recently completed a security audit of Argos for Sovright. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...

Sovright - Argos - Least Authority

A security audit of Argos for Sovright, a recovery workspace for legacy ZecWallet Lite seeds.

leastauthority.com

We're pleased to share that Least Authority CEO & Managing Director Liz Steininger has joined the Global Fintech Institute Digital Assets Security and Compliance Subcommittee. globalfintechinstitute.org/publications...

Introducing the Digital Assets Security and Compliance Subcommitteeundefined

The Global Fintech Institute is convening the Digital Assets Security and Compliance Subcommittee to advance institutional thinking on cybersecurity, compliance, and operational resilience within digi...

globalfintechinstitute.org

Tailored security support. From comprehensive audits to timeboxed consultations, we adapt to each project’s needs and help strengthen systems against unauthorized access and manipulation. leastauthority.com/security-con...

Security Consulting - Least Authority

Our expert team delivers comprehensive security consulting services. We conduct audits and reviews of cryptographic protocols and distributed system architectures to ensure robust and reliable impleme...

leastauthority.com

Not all security testing approaches answer the same questions. Security audits, managed crowdsourced testing, and bug bounty programs each play a valuable role, but they are not interchangeable. Our recent blog examines where each is most effective. leastauthority.com/blog/securit...

Security Audits, Managed Crowdsourced Security, and Bug Bounty Programs: Complementary, Not Interchangeable

A well-planned security strategy requires understanding how audit approaches differ and where each is most effective.

leastauthority.com

Balancing accountability with privacy is a challenging problem in system design. @Phreeli's whitepaper explores an architecture intended to support continuity and accountability without creating identifiers that can be used to track people across interactions. www.phreeli.com/files/Phreel...

This engagement explored how AI-assisted workflows can help scale security reviews while maintaining the rigorous human analysis and verification required for high-confidence findings. leastauthority.com/blog/ai-assi...

AI-Assisted Security Auditing in the Zcash Ecosystem - Least Authority

Explore Least Authority's AI-assisted security audit of the Zcash ecosystem, including methodology, tooling, findings, and human-led verification.

leastauthority.com

How do we build infrastructure that is open, resilient, and privacy-preserving? Join Least Authority CEO Liz Steininger and fellow panelists at the Neo-cypherpunk Summit (June 14) as they explore self-hosted, peer-to-peer, and decentralized technologies across the stack. talx.dod.ngo/neocypherpun...

So happy to see how many people want to celebrate freedom in Berlin. Neo-Cypherpunk Summit will be host thousand of people, 80 speakers, communal partners, anti-surveillance merch, pro-privacy board game, books, music & so much more. s26ber.web3privacy.info

"Without privacy there is no democracy." We're looking forward to the Neo-cypherpunk Summit in Berlin on June 14, where researchers, builders, and advocates will gather to discuss the future of privacy and digital rights. More on our talk soon: s26ber.web3privacy.info

Neocypherpunk Summit #1

14 Jun 2026 - 2025 was an exceptional year: 10000 people, 130 speakers from Eva Galperin (EFF) to Roger Dingledine (Tor) speaking. We decided to make a sequel and strengthen Cypherpunk activism, cultu...

s26ber.web3privacy.info

Our team recently completed a security audit of Ethrex for LambdaClass. You can read the full report, including our findings, here: leastauthority.com/blog/audit-o...

LambdaClass - Ethrex - Least Authority

A security audit of Ethrex for LambdaClass. Ethrex is a Rust implementation of the Ethereum protocol, designed to support ZK proofs and L2 execution.

leastauthority.com

Consent must be freely given, informed, and unambiguous under GDPR. But when systems are designed without real choice, consent becomes a patch for a deeper problem. We should be building systems that deserve consent. leastauthority.com/blog/buildin...

Building Systems That Deserve Consent - Least Authority

Consent must be freely given, specific, informed, and unambiguous, reflecting a clear expression of the data subject’s wishes.

leastauthority.com

Tailored security support. From comprehensive audits to timeboxed consultations, we adapt to each project’s needs and help strengthen systems against unauthorized access and manipulation. leastauthority.com/security-con...

Security Consulting - Least Authority

Our expert team delivers comprehensive security consulting services. We conduct audits and reviews of cryptographic protocols and distributed system architectures to ensure robust and reliable impleme...

leastauthority.com

It is our pleasure to welcome @liz315.bsky.social as a speaker at the Neocypherpunk Summit in Berlin. CEO of @leastauthority.bsky.social, she is working at the forefront of privacy, security, and programmable cryptography. Register for Neocypherpunk Summit at s26ber.web3privacy.info

PSA 🎧 EFFector is out now on your favorite podcast player! Bi-weekly episodes covering privacy, free speech, and your digital rights—explained by the people fighting for them. www.eff.org/deeplinks/2...

👁 Selling Mass Surveillance | EFFector 38.7

Time and time again, we've seen police surveillance suffer from 'mission creep'—technology sold as a way to prevent heinous crimes ends up enforcing traffic violations, tracking protestors, and more.

eff.org

Join us at the CAW (May 10, Rome), where two of our cryptographers will present: “A Real-World Case Study: Consulting Phreeli on Unlinkable–Linkable Identifiers” A deep dive into designing privacy-preserving systems under real-world constraints. caw.cryptanalysis.fun#program

Our latest post links “knowledge collapse” to Doctorow’s “centaur” model: AI should assist humans, not erode expertise. Humans must stay in charge of judgment and accountability. leastauthority.com/blog/avoidin... #Security #AI #Cybersecurity #SecurityAudits #Privacy

Avoiding Knowledge Collapse in Artificial Intelligence-Assisted Security Audits - Least Authority

Can we use AI to produce better audits while preserving and compounding the human capability that makes audits valuable?

leastauthority.com

In this podcast, Nick Merrill, founder of @phreeli.bsky.social, explains how a mobile phone service can work while knowing almost nothing about the user. podcast.firewallsdontstopdragons.com/2026/03/02/d...

Double Blind Armadillo - Firewalls Don't Stop Dragons Podcast

Cellular providers need to know your location in order to deliver calls and text message to your phone. But it turns out that they...

podcast.firewallsdontstopdragons.com

Join us at EthCC as Least Authority CEO @liz315.bsky.social explores how privacy can create real economic value, reshape incentives, and open new paths for sustainable Web3 businesses. 📅Mar 31, 14:40 CEST 📍Cannes, FR ethcc.io/ethcc-9/agen...

Agenda | EthCC[9]

Explore the EthCC[9] programme.

ethcc.io

Want to connect with our team and explore how we can strengthen your project's security? Meet us at these upcoming events: 📅 High-Assurance Crypto Software (HACS) — March 6–8 📅 @fheorg.bsky.social — March 8 📅 @rwc.iacr.org — March 9–11

In 2014, we published our first public security audit. Since then, we’ve published nearly 200. Each one reflects our ongoing commitment to strengthening security, advancing privacy, and supporting transparency in open systems. Our first audit: leastauthority.com/blog/least-a...

SpiderOak - Least Authority

A security audit of the SpiderOak Crypton.io framework.

leastauthority.com

FHE.org would like to thank @leastauthority.bsky.social for their continued sponsorship this year (and last!) of the FHE.org 2026 conference. #FHE #HomomorphicEncryption #FHE2026 #LeastAuthority

Don’t miss the early registration deadline for Real World Crypto 2026 on February 6. rwc.iacr.org/2026/registr...

RWC 2026 registration

Real World Crypto Symposium

rwc.iacr.org

Privacy protections around user data aren’t static. They have to endure incidents, scale, enforcement pressure, and incentive shifts. leastauthority.com/blog/what-ma...

What Makes Privacy Possible, and What Produces It? - Least Authority

What makes privacy happen, and what makes it possible? A look at how law creates obligations, but system architecture determines real privacy outcomes.

leastauthority.com

This #DataPrivacyDay we recognize the global community working to build safer, more private digital systems. From privacy engineers to open-source maintainers, your work empowers users and protects rights.

At Funding the Commons (Berlin 2025), our CEO Liz Steininger makes the case that privacy is a missing native feature of Web3 and a prerequisite for true autonomy in decentralized systems. youtu.be/vjEifN52gLg?...

User Autonomy and Privacy-by-Default through Distributed, Resilient Systems

YouTube video by Least Authority

youtu.be

The MiCA “grandfathering” period ends July 1, 2026, and some EU states have earlier deadlines. Cross-border CASPs must meet the earliest one. Now is the time to get your compliance strategy on track. leastauthority.com/blog/strengt...

Strengthening Crypto Security via MiCA Compliance

We can help Crypto-Assets Service Providers safely navigate the new MiCA regulation compliance environment and improve security.

leastauthority.com

We believe that people have a fundamental right to privacy and that the use of secure solutions enables people to more freely use the Internet and other connected technologies. Privacy by design is not just a principle, it’s a responsibility. www.un.org/en/observanc...

Human Rights Day | United Nations

Human Rights Day commemorates the day on which, in 1948, the United Nations General Assembly adopted the Universal Declaration of Human Rights.

un.org

We recently discovered an unauthorized, modified version of one of our audit reports shared online via a deceptive URL. While we quickly resolved the issue, it served as a reminder of the importance of authenticity and provenance in security reporting. leastauthority.com/blog/lessons...

Lessons Learned from a Typosquatted Audit Report - Least Authority

We identified and addressed a typosquatting issue promptly, but the incident reinforced why authenticity and provenance matter deeply in security reporting.

leastauthority.com