based

Building verifiable, composable, open-source DeFi at @_deeptrade

[Sui @SuiNetwork]

Read here: https://t.co/um4Eo2haCc

[based @0x0based]

@EvanWeb3 Thanks

[Zeb Evans @DJ_CURFEW]

Today we reduced headcount by 22%. The business is the strongest it's ever been. So I think it's important to be direct about what I'm seeing and why.

First, I made this decision and I own it. I did it because the way to operate at the highest level of productivity is changing, and to win the future, ClickUp needs to change with it.

Second, this wasn't about cutting costs. Most savings from this change will flow directly back into the people who stay. We'll be introducing million-dollar salary bands. If you create outsized impact using AI, you'll be paid outside of traditional bands.

Most importantly, I have the deepest gratitude for those affected. We're doing this from a position of strength specifically so we can take care of people properly. Everyone affected receives a package aimed at honoring their contributions and easing the transition.

I only see two options: wait for this to play out gradually in the market or be honest about what I'm seeing and act proactively.

THE 100X ORGANIZATION
The primary change is that we're restructuring around what I call 100x org. The goal is 100x output. The roles required to build at the highest level are fundamentally different than they were a year ago.

Incremental improvements to existing systems won't get us there. We need new ones. That means creating enough disruption to rebuild rather than iterate on what's already broken.

The common narrative is that AI makes everyone more productive. It doesn't. Many of the workflows of today, if left unchanged, create bottlenecks in AI systems.

These roles will evolve. But waiting for that to happen naturally means falling behind now.

The 100x org is actually heavily dependent on people - infinitely more than today. This is only possible with 10x people that have embraced and adopted new ways of working.

THE BUILDERS, AGENT MANAGERS, AND FRONT-LINERS

— THE BUILDERS: 10X ENGINEERS
I don't think most companies have internalized what's actually happening with AI in engineering. The common narrative is that AI makes all engineers more productive. That may be true in isolation, but at an organization level - that is the farthest thing from reality.

Here's what we've validated recently at ClickUp: the great engineers, the ones who can orchestrate, architect, and review, are becoming 100x engineers. They're not writing code. They're directing agents that write code. The skill is judgment.

AI makes the best engineers wildly more productive, and everyone else using AI slows these engineers down.
Think about it - the bottlenecks are (1) orchestration - telling AI what to do, and (2) reviewing - what AI did. Everything is leapfrogged and no longer needed.
So who do you want orchestrating and reviewing code?

And how do you want your best engineers to spend their time?

If your best engineers are spending time reviewing other people's code, then this is inherently an inefficient bottleneck. These engineers can review their agent's code much faster than reviewing human code.

The new world is about enabling your 10x engineers to become 100x.

The wrong strategy is to push every engineer to use infinite tokens. Companies doing this are celebrating 500% more pull requests. But customer outcomes don't match the volume of code being generated.

I call this the great reckoning of AI coding, and every company will face this soon if not already.

More code is just another bottleneck to the best engineers, and ultimately to your company's impact as well.

— THE BUILDERS: 10X PRODUCT MANAGERS
Product management and design roles are merging.

Designers that have customer focus, become more like product managers.

And product managers that have intuition for UX become more like designers.

The bottleneck of user research is gone. It takes us just one mention of an agent to kickoff research and analyze results.

The bottleneck of product <> design iteration is also gone. The product builder iterates on their own, along with agents and skills that ensure alignment with quality and strategy.

Also controversial today - I believe that the wrong strategy is to have your PMs shipping code - that just introduces another bottleneck that the best engineers will waste their time on.

To be clear, PMs should be coding but they should do this in a playground to iterate, validate, and scope. That code should not go to production.

Everything outside of managing systems, orchestrating AI, and reviewing output becomes a bottleneck.
That's why the other roles that are critical along with these are the systems managers (to reduce bottlenecks) along with a bottleneck you can't replace - customer meeting time.

— THE SYSTEM MANAGERS
Ironically, the people that automate their jobs with AI will always have a job. They become owners of the AI systems - agent managers. We have many examples of these people at ClickUp.

The underlying systems in which we operate are absolutely critical to get right. I think most companies are delusional to think they can iterate on existing systems and compete in this new world.

You must create enough disruption so that old systems are deprecated entirely. If there's any definition for 'AI native' that's what it is.

— THE FRONT-LINERS
In a world that will become saturated with AI communication, the human touch will matter more than anything to customers.

This is a bottleneck that you shouldn't replace - even when agents are high enough quality to do video meetings.

One-on-one meeting time with customers is something that shouldn't be automated. The systems around the meetings should be - so that front-liners spend nearly 100% of their time with customers.

REWARDING 100X IMPACT
In a world where companies are able to do so much more with less, where does that excess money go?
In our case, much of the savings in this new operating model will flow directly back to those that enabled it.

We must reward people that create productivity accordingly. This aligns incentives on both sides. Plus, in a world where your best people create 100x impact, you can't afford to lose them.

You should aim to retain these employees for decades. The context they have and their ability to efficiently orchestrate and review will be nearly impossible to replace.

Compensation bands of today should be thrown out the door. We're introducing $1 million cash/year salary bands with a path available to nearly everyone in the company if they produce 100x impact by creating or managing AI systems.

THE FUTURE
Nearly every company will make changes like these. The ones that do it proactively will define what comes next.

The future is not fewer people. It's different work, new roles, and better rewards for those who embrace it. We're already seeing entirely new roles emerge, like Agent Managers, that didn't exist a year ago.

ClickUp is positioning to lead this shift, not just internally, but for our customers too. I've never been more certain about where we're headed.

[based @0x0based]

@0xairtx 💯

[based @0x0based]

@0xairtx yeah lazer is unaffected, but most FEs including us used hermes.

[Bubblemaps @bubblemaps]

ALERT: 🚨 Polymarket contract exploited

Attackers are removing 5,000 $POL every 30 seconds – $600k stolen so far

Pause all Polymarket activity for now

[Cyber Security News @The_Cyber_News]

⚠️ Critical Chrome Vulnerabilities Enable Remote Code Execution Attacks – Patch Now!

Source: https://t.co/cOIDcbsYyj

Google has released an urgent security update for Chrome, addressing 16 vulnerabilities, including two rated Critical, that could allow attackers to execute arbitrary code on affected systems.

The Stable channel has been updated to 148.0.7778.178/179 for Windows and Mac, and 148.0.7778.178 for Linux, with the rollout expected to complete over the coming days.

Use-after-free bugs are particularly dangerous because they allow threat actors to manipulate freed memory regions, often leading to full system compromise when successfully chained with other exploits.

#cybersecuritynews #Chrome

[Elton @eltoniselton]

@KobeissiLetter @Ramen_HL Spot tokenized equities are probably one of the most interesting use cases. It enables things like using tokenized equities for lending onchain or trading 24/7

Equity perps are growing even faster but will prob face more regulatory scrutiny

https://t.co/AoXZlCn0b3

[The Kobeissi Letter @KobeissiLetter]

BREAKING: The SEC is set to release its so-called "innovation exemption" for tokenized stocks which will pave the path for trading digital versions of securities, per Bloomberg.

Details include:

1. In a "surprise move," the SEC is leaning toward allowing the trading of tokenized assets

2. These tokenized assets would be tradeable on decentralized crypto platforms

3. The move could "reshape the landscape of the American stock market"

4. This would also be one of the US' biggest shifts into crypto infrastructure yet

Tokenized assets are rapidly expanding.

[based @0x0based]

@zjpiazza @codymetzz @Star_Knight12 Try running next on cloud flare

[Vladimir S. | Officer's Notes @officer_secret]

A new update just dropped in Telegram…

The Business Bots feature (which lets you link a script to your personal account for auto-replies) is now completely free.

Before, you needed Telegram Premium for it. Now it’s available to everyone - and that opens up some very interesting (and potentially shady) possibilities.

Picture this: You’re sitting in a bar, you go take a leak and leave your unlocked phone on the table for just 10 seconds. That’s more than enough time for someone to hack you - without needing any vulnerabilities at all.

An attacker (your new “buddy,” jealous wife, coworker, or a honeypot girl) grabs your phone, goes into the Telegram Business settings, and binds a pre-prepared bot to your account.
You come back, pick up your phone, and suspect nothing. All your chats look completely normal, no bot notifications anywhere.

BUT! If a specially prepared new contact messages you (or if the bot initiates the conversation itself), the bot instantly intercepts the message. The bot lives on Telegram’s servers, so even if you turn off your phone, pull out the SIM card, and close all active sessions, it will keep reading your messages and processing triggers - because it has a direct API token to your account.

There is also another brilliant bug with scheduled messages. The hacker sends a message to themselves from your phone with the parameter “Send when the contact comes online,” then immediately deletes the chat on your side. Your interface looks perfectly clean. But when the condition triggers, Telegram’s servers still push the delivery event.

The takeaway is simple: An unlocked smartphone in someone else’s hands for longer than 10 seconds is already a compromised device.

It wouldn’t hurt to go check right now:

Settings → Telegram Business → Chat Bots

and make sure there’s no suspicious bot hanging there quietly forwarding all your data to someone.

[based @0x0based]

@Lotusfinance_io @SuiNetwork Congrats!

[Deeptrade @_deeptrade]

Margin Trading on Deeptrade is currently paused, we'll share more details asap.

Spot and Swap Aggregator are unaffected.

[DeepBook Protocol on Sui @DeepBookonSui]

Today we’re introducing Predict.

Onchain options have been stuck at ~$100M in TVL while perp DEX volume hit $7T+ last year. The gap is architectural.

Predict is the third composable financial primitive in the DeepBook stack.

Builders can create binary markets, options (calls, puts, spreads), leveraged products, and structured instruments that integrate directly with Spot and Margin.

Testnet is live. Mainnet coming soon.

Spot. Margin. Predict.

https://t.co/LBiMNNLYGx

[Dmitrii Kovanikov @ChShersh]

I miss the toxic tech culture of receiving 50+ code review comments.

Now everyone just pushes AI slop and doesn’t care as long as CI is green.

[based @0x0based]

@JonahAnthony00 @SocketSecurity lol so true

[Abdul @0x_Abdul]

april 2026 was the worst month ever in terms of defi exploits

~$635M lost in total, 28 incidents in 30 days:

1) apr 1 - drift - $285m
2) apr 3 - silo v2 - $392k
3) apr 4 - tmm - $1.67m
4) apr 5 - denaria finance - $165k
5) apr 9 - aethir - $423k
6) apr 12 - hyperbridge - $2.5m
7) apr 12 - subquery - $60k
8) apr 13 - dango - $410k
9) apr 13 - mona - $61k
10) apr 14 - zerion - $100k
11) apr 16 - rhea finance - $18.4m
12) apr 16 - grinex - $15m
13) apr 18 - kelp dao - $293m
14) apr 20 - juicebox v3 - $52k
15) apr 20 - thetanuts finance - $50k
16) apr 21 - volo protocol - $3.5m
17) apr 22 - kipseli - $80k
18) apr 23 - giddy finance - $1.3m
19) apr 25 - purrlend - $1.5m
20) apr 26 - scallop - $150k
21) apr 27 - singularity finance - $413k
22) apr 27 - zetachain - $300k
23) apr 28 - judao - $228k
24) apr 28 - quant - $138k
25) apr 29 - aftermath perps - $1.14m
26) apr 29 - sweat foundation - $3.5m
27) apr 29 - syndicate - $330k
28) apr 30 - wasabi protocol - $5m+

[deAlex @AlexSmirnov]

After the recent multisig/authority compromises, custody can’t stay a black box. Every lending protocol should raise the bar and publish a clear custody framework.

As a user I'd like to see, upfront:

- cap per asset (max bad debt if custody fails)
- who the custodian is
- governance addresses and their permissions
- upgrade authority addresses
- validator/consensus setup
- timelocks
- veto/emergency controls

Let's standardize this, and make risks legible.