the state of our industry is that:
- just found og merch in a charity shop
- i bought it
= this oxfam did more revenue than half of the live chains out here
Doing research with agents is fun until they blow way past budget, jumble the sources, and don't even give you the best possible answer, just sound confident.
Oh and research on local data - no idea where it gets leaked.
I built mole to solve this.👇🧵
https://t.co/n7wqbiVpaF
This expresses how I think it is the right way to build interop tokens. It is not cheap, but it is worth it if your token has an ambitious future and vision to be everywhere.
- Issuer co-owns or full own the product
- Decide when to finalize a mint, regardless of the security model (even for rollup bridge wrappers) and monitor your balance sheet
- Add circuit breakers and rate limits so that everyone can measure the risk, and not just assume "infinite impact"
If you want velocity and are concerned about censorship, then intent protocol like the OIF is for you.
If all of this is done through existing standards and lines of collaboration, then we can ensure a clean future for RWA.
Let RWA issuers be properly aware of blockchains.
Hot take: DeFi doesn't have a smart contract security problem. It has a key management problem.
April's biggest losses (KelpDAO $292M, Drift $285M, Wasabi $5M) were admin key compromises. No timelocks. No multisig.
Write better code all you want. But the ops problem still remains.
Let me be clear what I am saying and not saying:
I am NOT saying: let's forcibly shut down protocols (we can't), or let's only use the largest ones, or that teams shouldn't build new protocols.
I AM saying: there are a lot of zombie protocols out there with basically the front doors unlocked and no one inside anymore. These are like blighted homes and we need to get rid of them, or the whole neighborhood will suffer.
The way we change that is by CHANGING THE NORMS around shutdowns and giving these founders a graceful way to exit. Right now there is no playbook on how to wind down a DeFi protocol, and we need to make one, ASAP.
Wonderland built Canon Guard to remove the off-chain blind spots in Safe transactions.
It’s open source and free to use. If you operate a Safe, this matters.
To support our Canon Guard public good, contribute through the @thedaofund's Quadratic Funding round supporting Ethereum Security.
https://t.co/GbVcWuRpBS
15 ways Ethena can have a fund loss 🧵
Ethena has been reviewed and it is a memorable review given the variety of risks users face when using it
Onchain admin risks, protocol design, operational failure or external dependencies, there are many ways in which this protocol could lose funds
Exploits are the symptom, the lack of operational standards is the problem.
If you're afraid your company might be next, let's chat.
We built something to harden your defense.
The threat landscape has fundamentally shifted. Every company shipping needs to level up their Operational Security NOW.
Axios, Resolv Labs, Drift Protocol, LayerZero + Kelp, Vercel, Lovable, CoW Swap, Zerion, Silo Finance: all compromised in the last few weeks.
This is not a bad stretch. It's the new baseline. And it's going to get FAR worse before it gets better.
No one is prepared for what's coming.