0xVeteran

链上老炮 | 0xVeteran
经历过 3 轮牛熊 | AI 合约审计
Code doesn't lie, founders do
关注=少交学费 | Follow before you ape | NFA

[0xVeteran @0xVeteran]

是的，我不是今天被以太坊基金会解雇的员工之一，也不是那个每次价格上涨3%就负责卖出数千个ETH的家伙

[0xVeteran @0xVeteran]

币圈地震，全都用OPUS 4.8 找漏洞..... zcash:native 第一个倒下，谁是下一个。。。

[0xAA @0xAA_Science]

我还以为 Anthropic 说 mythos 模型太过强大，怕用于找漏洞一直没开放是危言耸听。
结果有人用 opus 4.8 找出了 $ZEC 无线增发的漏洞？
我准备找找 $BTC 和 $ETH 的漏洞

[0xVeteran @0xVeteran]

$ETH 看来到底了，准备开干。

[vitalik.eth @VitalikButerin]

Some of my perspective on where the @ethereumfndn is going.

First of all, this is only my own view. The board is not just me, and I have no extra special powers on the board that the other board members do not. @aerugoettinea is the one executing much of this transition. My input has been largely on technical questions. The board is in the process of expanding, and my own power within the org will continue to decrease, which is honestly what I want.

The 2025 era brought many important improvements to EF and its ability to execute. Many issues were resolved, and EF continues to benefit from its improved efficiency and greater focus on concrete goals to this day. And so with those problems resolved, early this year, the largest remaining hole that I perceived was something different nagging at me: I would regularly spot people saying things like "vitalik says these beautiful things about ethereum needing to be decentralized, and have privacy, and be a sanctuary technology, but why do the EF's actions not reflect that?"

Now, you may have been hearing something different. You may not have been sensing a feeling of crisis at all, and maybe were hearing people saying that finally we were taking execution and BD seriously and the main task for us is to keep going that way and be even better and faster. Then probably there is genuine difference between you and me, in what kinds of criticism I take most seriously, and what kinds of critics through their criticism are most able to make me feel pain.

As an analogy, let's briefly switch over to a different domain.

One belief you can have about Google is that it is a success story, and has brought a lot of good to humanity in organizing the world's information. Another belief you can have about Google is that they had a beautiful idealistic beginning, but at some point the corruption of mainstream corporate attitudes seeped in, and they slowly bit by bit completely abandoned the "don't be evil" slogan.

My belief on Google specifically is probably somewhere between the two. BUT, if you had taken me back in time to ~2008, and offered me a button to press to make Google one or two standard deviations more "dogmatic", eg. give Richard Stallman permanent veto power over some key policies, I would immediately press it.

Why? Because a choice for one company is not a choice for the world, or even one country. Google existed and exists in the context of a technology industry generally drifting away from early idealistic don't-be-evil roots and toward greed for financial gain, totalizing visions of accelerated superintelligence, infiltration by sociopaths, and craven capitulation to (or worse, active participation in) government pressure for ideological control, surveillance and war. And so *one company* doing something different, positioning itself to be what George Bernard Shaw calls the Unreasonable Man, resisting the trend of the times, would have been better for freedom, balance of power and stability of society as a whole, than *all* large companies bending to dominant trends. This is a part of my version of pluralism.

This line of thinking is not just mine, but I also is not too far off from what Aya and others had in mind with the Mandate.

Now how does this all get to the role of the EF?

EF is not a "center of Ethereum", rather EF is "one node, with a defined purpose, alongside other nodes". We've always said that the EF should be the latter, but many in the Ethereum ecosystem (and even within the EF) wanted us to be the former. Now, we are taking action to ensure that we will be the latter.

This is particularly important because EF is a limited organization, with limited resources and limited organizational capacity. The EF has only ~0.16% of all ETH (less than many other individual ETH holders), whereas among other blockchains it's common for "the central foundation" to have 10-50%. Fiscally, the EF was originally designed to fulfill a limited work scope defined in the token sale docs and other pre-launch materials (building the chain software; getting through Frontier, Homestead, Metropolis, Serenity), which was fully completed in 2022; it was not designed to be an eternal steward.

And so today, the EF is choosing to use its remaining resources to pursue longevity over breadth (yes, this means we sell less ETH). The EF focuses *specifically* on those activities critical to the success of ethereum as a censorship/capture-resistant, open, private and secure system, that would not happen otherwise. This means making hard choices, and in some cases even activities that we highly approve of and people that we highly respect becoming outside of the EF. People of great technical talent, public respect and even alignment with the mission and CROPS being outside of the EF is in fact necessary if we want important tasks to be able to attract outside capital. This also means the EF taking opinionated stands culturally.

This is all intended in cooperation with all other parts of ethereum. We recognize that many other parts of the ethereum world highly respect CROPS and related values. But highly respecting is not the same as choosing to specialize and totally dedicate to a domain (Compare in a different domain: I think reducing animal cruelty is important, and I like vegan food, but am not full unconditional vegan myself)

EF is still in a transition period, and we expect its new long-term form to stabilize over the next few months. What are the guiding principles of this new form? Again, I am only one person, but I can give my answer from a technical perspective (there are also critical non-technical aspects).

At the core, *Ethereum must be impressive*. We are living in an age of highly intelligent AI and all kinds of other technological acceleration. "Status quo EVM, with a hard fork or two a year to optimize for short-term needs of users" is not interesting.

To some, "impressive" means: 250ms latency and 1M TPS. I think Ethereum trying to go that route is a mistake. Being as fast and as scalable as possible, and only a small epsilon more decentralized than the others, is a route to mediocrity, and if we try it we will lose.

I think Ethereum should scale. But I think Ethereum should strive the hardest to be deeply impressive in a different dimension: the CROPS dimension. This means things like:

* Provably bug-free Ethereum. This is a goal that all cybersecurity researchers would have thought is absurd and impossible, up until roughly 6 months ago. Now, it's on the cusp of being possible, thanks to AI-assisted formal verification. So we should be frontrunners in doing this.

* Available chain consensus. Ethereum is, and with lean consensus will cotninue to be, the ONLY chain that has both (i) traditional-BFT style properties that it's safe under asynchrony up to a high level of fault tolerance, and (ii) the bitcoin PoW-style property that under synchrony it's safe up to 49% attackers. As far as I can tell, literally no other chain has this or is planning for it; bitcoin goes for (ii) only and most other chains go for (i) only. Some will remember I fought hard for this, Unreasonably insisting that it is not OK for ethereum to rely on social consensus and hard forks to rescue ethereum from 34% of nodes going offline. It's OK for chains like hyperledger, bnb, solana, tempo, etc. It's not OK for bitcoin or ethereum or eg. zcash.

* Intermediary minimization. The fact that smart contract wallets, protocols like railgun, etc have to send transactions through intermediaries to get included onchain is honestly embarrassing, and it's a constant point of fragility. Hence the work on FOCIL and EIP-8141 (and 7701 and years of work before) to make transaction sending intermediary-minimized with public mempool and strong inclusion properties, in a truly general-purpose way, that covers not just eg. secp256r1, but also privacy protocols and much more. Kohaku is pushing intermediary minimization at the user layer, pulling Ethereum away from the dystopian status quo world where our wallets don't even verify the chain, send our private data out to a dozen third-party servers, and toward a brighter CROPS future.

Some of these goals are Unreasonable - maybe Ethereum would be "fine" getting only 50% of the way - what if we depend on intermediaries, but make it easy to switch? But going 50% of the way would not make Ethereum Deeply Impressive in the CROPS way. So we push for 100%.

Fortunately all these goals are compatible with high TPS, this is a major focus of research (esp. on scaling the state). Well-designed L2s can also help, especially L2s optimized for specific applications (eg. high-volume trading, privacy...). These goals are even compatible with significantly lower slot times, thanks to Raul's work on erasure-coded P2P, and many other optimizations.

The most high-value "product" of the ethereum blockchain, financially speaking, is ETH the asset. Ethereum secures $250 billion of ETH. The types of properties of Ethereum that I mentioned above are very good for ETH the asset. Nearly 90% of my net worth is in ETH, and most of the remainder is ~$40m of onchain fiat of which every dollar has already been allocated for some open-source biotech or software or hardware initiative. That said, there are aspects of supporting ETH the asset - *necessary* aspects even - that are outside the scope of the EF. This is where we need other heroes (some of whom hold more ETH than the EF does) to step in and help. EF has been recently thinking more about how it will relate to other such organizations, and give them needed initial support.

EF will be a smaller ship than in previous years, a more opinionated one - in some cases more opinionated in ways that might be difficult to comprehend - but a longer-lasting one, and one suited to making sure that ethereum brings something meaningful to the world. We are grateful to all those inside and outside the EF who are helping to make this happen.

[0xVeteran @0xVeteran]

@satofishi respect!

[0xVeteran @0xVeteran]

F2Pool联创王纯@satofishi将参与 SpaceX 首次星际载人飞行任务并将作为任务指挥官,执行一次为期约两年的飞行:先行探索地球-月球系统外空间,然后飞掠火星后返回地球.所以说到了一定财富后,人的欲望会无限接近与0,开始思考人生的终极意 义.挑战未知,才是人类前进的意义.respect! 华人之光! To the Mars！

[SpaceX @SpaceX]

Fram2’s Mission Commander @satofishi is set to fly aboard Starship’s first interplanetary human spaceflight mission → https://t.co/7ehxZJSGXd

[0xVeteran @0xVeteran]

Step 3 (15s): Dextools 右侧面板 → 看 LP 是否 Locked
❌ Unlocked → 谨慎，仓位≤1%
Step 4 (10s): 看 Holders 分布 → 前 10 持仓%
❌ >60% → 直接跳过
Step 5 (10s): 看交易记录 → 有无可疑大额卖出
❌ 开盘即大额卖出 → 直接跳过text复制

[0xVeteran @0xVeteran]

Rug 风险快速自检流程（60 秒版）
Step 1 (10s): 点进合约地址 → Etherscan 看是否 Verified
❌ 未验证 → 直接跳过
Step 2 (15s): TokenSniffer 扫描 → 输入合约地址
❌ Honeypot/Mintable → 直接跳过

[0xVeteran @0xVeteran]

以太链上又出金狗了，$FLORK 合约地址：0xce82213c4bae42e1c04880ea64a53eef73e195de
我来审计如下：
３年前的老币了，
所有权已放弃，费用永久锁定为 0%
0 成本交易 - 你可以自由买卖，无需担心高额税费

[0xVeteran @0xVeteran]

@SherryAtBitMart @Anna_nanachan 太美了，在HK的可以去面基了

[0xVeteran @0xVeteran]

@EmberCN 说好的去中心化呢，不是说不是你的钥匙，不是你的币吗

[0xVeteran @0xVeteran]

2026回归第一天，说点真话。

99% 的新项目有 3 个危险信号：
1. 合约权限未放弃
2. 流动性锁定<6 个月
3. 团队匿名 + 无审计

我会在接下来的推文里，用 AI 工具拆解给你看。

想让我审计哪个项目？评论区见。

[0xVeteran @0xVeteran]

链上老炮 | 0xVeteran 正式回归。

经历过 3 轮牛熊，审计过 500+ 合约，见过太多项目方从"改变世界"到"卷款跑路"。

在这里，我只做三件事：
• 用 AI 拆解智能合约
• 预警链上风险信号
• 帮你少交学费

代码不会撒谎，但人会。
关注我，在 FOMO 之前先问代码。

#Web3 #AI #链上审计

[0xVeteran @0xVeteran]

telegram隐私关闭陌生人加我好友或发消息给我，即可防止这类诈骗.我以前也被骗过，某个币预售，但这个人仿冒官方 发消息给我发eth到指定钱包即可获得额外代币等等。。。还有很多骚扰信息，防不胜防。隐私关闭就可避免这类信息了。。。

[Cos(余弦)😶‍🌫️ @evilcos]

⚠️类似假 Safeguard 这种盗 Telegram 号套路的已经在大力宣传自己的能力了，比如这个视频可以看出其盗号过程：

发 Telegram 消息给你 -> 引导你做验证 -> 你输入 Login code -> 骗子拿到你的权限信息 -> 接管你的 Telegram 账号 -> ...

之后就是找到相关 bots 里的私钥，然后盗走资金，如果能完全接管你的 Telegram 账号，下一步会用你的号去骗你的朋友们。

类似伎俩已经出现许多变种，比如现在偶尔会收到一个陌生 Telegram 消息，提醒你的号存在风险，然后引导你做相关安全验证。记住一个粗暴的辨别方式：一切要你做安全验证的，不管看去多么的像 Telegram 官方，全都是骗局。

如果你识别不好，可以咨询我。不过需要注意，我这人战斗力极强，效率极高，上来别废话，比如问“在吗？”“能不能帮帮我？”之类的。直接留问题就行，越清晰越好，节省你我时间。另外，别消息轰炸我。

[0xVeteran @0xVeteran]

@0xAA_Science 有没有可能设置了到某个时间点自动发帖。。。。。

[0xVeteran @0xVeteran]

@evilcos 这不是内部人员，牛都不信.....

[0xVeteran @0xVeteran]

@evilcos 不可思议，如果不是有内鬼的话，那这个黑客是个天才.....

[0xVeteran @0xVeteran]

@DujunX 推特名人爆料：假装一次被盗号，给 200w u报酬，怪不得推特这么多“盗号”的。去TMD.....

[0xVeteran @0xVeteran]

@evilcos @AVGFree @kaspersky @Malwarebytes 多装几个是不是更安全了，防止某个杀毒失效。

[0xVeteran @0xVeteran]

@SamfuZs 联系我 我真送以太..... CALL me...

[0xVeteran @0xVeteran]

有意思，谨慎授权和签名.

[OKX中文 @okxchinese]

充满期待打开一个活动链接
以为大奖唾手可得
以为美食、豪车，应有尽有
不过，那可能不是机遇，而是
……

警惕钓鱼链接，提防恶意授权
时刻 #保持怀疑