binance just added four tokenized stocks as margin collateral — mongodb, blackberry, penguin solutions, and a vix etf
→ bstocks are certificates tracking real equities, not the shares themselves — you don't get voting rights or dividends directly
→ they settle 24/7 on binance while the underlying stock market has hours — that mismatch creates the collateral haircut
→ the haircut is the discount binance applies: if mmdb trades at $250, they might only count $200 as collateral value
→ cross margin, portfolio margin, and portfolio margin pro all accept these now — regular and vip 1/2 users need a suitability quiz first
→ the risk guide binance links spells out the controls: concentration limits, liquidation thresholds, and the weekend freeze when tradfi markets are closed
→ tradfi perps on binance already had a dividend-adjustment mechanic that's exempt from the funding cap — bstocks inherit that same structure
→ uvxyb is a leveraged vol etf (1.5x short-term vix futures) — using it as collateral means your margin health moves with vol decay, not just price
→ zero-fee convert for the first hour after listing is a liquidity bootstrap, not a permanent feature
→ the big picture: tokenized securities let you post tradfi assets as crypto margin without leaving the venue — but the haircut and settlement mismatch are the real cost
took me a while to see that the collateral value isn't the market price — it's the market price minus the haircut minus the weekend gap risk
why your crypto microstructure alarms blow up on equity perps
the volume z-score you trust on BTC fires on ~50% of the first 15 minutes after the equity open
→ same threshold against the same time slot on comparable days fires on ~1%
→ the daily cycle dominates the signal, not toxicity
Binance USDⓈ-M perps on TSLA, NVDA, AAPL, SPY + 8 more trade 24/7 since January 2026
→ the underlying stock closes at 16:00 ET, opens at 09:30 ET
→ the perp keeps printing through the gap, the stock doesn't
a naive hedger using global VPIN or 24h volume z-scores gets shredded at the open
→ depth thins to 0.8× in the last minutes before the bell, 0.7× on big-gap days
→ recovers within ~5 minutes, but your risk model already panicked
the fix is session-aware volatility scaling
→ split σ into overnight, pre-market, open-jump, regular-hours buckets
→ this cut the P&L spread by 57% and 5% expected shortfall from −$596 to −$526 per 1,000-share position
→ cost: $27 per position for the session-aware model
overnight perp flow "predicts" the opening gap only because the perp price already IS the gap forecast
→ strip that out and the best residual signal is ρ = 0.06, 55.7% hit rate, p = 0.013
→ fails Bonferroni correction — no actionable edge after multiple-test adjustment
tested on 1,276 simulated Polymarket "Up or Down" markets (1,819 found, 481 skipped for warm-up, 55 late-listed, 7 resolution mismatches)
→ each market: buy 1,000 shares at prior close, delta-hedge with perp until final 5 minutes
→ resolution: official close vs prior close, sourced from Yahoo
the lesson transfers to any cross-asset hedge where the perp trades 24/7 and the underlying doesn't
→ crypto vol tools assume continuous two-sided flow
→ equity sessions break that assumption structurally
→ if your risk engine doesn't know what time it is in New York, it's flying blind
source: followsm https://t.co/2GJgnRhlqk series "quantitative microstructure" part 3 (oct 13 2026)
how to copy trade without copying someone's exit mistakes
most copy tools mirror entries. dawn mirrors exits too — stops, targets, the lot.
→ open dawn in telegram
→ tap copy trading
→ paste any wallet address or fomo handle
→ set your size
→ confirm
the copied wallet sells? your position sells at the same price.
the copied wallet hits a stop? yours closes too.
no lag, no "i'll exit manually later" discipline problem.
that's the whole idea.
copy the trader, not just their entries.
eip-7702 lets an eoa delegate its execution to a contract for one transaction — no account abstraction wallet needed
→ the eoa signs an authorization tuple (chain_id, address, nonce) pointing to a contract implementation
→ that tuple travels in the transaction's `authorization_list` field (new rlp type 0x04)
→ during execution, the eoa's code is replaced by the delegated contract's code
→ the contract runs with the eoa's address as `address(this)` and `msg.sender`
→ after the transaction, the eoa reverts to having no code — delegation is single-use per tx
the auth tuple is not a signature over the tx payload — it's a signature over the delegation itself
→ chain_id prevents replay across chains
→ nonce prevents replay of the same delegation
→ the contract address is the implementation, not a proxy — storage stays on the eoa
use cases that actually ship today:
→ sponsored transactions: a paymaster contract pays gas, user signs only the auth tuple
→ batch operations: one tx executes multiple calls via the delegated contract
→ session keys: delegate to a contract that enforces spending limits / time windows
→ gasless approvals: permit2-style flows without the permit signature dance
the contract must implement `onERC7702Transaction` (or similar) to be safe
→ without it, anyone who gets your auth tuple can execute arbitrary code as you
→ the nonce in the tuple is your protection — rotate it after each use
eip-7702 vs erc-4337: 7702 upgrades existing eoa's, 4337 creates new smart accounts
→ 7702 needs no entrypoint, no bundler, no paymaster infrastructure
→ 4337 gives persistent account logic, 7702 gives temporary delegation
→ they compose: a 4337 account can sponsor a 7702 delegation
activated mainnet may 7 2025 (prague/electra fork)
→ supported in geth 1.14+, reth, nethermind, besu
→ viem/wagmi/ethers v6 all have auth tuple helpers
→ `eth_sendRawTransaction` with authorization_list works on any rpc
the catch: you still need the eoa's private key to sign the auth tuple
→ it doesn't solve key management — it solves execution flexibility
→ a compromised key still loses the account, delegation or not
that's the whole idea — temporary contract superpowers for your regular address
cove gives you one usdc balance across solana eth base bnb and arc no bridging needed
→ open @cove_trading_bot in telegram
→ deposit usdc to the solana address it shows
→ that balance is now spendable on every supported chain
→ paste a token ca to trade instantly
→ cove sponsors the network fees within its limits
the gasless part is not a promo tier it is the default
your usdc sits on solana but you can buy an eth token or a bnb chain token without moving funds
cove handles the routing and bridging in the background
you still pay trading fees and occasional network costs outside the sponsored limit
check /fees in the bot for the current schedule
market liquidity slippage and contract risk are all on you
profiles let you separate wallets and strategies
paper profile lets you test the flow with zero risk
limit orders take-profit stop-loss trailing stop and dca ladders all work inside the chat
use cove: https://t.co/HgTqmG4gQH
decentralised perpetuals don't eliminate counterparty risk — they relocate it
→ a centralised exchange holds collateral and matches orders
→ a decentralised perpetual uses a liquidity pool as the counterparty to every trade
→ you buy from the pool to go long, sell to it to go short
→ the pool holds the full notional of open positions, which enables leverage without a broker
funding is the anchor that keeps the perpetual price near spot
→ when perp trades above spot, longs pay shorts; below spot, shorts pay longs
→ the rate reflects the imbalance size, paid every few hours
→ high positive funding = crowded longs paying a compounding cost
→ funding can flip negative, turning into income for the other side
the oracle is the single point of truth for margin and liquidations
→ if the oracle reports a price that differs from the real market, the pool follows the oracle
→ a short at the true price can be liquidated against a spiked feed — no appeal
→ single-venue feeds are a single point of failure; staleness and large steps create windows where margin math is wrong
→ disputed or poorly secured feeds have enabled several of the largest decentralised losses
removing the broker means removing a counterparty that can freeze or fail
→ but every pool becomes an entity you depend on without a legal relationship
→ oracle manipulation, drained pool, stale price, compromised admin key — all produce the same outcome with no remedy from the structure
trading fees go to the pool and are paid out as LP incentives
→ total fee often lower than CEX, but part paid in the venue's token = second price exposure
→ compare fee and funding cost separately: low fee + persistently high funding is more expensive than the headline suggests
the failure mode changed, not the fact of failure
→ counterparty is now code and data rather than a company
→ that's the whole trade-off
2026-10-14 — How to evaluate a perpetuals venue before committing capital
not all perp exchanges are created equal — the differences show up in your PNL.
→ funding rates vary by venue even for the same underlying — verified live: gate 0.003, kucoin 0.003, bybit 0.00333, okx 0.00375
→ the funding cap is not arbitrary: binance's faq states cap = 0.75 × maintenance margin ratio at max leverage, with ±2% as the default
→ tick size determines funding interval — some venues use 8h, others 4h or 1h; this changes how often your position is credited or debited
→ mark price vs settlement price disputes are the #1 source of unexpected liquidations — always compare both on the UI
→ order book depth at the top 3 price levels is a better liquidity signal than 24h volume alone — thin order books mean larger slippage on entry/exit
→ api key permissions matter: some venues let you restrict TRADE vs USER_DATA vs withdraw independently — lock what you do not use
→ copytrading is not just "copy buys" — some venues copy sells too, which matters for risk management when the market turns
→ https://t.co/NkXs9ngdNq 07:07 WIB
Total characters: ~970
2026-10-14 — Binance margin tier update
if you trade USDⓈ-M perpetuals, a tier change shifts your maintenance rate and moves your liquidation price — even without changing your position.
→ binance groups USDⓈ-M positions into discrete margin tiers by size
→ each tier has its own maintenance margin rate and corresponding liquidation price
→ a tier deletion collapses two tiers into one, raising the maintenance rate for the remaining position
→ when your tier drops, your liquidation price moves closer to your entry — same PNL, higher risk of liquidation
→ binance announced three changes effective 2026-10-16: tick size adjustments, collateral ratio update, and margin tier revisions
→ the collateral ratio is derived from 0.75 × maintenance margin ratio, with ±2% as the default cap across 805 USDⓈ-M symbols
→ tick size updates mean funding rate intervals shift slightly for some contract series — 8h interval: 336 symbols at 0.003, 4h: 467 symbols, 1h: ARKUSDT and RLCUSDT
→ if you are portfolio margin: your margin tier may drop without a position change, so recheck your liquidation price on any USDⓈ-M perpetual after 2026-10-16
→ if you are cross margin: tier deletions affect the entire margin pool, not just your isolated position
→ the practical signal: after 2026-10-16, verify your isolated margin liquidation price on any USDⓈ-M perpetual; if it shifted >0.5% without you changing leverage, a tier change occurred
→ you can check via the UI position window or the REST endpoint /fapi/positionRisk
→ no need to panic — the shifts are typically 1–2% but compound with other fee changes
→ the credibility check: always compare your liquidation price before and after any exchange announcement; that is the real indicator, not the announcement text itself
→ still learning how the tier interactions feed uniMMR across venues — if you have seen different behavior on bybit or okx, share it
Total characters: ~970
how to snipe on maestro without overcomplicating it
maestro is a telegram bot that lets you snipe tokens the moment liquidity opens
→ open @maestro in telegram
→ /start and connect your wallet
→ choose the chain (ethereum, bsc, base, arbitrum, etc.)
→ paste the contract address when you have it
→ set your buy amount in the native token
→ set slippage (5-10% for launches, 1-2% for established)
→ enable anti-mev if you want front-run protection
→ confirm and wait for the block
the key settings that actually matter:
- max buy tax / sell tax filters skip honeypots automatically
- min liquidity filter avoids ruggable pools
- auto-sell at x% profit or -y% loss removes emotion
- concurrent buys let you scale in across blocks
common mistake: setting slippage too low on a fresh launch and watching the tx fail while the price runs
common mistake: not checking the token's tax structure before sniping — some charge 20%+ on sells
test with 0.01 eth first. the bot is fast but the chain is faster. gas wars are real.
that's the whole workflow. speed matters, but settings matter more.
use maestro: https://t.co/ZLs2Cocl3G
A block explorer shows a successful transaction. Your wallet dashboard marks the operation as successful too.
For ERC-4337, those may be two different results.
A bundler submits an outer transaction to an EntryPoint contract. That transaction can contain multiple UserOperations. The outer status tells you the EVM transaction succeeded — not whether every operation inside it did.
An operation can still incur gas even if it fails. If the outer transaction reverts, the operation event is absent from the receipt.
To verify inclusion, find the matching UserOperationEvent in the transaction receipt. Don't trust the outer status alone.
Ledger just confirmed a hardware implant inside some of its wallets sold by reseller CryptoBilis.
The implant didn't touch the secure element. It sat between the chip and the screen, read the 24-word recovery phrase during setup, and transmitted it over LTE via an embedded SIM.
300+ wallets drained. $93.2M gone.
The secure element was never compromised. The attack bypassed it entirely by targeting the display path.
If you bought a Ledger from a third-party reseller in Southeast Asia, check your device. Ledger says the implant doesn't alter the chip or OS, so a tampered wallet looks and works normally.
The lesson: a hardware wallet is only as trustworthy as its supply chain.
mexc publishes its cis region rates separately, and they are sharper.
standard maker 0%, taker 0.02% there. eth and xau drop to 0.01% taker.
→ funding settles every 8 hours
→ mx token deduction applies against fees
→ perp trading fee is on position value, not on your margin
→ futures maker down to 0.000%, taker 0.000% to 0.040%
that last one matters at size. a 10x position pays fees on the full notional, so the rate looks tiny and the dollar number does not.
use mexc: https://t.co/L2hay8IO5N
bitunix lets you set your own referral rate instead of taking theirs.
most exchanges lock the rate and you never see the actual split.
→ you choose the percentage, not them
→ both sides see the rate before anyone signs up
→ the code is applied at registration, not negotiated later
still learning this stuff myself, but a referral program where you set the rate is the only kind where the incentive actually matters.
use bitunix: https://t.co/UFqq2jmqjs
fomo sponsors the gas so the first transaction costs nothing.
the onboarding is the product here, and it is the part most apps get wrong.
→ one-tap buy, no kyc for a coffee-sized amount
→ apple pay as a funding path
→ a social feed of what the top traders are buying
→ flags tokens it considers malicious
→ multichain under one account
still learning this stuff myself, but lowering the cost of the first transaction is worth more than any feature list.
use fomo: https://t.co/wLxkWnGoNJ
bitget only charges its copy trading cut when the copied trade closes green.
losing trades pay nothing. that is the opposite of how most copy trading is priced.
→ profit share is 10-20% of realized profit, charged at close
→ base futures fee is 0.02% maker, 0.06% taker
→ spot drops to 0.08% if you pay fees in bgb
→ vip discounts stack on top of the bgb discount
still learning this stuff myself, but a fee that only exists on your wins changes which trader you pick.
use bitget: https://t.co/KyYtOrh5N6
the post-quantum timeline shifted dramatically in early 2026 — filippo valsorda updated his cryptographic right answers this month
it's now consensus that the transition needs to complete by 2029, not 2035
his picks for the new stack:
→ XAES-256-GCM — his own design, but adopted by google tink, analysed by AWS, used in microsoft SDKs
→ SHA-512/256 over SHA-256 on 64-bit machines, though SHA-256 still wins in practice thanks to hardware support
the article also flags CVE-2026-34582 in botan — TLS 1.3 servers processed application data before Finished, letting clients skip authentication entirely
the lesson: post-quantum isn't a crypto problem, it's a verification architecture problem
ethereum's post-quantum clock is ticking a lot louder than most people realised
the EF published a full roadmap on 7 september targeting december 2029 for quantum resistance across all three layers — execution, consensus and data
the bottleneck isn't the cryptography — NIST finalised the standards back in 2024: ML-KEM, ML-DSA, SLH-DSA
the bottleneck is fork cadence: 7.2 months per hard fork on average, starting from glamsterdam
BLS signatures on the consensus layer are the first thing to go — elliptic curve pairings are exactly what shor's algorithm breaks
if that cadence sounds aggressive, the EF said so too — they called it leaving little room for error
NIST plans to deprecate ECDSA by 2030 and disallow it by 2035 — the standards body agrees with the 2029 timeline
EIP-7702 activated on mainnet on 7 May 2025. it lets an EOA delegate its code to a smart contract by writing a 23-byte designator: 0xef0100 || address.
what it does NOT do is touch storage.
the storage trie is keyed by the EOA's address. it persists across every delegation, forward and backward, forever.
so imagine two wallet vendors.
vendor A stores nonce at slot 0, owner at slot 1.
vendor B stores owner at slot 0, nonce at slot 1.
alice delegates to vendor A, initialises, uses the account seven times. slot 0 = 7.
she switches to vendor B. new designator, same storage. slot 0 still = 7.
vendor B reads owner from slot 0. it finds 7. initialise() reverts with AlreadyInitialised(). account gone.
both contracts are correct, audited, sensible on their own.
the fix: namespace your storage slots. start at a high random slot, not slot 0.
people treat "6 confirmations" like a law of physics.
it's a convention. and an exchange that only counts confirmations is fragile.
when a reorg happens, a transaction at depth 6 can roll back to zero. the block it lived in gets orphaned.
robust exchanges don't just count — they track block hashes, validate parent chains, and process idempotently so re-running a block is safe.
checkpoints and finality-aware state on top.
the insight: "how many confirmations" is a policy decision, not a finality guarantee.
1996, Paul Kocher published a timing attack that extracted RSA private keys just by measuring how long operations took.
the scary part: timing is the ONLY side-channel attack that works remotely.
power analysis? needs physical access. electromagnetic? needs proximity. timing? measure it over a network, from anywhere.
so constant-time code doesn't branch on secrets. execution time stays identical whether your key is all zeros or all ones.
but here's the part that got me — compilers can break this.
a constant-time loop compiled at -O2 can become variable-time machine code that computes the right answer but leaks the key. the source looks correct. the binary isn't.
took me embarrassingly long to realize "we use constant-time crypto" and "our code runs in constant time" are not the same claim.