The only Cartel crypto needs.
Started as an @OlympusDAO fork and now after the redesign, they have developed the most interesting Defi applications.
A 🧵 on @redactedcartel.
This incident is unrelated to Squid’s core protocol and contracts. All Squid users and integrators are unaffected and no action is needed.
A third-party Gnosis Safe module was exploited today across Base and Ethereum, resulting in approximately $3.2M in losses. The vulnerable contract is verified on Basescan under the name “SquidRouterModule” but this contract was not built, deployed, or operated by Squid. It is a third-party smart-wallet product that chose to integrate with Squid, among other protocols, but has not been in contact with us.
The exploit worked because the third-party module accepted a caller-supplied constant string as proof that a message was secure. If you pass in this string (which is publicly available in the verified contract’s code), then you can execute an array of arbitrary calldata, stealing funds at will. The victims’ Safes had added this faulty contract as a trusted Safe Module, which gives the contract the ability to spend any tokens in the Safe without signatures. Squid’s own router (0xce16F69375520ab01377ce7B88f5BA8C48F8D666) is architecturally different and was not touched. Squid user funds, approvals, and integrations are fully secure.
Early public reporting may reference “SquidRouter” due to the contract’s verified name on Basescan. The accurate framing is: a third-party SquidRouterModule was exploited, not Squid’s Router contract. The contract shares our name but is not our code. We are monitoring the situation and will share updates if anything changes materially.
im a big fan of HL, jeff, & shoku
they are excellent
I have noticed though a certain class of .HLs, who are obviously new here, disrespect toly in increasingly cheap ways
toly is a monumental mind in the trajectory of crypto
ppl dont remember now but there was a long and aggressive period of time where we had to fight every single day, for years, to show that actually you CAN scale crypto to planetary scale and that the ethereum way is not the only option
this took an immense amount of work in spite of tremendous setbacks and many near death moments but now the engineering bar in crypto is meaningfully different than before toly. solana has created hundreds of new startups and businesses
the dude is rich beyond belief, has nothing left to prove, and instead of checking out like 99% of people here, shows up every single day and has fun doing it
you can and should criticize many things about solana, but personal attacks against one of the very rare instances of a missionary founder is unserious and will do nothing but give solana founders free and limitless energy
coinbase - "so what's the pitch"
jeff - "you give us $200m a year"
coinbase- "ok what do we get"
jeff- "you get to watch us burn it"
coinbase - "deal"
hyperliquid
Checked some other popular OFTs (LayerZero based crosschain tokens)
@EtherFi requires 2 DVNs confirmation
@ethena requires 3 DVNs confirmation
@USDT0_to requires 2 DVNs confirmation
Even ZRO from @LayerZero_Core themselves requires 2 DVNs before executing a transfer.
Two questions will need answers:
(1) how and why did Kelp oversee this critical configuration?
(2) how did @aave and DeFi in general allow interoperating rsETH at such a scale given this poor configuration?
People might accuse me of grave dancing for saying it
But we have to stop letting centralized things call themselves DeFi
Admin key can drain all funds? CeFi
Otherwise DeFi means nothing and it’s brand is destroyed
No admin key can drain any version of Uniswap for a reason
In the EU Inc, where did the red tape lobby succeed to sneak in & where we ask everyone to push back? (repost!)
Look at article 14, where notaries sneak in.
What notaries have succeeded so far, is to prevent the digitalization of company law, prevent speed & prevent affordability 1/4
Germany's Merz:
China builds the world’s largest solar farms within a few months.
In the EU, it takes years just for the project to get approved.
Therefore, I propose to implement a fundamental principle in most permitting processes: Any project that is not treated within a few weeks or months will be regarded approved automatically.
Hyperliquid has quietly achieved an important milestone of becoming the most liquid venue for crypto price discovery in the world. See below for side by side comparison of BTC perps on Binance (left) and Hyperliquid (right).
With HIP-3 teams leading the way, Hyperliquid has also grown to become the most liquid venue for perps on tradfi assets. Thank you to everyone's hard work as we upgrade the financial system and house all of finance.
Integrity has always been one of Hyperliquid's core values.
The house of all finance must be credibly neutral. This means no private investors, no market maker deals, and no protocol fees to any company.
The initial state of any blockchain is a crucial part of its story that can never be erased. The original ethos of Bitcoin was a permissionless network accessible to all. Hyperliquid's genesis distribution followed this spirit, going entirely to early users with core contributors excluded. The full distribution is verifiable onchain without obfuscation.
This principle of fairness frustrates a few users and builders who are used to special treatment. It means that Labs has zero tolerance for team members with integrity yellow flags. It means we do things the hard way as a community. But the world deserves a financial system owned by the people, where fairness to all users is in the DNA. Nothing else is worth building.
I will try this once
xmr and certain btc folks,
there are devs writing privacy code in literal jail right now
trump is president, we have a window to finally make progress and make privacy normal again all over crypto
when zcash succeeds, things like monero also succeed, all privacy succeeds, and all of crypto's cypherpunk origins succeed
there will be plenty of time to in-fight
until the current administration is not favorable anymore, let's full send privacy systems as much as humanly possible before it's too late
we need to work together to make as much progress as possible
you can simply buy multiple coins
@MrDegenWolf you retard the reverted txn means the chain is up lmao
it simply means slippage exceeded 🤣
solana had 0 degradation
on the other hand, your new home was literally down
shalomtardio
Leveled up in the Great Gas Reckoning with ETHGas! 💪
Baby Jack status: 0.022 ETH gas spent, 4 Beans earned—supporting the Gasless Future!
Claim your Gas ID at https://t.co/eCBYi7hg0h
Dear Monero Community
Please support that proposal!
We need XMR on a DEX and @THORChain is our best shot at this. If you need a hand with this we are here✊ @jpthor