Pie

Building AI quant infra | DeFi builder | Indie dev |
Blink 🖤

[Pie @PI25519]

发现很多perp dex的官方python sdk(例如hl)都用了eth-keys来进行EIP-712 + secp256k1 ECDSA 签名。但eth-keys默认是纯python实现，单次计算2.5–3 ms，如果有10个串行的请求，延迟就会增加到30ms，即使对于非高频交易场景也是一笔很大的开销。在上rust前可以先考虑用coincurve+预计算hash优化。

[Pie @PI25519]

@0xGali_btc @wallet @pharos_network 赎回也没用，这个活动，赎回的时候根本找不到入口，好不容易找到了，现在取款 pending 一个月了，写的 7 天

[Pie @PI25519]

Meet ASHOOT — the open-source alternative to Noxa 🚀

Fair launches by design.
Fully open-source contracts.
No black boxes.
Every rule can be inspected, verified, and trusted.
Built in public, for everyone.

https://t.co/dyrTPOQTeB

[Pie @PI25519]

@BitgetWalletCN @xStocksFi 你们android客户端的网页缓存问题啥时候能解决一下，打开所有dapp都要缓存，感觉这问题有一年了。。

[Pie @PI25519]

2026 可能会是 open-source toolchain 被收购最多的一年，对一直专注 infra 的团队来说确实是个好消息，感觉接下来会是 agent native 的 terminal， git 客户端，sandbox 的最好时代。

[VoidZero @voidzerodev]

VoidZero is joining Cloudflare.

Our mission stays the same: to make JavaScript developers more productive than ever before. Vite, Vitest, Rolldown, Oxc, and Vite+ remain MIT-licensed. Evan and the VoidZero team will continue leading them.

Cloudflare shares our commitment to open source. Together, we can keep investing in the tooling developers rely on every day, while bringing the Vite ecosystem and Cloudflare’s platform even closer together.

[Pie @PI25519]

@thsottiaux Manifesting Codex support for GPT-5.5 with a 1M context window. 🙏✨

[Pie @PI25519]

分享一个使用codex mobile控制电脑同时消耗中转站额度的配置方式 https://t.co/Un2tzAl9r3

[Pie @PI25519]

上半年基于ccxt vibe了很多交易框架，发现agent对ccxt的知识停留在很老的版本，比如https://t.co/dpECP9FC8I, 异步代理，demo trading需要重复的纠正，因此总结了此踩坑经验的skill。
https://t.co/a1o9UxIcXL

[Pie @PI25519]

LayerZero 除了有稀烂的开发文档，还有默认 1/1 的 DVN 配置😅 。大部分项目方也就是 impl 一下 OFT Adapter 而已，为啥不能像 Wormhole 和 CCIP 那样有一个官方的一键配置的合约和 Dashboard。

[Dune @Dune]

Following the KelpDAO hack, we built an open analysis of DVN security configurations across every active OApp on LayerZero over the last 90 days.

Of ~2,665 unique OApp contracts: 47% run a 1-of-1 DVN security floor, 45% run 2-of-2, and ~5% run 3-of-3 or higher.

As we know, KelpDAO's rsETH sat in the first bucket.

Open query, public methodology, feedback welcome:
https://t.co/7sQCMN1uCS

[Browser Use @browser_use]

We just gave every Hermes Agent a free cloud browser.

Use the Browser Use ecosystem in Hermes Agent for free
> Unlimited browser hours
> Free proxies
> Persistent authentication

@NousResearch 🤝 Browser Use

[Claude @claudeai]

Introducing Claude Managed Agents: everything you need to build and deploy agents at scale.

It pairs an agent harness tuned for performance with production infrastructure, so you can go from prototype to launch in days.

Now in public beta on the Claude Platform.

[Pie @PI25519]

不认为 DeFi 已死，打着 DeFi 旗号的 CeFi 项目应该纳入传统金融的监管范畴，特别是这种 2 个多签就能取走所有用户资产的项目。

[Hayden Adams 🦄 @haydenzadams]

People might accuse me of grave dancing for saying it

But we have to stop letting centralized things call themselves DeFi

Admin key can drain all funds? CeFi

Otherwise DeFi means nothing and it’s brand is destroyed

No admin key can drain any version of Uniswap for a reason

[Pie @PI25519]

1. durable nounce 模糊了焦点，问题在于 2 个多签被谁控制，为什么会签恶意交易，这跟助记词泄露没区别。
2.最初级的合约工程师也知道 proposer/executor 分离+timelock 吧，这是 squards 多签 内置功能。
3. “已经 TGE 项目不要存” by @MengLayer

[Velocity @VelocityDEX]

Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers.

This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution.

[𝘁𝗮𝗿𝗲𝘀𝗸𝘆 @taresky]

#Crypto

说白了，大部分项目方做协议，不就是为了最后一把掏吗😂

[Pie @PI25519]

@jin_asac 可以考虑给 npm 加一层防火墙https://t.co/BerHHtVcNo

[Chaofan Shou @shoucccc]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[Pie @PI25519]

package.lock+精确版本号 并不能锁定 peerDependencies，对于小团队来说只能是尽量控制外部依赖+CI/CD 层面的审计了。对于个人开发者，无脑 docker sandbox claude/codex。

[Cos(余弦)😶‍🌫️ @evilcos]

麻了，又又又一个知名模块 axios 被投毒，带毒版本 [email protected] 与 [email protected]。排查参考：
https://t.co/hHSQNO5JOx

[Vaibhav (VB) Srivastav @reach_vb]

https://t.co/II9ILcpPUX

[Pie @PI25519]

coding is becoming something you used to have to learn 😄
13 years ago i was stuck on stack overflow just to build a php + mysql site
now it feels like that was a century ago

[Sam Altman @sama]

I have so much gratitude to people who wrote extremely complex software character-by-character. It already feels difficult to remember how much effort it really took.

Thank you for getting us to this point.