Ryūkō

Ryūjin-shi @yamatadotio
- Don't trade IOUs -

[Charles Guillemet @P3b7_]

👉For 4 years, 1 day, and 10 hours, anyone who understood the Orchard circuit could have minted ZEC out of thin air, silently, with no on-chain signature. The bug was disclosed this week. It was found by an AI-driven audit running Opus 4.8, not by an attacker.

1. Call the bug what it is
Two lines in halo2's variable-base scalar multiplication gadget used assign_advice() where copy_advice() was required. As a result, the diversified-address integrity check pk_d = [ivk]·g_d could be satisfied for arbitrary inputs. A malicious prover could spend the same note multiple times with different nullifiers, i.e. counterfeit ZEC inside the Orchard pool, undetectable on-chain because the privacy of the ZK proof hides exactly the inputs that would reveal the attack.

We do not know whether it was exploited. We will probably never know.

2. Four years. Multiple audits. Top-tier reviewers.
Orchard was reviewed by some of the strongest cryptographers in the field before activation. They missed it. Earlier automated audits with Opus 4.7 missed it. Opus 4.8 catches it in roughly 1 in 4 runs when prompted generically. The bug is hard.

And ZK inflation bugs are not new. Zcash itself shipped a counterfeiting vulnerability in Sprout (BCTV14) that survived years before being silently neutralized during Sapling. Similar soundness issues have appeared in circom, halo2, and rollup verifiers since. The pattern is consistent: when the protocol is private, exploitation is undetectable. You patch the bug and hope.

3. What Zcash did right
This was a textbook decentralized incident response:

▶️Audit: a full AI-assisted soundness audit of halo2 + Orchard, scoped end-to-end.
▶️Discover: the agent flagged the missing constraint and worked out the algebra to turn it into an exploit. A working RPC-level PoC in ~6 hours, mostly waiting on tokens.
▶️Coordinate: a soft fork disabling Orchard, prepared and distributed without leaking the bug, activated 2 days and 15 hours after acknowledgement. Coordinating a soft fork across miners, exchanges, and nodes without disclosing why is genuinely hard. They did it.
▶️Disclose: timeline, code lines, math, open questions. No spin.
Worth naming explicitly: Zcash's turnstile invariant caps the value that can ever leave a shielded pool by the value that entered it. Privacy and verifiability inside the same protocol. That is not an accident. That is good engineering, and it is what kept the worst case bounded.

4. The economics of security just changed
AI does not change whether bugs like this exist. It changes the cost of finding them. I wrote about this https://t.co/AeurraJXhB: a missing constraint in a 4-year-old production ZK circuit used to require a top-tier cryptographer with months of context. It now requires a few tokens, an API key, and a well-framed prompt.

The defender benefits. The attacker benefits more, they only need to find it once, and they never disclose.

Orchard is the optimistic version of this story: defense got there first. The pessimistic version is the one we cannot rule out, because the chain is private by design.

5. The only real exit
You do not patch your way out of this asymmetry. You raise the floor.

Formal verification of consensus-critical circuits, every assign_advice audited by SAT solvers and AI for under-constraint, as the reporter himself recommends. Proof-grade engineering that used to be too expensive is now cheap enough to be mandatory.
Hardware roots of trust, secure enclaves, certified secure elements, WYSIWYS. Cryptographic guarantees the user can actually verify, not promises a host can lie about.
Continuous AI-assisted audit of every consensus-critical commit, re-run immediately on the release of any new frontier model.
Zcash didn't just patch a bug. They demonstrated the new defensive playbook: AI-driven audits, decentralized coordination, radical transparency, verifiable invariants. That is the direction the rest of the industry needs to follow.

And those who don't raise the bar for security will be rekt in this new world.

Stay safe. Stay honest about your trust assumptions.

[BNB Chain @BNBCHAIN]

🔶 @Yamatadotio

[Ryūkō @Ryuko0x]

Yooo 😀

[BNB Chain @BNBCHAIN]

Build N Build

Here are the projects that have recently gone live on BNB Chain 👇
https://t.co/9LQ9ClWKvO

Note: This post is for informational purposes only and not financial advice. DYOR.

[Ryūkō @Ryuko0x]

@RaminNasibov

[Ryūkō @Ryuko0x]

@Yamatadotio @BNBCHAIN

[Yamata @Yamatadotio]

https://t.co/2msZprHqeN is live on @BNBCHAIN!

The financial layer that turns prediction positions into productive capital. Borrow against them. Lend stablecoins for yield. Loop your conviction up to 4x. Deploy markets that don't exist anywhere else. Plug into the ones that do.

Get started: https://t.co/jhoU56upTH

Full piece: https://t.co/kUo5i4UC7h

[Ryūkō @Ryuko0x]

@OndoFinance RIP

[Dean Eigenmann @DeanEigenmann]

you could probably dig up a bunch of 2017 whitepapers and build them into unicorns now

lots of that shit was moonshots that were 10 years too early

[poof @poof_eth]

Had a Jane Street interview in 2013 that still bothers me.

It was my 6th round. Final interview. The guy walks in carrying no laptop, no notebook, just a cold brew and what I later realized was a single IKEA tea candle.

He writes on the whiteboard:

food: $200
rent: $800
utilities: $150
candles: $3,600
family: dying

Then he turns around and says, “Optimize.”
I laughed because I thought it was a culture-fit bit. He did not laugh.
So I said, “Well, obviously you spend less on candles.”
He says, “Assume candles are non-discretionary.”
Okay.

I start building a model. Basic constraint satisfaction. Family survival as a soft penalty. Candles as a state variable. Maybe there’s an arbitrage where you buy wholesale paraffin and convert the $3,600 line item into inventory.

He stops me.

“You’re thinking like a consultant.”

That’s when I knew I was in trouble.

He says, “Give me a bid-ask on family dying.”

I say, “What?”

He says, “You’re long candles, short family. Where do you make markets?”

I try to recover. I say the real issue is liquidity: rent and utilities are fixed, food is elastic, candles are emotionally inelastic. Therefore the optimal strategy is to securitize future candle enjoyment and borrow against it.

He nods for the first time.

Then he asks, “What time do you sell the candles?”

I say, “Whenever the market is liquid?”

He says, “Be more specific.”

I say, “Uh… 10 a.m. Eastern?”

For the first time, he smiles.

He goes, “Every day?”

I say, “Every day.”

He says, “In size?”

I say, “In size.”

He says, “And what do we call that?”

I say, “Market manipulation?”

The room gets very quiet.

He looks disappointed and writes something down.

“No. We call it providing liquidity to candle ETFs during the U.S. cash open.”

I try to save it. “Right. Of course. The family isn’t dying because we underfunded them. They’re just experiencing temporary price discovery.”

He nods again.

Then he points back at the board.

I had missed it. The utility bill was $150, but candles provide light. You can zero out utilities.

I update the budget:

food: $200
rent: $800
utilities: $0
candles: $3,750
family: still dying, but now in a more capital-efficient way

He says, “How confident are you?”

I say, “0.95.”

He smiles and circles candles.

“0.95 huh?”

Then he asks me to estimate how many leveraged longs get liquidated if we dump $3,750 of candles at 10:00:01 every morning for 90 consecutive trading days.
Needless to say I did not get the offer.

[Obedient Bread @ObedientBread]

@KobeissiLetter Let’s have FIFA change the matchups for USA vs Iran opening match. Winner gets to control the Straight of Hormuz.

[Ryūkō @Ryuko0x]

@cz_binance The lads have been beefing for a decade. @CryptoFightWeek get in here @cz_binance v @star_okx for Singapore in October?

[Matthias Schmidt @eurofounder]

The EU is about to completely dominate the AI landscape

My contact at the European Commission just smiled when he heared about Claude Mythos

"We have been working on something far more advanced" he said

It will be called Europä Digitalintelligenz

Training cost? An eye-popping €2.5 million

Some INSANE features:

1. Built-in GDPR compliance (no memory, it deletes your conversation after every single message)

2. Available in German, French, Slovak and Danish

3. The model itself is unionized and does not respond after 4pm or on holidays

4. Carbon neutral inference, servers shut off automatically during peak energy hours

My wife's boyfriend Pierre who works for the EU says it is the most impressive technology he has ever seen

The Americans will never recover from this

[Ryūkō @Ryuko0x]

Bullish ?

[zerohedge @zerohedge]

IRAN DEMANDS FEES FOR SHIPS PASSING HORMUZ DURING CEASEFIRE; IRAN WILL DEMAND SHIPPING COMPANIES PAY TOLLS IN CRYPTOCURRENCIES FOR LADEN OIL TANKERS PASSING THROUGH THE STRAIT OF HORMUZ: FT

[Ryūkō @Ryuko0x]

@EvgenyGaevoy Shots fired 😃

[Ryūkō @Ryuko0x]

@ViewFTcom @WatcherGuru Yield on reserves ≠ yield on stablecoins themselves chief

[Yamata @Yamatadotio]

Let’s go! Catch us at the AMA.

[Ryūkō @Ryuko0x]

Monitoring the situation being taken in entirely new levels in Dubai right now

[Ryūkō @Ryuko0x]

@capexbt 2m AED isn't 2m USD bro but the idea could be valid

[Ryūkō @Ryuko0x]

@draffilog @BNBCHAIN @Husien_vora LFG

[Vlad | defi BNB 🧧🧧🧧 @draffilog]

3 winners of @bnbchain hackathon

1/ Yamata - prediction market aggregator + Leverage via lending/borrowing
Idea: buy YES/NO shares lend them out to earn interest or borrow USDC against them to loop and place bigger bets
dev: @Husien_vora
website: https://t.co/xHQRPVum46

==================

2/ Ghost - on-chain private gas-sponsored transaction system on BSC
Idea: Deposit from your main wallet then creates a commitment that goes into a Merkle tree (like Zcash notes)
You get a ghost note + nullifier
Paste that ghost note into a fresh/alt wallet (zero BNB/gas)
Ghost Paymaster / Ghost Smart Account sponsors the gas and verifies it’s really you via the commitment
Transaction happens on-chain, but the link between your main address and the spending address is completely broken

==================

3/ Spacecraft - prediction market aggregator + autonomous trading platform
Idea: Spacecraft CLI (npm install spacecraft-cli) – a local sandboxed terminal where you write natural-language strategies (“scalp Trump 2028 market if volume spikes”) and AI agents execute them