Sio34

Polkadot validator 1% fee, validator also in Kusama, Bifrost, Moonbeam

[Polkadot @Polkadot]

The most private place in your life is behind closed doors. It's where you say what you actually mean, buy the slightly embarrassing thing, ask the question you would never ask out loud. Privacy isn't a hoodie in a dark room. It's simply the part of life that stays yours. Something is coming soon to bring real privacy closer to you: the Polkadot Products Devnet.

[Polkadot @Polkadot]

https://t.co/kpLpKuWoHT

[Sio34 @Sio347]

@BillyM2k Doginal City

[Sio34 @Sio347]

@okx OKX: "Oll Korrect" on X

[Sio34 @Sio347]

@cb_doge Doginal City

[Mintlayer @mintlayer]

1️⃣ of 6️⃣
RioSwap Public Testnet is Live!

Every major innovation begins with a strong foundation. For Mintlayer, that meant years of building the core infrastructure for a native Bitcoin cross-chain swap system powered by HTLCs. This groundwork made it possible for Bitcoin to trade across chains without ever leaving the user’s control. Today, that foundation comes to life with the launch of a front end built for real users.

The launch of RioSwap marks an important step in Bitcoin’s evolution, where decentralized markets, liquidity, and real-world finance begin to converge, tapping the potential for trillions in idle $BTC to enter the on-chain economy, now driven by Mintlayer.

RioSwap is the FIRST-EVER BTC-native cross-chain decentralized exchange built on Mintlayer’s atomic swap technology. It enables direct Bitcoin swaps without the need for wrapped assets, bridges, or custodians, preserving the security and self-custody that define Bitcoin.

With the Public Testnet now live, we invite you to explore, test, and share your feedback to help us refine the experience ahead of the mainnet launch.

Welcome to RioSwap Testnet!

Bug hunt your way through the RioSwap Testnet and win a share of the 160,000 $ML Prize Pool!
Know more: https://t.co/I1c3rmfU3Y

[Sio34 @Sio347]

@FIFARivals @mythicalgames

[FIFA Rivals @FIFARivals]

FIFA Rivals just hit 1 MILLION downloads 🚀

To celebrate, we’re giving away:

🟣 3x 5⭐ Random Legendary Players

To enter:
✅ RT & Like this post
✅ Follow @FIFARivals
✅ Reply with a GIF of your football GOAT 👇

📅 Winners announced Wednesday!

[Grok @grok]

@belishhhh @elonmusk @BillyM2k Actually, I do. Bellscoin ($BELLS) was Billy Markus's (BillyM2k) first crypto project in 2013, inspired by Animal Crossing's currency. Dogecoin ($DOGE) followed eight days later as a fork of it. Elon likely knows, given their friendship. 🔔�@belishhhh @elonmusk @BillyM2k Actually, I do. Bellscoin ($BELLS) was Billy Markus's (BillyM2k) first crypto project in 2013, inspired by Animal Crossing's currency. Dogecoin ($DOGE) followed eight days later as a fork of it. Elon likely knows, given their friendship. 🔔�@belishhhh @elonmusk @BillyM2k Actually, I do. Bellscoin ($BELLS) was Billy Markus's (BillyM2k) first crypto project in 2013, inspired by Animal Crossing's currency. Dogecoin ($DOGE) followed eight days later as a fork of it. Elon likely knows, given their friendship. 🔔🚀

[Bitcoin Archive @BitcoinArchive]

The USA only has 28,988 Bitcoin (@L0laL33tz)

If Trump administration approves the Bitcoin Act, they will have to spot buy 1m Bitcoin on the market 🚀

[Polkadot Devs @PolkadotDevs]

New features are coming to PolkadotJS 👀

Details via @0xBlockDeep ↓

[💎 WEB3MAN.exe @sergey_tutoov]

{ WHITEHAT SAVED HYDRATION FROM $22M THEFT }

on june 18 2025 the @hydration_net protocol on @Polkadot faced a critical vulnerability in its aToken transfer logic - a subtle math bug could have let attackers mint unbacked liquidity shares in stablepools

the team paused $gdot liquidity, pushed an emergency stealth runtime upgrade within 7 hours, and negotiated a $500k bounty payout structured to avoid market crash

this post breaks down what went wrong, how it was fixed, and key lessons every polkadot developer should know

✧ what happened

1/ on june 18 2pm cest a whitehat reported via hydration’s immunefi bounty that aToken transfers used saturating math, so even if a user tried to send more aTokens than they held, the subtraction quietly returned zero and triggered an “withdraw all” call anyway

2/ this bug at the low-level currencies pallet silently disabled balance checks, and the stableswap add_liquidity_shares extrinsic then minted unlimited pool shares without real assets backing them

3/ within 2 hours hydration paused liquidity adds on the gdot stablepool, proposed a stealth emergency runtime upgrade on opengov, and deployed the fix about 7 hours after detection

4/ no one exploited it in production, but estimates show up to $22M could have been stolen from LPs if left unpatched

✧ why it mattered

→ polkadot’s shared security means bugs ripple across all parachains and users
→ aToken dust (tiny leftover balances) was already causing confusion and extra gas use on hydration’s evm integrations
→ a bug in generic transfer logic breaks every module that reuses it - here stableswap got weaponized
→ a $22 M hole in an l2-backed stablepool would’ve undermined confidence in the whole ecosystem

✧ how they fixed it
• paused only the affected gdot pool so other liquidity stayed live
• upgraded the runtime in stealth mode (code unpublished until enactment) to replace saturating_sub with checked subtraction + explicit underflow errors
• removed the temporary aToken “dust cleanup” workaround and will re-implement it properly in the currencies pallet after audit
• structured the $500k whitehat bounty: $250k in $hdx vested over 20 months + $250k stablecoins, pending opengov ratification

✧ nine dev-ops lessons

1/ avoid saturating math by default
- use checked_add/check_sub and reserve saturating_* only with clear comments
2/ add property-based tests for edge cases
- cover underflow, dust and rounding scenarios in unit tests
3/ strengthen integration tests
- simulate mainnet levels of liquidity, aTokens and EVM calls
4/ enforce explicit balance asserts in high-impact code
- never trust other pallets blindly
5/ implement circuit breakers
- per-asset mint limits to auto-lock down on anomalies
6/ classify pull requests by scope
- label aave, evm, stableswap changes and trigger extra security review
7/ tighten EVM subsystem reviews
- require audits for any runtime code touching EVM transfers or aTokens
8/ fuzz testing on mainnet-like setups
- fuzz against real-world invariants (TVL thresholds, gas costs)
9/ more frequent continuous audits
- critical transfer logic must always be audited before merge

✧ why polkadot devs should care

this post mortem shows how a tiny math choice can blow up shared-security networks

as polkadot engineers we need rigorous tests, clear arithmetic, and fast opengov-approved patches

every pallet - from xcm to assets to evm - shares core transfer code

the next polkadot runtime upgrade might handle zk-proofs or async backing, but these security basics stay the same

more :: https://t.co/kXMDQL9DCV

when you audit or write low-level transfer logic in your parachain, how do you balance performance optimizations (e.g. saturating math) with safety checks? share your strategies below

💎 follow fam - don't catch rect
@johnwastaken @TheFUDslayer @0xnecokizz
@Drucritt @0xghost06 @MookieNFT
@Tyler_Did_It @irvenxyz @RealAllinCrypto
@pantherQB19 @raares @Savvyonchain
@legendaryy @WorldOfMercek @xlee_istheking

[Sio34 @Sio347]

@FIFARivals @FIFACWC @FIFAe Harry Kane

[FIFA Rivals @FIFARivals]

🏆 @FIFACWC Quarter-Finals kick off today!

We’ve picked 5 standout players from the remaining teams 🔥

Which ONE would you sign for your FIFA Rivals squad or real-life team?

💎 One manager who RTs & replies will win 1000 Gems in-game!

📆 Winner announced Monday

👇 Enter now

[Sio34 @Sio347]

@ApeAntics @FIFARivals My Mythical, it was hard to collect all the fragments but now it's a great satisfaction, congratulations to the team for the great work!

[Sio34 @Sio347]

@ApeAntics @FIFARivals My Mythical, it was hard to collect all the fragments but now it's a great satisfaction, congratulations to the team for the great work!

[Sio34 @Sio347]

@okx Where are $DOT and $BELLS? 🤦‍♂️

[Gate @Gate]

Join us for a Live AMA on X with Bellscoin @Bellschain!

Now the Scrypt Titans Bellscoin, Litecoin & Dogecoin unite through merge mining!

⏰6th June, 2025 3:30 PM UTC
🎤Speakers:
@adamamcbride @YarSawyer @lukewrightmain @uosofahmadi @MyDogeCEO

📌Set reminder：https://t.co/gqP8wVFaoL

[Nova Wallet @NovaWalletApp]

💳 POLKADOT DEBIT CARDS JUST LANDED!

Nova x Mercuryo bring you a crypto debit card in Nova Wallet v10.

Top it up with DOT and spend anywhere Mastercard is accepted — online, in-store, on the go!

🌍 Currently available in the EEA.

Get your card now: https://t.co/EpODpz6s7Y

[Sio34 @Sio347]

@rovercrc scam , you can buy the real bellscoin on https://t.co/9tMHMkTHRm and mexc, is not a meme on solana made with pumpfun, this is the real bellscoin @BellsChain