Big day for Agoric 🚀
New website. New tokenomics litepaper. A product-first future with @Ymaxapp leading the charge.
From chain to products: here's what's changing and why it matters 🧵
IBC has been contributed to LF Decentralized Trust, giving the interoperability standard a neutral, open home.
Congratulations to the Cosmos and Interchain Foundation teams.
https://t.co/5EKukulObd
We are monitoring developments and will share updates relevant to Agoric users as more verified information becomes available.
Beware of fraudulent recovery offers. Trust only official communications from Keplr and Web3Auth
A Web3Auth incident has affected some Keplr wallets created with Google or Apple login across multiple chains.
Keplr reports wallets created with a recovery phrase or hardware wallet are not affected.
For official guidance, see Keplr’s announcement: https://t.co/Zob4aJMvFx
What this means for Keplr users
If you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected.
In response to Web3Auth’s infrastructure vulnerability leading to private key breach some Keplr users who signed in with Google or Apple, we are assisting the Web3Auth team’s effort to secure and protect assets from affected users.
This is ongoing. Staked and locked assets add complexity and take longer.
This means some Google/Apple-login accounts may already show a reduced or empty balance as a result of these mitigation efforts.
If you created your Keplr account with Google or Apple login, your account may be affected: – Do not send new funds to that account. – Move any remaining liquid assets to a recovery-phrase or hardware-wallet account.
We are working with Web3Auth on a way to check whether your account is affected.
Only trust updates from this account or @Web3Auth. Ignore DMs or links offering “recovery”.
Sign once on Ymax. Axelar carries every step to Ethereum, Base, Arbitrum, Optimism and Avalanche, and each hop is verifiable on Axelarscan. Proud to build with @axelar 🤝
USDC.inj is registered on Agoric mainnet following Proposal 123’s passage.
This lays the groundwork for USDC via IBC from Injective, starting with development and testing.
The registration moves no user funds.
Details ⤵️
https://t.co/OulonsVBU8
Hardened JavaScript and the Endo framework isolate contract execution at the language level.
The same isolation model is already in production use at enterprise scale: MetaMask's Snaps (30M+ users), Salesforce (5M developers).
Externally validated infrastructure 👍
We've just published an important blog article.
📍Containing AI Agents: The Endo Familiar in Action📍
Three questions for anyone shipping AI agents:
1️⃣ If the model gets prompt-injected, what can it reach?
2️⃣ If it tries to exfiltrate data, what stops it?
3️⃣ If a dependency is compromised, what's the blast radius?
🫨 If those answers make you nervous, they should.
The good news: there's a foundation built for exactly this problem.
Watch @agoric 's @kriskowal demo the ⭐ Endo Familiar ⭐ , plus our latest post on why containment has to come first:
https://t.co/Ry0odbCoJr
Give someone exactly what they need to do the job. Nothing more, just in case.
That's the Principle of Least Authority, a security idea older than crypto or AI agents.
It's a guiding rule in the control layer for agentic finance we're building with @Ymaxapp
@davidarngar@Ymaxapp That's true, dynamic authority management is a harder mental model than static rules. The payoff is that it's enforced by design rather than discipline.
OCAPs make this feasible. Authority can be dynamically injected or agents can request authority rather than hold it upfront
ICYMI: auto-rebalance is live. Opt in on any existing portfolio and it stops drifting from the target you set, no manual check-ins, no new permissions granted.
Still your rules. Just less upkeep.
An object only ever holds the exact capability it was explicitly given, nothing implied, nothing inherited.
An AI agent doesn't get "access to your wallet." It gets the one specific capability you handed it. Nothing else exists for it to reach.
That's the Agoric layer.
In software, everything is objects. Objects have capabilities, aka permissions or authorization.
But most systems hand out capabilities in bulk. Log in once, and you can touch almost everything that account is allowed to touch.
Object-capability security is different.
On the Cosmos EVM incident affecting KiiChain, TAC, and MANTRA this week: the vulnerability lives in the shared Cosmos EVM module, a component the Agoric chain does not implement.
The Agoric chain has no exposure.
More detail from Cosmos Labs here:
https://t.co/9m5Xybq8aP
Update for the community on the current security incident. Many affected chains have now patched.
We continue to provide mitigation information to affected chains. Chains that use a Cosmos EVM version less than v0.6.2 or v0.7.2 are recommended to immediately halt the blockchain and upgrade it to include the patches in those releases.
Please contact [email protected] if you use Cosmos EVM and have not yet provided your security team contact details.
Welcome to Ymax, @y10kcapital!
Thrilled to have this institutional team putting real capital to work on the orchestration layer.
This is what programmable capital allocation looks like.
Y10k Capital has allocated $3M into the @RockawayX USDC Yield vault on @Ymaxapp
Built by Agoric, Ymax manages stablecoin portfolios across leading on-chain capital markets, coordinating allocation and rebalancing across protocols and chains from a single portfolio, with one signature.
Ymax just crossed $16M+ in assets deployed through the app.
This shows:
- Agoric Orchestration can coordinate meaningful capital through long-lived, onchain workflows spanning chains/protocols.
- Ymax is getting serious institutional momentum
Capital orchestration at scale!
Thank you again to the people and teams who contributed to deploying over $16,000,000 USDC through Ymax 💪
Shout out to institutional allocators, like @RockawayX , @y10kcapital, and @TulipaCapital, who are using Ymax for Treasury funds.
Block House powered by MoralesHR and secured by @ChainPatrol goes live tomorrow at 10AM EST.
8 segments. 15 speakers. 6 hours of high-signal insights from leading blockchain and digital asset companies. No travel required.
Built by @wrappedxyz and @realmotioninc, Block House brings the entire ecosystem under one roof for a global audience of founders, builders, institutions, and capital allocators.
Featuring industry leaders from:
@AlgoFoundation | @Anchorage | @CapApp | @coinbase | @FireblocksHQ | Franklin Crypto (@FTDA_US) | @lifiprotocol | @plumenetwork | @0xPolygon | @realignlabs | @ShieldApp | @Stacks | @Ymaxapp, by @agoric
RSVP: https://t.co/s2ws59sgg1
Why should you RSVP in advance? So that we can matchmake you with partners and speakers for BD and ecosystem building opportunities.
Thank you to our final set of partners for the inaugural @wrappedxyz and @realmotioninc BlockHouse Broadcast!!
👑@Anchorage
👑@coinbase
👑@plumenetwork
Thank you to MoralesHR for powering our inaugural Block House and to @ChainPatrol for securing our live broadcast on August 5th 💃🕺
And thank you to all our partners for joining us as well! 🥳🎊
@ReAlignLabs
@ShieldApp
@0xPolygon@Stacks
@Ymaxappbuilt
@agoric@Algorand@lifiprotocol@arbitrum@CapApp
Full speaker lineup and agenda coming soon 👀
RSVP to matchmake with partners and speakers for BD and ecosystem building opportunities.
RSVP: https://t.co/6fUnYDXFdU
Block House is building.
@wrappedxyz and @realmotioninc are excited to announce our second set of partners for our inaugural Live Broadcast on Wednesday, August 5th.
@CapApp | @0xPolygon | @PythNetwork | @Ymaxapp, built by @agoric
Additional partners and speakers to be announced soon.
Block House brings the entire industry under one roof for a global audience of founders, builders, institutions, enterprises and capital allocators.
No travel required. Just high-signal conversations dedicated to blockchain programming.
RSVP below to join us from the comfort of your own home.
👉 https://t.co/s2ws59sO5z