@coingecko@agoric BLD. Great tech, great flagship application in beta with 16mil already allocated into it by institutional investors -they did loads of due diligence.
Huge security focus.
@coingecko@agoric amazing underlying tech! endo_js being used by metamask and others, ymaxapp is trusted by institutional capital allocators. Currently hugely undervalued
@agoric @ymaxxapp crossed $16M in deposits this week. One signature moves stablecoins across chains, non-custodial. Off-chain planning, on-chain enforcement: the pattern autonomous AI agents actually need. Here's why it works π https://t.co/2yPu0PlAEU
Filing this one under nice to see.
In 2023, two researchers at @CISPA built a tool called SandDriller with exactly one job: break out of JavaScript sandboxes. (A sandbox is the thing that lets you run code you don't fully trust without letting it wreck everything around it. Useful, and famously hard to get right.)
They pointed it at six of the widely used ones. Three versions of Node, 17 hours of runtime, more than three billion checks! It broke almost all of them. vm2, safe-eval, near-membrane, all popped. They even dug up a bug sitting deep inside Node itself, which the Node team basically shrugged at.
ONE! came out clean. SES - That's the hardened JavaScript at the core of @__Endojs__ . The same technology that's been shipping inside @MetaMask to millions of users since 2019.
Think about that! Zero breakouts. Every Node version, every test set. Nothing got out.
Why it held is kind of the whole point. The others leaned on a part of Node that quietly leaks references. SES doesn't. It freezes the language's own building blocks so untrusted code can't reach through them in the first place. Confinement by construction, not patching holes one at a time after someone finds them.
Kudos to the @Agoric team who build Endo, and to @marksammiller who's been at this for decades. Quiet, unglamorous work that holds up when someone comes at it with a battering ram.
Paper's public if you want to read it. Google -SandDriller, USENIX Security 2023.
Have you seen the Endo Familiar?
Most agent frameworks hand the model all your credentials at once and bet it won't get fooled or hijacked.
Endo flips it. An agent starts with zero authority and only reaches the narrow, revocable capabilities you hand it. Anything it writes runs sandboxed.
Safety by architecture, not by trust.
https://t.co/wCWADiPF1d
@ruZCASH@agoric Dooooo it! They are very quiet on X, but the work on their stack is so solid. Once devs catch on, I think dapps will start popping up super fast on the agoric L1
No single chain consistently offers the best USDC lending yield.
We backtested 26 months across Ethereum, Base, and Arbitrum:
β Ethereum only: 9.23% annualized
β Arbitrum only: 12.86%
β Cross-chain, rebalancing weekly: 12.69% β after bridge costs
The alpha isn't a secret. It's an execution problem.
One signature. Every chain. That's Ymax.
https://t.co/QrkE4wYuuO