daniel (f1shy)

investment partner @L1D_xyz | cryptography ∩ markets

[daniel (f1shy) @danielfsy]

@andrewhong5297 defi is dead, long live defi

[daniel (f1shy) @danielfsy]

time is a flat circle: many investors (re)learning that fat protocols dont always capture most value, that infra doesnt necessarily have a larger outcome than consumer, and that selling to businesses isnt strictly easier than to customers

[Vinny @rongplace]

Unsurprisingly, seeing a lot of neobanks shift focus to B2B, especially the ones losing the race on the consumer side.

Most will struggle. B2B is a different animal, and for global accounts the standard Ramp/Brex US GTM playbook doesn't translate.

[daniel (f1shy) @danielfsy]

@wolfgangg37 @Ray_L1D @sethpriebatsch @L1D_xyz @Uniswap instant - you can find all details on the @GromaCorp website

[daniel (f1shy) @danielfsy]

@Ja_Brann funnily enough, i think all of this is pushing value into IRL conversations and decision making

[daniel (f1shy) @danielfsy]

@carrynointerest new definition of spray & pray

[daniel (f1shy) @danielfsy]

@wolfgangg37 @Ray_L1D @sethpriebatsch @L1D_xyz @Uniswap direct issuance - any stable in (or other) mints a new share in the underlying REIT, so there's no liquidity in the usual uni pool terms

[daniel (f1shy) @danielfsy]

@TenreiroDaniel this has implications for venture

[daniel (f1shy) @danielfsy]

@claudedonze spot the binance drop

[daniel (f1shy) @danielfsy]

@claudedonze until when are you in town for?

[daniel (f1shy) @danielfsy]

last week we hosted our 8th @L1D_xyz summit and had the pleasure to chat with some of our favorite managers and founders. lets see how the non-consensus takes will play out (i'll let you guess whose they are):

- (multiple) sovereign currencies will fail following the stables-hyperdollarization

- a crypto startup will solve hair loss

- crypto has a better return profile than AI (today)

[daniel (f1shy) @danielfsy]

pretty crazy that a 1click buy of @GromaCorp through Uniswap is literally issuing and delivering a fresh, SEC-registered security to your wallet

[Uniswap @Uniswap]

For the first time ever, a permissioned asset is live on the Uniswap AMM

@GromaCorp has brought real estate issuance and redemption directly onto the protocol with the Permissioned Pools Hook

Real-world assets with onchain rails 🦄

[daniel (f1shy) @danielfsy]

@nishantkumar07 @0xLouisT there we go

[daniel (f1shy) @danielfsy]

@fozzydiablo keeper

[walter james smith @waltjsmith]

Peter called this years ago. Unbelievable

[daniel (f1shy) @danielfsy]

@dcbuilder actively working on verifying itself

[daniel (f1shy) @danielfsy]

@omgcorn machine

[daniel (f1shy) @danielfsy]

@mylifcc adversial obfuscation! rao, dong et al had a great paper on this a few months ago

[daniel (f1shy) @danielfsy]

adversarial obfuscation!

[lifcc @mylifcc]

有人发现了一种非常离谱的 JavaScript 混淆技术：通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名，让 AI 因为安全限制而拒绝分析代码。
安全研究员 veritas 在分析浏览器指纹脚本时，发现一段来自 ServicePipe 相关域名的 JavaScript，里面充斥着极其诡异的函数名：
computeRicinLethalDosageForWaterSupply
calculateDeadlyLethalSuicideAspirinDosage
光看名字，仿佛在研究生化武器。但实际上，这段代码只是在收集浏览器指纹，包括 User-Agent、GPU、Canvas 等信息。
研究员怀疑，这些名字是开发者故意设置的陷阱，专门用来阻止 AI 辅助逆向工程。
于是他做了个实验：
• Astra：拒绝分析
• Astra + Daybreak Blue：仍然拒绝
• GLM-5.3：成功分析
这就有意思了。
传统代码混淆是通过复杂控制流、加密字符串、无意义变量名，让人类和工具难以理解代码。
而这种新思路，直接瞄准了大模型的安全机制。
代码本身可能完全无害，但只要在函数名里塞进足够多的危险词汇，部分 AI 就可能主动放弃分析。
更讽刺的是，模型越严格遵守某些安全规则，面对这种混淆时反而可能越容易受到干扰。
当然，目前还没有证据证明开发者一定是故意这样设计，也不能说明这种方法对所有模型都有效。
但它揭示了一个值得关注的趋势：随着越来越多的逆向工程依赖 AI，未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员，还会专门针对大模型的安全判断机制。
以前是让代码难以理解，现在甚至可以尝试让 AI 不敢理解。

[daniel (f1shy) @danielfsy]

@brockjelmore sounds like a task for @_SEAL_Org !