Dax

There is no cloud just other ppl's computers. I write apps for them. Prev USAA, MetaMask, advertising, back in crypto doing zero knowledge @ZeraLabs

[Dax @dev_skill_issue]

@fairTokenForge this will be more, build as i can and narrow my social circle. It really ate me alive.

[Dax @dev_skill_issue]

Pushed privacy updates to sentry and feedback for private debit cards.

https://t.co/iZYist7W8u

[Dax @dev_skill_issue]

@fairTokenForge yep, i did what i could, too much piled up behind the scenes personally and professionally, so i took some time off to recenter and rebuild, plus actually finish some more of the PhD research I wanted to do. Offline finally making some headway. Got to do some traveling, day job.

[Dax @dev_skill_issue]

So I am going to keep building and releasing what is needed to protect the community and keep it alive until someone actually wants to sit down and talk.

[Dax @dev_skill_issue]

I’ve stayed in Slack and with counsel, trying to find a fair, written resolution because I believe in the team and wanted to keep this out of a public dogpile.

When legal threats were made, I moved everything to the lawyers and have stayed at that table, ready to clarify IP and economics properly.

I’m not going to argue contracts on X, but I remain willing to resolve this through proper legal and accounting channels and to make sure the community and team are taken care of.

But I have been waiting for someone to actually come to the table with me and so far only two people have actually come forward to talk.

[mih4 @mih4x]

This is a public statement on contributions, ownership, and transparency issues regarding the ZERA protocol and @ZeraLabs

Pat, Andreas, and Miha have been core contributors to the project for over a year. We are issuing this statement to clarify the record on code ownership, agreements, finances, and customer orders.

[Dax @dev_skill_issue]

@ShannonBeing Free will man, but dude we did it. We built a working privacy platform. The core model works and supports the token in real ways. I am proud of everyone who has come along for the ride and we can continue to build.

[Dax @dev_skill_issue]

my outcome goals are to protect the project, create pace and balance that is good for my health to contribute and remove myself from day to day business management to write code only and be compensated as the OG w a small licensing or royatly fee from revenue. I have even been willing to do a single day transition with the whales to decentralize and protect the project or put it under a business leader who can take it farther than I can.

As for writing code I will still show up everyday and continue to build as my health allows.

@ZeraLabs

[Dax @dev_skill_issue]

Yes, I had exploratory conversations with Perkins about a potential acquisition of ZeraLabs. These were early-stage, non-binding discussions... no offer was in place, and no transaction was imminent. Nor did I expect that doing so would mean I would just drop everything. I did this bc they are honest and well meaning group.

Bc of that, I made the decision to keep the conversations limited rather than broadly sharing something that might never materialize. In hindsight, I understand why that decision is being questioned, and I take that feedback seriously.

To be clear: there was no finalized deal, no signed terms, and no change in ownership or control of the company at any point.

On the metrics and valuation: early-stage crypto projects are often valued on forward-looking potential, not just current fee generation. That said, I understand that different parties reached different conclusions during diligence. That is what back and forth is for. As well as my health conditions which have developed. Healthcare in the US is not cheap.

I also want to acknowledge the concerns being raised around contributor expectations and ownership. Those are important, and I’m taking steps to review and clarify them directly with the people involved, I have been sitting at that table for weeks and the other side has not showed up. Instead trying this in the court of public opinion.

I’m committed to protecting this project and protocol. Esp as we move to open source and fully decentralize it.

[Dax @dev_skill_issue]

@42_onsol @PerkinsFund Oh that, yea while in maintenance mode I can find ur deposits and return funds but we dont have a drain method on the pools just a freeze method if something breaks.

[Dax @dev_skill_issue]

I am still here and so are the whales we are still working and building releases... you all saw me build and deploy new stuff and the dectralization plan for the relayer earlier this week. Nothing is going anywhere. And yes we have internal disagreements and I am sick but still showing up so we are gonna keep on going and Monday whales and the chat and the socials will clarify exactly who is doing what.

[Dax @dev_skill_issue]

Thanks everyone for the help w the bug reports and the new pools! @ZeraLabs

[Dax @dev_skill_issue]

merkle tree indexer bugs are up there with cache invalidation as the hardest class of bugs

the chain is the source of truth, your indexed view is "eventually" consistent, and the gap between them is invisible until a user can't withdraw their own funds

so its not an easy to catch error...

[Dax @dev_skill_issue]

Wow telegram be slow today... thanks for pointing out more bugs everyone! Its def a squashing kinda week.

[Dax @dev_skill_issue]

So we wanna get rid of the whole relayer thing in privacy protocols... I made a demo and proof of concept we can roll into @ZeraLabs

https://t.co/JZPqgxQ7ft

[Dax @dev_skill_issue]

I wrote about this kind of exploit 2 years ago even published demos for research

https://t.co/RrEYkiEfIH

[The Cybersecurity guy @cyber__razz]

Someone hid a self-replicating worm inside 37 npm packages.

Written in Rust.

Hidden behind an eBPF kernel rootkit.

Talking to its operator over Tor.

It steals 86 environment variables.

AWS keys. GCP keys. Vault secrets. Kubernetes tokens.

Your Anthropic API key. Your OpenAI key.

Your Exodus wallet seed phrase.

Then it uses your own npm credentials to republish itself into your packages.

So your code infects the next developer.

Who infects the next one.

The commits were backdated up to 13 years.

The commit author name was “claude.”

The malware named itself after the AI to hide in plain sight.

The attacker also left their own wallet recovery phrase in the debug data.

Nobody is having a good day.

Check your preinstall hooks.

[Dax @dev_skill_issue]

Its pride month. I may be proud to show something off this weekend. @ZeraLabs

[Dax @dev_skill_issue]

@solana_devs Real Privacy @ZeraLabs

[Dax @dev_skill_issue]

Should be fixed try sending some of the new ZEC ! @ZeraLabs

[Dax @dev_skill_issue]

Deploying another pool! Fixing bugs... @ZeraLabs https://t.co/IRYjaOhoVB