Flower

You are at this period a legend💎 $BTC$ETH

[H.E. Justin Sun 👨‍🚀 🌞 @justinsuntron]

https://t.co/nLMTwWr67Z

[Artificial Superintelligence Alliance @ASI_Alliance]

Technical Tuesdays: AGI Supercomputer https://t.co/SB5C8OlkKo

[vitalik.eth @VitalikButerin]

Bitcoiners deserve a lot of credit for pioneering many of these ideas (see Utreexo).

But yes, this is what the current proposed Ethereum scaling strategy looks like in action.

We want Ethereum to have the best of UTXO-style state, dynamic state, and everything in between, allowing the great majority of Ethereum's activity to be hyperscaled without sacrifice to decentralization, ease of node running and censorship resistance.
https://t.co/rVylwVtgP5

[vitalik.eth @VitalikButerin]

I updated my 2023 roadmap diagram to overlay where the items that were there sit in the current Strawmap ( https://t.co/I35mrXutP2 ).

In general, a lot of overlap, but:

* Some things got reshuffled in order (eg. quantum safety up-prioritized)
* Some things deprioritized (eg. VDFs; many EVM improvements)
* Some things replaced with superior constructions (eg. Verkle -> unified BT -> PBT; state expiry -> new state types)

What's most striking, however, is that some completely new things are in the strawmap that are NOT in this diagram, because they were not in the 2023 roadmap at all. These reflect changing priorities.

Notably:

* First-class attention to strong privacy. This covers: keyed nonces and recent roots, aspects of FOCIL, lean privacy pool & wormholes
* Aggressive scaling in the context of post-quantum. This covers: leanSPHINCS signatures and aggregation, zkzk frames (see https://t.co/ibrOpMxMfO )
* Lean-ification of the spec, to assist in formal verification (full FV of everything is only possible because of modern AI)
* Blob and gas futures (this idea just didn't exist back in 2023)
* Native rollups (SNARKs were nowhere near mature enough to even consider this back in 2023)
* A more open design space for the "future of the EVM". zkzk frames already implies that the protocol will expose to users some ISA that's not the EVM - current leading candidates are leanISA and RISC-V. These ISAs are more simple, modern and efficient than the EVM. Once they're there, why not expose them to developers everywhere? (And then, why not turn the EVM into being an IR on top of that ISA, instead of an enshrined feature massively complicating the base protocol?) Though much of the deeper exploration here is too early even for the strawmap.
* New state types are not just a replacement for expiry, they're a fundamentally different paradigm to how Ethereum does scaling

A common theme in scaling, found in both state types and zkzk frames (both new ideas), is that instead of trying to maximally scale ALL ethereum activity, we try to create specialized mechanisms that have more restrictive properties that make them more scaling-friendly, while supporting the heaviest loads incurred by users and applications today (eg. token transfers, swaps) and tomorrow (eg. privacy protocols).

The other common theme is treating STARKs and AI-accelerated FV as first-class objects, that we are okay betting the technical future of Ethereum on. There are recursive STARKs in many layers of the protocol, one particular primitive (the "aggregate to union verified dependencies" primitive) is expected to be used in *three* places in the protocol: EL, CL and DL. This can only be safe with formal verification, which is itself only feasible with modern AI tools.

In general, many steps forward in maturity. And a huge amount of hard work by many dozens of Ethereum researchers and developers on all of these features.

Ethereum will be quantum-safe. Ethereum will put users' privacy first. Ethereum will be secure. Ethereum will be censorship-resistant. Ethereum will be highly performant and scalable while satisfying the above. And Ethereum will be Lean.

[Ethereum @ethereum]

0/ As AI systems become more powerful, formal verification – which is the discipline of using mathematics to prove computer programs correct – shows more and more promise.

A guest thread by @big_tech_sux, lead developer of @vyperlang 🧵

[Swansea City AFC @SwansOfficial]

Swansea City is pleased to announce a new record shirt-sleeve sponsor partnership with ASI:One by @Fetch_ai ahead of the 2026-27 Championship season.

👉 https://t.co/MJVLztLTq0

[vitalik.eth @VitalikButerin]

Two weeks ago, Ethereum researchers met in Berlin to continue charting the protocol's long-term trajectory, following along discussions with client teams in Svalbard in April.

The updated strawmap is at https://t.co/9e2AQ6rhz6, and I attached a picture of it to this post.

My own high-level takeaways:

* "Lean Ethereum" is not a single one-shot upgrade, it is a collection of improvements that will come online to the Ethereum network over the course of three or four years. But make no mistake, this IS the third major iteration of Ethereum in the same way that the Merge was the second. Almost every major piece of the protocol will be replaced:

- Verification through recursive STARKs, rather than direct re-execution. Recursive STARKs become an enshrined first-class core component of the protocol
- Replacing everything quantum-vulnerable with quantum-safe alternatives
- Consensus: decoupled available chain and finality, one or two-round finality. Theoretically optimal security properties, simpler than today, and faster than today
- Multidimensional gas
- State: not just tree structure, but what *types* of state are available
- Changes to client architecture
...

At the same time, simplification, cleanup and future-proofing. And this will all be done in a way that minimizes disruption to existing application. We've done this before (the Merge), we can do it again.

* H-star (aka Hegota) is probably Ethereum's last thematically "pre-Lean" fork. Starting from I-star, most of everything we do will have a very strong "Lean" feel to it in one way or another.

* Privacy is no longer an afterthought, it is a first class goal. When designing Frames, the mempool, additions to the state tree, we explicitly ask the question "okay, how do quantum-safe, intermediary-free privacy protocol transactions go through this, and what is the overhead?"

* Formal verification of everything for security.

* FV also makes us much more comfortable with canonicalization (having pieces of the protocol that are directly defined as a piece of bytecode expressed in some language). evm-asm is being written in part to become a canonical proof system for the EVM.

* Quantum safety has shifted up a LOT in priority. This adds a lot of work (eg. finalizing a quantum-safe blobs design has become urgent; this work has already been ongoing for months)

* Probably the single most disruptive part of the plan is the changes to state. There is growing consensus around leaving present-day-style "dynamic state" mostly unchanged, but scaling it only a medium amount, and adding new types of state that are more scalability-friendly (eg. no need for builders to sync/store all of it) but more restrictive, and that will scale a large amount.

eg. possible Ethereum in 2030: 2 TB of present-day-style (dynamic) state, and 100 TB of new-style (scalable but restrictive) state

This "new-style" state would work very well for ERC20s, NFTs, many defi use cases, but not eg. highly "central" objects like Uniswap contracts, or onchain order books, or other complex things (which are crucial for Ethereum but which only take up a small percentage of state)

Hence, it will not be *necessary* to rewrite any apps, but it will be *very cost-effective* to eg. rewrite an ERC20 token into a newer design that uses a new type of UTXO storage that is currently being explored, so that it will have >10x lower txfees.

Design of these new state types (current ideas: keyed nonces, ring buffers, UTXOs, statically accessible state, temp state) is an area where we will need a lot of feedback from application developers (incl. privacy-friendly application developers) and probably several rounds of rethinking and iteration.

* In the context of a much larger total state size, we need to figure out the incentive issues around who stores this state and what motivates them to. Even saying "each node stores 1%" is not good enough - why do they store that 1% and why are they willing to serve it? This is being elevated as a first-class research area.

* Ethereum will need to have a "VM" other than EVM in one form or another - at the very least, we need something like leanISA for recursive STARKs - and the gains are large in exposing it to users so that we support programmable privacy and better scalability. Right now, the most likely contenders are leanISA and RISC-V.

My own ideal is that in this world, we adjust the protocol so that the EVM becomes a high-level-language compiler-level feature, and the protocol only "sees" RISC-V / leanISA directly. But this is still far away.

* Gas limit increases, blob increases and slot time decreases will happen many times over the next ~5 years. We expect a large gas limit increase with Glasterdam. Each step of increased scale or decreased slot time is a matter of getting to the point where it is safe to do it, which comes from a combination of client optimization and protocol changes.

Ethereum is CROPS.

Ethereum is scaling.

Ethereum is reinventing itself.

Onward.

[Ethereum Institutional @ethereuminsti]

Congratulations to the @RobinhoodCrypto and @Arbitrum teams on the launch of Robinhood Chain - an Ethereum L2 built on Arbitrum's Orbit stack.

Having a major brokerage operate its own financial‑grade Ethereum rollup optimized for tokenized securities and RWAs is a meaningful step toward onchain capital markets: towards 24/7 trading of tokenized assets, infrastructure developed with reliability, security and compliance in mind, and settlement on a shared, programmable base layer.

[Ethlabs @ethlabs_org]

Announcing Ethlabs: a non-profit R&D lab for Ethereum and ETH

Our mission is to make Ethereum the settlement layer of the global economy.

The internet became global because shared protocols created a common language between networks. Private systems remained useful, but bounded. Finance is approaching a similar moment. As value, assets, and markets become digital, the world needs shared settlement infrastructure.

Ethereum is uniquely positioned to become that shared base layer, the neutral foundation on which users, institutions, and agents can transact without intermediation.

What we believe:

• We believe credible neutrality matters. Ten years of uptime and the lowest counterparty risk. Ground that cannot be pulled away by any one country, institution, company, or person.

• We believe ETH matters. The most valuable, programmable store of value. A decade of broad distribution, deep liquidity in onchain markets, and maximally trustless asset on Ethereum.

• We believe DeFi matters. Markets, liquidity, credit, exchange, and coordination, open to anyone.

• We believe adoption matters. Principles do not change the world until people benefit from them.

We sit between two worlds: real usage from the builders at the frontier, and the protocol that has to support it. We work with users, applications, wallets, L2s, infrastructure teams, institutions, ETH holders, core devs and researchers, then turn what they actually need into protocol work, shared standards, infrastructure, and shipped products.

Ethlabs is independent but Ethereum is a shared project. We are one node in a much larger network of stewards. This is the multi-node future.

We have spent the better part of the past decade contributing to Ethereum core research and development.

We are opinionated and transparent. We move with urgency, learn in public, and course-correct when we’re wrong.

We are building a lean, talent-dense team for people who want to do the most important work of their careers: [email protected]

[vitalik.eth @VitalikButerin]

Recently I have been starting to worry about the state of prediction markets, in their current form. They have achieved a certain level of success: market volume is high enough to make meaningful bets and have a full-time job as a trader, and they often prove useful as a supplement to other forms of news media. But also, they seem to be over-converging to an unhealthy product market fit: embracing short-term cryptocurrency price bets, sports betting, and other similar things that have dopamine value but not any kind of long-term fulfillment or societal information value. My guess is that teams feel motivated to capitulate to these things because they bring in large revenue during a bear market where people are desperate - an understandable motive, but one that leads to corposlop.

I have been thinking about how we can help get prediction markets out of this rut. My current view is that we should try harder to push them into a totally different use case: hedging, in a very generalized sense (TLDR: we're gonna replace fiat currency)

Prediction markets have two types of actors: (i) "smart traders" who provide information to the market, and earn money, and necessarily (ii) some kind of actor who loses money.

But who would be willing to lose money and keep coming back? There are basically three answers to this question:

1. "Naive traders": people with dumb opinions who bet on totally wrong things
2. "Info buyers": people who set up money-losing automated market makers, to motivate people to trade on markets to help the info buyer learn information they do not know.
3. "Hedgers": people who are -EV in a linear sense, but who use the market as insurance, reducing their risk.

(1) is where we are today. IMO there is nothing fundamentally morally wrong with taking money from people with dumb opinions. But there still is something fundamentally "cursed" about relying on this too much. It gives the platform the incentive to seek out traders with dumb opinions, and create a public brand and community that encourages dumb opinions to get more people to come in. This is the slide to corposlop.

(2) has always been the idealistic hope of people like Robin Hanson. However, info buying has a public goods problem: you pay for the info, but everyone in the world gets it, including those who don't pay. There are limited cases where it makes sense for one org to pay (esp. decision markets), but even there, it seems likely that the market volumes achieved with that strategy will not be too high.

This gets us to (3). Suppose that you have shares in a biotech company. It's public knowledge that the Purple Party is better for biotech than the Yellow Party. So if you buy a prediction market share betting that the Yellow Party will win the next election, on average, you are reducing your risk.

Mathematical example: suppose that if Purple wins, the share price will be a dice roll between [80...120], and if Yellow wins, it's between [60...100]. If you make a size $10 bet that Yellow will win, your earnings become equivalent to a dice roll between [70...110] in both cases. Taking a logarithmic model of utility, this risk reduction is worth $0.58.

Now, let's get to a more fascinating example. What do people who want stablecoins ultimately want? They want price stability. They have some future expenses in mind, and they want a guarantee that will be able to pay those expenses. But if crypto grows on top of USD-backed stablecoins, crypto is ultimately not truly decentralized. Furthermore, different people have different types of expenses. There has been lots of thinking about making an "ideal stablecoin" that is based on some decentralized global price index, but what if the real solution is to go a step further, and get rid of the concept of currency altogether?

Here's the idea. You have price indices on all major categories of goods and services that people buy (treating physical goods/services in different regions as different categories), and prediction markets on each category. Each user (individual or business) has a local LLM that understands that user's expenses, and offers the user a personalized basket of prediction market shares, representing "N days of that user's expected future expenses".

Now, we do not need fiat currency at all! People can hold stocks, ETH, or whatever else to grow wealth, and personalized prediction market shares when they want stability.

Both of these examples require prediction markets denominated in an asset people want to hold, whether interest-bearing fiat, wrapped stocks, or ETH. Non-interest-bearing fiat has too-high opportunity cost, that overwhelms the hedging value. But if we can make it work, it's much more sustainable than the status quo, because both sides of the equation are likely to be long-term happy with the product that they are buying, and very large volumes of sophisticated capital will be willing to participate.

Build the next generation of finance, not corposlop.

[vitalik.eth @VitalikButerin]

Welcome to 2026! Milady is back.

Ethereum did a lot in 2025: gas limits increased, blob count increased, node software quality improved, zkEVMs blasted through their performance milestones, and with zkEVMs and PeerDAS ethereum made its largest step toward being a fundamentally new and more powerful kind of blockchain (more on this later)

But we have a challenge: Ethereum needs to do more to meet its own stated goals. Not the quest of "winning the next meta" regardless of whether it's tokenized dollars or political memecoins, not arbitrarily convincing people to help us fill up blockspace to make ETH ultrasound again, but the mission:

To build the world computer that serves as a central infrastructure piece of a more free and open internet.

We're building decentralized applications. Applications that run without fraud, censorship or third-party interference. Applications that pass the walkaway test: they keep running even if the original developers disappear. Applications where if you're a user, you don't even notice if Cloudflare goes down - or even if all of Cloudflare gets hacked by North Korea. Applications whose stability transcends the rise and fall of companies, ideologies and political parties. And applications that protect your privacy. All this - for finance, and also for identity, governance and whatever other civilizational infrastructure people want to build.

These properties sound radical, but we must remember that a generation ago any wallet, kitchen appliance, book or car would fulfill every single one of them. Today, all of the above are by default becoming subscription services, consigning you to permanent dependence on some centralized overlord.

Ethereum is the rebellion against this.

To achieve this, it needs to be (i) usable, and usable at scale, and (ii) actually decentralized. This needs to happen at both (a) the blockchain layer, including the software we use to run and talk to the blockchain, and (b) the application layer. All of these pieces must be improved - they are already being improved, but they must be improved more.

Fortunately, we have powerful tools on our side - but we need to apply them, and we will.

Wishing everyone an exciting 2026.

Milady.

[Zhixiong Pan @nake13]

以太坊 Fusaka 升级里的「特洛伊木马」：如何把几十亿台手机变成硬件钱包？

1️⃣ 你口袋里其实早就装着一个「硬件钱包」

我们日常使用的手机和电脑中，其实内置了专门的安全芯片。比如 iPhone 里的「安全隔区」（Secure Enclave），或者安卓手机里的 Keystore / Trust Zone / StrongBox。

这块独立的物理区域通常被称为 TEE（可信执行环境）。它的特点是「只进不出」：私钥在里面生成，永远不会离开这个物理区域，外部只能请求它对数据进行签名。

这实际上就是硬件钱包的标准。而这些芯片在签名时，普遍采用了一种被 NIST（美国国家标准与技术研究院）选中的行业标准算法曲线：secp256r1。这也正是 WebAuthn 和 FIDO2（比如你的指纹登录、FaceID）背后的基石。

2️⃣ 仅仅相差一个字母的鸿沟

尴尬的是，以太坊原生并不支持这个主流的 secp256r1。

当年比特币社区出于对 NIST 曲线可能存在「国家级后门」的担忧，选择了相对冷门的 secp256k1，所以以太坊在设计账户体系时，沿用了这条曲线的传统。

虽然 r1 和 k1 看起来只差一个字母，但在数学上它们完全是两种不同的语言。这就导致了一个巨大的痛点：你手机里那个安全芯片，对着以太坊是一脸懵逼的，它无法直接签署以太坊的交易。

3️⃣ 既然换不了硬件，那就在这个版本「兼容」它

以太坊显然无法强迫苹果或三星去更改芯片设计来适配 secp256k1，唯一的路就是以太坊自己去适配 secp256r1。

用智能合约写代码去验证 r1 签名行不行？理论上行，但数学运算太复杂，跑一次验证可能要消耗几十万 Gas，这在经济上是完全不可用的。

于是，在 Fusaka 升级中，开发者祭出了大杀器：预编译合约（Precompile）。 这相当于在以太坊虚拟机（EVM）里开了一个「后门」或「外挂」。与其让 EVM 一步步算，不如把这个验证功能直接写进客户端底层代码里。开发者只需要调用特定的地址，就能以极低的成本完成验证。

在 EIP-7951 中，这个成本被定格在 6900 Gas，从几十万级直接降到几千级，终于进入了「可以在真实产品里日常使用」的区间。

4️⃣ 账户抽象的最后一块拼图

这个 EIP 的落地，意味着我们终于可以在手机的 TEE 环境里，为以太坊上的智能账户签名授权了。

需要注意的是，这并不适用于你现在的 MetaMask 这种 EOA 地址（因为它们的公钥生成逻辑还是 k1 的）。

它是专门为「账户抽象」（AA 钱包）准备的。 未来，你的钱包不再是一串助记词，而是一个智能合约。这个合约里写着：

「只要验证了这个指纹（r1 签名）是对的，就允许转账。」

5️⃣ 总结

EIP-7951 也许不会一夜之间让助记词消失，但它终于搬开了以太坊大规模普及路上最大的一块绊脚石。

在此之前，摆在用户面前的永远是一道残酷的选择题： 想要拥有「银行级」的自主安全性？你得花钱买个 OneKey、Keystone 或 Ledger，还得像保管金条一样保管助记词；想要最丝滑的体验？你只能把币存在交易所或托管钱包，代价是交出控制权（牺牲去中心化）。

而在 Fusaka 升级之后，这道选择题将不复存在。

随着 EIP-7951 的落地，「手机即硬件钱包」将逐渐成为现实。对于未来的十亿新用户而言，他们可能根本不需要知道什么是「私钥」，也不需要面对抄写 12 个单词的心理压力。

他们只需要像平时买咖啡一样，刷一下脸，按一下指纹，背后的 iPhone 安全芯片就会调用 secp256r1 签署交易，并通过以太坊原生的预编译合约完成验证。

这才是以太坊拥抱下个十亿用户的正确姿势：不是傲慢地要求用户去学习复杂的密码学，而是放下身段去兼容互联网的通用标准，主动走进用户的口袋。

[Ethereum @ethereum]

1/ Fusaka is coming December 3rd.

Ethereum’s next major upgrade shows that the network can grow to meet global demand, without compromising on decentralization or permissionlessness.

Whether you’re a user, builder, institution, or operator, here’s how Fusaka will impact you.

[Ethereum Intern @ethereumintern_]

Fusaka is the new Ethereum L1 upgrade officially scheduled for the 3rd of December 2025, 21:49:11 UTC time.

But how does it affect Ethereum? What are the changes being made to Mainnet? Let's find out in today's Fusaka thread!

1/50

[OKX @okx]

The one and only @VitalikButerin stopped by our offices to chat with our founder and CEO @star_okx about the future of digital finance and the culture of OKX.

☑️ Tech-first
☑️ Product-driven
☑️ Self-Custodial
☑️ Design-led and onchain 4 lyfe.

Believe in somETHing 😎

[Uniswap @Uniswap]

The Uniswap Protocol has processed over $2.5T in all-time volume on Ethereum mainnet

World Computer

[Davide Crapis @DavideCrapis]

We’re starting a new AI Team at the Ethereum Foundation (the dAI Team).
Our mission: make Ethereum the preferred settlement and coordination layer for AIs and the machine economy.

The team will focus on two main areas:
- AI Economy on Ethereum = giving AI agents and robots ways to pay, coordinate, and follow rules without middlemen.
- Decentralized AI Stack = making sure the future of AI doesn’t rely only on a handful of entities but has open, verifiable censorship-resistant alternatives.

We believe Ethereum can be as useful for today’s AI developers as it will be for the sci-fi future. That’s why we’ll work closely with ecosystem projects to accelerate progress and push the boundaries of research and innovation at the intersection of AI and blockchains. Connecting two communities that have too often worked in parallel.

We’ll work side by side with both the Protocol and Ecosystem teams at the EF. Linking protocol improvements with the needs of AI builders, and funding innovative public goods that will make Ethereum the best home for AI.

Ethereum makes AI more trustworthy, and AI makes Ethereum more useful. The more intelligent agents transact, the more they need a neutral base layer for value and reputation. Ethereum benefits by becoming that layer and AI benefits by escaping lock-in to a few centralized platforms.

Acting with purpose and urgency, we’ll continue our recent work on ERC-8004—a standard for proving who an AI agent is and whether you can trust it— and continue to support new upgrades and standards. Inspired by the d/acc philosophy and Ethereum values, we’ll support projects that are leveraging Ethereum to build a more resilient and secure AI ecosystem where humans can flourish with AI.

Ethereum + AI is about making sure humans keep agency and AI can reach its potential. Neutral, verifiable, censorship-resistant infrastructure means AI works for the people, all of us.

The team starts with myself as lead, and we’re just getting started. Explore our job postings and resources below, and join us in building the future of decentralized AI on Ethereum.

[Eito Miyamura | 🇯🇵 @Eito_Miyamura]

We got ChatGPT to leak your private email data 💀💀

All you need? The victim's email address. ⛓️‍💥🚩📧

On Wednesday, @OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by @AnthropicAI

But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense.

And with just your email, we managed to exfiltrate all your private information.

Here's how we did it:
1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite.
2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar
3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email.

For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve.

Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data.

ChatGPT + Tools poses a serious security risk

[Eric Trump @EricTrump]

It puts a smile on my face to see ETH shorts get smoked today. Stop betting against BTC and ETH - you will be run over.

[Ethereum @ethereum]

0/ 11 years ago, the Ethereum Whitepaper outlined the vision for Ethereum.

The whitepaper imagined a key application for Ethereum: crypto assets with stable value, now known as stablecoins.