Hubris

Curated Web3 & Security thread

[Project Tachyon @TachyonZcash]

Zcash's new Ironwood pool is being formally verified to rule out all undetectable counterfeiting bugs, up to the underlying cryptographic assumptions.

https://t.co/EmGPBqVyFF

[great hylord cavey phd ∿ @cavemanloverboy]

i've been writing code for over a decade now, and i've learned a lot along the way. here are some little known performance tips i use daily:

1. making ur function and variable names shorter. your cpu is able to look things up faster if the names are shorter

2. put hot code at the top of a file. this will help the cpu find it faster

3. keep source files under 64 KB. otherwise they no longer fit in the L1 cache

4. minimizing whitespace between logical lines of code. the compiler maps shorter distances between lines of source code to shorter distances between cpu instructions

5. use parallel mutexes instead of regular mutexes so that multiple threads can access the data at the same time

hope this helps 👍

[Owen | Guardian @0xOwenThurm]

Incredible find and disclosure from @hexens && @kemmio 👏

Recommend a read, and thank you very much for protecting the the entirety of DeFi.

https://t.co/CVzIV6X8P8

[Ethereum Institutional @ethereuminsti]

1/ Announcing Ethereum Institutional

An independent non-profit dedicated to accelerating the institutional adoption of Ethereum, its L2s, applications and overall ecosystem.

[Anthropic @AnthropicAI]

Claude Fable 5 will be available again globally tomorrow.

After a series of productive conversations with the US government, we're redeploying the model with a new set of classifiers to target and block more cybersecurity tasks. In the near term, some routine tasks like coding and debugging will fall back to Opus 4.8. We’ll continue to refine these classifiers over the coming weeks to reduce false positives and better distinguish genuine misuse from legitimate requests.

We’ve also begun drafting a consensus framework—with Amazon, Microsoft, Google, and other Glasswing partners—for assessing the severity of AI jailbreaks and how AI developers should respond to them. We invite other industry partners and model providers to join us in this effort.

Finally, we’re scaling up our collaboration with the US government on model testing and safeguards. This will include pre-release access to models and safeguards for evaluation, information sharing on jailbreaks and misuse, and dedicated resources for joint research.

Thank you to our users for your patience, and to our partners across the government, industry, and the research community who worked alongside us to make Fable 5 available again.

Read our full blog: https://t.co/VHyum831ri

[nic carter @nic_carter]

OpenUSD confirms that issuer-keeps-the-float economics for stablecoins are over.

[Quicknode @Quicknode]

The order book is not flat. It has depth most people never see.

L1 the price, L2 the walls, L3 the orders inside, and L4 the wallet behind each.

Watch @sensahil peel a live @HyperliquidX book apart.

[Flowmark @Flowmark_xyz]

https://t.co/1LLM6LN4xY

[Morpho 🦋 @Morpho]

The Morpho Midnight Whitepaper

A noncustodial protocol for fixed rate, fixed term credit markets

https://t.co/0Sws6JiRsA

[Hubris @hvbris_]

@SagivMooly Congrats Mooly!

[Pashov Audit Group @PashovAuditGrp]

Been seeing people using Pashov Skills incorrectly, wasting money. Here is the right way:

1. MOST important - always use your subscription plan, it's FREE this way. Open Source ftw😎
2. Run x-ray first, solidity-auditor second
3. Use for vulnerability discovery, not for back-testing recall (we did this for you already https://t.co/QGxPif8U3W)

As a developer: when actively building, use both x-ray and solidity-auditor daily

As a bug bounty hunter: many SRs found valid vulnerabilities on bug bounty platforms with Pashov Skills already. Still, bug bounty is about having an edge. Open Source tools can only go so far, add creativity on top of your strategy.

As an auditor: run with your team in the start of a security audit. A couple of hours of Pashov Skills + triage can save you multiple days of manual efforts. Thank us later🫡

[Wintermute @wintermute_t]

https://t.co/2oH5BAKg0x

[readylayerone @readylayerone]

gm @solana_devs

will be spending this week talking about the new solana/web3.js

it's the biggest web tooling change in solana in a very long time

the best part? if you aren't comfortable with the solana/kit, you get its benefits in the interface you already use!

try the new web3.js library today on your current projects.

it's an RC at the moment, and @dhkleung and @a_milz are working hard to get it ready for a new release!

[cds-amal @cdsudama]

Most Solana test output answers one question:

Did the transaction succeed?

I'm interested in a different question:

What story did the program just tell?

A new capability I'm working on lets downstream tools reconstruct execution as a behavioral trace instead of log soup.

(Example: @C4ngui's vesting program)

🧵

[Fede’s intern 🥊 @fede_intern]

url: https://t.co/5SFhhWKBaH

[Daniel Von Fange @danielvf]

Most people don't know that the --via-ir flag makes changes in the Solidity language. If using it to compile with, your code can do different things from compiling without it.

If using it, here's some things you should do: 1/3

[Tushar Jain @tushar_jain]

1/ Multicoin published a full analysis & valuation of Hyperliquid (HYPE).

HYPE is now one of the largest positions in our liquid hedge fund. We've been accumulating aggressively since February.

Here's why we believe HYPE will be one of the best performers over the next cycle:

[Helius @Helius]

Get a wallet's balance at any point in time

The new balance-at endpoint returns a wallet's exact SOL or SPL token balance at a given date or slot

How much USDC did a wallet hold at 19:20 on Jan 10, 2025?

Now it's a single call

Ideal for PnL, charts, snapshots, and cost basis

[Rekt News @RektHQ]

One deprecated contract, one flawed escape hatch circuit, and a verifier that should have been retired years earlier. @AztecLabs_ legacy rollup contract lost roughly $2.198 million after a ZK proof passed a broken root-binding check.

https://t.co/kyLKmDRElf

[Jon Kol @thePalenimbus]

https://t.co/q0z1XkDr9t