Thrilled to announce my team won first place at the Sui Move Bootcamp Hackathon HCMC! 🚀 What an intense journey—diving deep into Move's object models, ptbs, and building real-world DApps. I have learn so much from the bootcamp.
#SuiMove
[GIVE AWAY POST]
Em Tina đang có 1 phần quà bên SCEX đang muốn giveaway cho 1 bạn bất kì trong bài viết này!
Thể lệ đơn giản thôi:
- Follow mình
- Cmt số bất kỳ từ 01-199
- Rt bài viết này
Mình là Affiliate BD partner chính thức của sàn nên nếu có nhu cầu affiliate với sàn SCEX ae hãy contact mình nhé 🥰
Chúc anh em may mắn
SpaceX is actively hiring world-class engineers/physicists for SpaceXAI, even if you have zero prior experience in AI. Smart humans figure it out fast.
Please send an email with ~3 bullet points demonstrating evidence of exceptional ability to [email protected].
Step-1: Learn Rust
Step-2: Understand ownership, borrowing & lifetimes
Step-3: Master memory safety, zero-cost abstractions & type system
Step-4: Build a CLI tool using Cargo
Step-5: Write a multithreaded server using async Rust with Tokio
Step-6: Read the Rust standard library source. question everything
Step-7: Build a production-grade backend (REST/gRPC, DB, caching, msging)
Step-8: Make it fast & safe (profiling & benchmarking)
Step-9: Eliminate bottlenecks with safety
Step-10: Ship it
Algorithms by Jeff Erickson - one of the best algorithm books out there.
The illustrations make complex concepts surprisingly easy to follow. Highly recommend this.
https://t.co/8G06RjGnMA
Aftermath Finance lost $1.14M to an integer overflow bug. The kind of mistake covered in week one of every intro-to-programming course.
The fee was stored as u256 (always positive) but read elsewhere as signed (positive or negative). Pass a number close to the max, signed reading wraps it to a huge negative. Fee becomes rebate. Protocol pays you to trade.
Aftermath's perp source is private. Here's the exploit reconstructed from the on-chain trace:
1. Call create_integrator_info with u256 fee = 2^256 - 10^17 (looks like a huge positive number, reads as -10^17 signed)
2. Place matching limit and market orders between two of their own accounts
3. Each trade fires PaidIntegratorFees - protocol sends USDC to the integrator (attacker)
4. Atomic, repeatable, ~$79K profit per cycle
Final on-chain proof from the exploit tx:
PaidIntegratorFees event records:
- fees: 115792089237316195423570985008687907853269984665640563689698454007913129639936 (= -3.5×10^17 in signed i256)
- integrator_address: 0x1a65086c... (the attacker)
The protocol logged itself paying a wrapped-negative fee to the exploiter. Function signature on-chain confirms: clearing_house::create_integrator_info(Address, U256) with no bounds check.
The April pattern of missing parameter bounds:
- Singularity: oracle fee tier set to 42 (Uniswap only supports 100/500/3000/10000)
- Aftermath: u256 fee parameter wraps to negative when read as signed
- Scallop: spool created without last_index initialization
Same root cause across all three: setters that don't enforce the value range invariants the rest of the contract assumes. AI agents test boundary values automatically. Wrap a number, free money comes out.
Tx: 4pGQdfFG96Ghqj1xqkaeeAgMQCpttivdkgSRUGc6wVD8
I paid $638 (X4) for @SuiPlay. Event attendees got it FREE. I never refunded. I held all 4 units. I defended this project. Now I'm sitting here feeling like the biggest fool in the room.
I trained a 12M parameter LLM on my own ML framework using a Rust backend and CUDA kernels for flash attention, AdamW, and more.
Wrote the full transformer architecture, and BPE tokenizer from scratch.
The framework features:
- Custom CUDA kernels (Flash Attention, fused LayerNorm, fused GELU) for 3x increased throughput
- Automatic WebGPU fallback for non-NVIDIA devices
- TypeScript API with Rust compute backend
- One npm install to get started, prebuilt binaries for every platform
Try out the model for yourself: https://t.co/TB2itlmCVT
Built with @_reesechong. Check out the repos and blog if you want to learn more.
Shoutout to @modal for the compute credits allowing me to train on 2 A100 GPUs without going broke
cc @sundeep@GavinSherry
I know you're all getting mighty tired of seeing typography on your timeline today!
But here's a pretext.js demo that (hopefully) isn't a crime against justification and indentation.