Caio César (@0xCaioCesar) profile picture
Joined September 2022
Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)Photo by Caio César (@0xCaioCesar)
Caio César retweeted
There's a market demand for user-friendly, multi-chain multisig wallet. Where you can use your Ledger/Trezor, phone or/and email, 2fa codes as signers. Safe is amazing but only EVM. It needs to support Bitcoin, Ethereum and Solana and offer good connectivity experience to DeFi. Who is building this?
72
3
3
144
17,193
Caio César retweeted
I'm using KeePassXC for a decade. In this decade, all commercial password managers went through significant enshittification. Lastpass, 1Password, Bitwarden, all of them. Some had security breaches. My password management hasn't changed in this decade at all. I haven't thought about password management once in 10 years. I haven't had to jump ship between providers or migrate my data. I just have a database shared across my devices and few offsite backups. One decision to go with free and open source password manager saved me so much trouble. Literally just use KeePassXC, don't even bother with commercial ones.
Readers added context they thought people might want to know
The post leaves out that 1Password requests this permission to scan Setup Codes and one-time password QR codes. macOS has required it since Catalina. According to 1Password, scanning happens locally and no screen or audio recordings are saved. support.1password.com/screen-recordi…
110
72
18
1,327
73,653
Caio César retweeted
Depois da Blast, qual será a próxima???
Which L2 gonna be next to shut down?
1
2
5
446
Caio César retweeted
Blast normalised the post-2022 ponzi meta and created an entire cycle of ghost chains and scam projects. Couldn’t say it then without being yelled at by everyone saying 1 Blast Gold = $50. Glad to see it go. One of the worst things to happen to this industry.
Blast will be shutting down. We launched Blast with the goal of building a self-sustaining chain for users and developers. Unfortunately, the economics of operating the chain no longer make sense: the ongoing costs of maintaining Blast exceed the revenue generated by the L2, and we do not see a credible path to making the chain economically sustainable. As a result, we've made the difficult decision to wind Blast down. We're sorry to the users and developers who believed in Blast, built on it, and supported the ecosystem. Our priority now is making the shutdown as smooth and safe as possible. We're asking all users to withdraw their assets from Blast to Ethereum mainnet, including any balances held in the Blast PWA. To make this easier, we will be reducing the withdrawal delay to 24 hours. As part of the shutdown process, we'll first begin withdrawing Blast's Lido assets. This process is expected to take approximately one week. During this period, withdrawals will temporarily be unavailable, even after the withdrawal delay is reduced to 24 hours. Once that process is complete, withdrawals will resume with the new 24-hour delay. Users will have until October 26, 2026 to withdraw through the normal Blast interface. After October 26, assets will remain withdrawable, but users will need to interact directly with the Blast bridge contracts on Ethereum L1. We'll publish detailed instructions before then. We strongly encourage everyone to withdraw their assets to Ethereum mainnet before October 26.
13
9
2
235
11,581
Tem como fazer coisas parecidas hoje usando a @aave! Eu tenho um empréstimo da reforma de um imóvel lá e vou acumulando BTC tokenizado e stablecoins. Não liquida nas quedas e ainda garante acúmulo de BTC para uma quitação tranquila no futuro. Pago juros irrisórios.
Imaginem o cenário! Você quer comprar um Land Cruiser (ou qualquer outro carro). Mas como Bitcoiner, esse não é o melhor momento de comprar coisas, é o momento de comprar Bitcoin. Mas você quer MUITO um Land Cruiser. Só que você NÃO VAI fazer um empréstimo e deixar um carro pro banco. O que fazer? A @BitGo Bolivia solucionou o problema junto da Towerbank (parabens aos responsáveis)🤗 Quer pagar à vista com BTC? Pode! Quer financiar colocando Bitcoin como garantia? Pode! LTV de até 50% Taxas: 10% a 11% ao ano (com opções de liquidação de juros adiantados) Por que isso é BIZARRO de incrível para a nossa realidade no BR? No Brasil, a taxa Selic está em 13,75% ao ano. Conseguir um empréstimo de 10% ao ano é tomar dinheiro abaixo da taxa básica de juros brasileira e por menos da metade do custo de um financiamento de veículo padrão por aqui (~25% a.a.). A matemática do Bull Market: 🧮 Como o seu Bitcoin continua 100% seu, se o BTC subir meros +10% durante esse ano, a valorização do seu próprio patrimônio já paga integralmente os juros do empréstimo de um ano inteiro. Esperando a @BitGo trazer pro BR essa solução com essa taxa 🤗🤗🤗🤗🤗
4
210
Post proibido 🚫 aos robôs dessa rede (inclusive aos meus) Humanos, leiam livros físicos e tomem sol, precisamos só dessas duas incríveis criações às vezes 🫡
7
1
131
2,677
LIQUID NETWORK UPDATE: INCIDENT REPORT Status as of September 8, 2026, 19:10 UTC What Happened? On September 6, 2026 at 15:53:10 UTC (Liquid block 4,050,336), a vulnerability in the open-source Elements software related to how Liquid nodes cache range proof verifications was exploited, resulting in the creation of ~4,000 LBTC that were not backed by bitcoin held in reserve. The individual(s) responsible for the exploit then used the SideSwap service, a Liquid Federation member that holds a peg-out authorization (PAK) key, to convert the unbacked LBTC to BTC via Liquid’s standard peg-out mechanism. Because the validation failure occurred at the transaction level before the peg-out was initiated, both SideSwap’s node and the Liquid Network’s globally distributed functionary nodes accepted the LBTC as valid. The functionaries processed the peg-out as authorized, releasing approximately 4,000 BTC through SideSwap’s whitelisted bitcoin address, which SideSwap then forwarded to the address specified by the exploiters. Before the incident, the Liquid reserve held approximately 4,205 BTC. Following this peg-out and additional peg-outs processed before operations were halted, the reserve balance fell to 197 BTC. Key Clarifications No keys were compromised. The Liquid Federation functionaries were not hacked, and no private keys were compromised. The peg-out mechanism that authorizes withdrawals to whitelisted addresses operated as designed. Other Liquid-issued assets were not affected. USDT and other tokens issued on the Liquid Network were not impacted by the vulnerability, though they are temporarily unavailable while the network remains paused. Investigation is ongoing. As is common in complex critical-system failure investigations, this incident arose from the convergence of several individually low-probability factors that interacted in ways that ultimately defeated the system's built-in redundancies. More detail will be shared in forthcoming communications. What Steps Have Been Taken To Recover The Assets? The individual(s) responsible for the exploit left a public message on the bitcoin mainchain identifying themselves as white-hat security researchers and requesting contact to address the vulnerability. Patch deployed. Blockstream identified and deployed a patch to the Liquid Network’s bridge nodes, which was completed on September 7 at 01:09 UTC, ensuring the vulnerability is no longer exploitable. Partial fund recovery. On September 7 at 16:09:25 UTC (Liquid block 965,950), the exploiters returned 3,400 BTC to the Liquid Federation peg wallet. Approximately 598.5 BTC (15% of the total) remains outstanding. Discussions between Blockstream and the individuals responsible are ongoing to secure the return of the remaining funds. What Comes Next? Our immediate priorities are recovering the remaining funds and resuming normal network operations safely and as quickly as possible. Software update in progress. A fix for the exploited vulnerability has been developed and is undergoing multiple rounds of internal and external review. Blockstream is preparing an emergency release of Elements (v23.3.4), which is expected to be released as soon as possible, but within approximately 48 hours. Network restoration. Once the software update is finalized, Liquid Network functionary operators will perform additional adjustments to resume full functionality and restore the corrected network state, including rejection of the invalid peg-out. Ongoing updates. We will continue to provide detailed updates as the situation progresses. What You Should Know The Liquid Network remains offline at this time, while we work on reviewing the security fixes and network resumption code and coordinate with the white hat hacker towards timely resumption of the network with 1:1 backing for BTC. While the network is paused, users cannot transact on Liquid. If you operate a Liquid node, please watch for the emergency Elements release and follow the upgrade instructions when available. Users do not need to take any proactive steps to protect their funds at this time. The Liquid Federation and its members are committed to resolving this incident in coordination with Blockstream and to resuming normal operations as soon as it is safe to do so.
92
113
46
485
147,342
Notícias TRISTES para compartilhar NOVAMENTE 🚨 Trezor sofreu uma violação de dados EXTREMAMENTE SENSÍVEL. O vazamento afetou novos clientes nos EUA, Reino Unido, Suécia, Colômbia, Brasil, Itália e Portugal que receberam um pedido nos 90 dias anteriores a 8 de agosto de 2026. Os dados expostos: - Nomes completos - Endereços de envio - Números de telefone - Endereços de e-mail Esse é um problema recorrente no setor cripto e não cripto. Caixas postais como default é o MÍNIMO que infelizmente, precisamos adotar!
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026. The data exposed: - Full names - Shipping addresses - Phone numbers - Email addresses The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy). All affected customers have been contacted separately by email. Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts. NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels. We are deeply sorry to the community and those affected. We are investigating this situation and will post updates on our blog: trezor.io/blog/news/recent-c…
11
12
3
101
11,008
Caio César retweeted
We’ve decided to open-source a multi-agent harness we use internally at YC. We call it “QM” and it’s meant to be easy to customize, like Hermes or OpenClaw, but useful for a whole company. We use it across accounting, legal, events, and engineering (including building QM itself!). The whole project is under an MIT license. It is cloud-first and has Slack and web UI natively.
423
1,339
342
12,009
2,906,145
Caio César retweeted
Post novo: Explorando o problema escandaloso do RNG da Coinkite Agora entendendo em detalhes e com exemplos de código, como essa vulnerabilidade do firmware do ColdCard pode ser usado pra encontrar wallets fracas e diretamente mover fundos na blockchain. Se você se interessa por cybersec, esta é uma boa chance de aprender conceitos básicos (isso é bem básico, não foi nada avançado). akitaonrails.com/2026/08/01/…
7
9
3
166
21,960
Caio César retweeted
Nunca atualize firmware de nenhum hardware wallet sem ter o backup dos seeds/passphrase, nunca! Seria praticamente uma roleta russa.
WARNING: Users are reporting that the new COLDCARD firmware upgrade is bricking some devices. Before upgrading the firmware, be sure to safely move all funds off the wallet.
6
9
1
191
14,416
Caio César retweeted
After a comprehensive review, Aave is deprecating 50 low adoption asset reserves across multiple deployments. In addition, Aave is orderly winding down deployments on Sonic, Scroll, zkSync, Metis, Soneium, and Aptos, covering another 25 asset reserves. As part of this process, 21 matured Pendle PTs are also being deprecated in favour of new maturities. In total, the changes affect $98.1M in supply and $15.6M in debt. These measures reduce Aave's economic and technical risk surface as part of the new Aave Risk Framework and Technical Asset Listing Framework. Aave will continue applying continuous risk assessment for all assets across all deployments.
134
263
99
1,518
330,628
Caio César retweeted
Two weeks ago, Ethereum researchers met in Berlin to continue charting the protocol's long-term trajectory, following along discussions with client teams in Svalbard in April. The updated strawmap is at strawmap.org, and I attached a picture of it to this post. My own high-level takeaways: * "Lean Ethereum" is not a single one-shot upgrade, it is a collection of improvements that will come online to the Ethereum network over the course of three or four years. But make no mistake, this IS the third major iteration of Ethereum in the same way that the Merge was the second. Almost every major piece of the protocol will be replaced: - Verification through recursive STARKs, rather than direct re-execution. Recursive STARKs become an enshrined first-class core component of the protocol - Replacing everything quantum-vulnerable with quantum-safe alternatives - Consensus: decoupled available chain and finality, one or two-round finality. Theoretically optimal security properties, simpler than today, and faster than today - Multidimensional gas - State: not just tree structure, but what *types* of state are available - Changes to client architecture ... At the same time, simplification, cleanup and future-proofing. And this will all be done in a way that minimizes disruption to existing application. We've done this before (the Merge), we can do it again. * H-star (aka Hegota) is probably Ethereum's last thematically "pre-Lean" fork. Starting from I-star, most of everything we do will have a very strong "Lean" feel to it in one way or another. * Privacy is no longer an afterthought, it is a first class goal. When designing Frames, the mempool, additions to the state tree, we explicitly ask the question "okay, how do quantum-safe, intermediary-free privacy protocol transactions go through this, and what is the overhead?" * Formal verification of everything for security. * FV also makes us much more comfortable with canonicalization (having pieces of the protocol that are directly defined as a piece of bytecode expressed in some language). evm-asm is being written in part to become a canonical proof system for the EVM. * Quantum safety has shifted up a LOT in priority. This adds a lot of work (eg. finalizing a quantum-safe blobs design has become urgent; this work has already been ongoing for months) * Probably the single most disruptive part of the plan is the changes to state. There is growing consensus around leaving present-day-style "dynamic state" mostly unchanged, but scaling it only a medium amount, and adding new types of state that are more scalability-friendly (eg. no need for builders to sync/store all of it) but more restrictive, and that will scale a large amount. eg. possible Ethereum in 2030: 2 TB of present-day-style (dynamic) state, and 100 TB of new-style (scalable but restrictive) state This "new-style" state would work very well for ERC20s, NFTs, many defi use cases, but not eg. highly "central" objects like Uniswap contracts, or onchain order books, or other complex things (which are crucial for Ethereum but which only take up a small percentage of state) Hence, it will not be *necessary* to rewrite any apps, but it will be *very cost-effective* to eg. rewrite an ERC20 token into a newer design that uses a new type of UTXO storage that is currently being explored, so that it will have >10x lower txfees. Design of these new state types (current ideas: keyed nonces, ring buffers, UTXOs, statically accessible state, temp state) is an area where we will need a lot of feedback from application developers (incl. privacy-friendly application developers) and probably several rounds of rethinking and iteration. * In the context of a much larger total state size, we need to figure out the incentive issues around who stores this state and what motivates them to. Even saying "each node stores 1%" is not good enough - why do they store that 1% and why are they willing to serve it? This is being elevated as a first-class research area. * Ethereum will need to have a "VM" other than EVM in one form or another - at the very least, we need something like leanISA for recursive STARKs - and the gains are large in exposing it to users so that we support programmable privacy and better scalability. Right now, the most likely contenders are leanISA and RISC-V. My own ideal is that in this world, we adjust the protocol so that the EVM becomes a high-level-language compiler-level feature, and the protocol only "sees" RISC-V / leanISA directly. But this is still far away. * Gas limit increases, blob increases and slot time decreases will happen many times over the next ~5 years. We expect a large gas limit increase with Glasterdam. Each step of increased scale or decreased slot time is a matter of getting to the point where it is safe to do it, which comes from a combination of client optimization and protocol changes. Ethereum is CROPS. Ethereum is scaling. Ethereum is reinventing itself. Onward.
696
1,391
489
5,257
1,479,644
⚠️ ATENÇÃO: PERÍODO DE DECLARAÇÃO DE CRIPTOMOEDAS - DeCripto, iniciado! A partir de hoje, 01 de julho de 2026, entra em vigor o período de apuração para a Declaração de Criptomoedas (DeCripto), mensal, conforme estabelecido pela Receita Federal do Brasil através da IN nº 2291. O que você precisa saber: Todas as transações com criptomoedas realizadas entre 01 e 31 de julho de 2026 deverão ser informadas até o último dia útil do mês seguinte (31 de agosto de 2026). A mesma regra se aplicará aos meses seguintes. Isso inclui operações de compra, venda, permuta, transferência e outras movimentações envolvendo criptoativos. As exchanges estrangeiras estão obrigadas a DeCripto, a respeito de quaisquer valores. Você investidor está obrigado sempre que a soma das suas transações no mês, ultrapassar R$ 35.000,00, fora de uma exchange nacional.
32
20
4
192
27,743
Caio César retweeted
This year, the EF is decreasing its budget by roughly 40%, which entails some difficult decisions. The goal of the decreases was set out in the Treasury Management Policy last year: the EF is transitioning into being a long-term-oriented endowment-based organization, shifting from its pre-2026 average of spending ~15% of its remaining funds each year, toward a post-2030 target of ~5% per year. Often, when an organization goes through something like this, people try to pretend that nothing of great value was lost, that it is an efficiency increase, that the only people cut are unproductive dead weight, and everyone else stopped partying, studied the blade, entered cracked S-tier beast mode, and this was sufficient to make up for the downside. I will not try to pretend this. I respect my EF colleagues far too much to pretend that there was not much that is lost. They are brilliant people. They are dedicated engineers of whom some have worked on the Ethereum protocol for nearly a decade. They have brought a bright light to the Ethereum ecosystem with their code, their words, their warmth as human beings and their actions. My dearest hope is that they find a path that brings them fulfillment and happiness whether inside Ethereum or outside. Hopefully many will be able to bring their excellent talents and mindset to the wider Ethereum ecosystem, or the even wider CROPS world. Instead, I will try to explain what *are* some of the grand sacrifices being made. The Ethereum Strawmap is no small thing. It is an extremely ambitious undertaking seeking to replace and augment almost every part of the protocol - consensus, proofs, privacy, account model, state, and more. This is the third iteration of Ethereum, in the same way that the Merge was the second, even if the shipping style is less Big Bang and more one-piece-at-a-time. On top of this, the EF is increasing its role in the Access Layer. We are not compromising on Ethereum being a Deeply Impressive protocol, something worthy of its place in a world with quantum computing, rockets to Mars and powerful biotech and AI, and capable of meeting the challenges that this era will bring. Some of the deficit will be recovered through more work happening outside the EF. But not all. So what are the grand sacrifices that will enable a leaner effort to accomplish all of this? I will give a few examples (though far from an exhaustive list): * The multi-client model will shift in the direction of multiple clients existing less for _redundancy_, and more for _specialization_. Up to this point, redundancy has been the main security strategy: if one client has a bug, if it has less than 33%, the chain keeps going and does not even stop finalizing. We are increasingly exploring moving more pieces of the protocol to a different security strategy: AI-assisted formal verification. Some smaller pieces of Ethereum (eg. BLS libraries) have worked this way already for a long time. But soon many more parts of Ethereum will likely function on this model. This may greatly reduce resource requirements of shipping a large number of EIPs. The resources saved by client teams can ideally instead be used to better serve different specialized user needs, including EF Access Layer goals. * PSE (Privacy and Scaling Explorations) is winding down as a unit. The number of people working on ZKPs for privacy and scaling is probably as high as ever, but they are working less on "exploration" and more on *implementing* ZKP-based privacy and scaling into the Protocol and Access Layer * Devcon will likely over time become smaller-scale, somewhat more spartan, much lower-deficit than previous years, in addition to other changes in vision in line with the Mandate. * Fewer beyond-Ethereum megaprojects coming from EF. As I announced earlier this year, I am taking on some of the responsibility of doing projects in this category that I consider valuable with my personal funds. * EF institutional work is reducing in scope, specializing more specifically on creating replicable test cases of highly CROPS-friendly deployments, even if at smaller scale. These do not explain all departures; in some cases they do not explain departures at all and rather explain _reduced need for new spending_. But they are a large part of the strategy at play. In the longer term, I personally favor a "soft lean-and-done" approach to Ethereum: once the Strawmap is completed, generally stick to security fixes and small high-value changes, and have a much higher bar for considering new feature additions to the protocol. This allows Ethereum to remain capture-resistant without demanding very large budgets. Learn less from multimillion-line-of-code behemoth projects, more from bitcoin. The past years have been a challenging era for Ethereum. However, the ecosystem is adapting, both inside the EF and outside, and I am confident that Ethereum is very well-positioned to succeed and thrive. firefly.social/post/x/206940…
487
517
128
2,389
521,517
Caio César retweeted
BREAKING: @Blockworks has acquired crypto data rival @MessariCrypto for more than $10M, according to WSJ, a sharp discount to Messari’s reported $300M valuation from its Series B round four years ago.
6
1
2
34
4,017
Install ntn, the Notion CLI. It brings the entire Notion API to your terminal, plus everything you need to build and deploy Workers. Built for humans and coding agents alike. Install with: curl -fsSL ntn.dev | bash
124
295
172
3,403
1,562,487
Caio César retweeted
Ranger Finance is winding down and I will be moving on. People who worked with us, built with us, and trusted us are not being made whole, and I want to be direct about what happened. Ranger took on more than it could sustain. As cash ran low, the founders put in as much personal capital that could be beared to keep the lights on while we worked toward a raise on MetaDAO. The raise was delayed, bills accumulated, and some of the team stayed on knowing they wouldn't be paid until capital came in. When the raise closed, we had two months of runway before the funds were returned. We used that window to pay people and vendors as equitably as we could, but it wasn't enough to cover everything. The liquidation of treasury was unanticipated and deeply impacted the budgeting decisions made for employees, vendors and growth. Then the Drift exploit hit hard, and it took out remaining momentum and personal capital to keep things moving. In hindsight, Ranger should have shut the doors earlier. When you're inside it and you can see a path, it's hard to make that call, that's not a defense, just personal honesty about wanting to make things work as a cofounder. The outcome is that people went unpaid. Vault users affected by the Drift exploit will receive Drift recovery tokens when the Drift team disperses them. To everyone who worked on Ranger and let us delay payment: I'm sorry. This isn't the ending any of us wanted. @ranger_finance will tweet more on the wind down process
77
8
11
424
66,512
0/ Clear signing is now live. An open standard to end blind signing, making human-readable transactions default. This effort brings a major UX and Security upgrade to transaction signing on Ethereum.
161
429
232
2,164
358,261