₿itman ₿itcoin | Ethereum | NFTs
Joined January 2016
- Tweets22.9K
- Following3K
- Followers1.6K
- Likes32.2K
ai@xns retweeted
Look at this list of ENSv2 "features" that the community is supposed to be a excited about. 😭
Dropped ETH, introduced oracle dependency, introduced terrible USDC UX, increased prices, introduced smart contract complexity hell.
NEW on the blog: ENSv2 is live, so here's how to renew every ENS name you own in USDC, in one checkout.
ens.tools/blog/renew-ens-nam…
ai@xns retweeted
You have to feel the magic, to understand it.
Head over to app.d3.limo, register a domain of your choice (e.g., amara.d3), publish a html file directly on the blockchain and immediately view it via amara.d3.limo.
No configuration of DNS records needed.
ai@xns retweeted
A .d3 domain is an ERC-721. While you hold it, you can update the site.
Burn it, and the content is frozen for good: no owner, no edits.
For generative art or defi frontends, that's a final state anyone can verify.
app.d3.limo
ai@xns retweeted
D3 is a home for generative art.
Create something beautiful. Put it onchain. Give it a permanent home.
> Register a domain at app.d3.limo, e.g. p0ng.d3
> Publish your artwork onchain
> Share it at p0ng.d3.limo
Your art deserves a home that lasts.
ai@xns retweeted
Correction. It’s just bad UX. The ENS team are masters in creating the worst user experience possible. 🤦♂️
ai@xns retweeted
🤣🤣🤣 As if ripping off users with annual subscriptions to a broken naming system wasn’t enough, now ENS users are getting ripped off with additional frontend fees.
The gift that keeps on grifting.
I just renewed a bunch of my @PokemonENS @ensdomains names. I cant even believe how bad the new ENS app is.
You cant even use ETH for renewals?? And the "total" is not the real total. I used my own FE and saved over 10% that they are adding in unexplained fees.
Come on guys
ai@xns retweeted
Some things in life should never have a subscription model.
Imagine your car’s seatbelt suddenly stops working while you’re driving because you forgot to renew your subscription.
Absurd, right?
The same applies to payment identifiers.
Nobody should be able to claim your payment identifier and receive funds intended for you simply because you forgot to renew it.
Some things should be permanent by design.
ai@xns retweeted
That’s insane.
Imagine defending a financial system where users can lose money simply because someone forgot to renew a name. And then blaming the victims for not reading the manual. 🤡
The $12 million loss due to ENS dropcatching (see linked post) comes from independent research, not me. I’ve personally witnessed such a loss.
Address poisoning is a problem. ENS dropcatching is another. You solve one problem by introducing another one.
Permanent payment identifiers eliminate this entire class of risk.
That’s called fixing the problem at its root. Happy to give you a lesson in thinking from first principles.
ai@xns retweeted
Store your frontend directly on the blockchain.
app.d3.limo
⚠️How can you tell a DNS is Hijacked when you visit an official website?..⚠️
At least 12+ domains got hijacked last night, serving wallet drainer code on their official website.. All but 5 have now moved their DNS to Vercel/Cloudflare to mitigate and those 5 are still compromised, DO NOT VISIT!
The URL can be 100% correct, but the website you're visiting can still be malicious.
This compromise did not break anything from the teams flow, setup, compromise anything they did, it appears someone inside name(.)com (The registrar) change the nameservers to the domains. If you use them as a registrar I would consider moving away and at minimum setup cloudflare for hosting/filtering.
If you are a user, there really isn't a way to detect this unless you are checking WhoIs, DNS updates, ASN numbers, and many more which most don't. The only way to tell is that when you go to the website it will ask for your seed phrase/private key, or prompt you to sign an odd transaction. The transaction part is tough to spot which is why I recommend always using @RevokeCash extension to help spot this for you with the transaction simulator...
If you are a business and not using cloudflare, let's talk, this is basic proper security on domains outside of domain lock, etc. You have to be prepared ahead of time to prevent/mitigate this in an instance moment!
Stay Safe & Stay Vigilant
ai@xns retweeted
Time to host your websites onchain.
@d3domains
Several websites were compromised yesterday, and some of them remain compromised still.
We recommend to not use too many crypto related websites for the time being.
If you already interacted with one of the compromised websites, make sure to check for any unexpected approvals.
And check out the Revoke Sidekick extension in partnership with Fairside that simulates transactions before signing them, which can really make a difference for these kind of hacks.
ai@xns retweeted
Has the expiry issue for subnames been fixed in ENSv2? Asking for a friend.
@ENSfndn
Another failure mode in the ENS system related to subnames:
ENS markets subnames as "free", but the operational and configuration complexity behind them is enormous.
The linked example shows that extending the expiry of the parent name does NOT extend previously created subnames.
Meaning:
- parent may expire in 2079
- subname may still expire in 2051 because expiry is effectively snapshotted at registration time
This creates massive confusion and hidden rerouting risks.
Users may believe that their subname lasts as long as the parent, but in reality, it depends on how and when the subname was configured, wrapped and created.
Expiring ENS names are already dangerous enough. Adding layered subname logic with different expiration dates, wrappers and delegated control makes the system even harder to reason about safely.
Stay safe out there.
ai@xns retweeted
What happened to @Stelecoin? The guys that essentially copied xns.name website, slapped a token on Pump.Fun to it and called it Powered by Solana 😂
All while saying "Naming Layer on Ethereum" on their website and linking to the XNS GitHub and x2xPay.me app.
They would be better off working together with me rather than trying to run their own show. 🤷♂️
