Founder of @OrochiNetwork, applied #ZKP to improve #Web3
Ho Chi Minh, Vietnam
Joined August 2011
- Tweets3.1K
- Following254
- Followers1.4K
- Likes7.3K
Pinned Tweet
As a part of our study in ZK Residency hosted by @0xPARC and @PrivacyScaling. We introduce zkMemory, a reusable module for zkVM based on Verkle tree.
Special thank to @TangKhaiHanh, @CPerezz19 and Minh Pham.
hackmd.io/@chiro-hiro/SkqNGt…
#zkp #kzg #cryptography #verkletree
Next model is Dust 2
Today we release Mirage: A 22 MB visual-language model that runs scene descriptions + object detection + OCR + segmentation + spatial relations analysis + extractions + decisions, in a single pass.
It can do all that in 74 ms on Samsung Galaxy S26 NPU or 107 ms on its CPU.
Mirage has a 7.8M encoder + a 40.8M decoder at 2bits, and describes images in English, German, French, Spanish, Italian, Dutch and Polish.
We trade general language capacity, to compete top small VLMs today (SmolVLM2-500M, LFM2.5-450M and Florence2-230m) on these tasks.
On 256 VQAv2 questions, feeding Mirage's structured output and full trace to text-only Qwen3-0.6B raised its score from 9.3 to 31.3 out of 100, without fine-tuning either model.
Read more and benchmark it yourself here:
cactuscompute.com/blog/mirag…
1
76
We're done 👨🍳
Our security researchers built an autonomous cyber vulnerability discovery, exploitation, and patching pipeline.
In a single run with an upcoming cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in the Linux kernel at a total API cost of $1.2 million.
63
At this point, I'm prefer to go back to monkey
Security release pre-alert:
We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities.
The highest severity issue fixed in this release is HIGH.
nodejs.org/en/blog/vulnerabi…
1
108
It's crazy that 20% is gay
🚨 BREAKING: Hungary bans LGBTQ+ Pride events in public since chiIdren might be present. 136 to 27 vote in parliament.
Opponents set off smoke bombs:
Readers added context they thought people might want to know
This video and the 136-27 vote date back to March 18 2025, so labeling it as "BREAKING" is misleading.
The relevant restrictions were officially lifted in October 2026.
apnews.com/article/hungar…
bbc.com/news/articles/…
1
84
Private key leak? It supposed to be HSM, isn't it?
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
1
84
Oh! I set up 2FA, but WhatsApp doesn't require 2FA to reset the account 💀.
How do they get the OTP?
1. Make sure your phone is offline by pinging it.
2. Request the OTP via phone call.
3. Spoof your number and call your voicemail.
Ask your provider to disable voicemail or set a PIN for it. I'm going to stop using voicemail and WhatsApp.
My WhatsApp was hacked. If you receive any message, it wasn't me. How did they hack me?
1. I DID NOT set up 2FA (my bad).
2. They took advantage of this, since I used ROAMING when I went to Token 2049.
3. They reset and changed my account email and password.
Take care!
157
They're opening everything
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
112
Take care guys
1. The attacker starts a Telegram login with your phone number and asks for the code by phone call.
2. They do it at night, or keep your line busy, so the call goes to your carrier voicemail. The code gets recorded there.
3. Many carrier voicemails have no PIN by default and trust caller ID. The attacker fakes your number (spoofing), calls your voicemail, and gets straight in.
4. They listen to the code and log into your Telegram. No hacking of your phone needed.
Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.
More: 404media.co/heres-what-teleg…
128
My WhatsApp was hacked. If you receive any message, it wasn't me. How did they hack me?
1. I DID NOT set up 2FA (my bad).
2. They took advantage of this, since I used ROAMING when I went to Token 2049.
3. They reset and changed my account email and password.
Take care!
It turns out @Starknet was right the whole time.
🚨STARKNET IS LOOKING AT BECOMING ITS OWN CHAIN!
@Starknet said it is actively considering a move from an Ethereum L2 to an L1, with 2027 as the target for a fully quantum-resistant network.
StarkWare CEO @EliBenSasson, a Zcash co-founder, said the reason is “bunker mode”.
Bunker mode is the warning that AI could crack today’s wallet math before quantum computers do.
As an L2 it has to wait on Ethereum, which is aiming for 2029. An L1 would let Starknet change its own security first.
122