
Hi I run the https://xitter.cf/t.co/5qeDH8kMpp of sites. Not affiliated with Chia Network Inc. #Bitcoin optimist since 2011
decentralized
Joined March 2022
- Tweets9.7K
- Following207
- Followers3.9K
- Likes12.5K
Slowest Timelord retweeted
the warp.green bridge is back! that means wUSDC/b can be bridged again. the asset IDs remain the same. hf
Slowest Timelord retweeted
The fixes have now been merged. The protocol will be back online as soon as enough validators have adopted the update.
Replying to @warpdotgreen
To allow for open review by the community, the fixes will be available for comment until Friday, October 9th, 2026 (08:00 PST) before they are merged. For any questions or findings, please reach out to @yakuhito.
Check out my interview with @yakuhito about the recent @TibetSwap rescue and his future plans🌱
xch.today/2026/10/05/peer-to…
Slowest Timelord retweeted
Today, we're releasing the post-mortem on the recent security incident, as well as a set of proposed fixes.
Slowest Timelord retweeted
I proposed this over 6 years ago on clubhouse and people thought I was crazy
even most budget phones have a secure enclave at this point with billions of dollars spent on security
Replying to @hoffmang
@hoffmang @chia_project @Rigidity16
The industry starts to understand the concept. Just stumbled over this.
Slowest Timelord retweeted
It lives! I've been slammed working on this for a long time
Always great to see:
- new community projects
- XCHandles support across the ecosystem 💚
A few updates to ASCII-MEMORY with better UX and the support of xchandles by @yakuhito
Send ASCII artwork or just any text to any handles in a few clicks.
All the collected money from "The Wall" by October 1st goes to @Ealrann for the tibetswap bounty (currently 18 xch).
It cost just 1 xch to show some thanks and inscribe it forever on the blockchain.
Install within @sage_wallet from url : cassxch.com/ascii_memory/
Slowest Timelord retweeted
Plotting for Chia's new consensus POS2 feat. @abrahamsewill
youtu.be/NDSVKFGDuc8
Slowest Timelord retweeted
We were unable to make TibetSwap sustainable over the past 4 years or secure the support needed to keep it going. We are proud of what we built, and grateful to the community that made it worthwhile.
blog.kuhi.to/so-long-and-tha…
Slowest Timelord retweeted
The accelerating pace of vulnerability discovery should be a wake up call for all software developers!
The threat landscape has changed.
If you wish to retain a strong defensive posture then you MUST adopt the same LLM tooling that attackers are using to find vunerabilities.
Replying to @j45818805
very hard to price tokens without an AMM is my guess 😅
The reward distributor codebase has gone through many reviews, both by humans and agents. Some time ago, I asked @Rigidity16 for one such review of the code for CATalog. On May 5, 2026, he spotted a bug related to how the refund process works - the process of asserting a slot existed was itself flawed, and allowed someone to 'prove' that arbitrary slots existed.
I quickly realized this extended beyond CATalog to XCHandles and the reward distributor. This was well before XCHandles was deployed. The only at-risk dApp was the DataLayer Minions reward distributor, which used the pattern when starting a new epoch.
Fortunately, the action is only executable on August 29 each year, which gave us more than enough time to prepare for a recovery.
On August 29, 2026, I successfully forged an epoch slot and was able to recover 100% of the DIG locked in the distributor. The DIG that was allocated to staked NFTs but not claimed by their owners yet will be sent to the appropriate addresses at a later date. The remaining DIG will be used to seed 19 years of rewards for the new distributor. Rewards will be added on Monday to give everyone time to migrate.
Given recent developments, the codebases for the reward distributor, XCHandles, and CATalog have also been recently scanned by the latest models, including Daybreak Blue and Fable 5/5.1.
I would also like to give a special thanks to @hadamcik , who was the first to use Daybreak Blue to audit the code and privately sent me his findings. Those findings included two viable attack paths, both of which have now been patched.
The action layer CHIP contains a warning about the insecure 'slot oracle' pattern along with the fix (having each slot also store a counter). Thank you to everyone for migrating promptly, as well as everyone who helped review and secure the code.
Slowest Timelord retweeted
I see a new exploit every day.
Three happened in the last 24h alone:
→ Legacy @GammaStrategies Hypervisor vaults (on Ethereum)
10.7 ETH drained after a flash loan manipulated the spot price used when minting LP shares.
→ @TectonicFi (Cronos)
$TONIC was pumped ~100x and used as inflated collateral to drain roughly $75M.
→ @moremarketsxyz on Flow
An attacker used an Ankr staking token + E-mode to borrow far more $WFLOW than the collateral should have allowed. It's estimated that ~15.5M WFLOW (worth roughly $9.3M) was drained.
These attacks often a result from AI advances.
Stay safe and don't keep all your money in one place.
🚨 Exploit Alert — Ethereum
~10.7 ETH was drained from two legacy Visor/Gamma FLOAT-ETH Hypervisor vaults via a flash-loan price manipulation.
🔍 Root cause: the Hypervisor mints LP shares in deposit() off the Uniswap V3 pool's INSTANTANEOUS spot price (currentTick()/slot0) with no TWAP and no spot-vs-oracle deviation check — while withdraw() redeems shares for a proportional slice of the real underlying tokens. Minting is spot-priced, redemption is not. Move the spot price and deposit→withdraw becomes a net drain. Deposits are permissionless (whitelist disabled).
🧾 On-chain:
Attacker: 0xaea29218262dc6b0904ca077f6527c49dfd426d9
Contract: 0x05303c95ee7ff76daf1421b28e024635d7fe51ab
Vaults: 0x85cbed52…a8a70c · 0xc86b1e7f…c1153
Tx: 0x3d7549db65344da2a41067e17791b17fac16ec6b8e5132e82e243f6541de5cff
Block: 25874402 · 2026-08-31
Slowest Timelord retweeted
Solana prop AMM @_aquifer_ (AquiferDEX.io) exploited for ~$2.5M
Attacker (Ethereum): etherscan.io/address/0x2dfe9…
Attacker (Solana): solscan.io/account/7fTe9pvrw…
💬 Onchain Message:
AQUIFER WHITEHAT OFFER — 31 AUG 2026
This is an official Aquifer communication regarding the exploit of:
AQU1FRd7papthgdrwPTTq5JacJh8YtwEXaBfKU3bTz45
Aquifer's Solana upgrade authority has published and authorized this offer on-chain.
Reference Solana transaction:
u1hoSUTzhe3hhnGiUiwvjtzd9Ji8EQPxjnTSKtW2hHDqY9ukYySftNp9eMHsBHsYezBKFcNyoZapYHYu4XaaZbQ
Solana upgrade authority:
8pJhHxPQRiUGdtVSCNPyP9AH994zeyYEBGb5yZRzheSA
This message is directed to the party controlling:
Solana:
7fTe9pvrwXJRBHq9MaSyVPR4PgEuhqLiA93Dxf4gRk7J
Ethereum:
0x2Dfe9e969796e2797278b02761dd9Ad6aE922746
Aquifer offers the following whitehat resolution:
Return at least 80% of the assets or equivalent value associated with the exploit to the designated recovery addresses no later than:
3 September 2026, 14:00 UTC
You may retain up to 20% as a whitehat bounty.
Subject to applicable law and full compliance with these terms, Aquifer will not pursue civil claims against you arising from this incident.
This offer does not bind law-enforcement, regulatory, sanctions, or other governmental authorities.
Authorized Ethereum communications address:
0x09dA08045830492B24b3b8A0022375e662bbE91d
Recovery addresses:
Solana:
8af8RnAgyKzNt4fjDaP8w8pBekYVux1ja4AofavRyjox
Ethereum:
0xb7EAA8cd5dFAD8021d9fB19c8a21613679f268F5
You may respond using an Ethereum Input Data Message to this address.
etherscan.io/tx/0xc54e8ebbf0…

























