“I am free and that is why I am lost.” Thinking @beledgerless Cook @shiftfdn | @tradeonhunch
Joined June 2015
- Tweets2.6K
- Following1.5K
- Followers1.6K
- Likes14.6K
MDHV retweeted
@VitalikButerin opened @EFDevcon with it: we need to be able to trust our operating systems and our hardware — a formally verified OS, open silicon.
Here is a piece of that, running today. Eita: an EVM specified in @leanprover Lean 4, with the code that runs emitted from the spec. Open source, MIT.
What it is
The EVM's semantics are a Lean 4 translation of the Ethereum execution specs (EELS), clause by clause, Frontier to Osaka, with Amsterdam staged, plus the OP Stack and Arc chain rules. The code that runs — the ARM64 and x86-64 interpreter handlers, JIT code, gas formulas, and the effect layer for calls, creates, storage and transaction application — is emitted from that spec, not written by hand; on ARM64 the handlers are proved against the spec at the instruction level. CI fails if the committed generated code differs from what the emitters produce. Not "audited": specified, derived, and checked.
Checked against the real chain, every block
It re-executes @ethereum mainnet and @circle's @arc mainnet from genesis and follows both live: gas used, logs bloom, receipts and transactions roots, EELS validate_header (base fee included) on every block, and the full state root every 10,000 blocks on Ethereum and at each 32,768-block anchor on Arc. That loop also caught our own mistakes: a missing P-256 precompile in our Base rules, and an SBCL 2.6.0 miscompile that corrupted wide integers in snapshot records.
What a replay sees that logs don't
• 2 Nov: 8 USDT destroyBlackFunds calls zeroed 2,529,259.73 USDT of blacklisted balances — a DestroyedBlackFunds event, no Transfer.
• 27 Oct–2 Nov: 41% of the ERC-20 holder-events we checked were Transfer logs from a token whose storage did not change in that transaction.
• One token credits balances in mint() and emits nothing: 23,614 silent balance changes in a week.
Live at eita.run, with what is proved, what is checked and what is still trusted spelled out: eita.run/verified
It's early. 19 proof obligations are still open and tracked in the repo. It isn't an execution client yet: an Engine API block source is the step that makes it one.
The next frontier: hardware
The techniques behind Eita — a Lean specification, the implementation derived from it, a continuous check against the real system — matter even more for secure hardware, where a bug is etched into silicon and can't be patched. Lean-specified firmware and RTL on open silicon is where "trust our hardware" gets real, and it's what I'm building now: holodi.io (@beledgerless), together with @maqstik and @sbellem to the future of mobile trusted compute.
Credit where it's due: this work was motivated by conversations moths ago with @ilyasergey and his team at &Truth (@andTruthPBC), out of stealth last week. The more of us building this, the sooner verified code becomes the default.
I'll be at #Devcon in Mumbai Thursday to Saturday. Happy to talk. @ethereumfndn.
Code: github.com/valeryz/eita-evm
@VitalikButerin just opened Devcon and set the tone for the week.
A formally verified OS, open silicon, self-sovereign healthtech, free discourse, private communication, trustworthy AI — these are all part of Ethereum's mission.
MDHV retweeted
The Shift Thesis: Money Without the Ledger
@shiftfdn is not trying to build a better blockchain.
It’s trying to delete the need for one at the transfer layer.
🧵🧵🧵🧵
MDHV retweeted
all 99 slots have been reserved.
thank you.
It is time your assets find a better home.
Opening first 99 spots to reserve your shift card.
cards.shiftfdn.com
MDHV retweeted
The pre-sale ends in 9 Hours.
And to the 70 who've shifted already, we've something for you.
It is time your assets find a better home.
Opening first 99 spots to reserve your shift card.
cards.shiftfdn.com
MDHV retweeted
the world wasn't pushed towards digital money by accident.
today in delhi, police cut the internet on a protest site.
in nigeria, when young people marched against police brutality in 2020, the central bank froze the accounts of twenty of the organizers.
in russia, they froze the opposition's accounts, then his family's, down to his young son.
in bangladesh, they reached into the mobile wallets the whole country depends on, bKash and Nagad, and switched them off.
in nepal, they cut the first cord within reach: the apps its people spoke through.
and before you decide these are far-away places, canada which is a G7 democracy, froze roughly 280 bank accounts over a protest in 2022. no court order needed.
the united states froze an entire nation's savings. billions of afghanistan's own reserves and even ordinary afghans couldn't touch their own money.
it isn't only governments. visa, mastercard and paypal once cut off donations to a publisher they wanted silenced, in a single afternoon.
the world wasn't pushed toward digital money by accident. It was pushed because digital can be watched.
they didn't expect people to shift away from a system that made your own money feel borrowed.
But guess what, we are >shifting.
