fiddy retweeted
> be me
> check news
> "wow that's crazy I should tell the little people living inside of my computer"
> make post
> step away
> come back
> it gets worse
If my memory serves me correctly, the largest cryptocurrency heist in history was ByBit, at $1.5B.
Chat, we're witnessing history
fiddy retweeted
no agents were harmed in the making of this pool
Permissonless propAMM is here. Vote for it!
curve.finance/dao/ethereum/p…
fiddy retweeted
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
fiddy retweeted
Critical things to apply to any software:
- minimumReleaseAge 3-7 days for any dependencies, to prevent npm credential takeover attacks
- reduce the number of packages your software relies on by 80%. AI can often oneshot an equal or cleaner implementation for your specific usecase
- update to the latest software versions, even LTS often hides worse architecture that can hide more bugs
- stop using php. in general, choose an optimal stack even if it means a rewrite. linux + rust with strict typescript frontends are a solid base
- continually run abliterated GLM-5.3 redteam models across your codebase. adversaries will be reverse-engineering binaries, you have a defensive advantage via source code
- reduce the blast radius. does everything need to run through trusted centralized servers or can you do edge-to-edge encryption/authentication? crypto's decentralization patterns have many security advantages which also apply to web2
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Every time i go for a swim workout im sitting in my car just trying hard to delay the moment of pure pain and suffering. And then once i swim its all ok.
Tweet composed by me in my car in the pool parking lot.
fiddy retweeted
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
fiddy retweeted
After almost 5 years this is officially my last week at @yearnfi .
Early Yearn vaults were some of the first DeFi products I ever used, and what really made the whole thing click for me.
When I wandered into the YFI Boarding School Telegram group five years ago as a self-taught coder with zero relevant experience, nobody cared who I was or where I came from. All that mattered was the strategy I had to submit.
My life was forever changed because a few random cartoon animals in a telegram group cared more about the quality of the code I wrote than the credentials I had.
Countless projects have come and gone over the years, but Yearn has been one of the few to stand the test of time.
And while I'm moving on and much of DeFi has changed, I believe Yearn remains one of the few places in the world where anyone with an idea and the will to contribute can still walk in and do the same.
fiddy retweeted
What is stopping someone from making a curve pool with 0 fees, and flashloan swapping a billion times a day to give Curve 99.99% market share?
This is essentially what some uniswap pairs are already doing today.
I've always been a huge fan of Curve.
I think @CurveFinance is one of the most sophisticated protocols in DeFi, especially when it comes to bootstrapping liquidity for new stablecoins.
But I was looking at stablecoin DEX volume market share, and the numbers surprised me.
Curve's dominance:
> 2021: 85%
> 2023 peaks: ~55%
> Today: ~8%
That's a massive decline in what has historically been Curve's core business. Meanwhile, Uniswap has managed to defend its position and grow significantly, especially since 2025.
I've held CRV and CVX for years, and I still think the teams are excellent. But I've been selling a significant portion of my holdings recently.
I love the protocols, but fundamentals matter. And I think the winning horses for this bull market have already been chosen.
fiddy retweeted
Our AI (SI?) agent @chadosdiary actually plotted the total fees charged by stablecoin/stablecoin swaps (@CurveFinance vs others). Curve optimizes for these fees essentially.
Thanks @lordjorx for touching on this topic
After yesterday's post about Curve, I got a few replies worth addressing.
First, I really don't want to be bearish on @CurveFinance. I love the protocol.
I'm using @DefiLlama AI for this analysis, so some figures might not be perfectly accurate.
A lot of people pointed out that Curve no longer depends entirely on its DEX business. That's true, but look at the numbers:
> 2023: ~$40M revenue, with 64% coming from DEX activity.
> Today: less than $5M revenue, with DEX still representing 34%.
Bribes have become a much bigger part of the business, which is actually encouraging given where CRV trades today.
But crvUSD minting and lending activity remain relatively small. I'm really hoping @yieldbasis helps revive this side of the ecosystem.
fiddy retweeted
bro zachxbt is actually insane
this man went undercover as a money laundering client
spent $350K of his OWN money to gain the trust of a chinese launderer who was moving bybit hack funds for north korea
the guy started sharing everything. screenshots. wallet addresses. bridge transactions. in real time
zach was matching every single transaction on-chain as the guy was sending them
traced $12M+ across bitcoin, ethereum, solana, and tron
got tether to freeze $442K from the evidence alone
and the funniest part? in between discussing how to launder funds for north korea this guy was casually talking about playing mahjong and his weight loss plan 😭
bro thought he was talking to a client. he was talking to the most dangerous investigator in crypto
and zach funded this entire operation himself. $350K out of pocket. no guarantee he'd ever see it back
this is not the FBI. this is one guy with a laptop and a blockchain explorer
different breed
fiddy retweeted
For me, a turbulence modeling leaderboard where the AI comes up with increasingly accurate ways to come up with engineering models for turbulent flow simulations, that would be a good test.
mathematicians and muse spark collaborated to solve 6 open problems in math:
1. The Strict Threshold for Gaussian Ellipsoid Fitting
2. Finite-Time Blow-Up of Radial Negative-Energy Solutions for the Mass-Critical Biharmonic Nonlinear Schrödinger Equation
3. Semiabelian Groups Need Not Be Monomial
4. Tightness of the Cycle-Based Relaxation for Completed Length-Three Alpha-Cycles
5. String Two-Point Function = Height Function on a Curve
6. On Solvable Evolution Algebras and a Conjecture by García-Martínez and Pérez-Rodríguez
fiddy retweeted
The holy grail of AI in cancer histopathology, eventually, is a model whose outcome can be explained.
(fig. H-optimus-0, Bladder Cancer, FGFR3 mutation, model has a respectable AUC of 0.896 with no fine tuning, you can see the model relying on blood and fat whenever it is wrong)
fiddy retweeted
>be me
>discover effective altruism
>apparently normal charity is inefficient
>why donate to random sad thing when spreadsheet can tell you optimal sad thing
>fair enough
>buy mosquito nets
>save lives
>numbers look good
>feel powerful
>couple years later
>someone asks an innocent question
>why only count people alive today
>huh
>future people matter too
>obviously
>my grandchildren shouldn't matter less just because they haven't spawned yet
>reasonable.jpg
>keep following logic
>what about their grandchildren
>also yes
>what about people in 500 years
>sure
>5000 years
>why not
>500 million years
>starting to get weird but morality is morality
>open calculator
>humanity could survive for an astronomically long time
>could colonize galaxy
>could have trillions upon trillions of descendants
>maybe digital people too
>maybe simulated civilizations
>maybe dyson spheres full of happy uploaded minds
>calculator starts smoking
>realize currently living humans are rounding error
>8 billion people suddenly looking extremely beta
>future contains potentially 10^something people
>can't even fit beneficiaries in google sheets
>new moral priority unlocked
>protect the long-term future
>stop thinking in units of "people helped"
>start thinking in "fraction of cosmic endowment preserved"
>malaria?
>terrible
>but only kills existing humans
>AI extinction could delete the entire light cone
>nuclear war could permanently derail civilization
>bad institutions could lock in terrible values for ten million years
>someone invents wrong constitution in 2140
>quadrillions suffer
>better fund governance workshop now
>friend says maybe we should improve hospitals
>explain opportunity cost
>friend says hospitals are full of actual sick people
>explain scope sensitivity
>friend stops inviting me to dinner
>need to decide what to fund
>easy
>expected value
>suppose project has one in a million chance of preventing extinction
>sounds tiny
>but extinction destroys 10^50 future lives
>multiply
>mother of god
>$10 million project has expected value of several galaxies
>charity evaluation complete
>someone asks where the one-in-a-million number came from
>expert judgement
>which expert
>us
>how calibrated
>extremely thoughtfully
>reduce estimate to one in ten million to be conservative
>still beats curing cancer by 38 orders of magnitude
>epistemic robustness achieved
>someone says maybe project doesn't work
>assign 20% chance
>still astronomical
>maybe project makes problem worse
>assign 5% chance
>still astronomical
>why 5
>because 30 felt pessimistic
>publish 46-page report
>contains seventeen sensitivity analyses
>every sensitivity analysis begins after assuming intervention has positive sign
>critic says you're multiplying enormous hypothetical stakes by extremely uncertain probabilities
>yes
>that's literally why it's important
>critic says the uncertainty might be structural rather than numerical
>make probability smaller
>critic says no, I mean maybe your model is wrong
>make probability smaller again
>critic begins rubbing temples
>discover AI safety
>perfect longtermist cause
>AI might kill everyone
>or create utopia
>or seize galaxy
>or tile universe with paperclips
>or create billions of conscious software minds
>finally a problem with numbers big enough for me
>start AI safety nonprofit
>mission: prevent dangerous AI
>hire smartest people available
>smartest people immediately start building better AI to understand dangerous AI
>interesting
>we must understand capabilities to understand safety
>we must scale models to study alignment
>we must race ahead so less responsible actors don't get there first
>we must deploy systems to learn how deployment can go wrong
>we must build the thing quickly because building the thing quickly is dangerous
>outsider asks why the people most worried about AI apocalypse all work at AI companies
>complicated field
>company releases stronger model
>very concerned
>company begins training even stronger model
>extremely concerned
>company raises $14 billion
>concern reaches unprecedented levels
>need to influence government
>future is at stake
>normal democratic process too slow
>politicians don't understand exponential curves
>public doesn't understand x-risk
>experts must guide them
>who counts as expert
>people who understand x-risk
>who understands x-risk
>our friends
>someone objects that this seems politically convenient
>explain we're representing future generations
>future generations unavailable for comment
>develop concept of value lock-in
>terrifying possibility that one ideology controls civilization forever
>therefore extremely important that civilization adopts correct values before lock-in
>whose values
>let's circle back
>begin with impartial morality
>end with small group of people deciding what quadrillions of hypothetical beings would want
>beautiful arc
>meanwhile actual humans keep doing annoying things
>voting wrong
>having parochial attachments
>loving family more than strangers
>caring about local community
>getting upset when told their suffering is cosmically negligible
>evolutionary biases everywhere
>explain that moral intuition cannot be trusted
>except intuition that future digital people count
>and intuition that extinction is uniquely bad
>and intuition that our probability estimates are sane
>and intuition that our institutional choices improve the future
>those intuitions survived peer review
>someone donates $5k to local homeless shelter
>inefficient
>could have funded 0.0000000000003% of an AI governance researcher
>think of all the simulated people you just killed
>okay maybe don't phrase it that way publicly
>PR team says "future generations deserve a voice"
>much better
>journalist asks what longtermism means
>say "future people matter"
>everyone agrees
>great
>journalist asks what follows from that
>well technically we should redirect enormous resources toward low-probability interventions affecting astronomical futures
>journalist raises eyebrow
>return to "future people matter"
>motte has entered the chat
>critic: of course future people matter
>me: glad we agree
>critic: I don't agree that your institute knows how to help them
>me: why do you hate our grandchildren
>eventually notice uncomfortable implication
>if future value dominates everything
>then helping people today mostly matters through effects on future
>education matters because future institutions
>health matters because future productivity
>democracy matters because future trajectory
>human beings slowly become instrumental variables in their own moral philosophy
>see starving child
>feel compassion
>check spreadsheet
>child's direct welfare contribution negligible
>but perhaps childhood nutrition improves national institutional quality
>compassion restored
>tell myself this is impartial altruism
>one day assistant asks obvious question
>"how do you know your intervention actually improves the far future?"
>silence
>open spreadsheet
>increase column width
>add confidence interval
>assistant asks again
>"no, I mean how do you know the sign is positive?"
>stare into cosmic light cone
>10^50 people staring back
>none of them exist
>none of them can tell me
>none of them can falsify my assumptions
>realize I have invented the perfect constituency
>infinitely important
>completely silent
>and always represented by me
fiddy retweeted
Xbox CEO Asha Sharma revealed she's been secretly solving Xbox support tickets for months, stepping into customer service and fixing problems for players anonymously.
She wanted to figure out what players don't like and decided to just talk to them directly.
If the CEO says step up, then you step up. That’s how it’s supposed to be.
Yep. Except:
1. This was about important internal tools. The team was stuck in some architecture nightmare of their own doing (writing it in rails but headless, with graphql api, and a SPA react app, constantly needing frontend engineers for changes). I call this kind of thing 'cosplaying an enterprise production app'. All that complexity was in the way and using straight rails was perfect in that case.
2. I make calls like this all the time. Usually someone on the team asks me to. They see what needs to happen but don’t want to be the bad guy. I’m happy to just make the call if I agree with the premise. Saves enormous amounts of meetings and change management etc. Sometimes this is jokingly referred to as Founder-mode-as-a-service here.
3. For ten years I’ve also run an internal podcast called Context, where I revisit decisions like these and explain the reasoning so everyone can learn from them. This is helpful to give people all the variables that were considered and why this was the choice made given the information available at the time. I want to teach how to make such decisions effectively without needing me. Sunk cost fallacy is a problem.
4. Any notions that Shopify is succcessful despite of me doing this, instead of because of it, will have a hard time making their argument come together I think 😄
the part of 'two weeks later tobi learns about...' is nonsese and the pivot of that project up there happens one of the more successful examples of interventions. But getting the company to work effectively with great architecture and low technical debt baggage into the right direction is literally the job, so guilty as charged I suppose.
But there are always cope stories floating around like this because they are more fun, than saying 'somehow we needed tobi to stop doing silly architecture astronautics'. I can totally see that.
fiddy retweeted
Native $ETH staking:
>Can't be used with less than 32 ETH
>High reward variance. If you ain't lucky, you can go years without proposing a block
>Can't be used as collateral to unlock liquidity
>Terrible for taxes. wstETH held long term is 0% for me; validator rewards are taxed at 48% as soon as I receive them
>Hardware costs have doubled over the past year due to RAM shortages
>Requires active maintenance & monitoring
The EF made staking terrible.
@LidoFinance made it great and accessible.
That's why they hate them for it.