firecrab (@firecrab_) header
firecrab (@firecrab_) profile picture

Terminally curious tinkerer with an adrenaline side. builder.

Joined October 2011
Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)Photo by firecrab (@firecrab_)
Let’s go! I just joined the Founders Club on Leap, the new trading app from Solana Labs. Use my code for 10% off Leap fees for 6 months: leap.xyz/r/FX3VV
150 spots on TestFlight, first come, first served. Open this link on your iPhone: testflight.apple.com/join/nr… Full? Join the waitlist at leap.xyz/#join and we’ll let you know when more open.
16
firecrab retweeted
🌊💙 WE WERE ALWAYS BLUE
936
3,656
1,132
28,471
7,564,507
this might be my last normal tweet before biotech goes vertical i'm not a whistleblower. I don't work at Lilly, Novo or any of the big labs but there is a massive shift happening in human biology right now. it's sitting in press releases and almost nobody reads them the last 6 months alone: - a once-daily pill roughly doubled median survival in metastatic pancreatic cancer (13.2 vs 6.6 months) - a one-time gene editing infusion cut hereditary angioedema attacks 87%, and 62% of patients stayed attack-free and off all other prevention for 6 months - a one-time gene edit for cholesterol dropped LDL up to 62%, and it held for over a year - a personalized mrna vaccine beat keytruda alone in a 1,137 patient melanoma phase 3 - retatrutide hit ~28% weight loss in a phase 3 - an ai-designed drug entered phase 3 - a pill that regrows hair passed its second phase 3 - an immunotherapy that could let some rectal cancer patients skip surgery, chemo and radiation just got fda approved - a man lived 271 days off dialysis on a pig kidney - human cells were caught passing chromosome-sized chunks of DNA to their neighbors, and it changes how the neighbors behave we are on the verge of an era where the human body is a software problem and the update cycle gets shorter everyday stick around, it's going to get weird bio/acc
1,241
4,015
598
34,893
5,935,435
firecrab retweeted
BREAKING: Alphabet is securing its own digital assets on Solana. Google unveils Google Multi-Party Compute today, an institutional custody system now in private preview with major financial institutions. Commercial launch early 2027.
293
430
87
2,714
153,619
firecrab retweeted
>junior dev at a mid startup >wednesday morning >just want to push a minor bugfix to our php app today >open laptop, check slack >company group chat is an absolute warzone >CTO typing in all caps about php2shell >fucking php >whatever, server hasn't blown up yet, I just need to get my code in >open gitlab to merge the PR >forced emergency logout because of a critical gitlab security patch release >fucking gitlab >pipeline fails because of some weird regex compiler bug >spend 40 minutes fighting CI/CD >i can just use AI to help debug >fire up opencode >api keys nuked because they were breached >fucking opencode >i’ll just get fresh LLM api keys from our corp proxy, LiteLLM >it won’t connect? It’s down? >look up LiteLLM news: supply chain compromise >fucking litellm >cold sweat forming >slack alert: db connection error >check our database connection >we host on TiDB Cloud >they just announced a security breach, unauthorized access via stolen service account credentials, data copied >fucking tidb cloud >full panic attack incoming >figure fuck it, just ship the container to Railway and go home >open Railway dashboard >bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused." >fucking railway >try to open the app URL in browser to see if anything is even working ⁠>NET::ERR_CERT_AUTHORITY_INVALID⁠ >eMudhra intermediate certificates compromised >4 >instantly untrusted by every major browser >fucking emudhra >stare blankly at mac screen for 10min >random pop-up >restarting in 10min to fix a critical vulnerability >fucking macos >close laptop >leave office >never come back
126
957
80
11,005
319,861
firecrab retweeted
huge accomplishment. congrats @bw_solana, the entire @anza_xyz team, many of whom have been grinding nonstop since years before the network went live and any of this was validated as being worth anything in a crowded landscape. engineers relentlessly improving performance.
In 2022, Ethereum shipped The Merge, migrating its consensus protocol from Proof of Work to Proof of Stake. It was an engineering feat 7 years in the making. Today is @solana’s Merge. Shoutout to the engineers at @anza_xyz for shipping Alpenglow in a fraction of the time.
40
34
3
437
40,755
firecrab retweeted
Alpenglow is live on mainnet-beta ⛰️ 🎉 Solana’s new consensus protocol: finality reduced from 12.8 seconds to 150 milliseconds, built by Anza. Why this is important 🧵
283
423
312
1,759
793,984
firecrab retweeted
Alpenglow is pending activation on mainnet-beta. Alpenglow goes live tomorrow, Wednesday, Oct 21 at ~14:00 UTC. One slot, and TowerBFT retires. Migration boundary: slot 459,653,000. 24-hour countdown starts soon. Turn on notifications. 🔔
76
73
68
347
110,629
firecrab retweeted
Supabase is now fully available and open source thanks to Claude
i had 12 Claude agents running in parallel for 6 hours and i managed to reverse engineer @supabase i'm making it available here so that you can save your tokens - 100% free & open-source: github.com/supabase/supabase
218
386
114
10,841
1,054,985
JUST IN: Visa officially launches stablecoin payments through Visa Direct, enabling near-instant global payouts using $USDC across 180+ countries.
376
1,171
188
8,500
1,179,511
firecrab retweeted
1,400 TPS today. Soon: 150ms finality.
Solana ($SOL) is in a league of its own. Averaging 1,400 transactions per second versus just 40 TPS across other blockchain networks, its lead over rivals is only set to expand. Next week's consensus upgrade is expected to drop transaction finality to just 150 milliseconds. Read more on The Stack: grayscale.com/the-stack/the-…
226
159
21
1,630
129,031
firecrab retweeted
And y’all still won’t publish your IDLs smh
In 2026, no program is closed source. We decompiled a propAMM into Rust that recompiles to the exact on-chain binary, then used it to find a critical bug that put $6.1M at risk.
5
2
34
2,101
firecrab retweeted
In 2026, no program is closed source. We decompiled a propAMM into Rust that recompiles to the exact on-chain binary, then used it to find a critical bug that put $6.1M at risk.
22
72
16
547
33,559
Dear Secretary Bessent @SecScottBessent, My name is Everett Stern. In 2010 I was a compliance officer at @HSBC. From a back office in New Castle, Delaware, I watched billions of dollars move to drug cartels, sanctioned regimes, and terrorist organizations. The enemies of the United States. I documented it, I escalated it, and when the bank would not act, I took it to the @FBI, the @CIA, and eventually the @SECGov. The result was a $1.92 billion settlement. At the time, it was one of the largest in American history. It was also about five weeks of the bank’s profit. Not one banker was charged. Not one went to prison. I paid a different price. I lost my career, my savings, and my place in the industry I had trained for. I was blacklisted. Every door in American finance closed at once. I slept on a camping cot in a 300 square foot apartment because I could not afford a bed, and I waited tables at @PFChangs to eat. I tell you this not for sympathy, but so you understand that I know exactly what it costs to do the right thing in American finance, and exactly how little the system does in return. I made that sacrifice because I believed it would change something. Yesterday, your department fined @BankofAmerica $1.2 billion for failing to report more than $5 billion in suspicious transactions, some of it tied by your own findings to Chinese laundering networks, narcotics, and the southwest border, alongside 475 apparent sanctions violations touching Russia, Iran, and global terrorism. The bank admitted it willfully violated the Bank Secrecy Act. Fourteen years after HSBC. A bank with “America” in its name. And once again, not one individual charged. Secretary Bessent, I want to say plainly what I believe you already know. The fines are not working. A fine is paid by shareholders, absorbed by the balance sheet, and forgotten by the next earnings call. Bank of America reported earnings this morning. Nobody who set the alert thresholds, nobody who decided the 2024 cease and desist could wait, nobody who chose the backlog over the law will lose a single thing they value. Their lives are untouched. That is the entire reason the behavior repeats. This is money laundering. This is blood money. Money that reaches a cartel buys fentanyl that kills Americans. Money that reaches a terrorist organization buys the next attack. This country has fought a war on drugs and a war on terror for decades, at enormous cost in lives and treasure, and all the while we have allowed the financing to flow through institutions we charter and regulate. Cut off the money and we win. We have never seriously tried. There is also a question of equal justice that I cannot let go. Before I walked into the FBI building to report HSBC, I stopped in front of the Great Seal on the wall and read the words engraved beneath it: “Justice is the defense of our liberty.” I believed that. I still want to. But every day in this country, people go to prison for crimes that are nothing next to moving money for the people who want Americans dead. A suit, a title, and a corporate badge should not be a shield from the consequences that apply to everyone else. If a street dealer goes to prison for what he sells, the banker who moved the cartel’s money should be standing next to him. I also want to raise something that is rarely said in these conversations. Why has no one inside Bank of America come forward the way I did? The answer is that everyone in American banking knows what happened to me, and to the whistleblowers who came after. The last person who spoke up is the only policy anyone believes. That is a culture problem, and it starts with leadership, in the banks and in the agencies that regulate them. This is not a political issue. It has spanned administrations of both parties. It is a national security issue, and I am asking you to treat it as one. Three things would change the math overnight. Refer individuals for criminal prosecution. Not the analyst in the queue. The executives who set the thresholds and chose the risk. One banker in handcuffs would do more than every fine in Treasury’s history combined. End “too big to jail.” An institution cannot be too big to fail and too big to jail at the same time. If it is the first, it must be held to a higher standard, not a lower one. And if Bank of America will not act as America’s bank, review its charter. A national charter is a privilege granted on behalf of the American people. It should be conditioned on not moving money for the people trying to kill them. Secretary Bessent, you said yesterday that these actions send a clear message that even the biggest institutions are not above the law. With respect, the institution was never the problem. The people inside it are above the law, and they know it. Until that changes, I will keep writing letters like this one, and the next bank will keep paying the next fine. I gave up everything I had to stop this. I am asking you to use the power you have to finish it. Respectfully, Everett A. Stern HSBC Whistleblower Founder and Intelligence Director, Tactical Rabbit
3,182
30,685
2,545
94,574
3,758,506
Alpenglow is coming on October 21, ~14:50 UTC, at the start of epoch 1064. Developers and validators, check the migration guide to make sure you're ready: solana.com/upgrades/alpenglo…
Alpenglow is now live on devnet, with mainnet coming soon. ⛰️ This whiteboard session with @jacobvcreech and @TheWattenhofer is the ultimate primer on everything you need to know about Alpenglow. Link to the full video below 👇
11
11
6
115
5,400
firecrab retweeted
It’s time. Alpenglow goes live on mainnet-beta Wednesday, October 21, ~14:50 UTC. 18 months of work for a migration that happens in one slot. Finality drops from seconds to ~150ms. Make sure to follow us @anza_xyz as we countdown to go-live. Details: anza.xyz/alpenglow
142
206
167
902
164,261
firecrab retweeted
✅ 400ms ✅ 350ms ✅ 300ms ✅ 250ms ✅ 200ms
SIMD-0525 mission accomplished: 200ms slots are now live on mainnet-beta. Blocks land twice as often as they did at genesis. An epoch now takes about a day instead of two. IBRL
149
131
32
1,022
277,553
Everyone sees base:0x311935cd80b76769bf2ecc9d8ab7635b2139cf82 outperforming peers on price, users, activity, & more. But many are sleeping on the fact that base:0x311935cd80b76769bf2ecc9d8ab7635b2139cf82 is CRUSHING it where it matters most: scaling. In 2026 alone, Solana has shipped 11 major protocol upgrades. Seven fully live, two activating now. 🔸 WHAT'S LIVE 🔸 • Larger transactions (1,232 → 4,096 bytes). Multi-hop swaps, large multisigs, and ZK proofs fit in one transaction instead of being split apart or failing. • 100M CU blocks (+66% capacity). More transactions land in every block, so congestion and fee spikes are rarer, and block times haven't changed. • BLS keys + Validator Admission Ticket. Thousands of votes now verify as one. Groundwork for what's coming. • Native BN254 and BLS12-381 curve ops. ZK bridges and proof-heavy apps got 10-20x cheaper. • Optimized Token Program (−98% compute). The most common action on Solana now costs a sliver of what it did, freeing ~10% more block space for everything else. • XDP networking (200x faster propagation). Validators read block data straight off the network card. This is what makes bigger blocks safe to run. • The Agave 3.1 feature set, activated across March and April. CPI account limits up 4x, faster Turbine propagation, Vote Account V4. Unglamorous plumbing, and the reason everything after it could ship. 🔸 ROLLING OUT NOW 🔸 • Slot times 400ms → 250ms, cut in four steps since August, with the final 200ms step activating now. Confirmations twice as fast, no app changes required. • Rent down ~90%. Accounts, tokens, and onchain data get dramatically cheaper; onboarding users at scale becomes cheaper. 🔸 APPROVED BY VOTE 🔸 • In August, Solana ran its first binding governance vote. SIMD-0550 passed: inflation now decays 30% a year instead of 15%. Terminal 1.5% inflation now arrives in 2.8 years instead of 5.7. That's ~18.9M SOL that never gets issued or hits the market. 🔸 SHIPPING NEXT 🔸 • Alpenglow (Agave 4.3, expected October). A full replacement for TowerBFT consensus. Validators vote directly to each other and bundle those votes into certificates. Finality drops from 12.8 seconds to ~150 milliseconds, 99% faster. A trade settles about as fast as a card swipe. • sBPFv3 (Agave 4.4, November). Four bytecode formats collapse to one. Existing programs keep running untouched, and the runtime stays lean as it scales. Watch out, because @Solana is the only chain delivering on its promise to scale. Nothing stops this chain. Keep tabs on all things base:0x311935cd80b76769bf2ecc9d8ab7635b2139cf82. 👉 StateOfSOL.com
12
27
5
214
5,938
Unlike many networks, Solana users don't need to go into "bunker mode" ahead of an accelerated quantum timeline or classical attack provided by AI. Solana uses Ed25519, where each signing key is derived by hashing a secret seed. Breaking the curve, whether by a quantum computer or a classical attack, would expose the derived key, but not the seed, and seeds are never exposed onchain. With a one-time network upgrade, rightful owners could prove knowledge of their seed using a hash-based proof and move their accounts to a safe signature scheme. A working proof of concept already exists: github.com/anza-xyz/cryptogr…. Solana remains secure today and has a defined path forward.
Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash. Holders, starting with large and sophisticated ones, should consider moving the bulk of their funds to addresses that have never signed a transaction. And when they do sign one, they should also move remaining funds to a new address (possibly generated from the same seed phrase). Don't rush. While I believe there is cause for action a rushed migration would do more harm than good. Don't panic either. Moving assets to protected addresses is a simple, preventative step which does not require new cryptography or new wallets. IMO it is now reasonable to brace for the possibility that ECDSA breaks before qday, in the worst case in months not years. By "break" I mean fast private key recovery (e.g. in one week) on available hardware (e.g. a large GPU cluster). Recent days have been humbling for human mathematical intuition. Long-held, unquestioned hypotheses have fallen. This includes the n log(n) bound for integer multiplication and the 3SUM conjecture. In hindsight, May's unexpected disproof of the Erdős unit distance conjecture was our warning shot. Yesterday's OpenAI drop made it clear that mathematical superintelligence is upon us. They say there are weeks where decades happen. We are about to live through weeks where centuries of mathematical progress happen. Could our magic 64-byte ECDSA signatures be too good to be true? Was it just security through obscurity all this time? Elliptic curves feel especially vulnerable to superintelligence. Curves carry rich structure, with room for fancy tricks like Schoof, Frobenius, pairings. (By contrast, hashes are designed to minimise algebraic structure.) Separately, as Ewin Tang can attest, an efficient quantum algorithm sometimes foreshadows an efficient classical one. We should be open to the possibility of a classical counterpart to Shor that breaks elliptic curves and RSA at once. Also noteworthy is the striking under-representation of cryptographic breakthroughs among the 722 mathematical results OpenAI published. I've witnessed first-hand the US government censoring academic quantum cryptanalysis results. Backroom interventionism is my base case. I urge large, sophisticated actors to lead by example. Project11's "risq list" (bitcoin-risq-list.projecteleven[.]com) is a great tracker of exposed BTC pubkeys. Binance, Bitbank, Robinhood, Bitfinex, and Tether have an opportunity to harden their cold storage. Next month I'll address institutions in London in a live Q&A (forum.ethereuminstitutional[.]org/london-2026). Again, please do not rush. Wallets holding under 50 BTC enjoy partial cover from "Satoshi's shield", i.e. his 20K exposed addresses that hold 50 BTC each. Load-bearing signers like oracles and L2 security councils should consider rotating ECDSA pubkeys with every signed message and/or multi-signing with a hash-based schemes like SPHINCS. Exiting bunker mode safely will require post-AI cryptography. My inclination is to go all-in on hash-based cryptography and avoid structured mathematical assumptions entirely, whether from curves, lattices, or isogenies. A single battle-tested hash (e.g. from the SHA or BLAKE families) yields plausible post-AI security. The Ethereum roadmap on strawmap[.]org fully embraces hash-based cryptography with end-to-end formal verification as a response to the quantum threat. Those timelines must now be revisited and accelerated in light of mathematical superintelligence. I'll be pushing for maximum defensive acceleration.
66
130
40
880
86,325