Pinned Tweet
Why does anyone trust Justin Sun with the keys to their crypto? Especially BTC!
He paid big bucks to @BitGo to be a custodian for a failing BTC bridge. That’s right. WBTC is not a profitable business. Straight from Mr. Belshe’s mouth.
If you want to use your BTC in DeFi without needing to trust shady middlemen like his excellency, just use @tBTC_project.
Once again reminding the hardware wallet retards that the risk that becomes real when you leak people’s SHIPPING INFORMATION is not phishing. It’s fucking PHYSICAL ASSAULTS AND KIDNAPPINGS.
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
Ashley ✜ mrsThreshold.eth retweeted
It'd actually be dope to have decentralized stablecoins being used for grants on rotating basis. crvUSD, BOLD, GHO, DOLA, frxUSD? Or even non-dollar ones?
Ashley ✜ mrsThreshold.eth retweeted
I see a lot of doomposting about Bitcoin and crypto because crypto is somehow not the favourite toy of the market at the moment (AI stonks are).
I want to remind that crypto is not a toy, and it's serving its true purpose - self-sovereignty of every user, financial rails which are always on and do not stop working. Institutions are also into adopting something which has no clunky intermediaries now, so fundamentally we are better than ever.
AI is foundational, but it will go through its own valley of death: replacing humans by AI would put AI outputs into AI inputs, quality will degrade, and costs will grow exponentially to maintain it. Large companies who push AI everywhere aren't necessarily using it correctly, so they report some overly large expenses.
Both technologies - crypto and AI - are foundational. They are not the same thing though, and they are not competing with each other in principle.
Crypto is the future of Finance!
Ashley ✜ mrsThreshold.eth retweeted
New @yieldbasis markets already make fees. But they will start being distributed as soon as this new vote will pass
yieldbasis.com/proposal/45
Maybe you already figured, but the new version of @yieldbasis pools is live!
There is a little bit of capacity available to just deposit (every time you see <100%), but most of the space is reserved for migrating positions from the previous version of the vaults
Ashley ✜ mrsThreshold.eth retweeted
A Top 100 TBTC holder just moved $2.8M out of Coinbase-custodied BTC.
Not into cash. Into trust-minimized BTC - then straight into DeFi.
35 CBBTC → 35 TBTC across 3 txns on Ethereum.
Routed via ParaSwap, deployed across Aave, Spark, and Yield Basis.
DPRK does not miss their 2 hour lunches.
One of the funniest moments was seeing logs of them asking ChatGPT what Americans do for lunch, why so short?
Shook them to their fucking core.
Like of all the propaganda they’ve ever heard, nothing comes close to the fact we don’t take long lunches with naps lmfaoooooo 💀
Image 1: from the article
Image 2: mine of the same boys, onchain
Ashley ✜ mrsThreshold.eth retweeted
Ahhhh this is how all projects should be analyzed: identifying ways how money can be lost. From all the dependencies. Excellent stuff!
Thorchain cofounder says they are launching XMR and it’s going to be great and everyone’s going to make fuckloads on from fees because bad actors are going to funnel stolen money to XMR and back via Thorchain.
Someone please get these fucking retards a lawyer.
This quoted post is unavailable.
Ashley ✜ mrsThreshold.eth retweeted
When you hold a token, you're exposed to every market that touches it. Until now, there was no way to quickly understand what that actually looks like.
Introducing token pages on DefiLlama.
Understand how tokens are being used in DeFi:
- Risks across lending markets
- Usage by protocol
- Liquidation levels
- Yields & borrow rates
Enter a token in our search bar to find its page.
Ashley ✜ mrsThreshold.eth retweeted
A look at our new token page for WBTC.
How much debt can be issued against WBTC as collateral?
Which risk assessments have been made about WBTC historically?
Where is WBTC used in DeFi?
What are the onchain liquidation levels for WBTC?
Now available for thousands of tokens.
defillama.com/token/WBTC
Replying to @justinsuntron
More sophistry. This is why crypto creates more noise than signal, too many charlatans. Also, if you use Tron, don't complain when your money is eventually frozen or stolen. Same for wBTC...
Ashley ✜ mrsThreshold.eth retweeted
So let me start. DeFi is the future of the World Financial System. That's my belief, and this is why we are here.
This amount of absolutely preventable hacks we see in DeFi (with root causes attributable to CENTRALIZED points of failure) is enormous recently. This damages out industry, and I build for this industry. So I cannot remain silent.
Imagine an average grandma (mass adoption is here?) putting her life savings on Aave. And then BOOM, she cannot withdraw her funds on Monday. Aave (the biggest DeFi protocol btw) said it's operating as intended - just rsETH got exploited. rsETH said that all code is safu - just LayerZero bridge got hacked. LayerZero (the biggest bridge securing quarter of a trillion $) said that everything operating as intended. Yet, she cannot withdraw here funds. WTF? Are we industry of clowns?
But here's the thing. All issues like this should be prevented BEFORE they happen, not AFTER. Number of single points of failure should be reduced, not increased. When these points of failure are unavoidable - trust should be split. If there's a reliance on infrastructure - we should share best practices how to configure it. Not to mention that code should be very well checked - everyone gets that already.
We should probably come together and develop safety standards for DeFi. How to build safely, and how to verify safety. Probably everyone should bring their best practices, and the projects, auditors and risk assessment groups should know them. Maybe we need @ethereumfndn and @SolanaFndn bringing all the ecosystem projects to participate and come up with principles, rules and recommendations of safe building. And, perhaps, we can even learn something about protecting the few remaining centralized points of failure from traditional finance who have many more of those.
DeFi will win
Ashley ✜ mrsThreshold.eth retweeted
Although the situation is still developing, we wanted to share some initial takeaways from the LayerZero DVN security incident
radar.securityalliance.org/i…
Ashley ✜ mrsThreshold.eth retweeted
Sometimes it’s multisigs, sometimes it’s lack of timelocks, sometimes RPCs, sometimes npm libraries. But always starts with just knowing where your risks are. Surprisingly many protocols do not.
Ashley ✜ mrsThreshold.eth retweeted
🚨🚨🚨 REMOVE ALL YOUR FUNDS INTEGRATED WITH LAYERZERO IMMEDIATELY!!!
LayerZero placed blame on KelpDAO saying they were irresponsible for running 1/1 DVN.
@Dune analyzed all LayerZero integrations.
Out of the 2,665 LayerZero integrations, 47% are running 1/1 DVN LayerZero integrations.
I am being 100% serious here—
REMOVE ALL YOUR FUNDS INTEGRATED WITH LAYERZERO IMMEDIATELY!!! 🚨🚨🚨
Following the KelpDAO hack, we built an open analysis of DVN security configurations across every active OApp on LayerZero over the last 90 days.
Of ~2,665 unique OApp contracts: 47% run a 1-of-1 DVN security floor, 45% run 2-of-2, and ~5% run 3-of-3 or higher.
As we know, KelpDAO's rsETH sat in the first bucket.
Open query, public methodology, feedback welcome:
dune.com/dune/layerzero-dvn-…
Of course WBTC is relying on a 1-of-1 DVN
Following the KelpDAO hack, we built an open analysis of DVN security configurations across every active OApp on LayerZero over the last 90 days.
Of ~2,665 unique OApp contracts: 47% run a 1-of-1 DVN security floor, 45% run 2-of-2, and ~5% run 3-of-3 or higher.
As we know, KelpDAO's rsETH sat in the first bucket.
Open query, public methodology, feedback welcome:
dune.com/dune/layerzero-dvn-…
Sorry to announce more bad news.
I would advise to stop interacting with ANY DeFi dApp for the coming days as there is an ongoing incident on Vercel related to stolen Github and NPM keys.
We still don't know enough but if the claims are true, frontends could get compromised from Github or from supply chain attacks. These are the attack vectors used to hack bybit or compromise Ledger’s Connect Kit.
Stay safe!































