ENS: a real renewal never asks for your seed phrase
Correct. It just asks for your money. Every year. Until you forget to renew and someone else receives your next salary payment.
a real ENS claim, upgrade or renewal never asks for your seed phrase
not to verify a name, not to fix a wallet, not for support
if anyone asks, it's a scam. close the tab and don't sign anything
3
93
Your bank account is not a gym membership.
When you share your payment identifier, you should have peace of mind that payments intended for you won’t suddenly end up in a stranger’s account because you forgot to renew a subscription.
Permanent, soulbound, human-readable payment identifiers eliminate this entire class of risk.
Don’t use ENS for payments. Use XNS.
chainflip.eth was back on the market and a friendly node operator bought it back as a gift
Next time it's a sniper and the name is somebody's payout address.
The 'chainflip.eth' ENS domain was back on the market, and @BCVFinance made sure it came home.
As one of Chainflip's operators, BCV already helps keep the network running securely. Now they've gone a step further by securing the @ensdomains and gifting it to Chainflip Labs.
Community members going above and beyond.
Thank you, BCV!
2
109
There's nothing to poison when there's nothing to copy.
🚨 IF YOU ARE IN CRYPTO, IGNORE THIS POST AT YOUR OWN RISK
A friend lost $535,000 USDT yesterday, and he even sent a test transfer first. His wallet wasn't hacked and his keys never leaked. He lost it to a bot.
The test transfer arrived fine. Within seconds, a bot sent 1 USDT to his wallet from a fake address that started and ended with the same characters as the real one. Now the fake address was sitting in his transaction history, right next to the real one.
When he went to send the full amount, he copied the address from that history and picked the fake one. The money was gone in under 30 seconds, swapped out of USDT before Tether could freeze it.
This is called address poisoning, and it's running at industrial scale. The bot that got him has run over 6 million transactions, and it goes after anyone moving large amounts.
Here's how to make sure it never happens to you:
• Never copy an address from your transaction history or a block explorer
• After a test transfer, copy the address again from the original message the receiver sent you
• Check every character, because these bots match both the start and the end
• Save verified addresses in your wallet's address book with names
Now open your wallet and go through your history. If there's a tiny deposit from an address you don't recognize, a bot has already marked you. Tell me below if you find one.
Repost this post and share this to the person you know who moves the most money on-chain.
68
XNS retweeted
The last person I saw lose money to a dropcaught .eth name got it as a gift. I was the one sending him the payment that ended up in a stranger’s wallet.
Nobody told him it expires.
Some things in life should never have a subscription model.
Imagine your car’s seatbelt suddenly stops working while you’re driving because you forgot to renew your subscription.
Absurd, right?
The same applies to payment identifiers.
Nobody should be able to claim your payment identifier and receive funds intended for you simply because you forgot to renew it.
Some things should be permanent by design.
That’s insane.
Imagine defending a financial system where users can lose money simply because someone forgot to renew a name. And then blaming the victims for not reading the manual. 🤡
The $12 million loss due to ENS dropcatching (see linked post) comes from independent research, not me. I’ve personally witnessed such a loss.
Address poisoning is a problem. ENS dropcatching is another. You solve one problem by introducing another one.
Permanent payment identifiers eliminate this entire class of risk.
That’s called fixing the problem at its root. Happy to give you a lesson in thinking from first principles.
XNS retweeted
No mate. When I learn about self-custody, I also learn about its risks. If I lose my seed phrase, I may lose access to my funds. I weigh the risks against the benefits and make an informed decision.
With ENS, it’s different.
You don’t warn users that if they forget to renew their name, someone else can register it and future payments may end up in a stranger’s wallet. You don’t push wallets to introduce warnings on recent owner changes.
You tell users they “own” their names. In reality, they’re renting them.
You’re imposing an unnecessary burden on users and introducing a risk that doesn’t need to exist in the first place.
We should be making payments safer, not creating additional ways for people to lose money.
And no, this isn’t FUD. I’m educating users about risks that you fail to communicate.
Good luck next time.
An XNS name is a memorable name for your Ethereum account, not a portable identity.
This is a deliberate design choice that comes with certain trade-offs:
✅ Your name never expires and can never be reassigned to another address.
✅ Anyone who saves your name can rely on it always resolving to the same address.
❌ If you lose access to your wallet, you cannot move your name to a new address.
❌ If you decide to switch wallets, you need to register a new name.
If you choose a name that’s particularly meaningful to you, think carefully about the account you register it to. Consider a smart account or multisig with key rotation and recovery.
XNS prioritizes permanent account identifiers over portable identities.
XNS retweeted
I think the fundamental question is whether names should identify people or addresses.
XNS was designed to identify addresses.
Just like an IBAN identifies a bank account, not the person behind it.
The same philosophy applies to @xban_xyz, which provides permanent, numeric account identifiers for Ethereum addresses.
If you want to preserve your XNS name while rotating keys, use a smart account or multisig.
If you move to a new address, register a new name.
Soulbound names don’t guarantee that the recipient still controls the address. They guarantee that the name will never point to a different address.
That’s a deliberate design choice which comes with certain tradeoffs.