Register and share your invite link to earn from video plays and referrals.

ilemi
@andrewhong5297
co-founder @herd_eco | advisor @archetypevc | ex-@dune
2.2K Following    21.3K Followers
“Closed sourced is safer” I wonder if hackers found this due to decoding error messages in bytecode, would be an interesting way to scan for contracts that may have certain types of vulnerabilities from poorly set up modifiers
Show more
🚨 Blockaid's exploit detection system has identified an on-going exploit on TrustedVolumes (1inch market maker / resolver, @trustedvolumes ). Chain: Ethereum Victim contract: TrustedVolumes resolver — 0x9bA0CF1588E1DFA905eC948F7FE5104dD40EDa31 Exploiter: 0xC3EBDdEa4f69df717a8f5c89e7cF20C1c0389100 Exploit tx: 0xc5c61b3ac39d854773b9dc34bd0cdbc8b5bbf75f18551802a0b5881fcb990513 Total extracted so far: ~$5.87M (1,291.16 WETH + 206,282 USDT + 16.939 WBTC + 1,268,771 USDC). Same operator as the March-2025 1inch Fusion V1 incident; this is a different vulnerability, in a TrustedVolumes-controlled custom RFQ swap proxy (0xeEeEEe53033F7227d488ae83a27Bc9A9D5051756). More details will follow.
Show more
Proud to launch Pantera's Tokenization Portal and Q1 Report with @0xallyzach @FranklinBi! The biggest surprise from our study of the $320B market: Most tokenized assets are still Wrappers — by design, not by accident.
Show more
Two new sets of contracts and a new chain? 👀 Have been waiting to build on polymarket, but being on polygon and no real composability opportunities made it a lower prio for us. Excited to see what the team cooks up!
Show more
This is my 3rd week as VP of Engineering DeFi at @Polymarket , and I'm going to be straight: the traction @Polymarket has seen has massively outpaced our infrastructure, and we haven't done nearly enough to scale to keep up. I hear you, and fixing this is our entire focus. We're a major company now, and we need to engineer like one. Here's exactly what we're doing: - Onchain data latency. We're working on making this near-instant so the experience is incredible. - Chain migration. We need more block space, cheaper gas and much smaller block times so settlement is instant. - Transactions are getting cancelled. We understand this is one of the most frustrating issues right now, and we have a complete fix coming very soon. - Massive focus on the website to make it faster, more responsive, and with better UX. - We added observability everywhere. Proper alerting so we catch issues ourselves, market makers should not be the ones telling us something is down. That's been unacceptable, and we know it. - E2e tests throughout, starting with the CLOB, so issues get caught in CI before anything ships. - CLOBv2 is not a rewrite. It won't improve performance or stability on its own; it's an upgrade that unlocks us to move fast right after. We'll do better with communication next time. - We are rebuilding the CLOB from the ground up. Most important thing we're doing. Without it, we can't be the best DeFi exchange in the world. We know it, we're on it, it's mission critical. - Unified TypeScript SDK for all APIs, which is shipping soon. - Unified API. One WS connection for everything, with a schema that's actually readable. - New Polymarket contract in the works that unlocks things that are simply impossible on the current protocol. - New hires: Head of QA Automation, Head of Dev Tooling, Head of Internal Tooling, Head of Data Engineering. - Smaller, dedicated teams. Fewer focus points per person, clearer ownership. People do what they're good at and are accountable for it. - Working closely with customer support to give them real debugging tools so any user issue gets properly diagnosed, not lost. - Proper communication with marketing and market makers so everyone knows what's coming and when, and MM can submit feature requests with a clear path to get them into engineering and shipped. - Working with 4 security teams daily to ensure we're super secure and that funds are always safe. - Perps incoming. Brand new contracts and a backend built from scratch in Rust. We're proud of this one. - A lot of other fixes are running in parallel right now. Starting next Friday, I will be posting weekly engineering updates. I joined because I genuinely believe in what @Polymarket is trying to do. @shayne_coplan built this so the world has somewhere to go to find out what's actually going to happen, not what the media thinks, not what a pundit says, but what thousands of people are willing to put money on. But right now, our engineering isn't living up to that. We've let people down, and I'm not going to dress that up. I came here to fix it, and that's exactly what we're going to do. The next few months are going to speak for themselves. Stay with us.
Show more
Lots of people are dunking on the Circle proposal to shift Aave rates, and I have, inevitably, been asked my opinion. I’ll share it here publicly. Gordon’s proposal is not incorrect directionally. He correctly diagnoses that the market is not clearing, and provides a pretty standard solution that would fit into half the textbooks on my bookshelf. Where I disagree with him are on his rate (in)sensitivity assumptions. Going straight to 40% seems destined to force liquidations. In the current market, contagion risk is already high, so cascades would need to be mitigated. I don’t know if Aave can throttle the liquidation throughput like the old Maker vaults could, but that would be a way to do that. It’s an open question whether this would be a good idea. I’m open to considering it, but am not convinced at this time. Gordon doesn’t say that the goal is repayment or liquidation, though. He believes this is a way to finance attracting supply, which I agree WOULD be the best way to unstick the market for the moment. However, the rate can’t just be the usual mechanics. For starters, anyone who has been in DeFi knows that juicy rates get diluted quickly in a floating rate lending protocol. Given the high probability of at least some loss, why would a lender put their stables to work even for a temporary (maybe a week?) 40% rate? Imagine you had $100m, and you saw this 40% deposit rate on Aave. Knowing there is more than $1b of impaired collateral in the system, are you going to risk your clients’ money for $109k/day? You’d need a week and a half just to break even on a 1% loss to your deposited funds. Except this is a floating rate. Once danger has passed, the rates drop down. And if they stay elevated it’s likely because the situation hasn’t gotten better. The calculus COULD be different if it was 40% for 6 months or a year. But you’re really just getting outsized rates for a few days in the best case scenario, and it is rising or realized risk that would let you keep earning that rate. This is at its heart a risk that is unmeasured, and so you can’t know what is the correct rate to price it at. You can’t tell if this is picking up nickels in front of a steam roller or the trade of the century. So I think depositors are the most rate insensitive group at the moment, and due to a very wide range of possible outcomes at the intersection of distressed collateral assets, ultimate recovery rates on those assets, timeline to realize that recovery, secondary damage that has created bad debt, and governance risk around things like implementation of Umbrella or the funds seized by Arbitrum. Basically everyone is standing around keeping rsETH marked to some imaginary number because we don’t have enough guidance from Kelp (and possibly L0 and now Arbitrum) for Aave to know how to begin liquidations and realize losses without accidentally taking on someone else’s loss because they were too pessimistic in valuing the impaired collateral. I do think at this point, Aave would be better off making an “ok” plan and acting today than waiting for a “good” plan that requires information from Kelp/L0/Arbitrum/law enforcement that may not be available for some time.
Show more
**monitoring the situation** just published to track latest on aave v3 core: - liquidity - at-risk positions - tvl and debt - protocol fees
the goats ship again 🐐 wen token interop page @donnoh_eth
We’re thrilled to unveil our new Interactive Interop page - a visual map of how value moves across the ecosystem. The ecosystem is no longer a list of silos. Our interactive hub lets you visualize the connections between 15 chains and 33 supported protocols. 👇
Show more
🤔 imagine if exploring key function dependencies on contracts/counterparties was this easy, for any token
we've been working on an agent system that can explore and monitor the graph of dependencies a token can have, such as the layerzero DVN. a tough problem since this has to be done custom for every token, even from the same issuer/protocols. can't make any assumptions since you don't know what peripheral contracts may exist that introduce risks. lets look at centrifuge JAAA and deSPXA for example: - both use six contracts between the token mint function and the cross-chain mint calls - has a multiadapter contract which checks how many message relayers have to verify before a mint goes out (layerzero, axelar, and chainlink) - configurations are constantly changing. JAAA used to require two adapters but got changed last week to only rely on layerzero (as a 2/2 dvn) we're still iterating and pushing hard to get this tool out to defi teams asap, and are taking early feedback and examples (dm me).
Show more
we've been working on an agent system that can explore and monitor the graph of dependencies a token can have, such as the layerzero DVN. a tough problem since this has to be done custom for every token, even from the same issuer/protocols. can't make any assumptions since you don't know what peripheral contracts may exist that introduce risks. lets look at centrifuge JAAA and deSPXA for example: - both use six contracts between the token mint function and the cross-chain mint calls - has a multiadapter contract which checks how many message relayers have to verify before a mint goes out (layerzero, axelar, and chainlink) - configurations are constantly changing. JAAA used to require two adapters but got changed last week to only rely on layerzero (as a 2/2 dvn) we're still iterating and pushing hard to get this tool out to defi teams asap, and are taking early feedback and examples (dm me).
Show more
with stablecoin markets beginning to become illiquid, the situation is now entering a more dangerous stage imo to break down the driving factors: the ETH market is ~16.5% backed by rsETH, and rsETH backed loans could see up to 10-15% haircut in emode if losses are socialized equally on mainnet & external chains, leaving 2-3% residual haircut for ETH suppliers after wiping out umbrella ETH suppliers are naturally incentivized to get out ASAP to avoid this, so utilization is pinned at 100%, and borrow rates are not high enough to incentivized repayment of unrelated LST loops (wstETH, weETH) to free up liquidity because it is impossible to withdraw ETH, users borrowing stables like USDT against ETH collateral cant unwind their position even when the rates for stablecoin borrowing start to spike, which severs the typical incentives scheme keeping these markets healthy now we have 2 unhealthy incentives based on the markets becoming locked at 100% utilization 1) ETH holders cannot unwind their positions to maintain healthy LTVs, and liquidators cant withdraw/sell collateral to close positions atomically, meaning that ETHUSD price drop could potentially cause bad debt 2) users supplying USDT have a perverse incentive to max-borrow other stablecoins as a way of exiting, the position has positive carry (for now) so the optionality has low cost, while if conditions worsen they can get at least 75% of their position value out of the market bottom line is, for these pooled/rehypothecated lending markets to function properly, liquidity must be preserved AT ALL COSTS. recent slope2 changes nerfing Aave's max borrow rates are having a negative effect and significantly increasing the risk of cascading market failure
Show more
0
52
827
121
Forward to community
it's really crazy that layerzero doesn't have some redundant sanity check and allows to bridge 116,500 rseth from a chain with a supply of 49 anyway here is my investigation
0
51
1.1K
126
Forward to community
just shipped three new sections on unchain data insights, learn, and tools for the web3 data community 260+ new pages. free. no login the data job board was step one. this is step two. (links in the thread)
Show more
Operations and disclosures is the top focus of herd today. A lot of "disclosure" around tokens and vaults is hidden in githubs, dozens of contracts, and scattered forum discussions. This is getting worse as the number of counterparies increase both on and offchain.
Show more
"Smart contracts could create a better disclosure framework than traditional securities law. Interactive, layered, AI-assisted. " The SEC wants to hear from teams building this. @HesterPeirce @kkirkbos @TuongvyLe12
Show more
we're in the "circuit breaker" phase on defi now. queue contracts, automatic pauses/response oracles, more rate limits and roles, etc. contagion will be solved, but we're def at max risk right now
Santi shares why vaults today could end up similar to algorithmic stablecoins "What algo stablecoins were last cycle, vaults can become this cycle" “Every incremental protocol that you add adds way more surface area, and I don’t think it’s a linear relationship it’s actually exponential risk" @santiagoroel
Show more