Register and share your invite link to earn from video plays and referrals.

Ilan Gitter
@nocircuit
head of ecosystem engineering, @solanafndn ex: @Paxos ~Opinions are my own~
798 Following    2.4K Followers
Fast today and ready for tomorrow. Solana has been early to quantum readiness and remains ahead in its preparation. @anza_xyz's @qkniep and Alex join @nocircuit on The Stack to walk through Solana’s post-quantum path: well-researched, aligned across client teams, and ready to deploy. Full episode 👇
Show more
The AI-driven surge in vulnerability discovery and exploitation has begun. Three indicators from the past few weeks: 1. chatter that incident response firms are fully booked and overwhelmed with business (meaning breaches are happening even if we don’t see headlines) 2. a major certificate authority compromise (eMudhra) 3. the massive PHP vulnerabilities discussed today (CVE-2026-109618 and CVE-2026-109619) AI is either directly discovering the vulnerabilities or is a means to rapidly exploit the issue at scale and low cost. The combination of low cost and scale means industries that skated under the radar because of attacker interest / ROI are now squarely in the attack crosshairs. This applies to all companies, big and small. You are not safe because “hackers won’t come after industry XYZ”. They will. The defensive needs are clear. We need to migrate from human-driven cyber defense to defense at the speed of computers. This is the position I laid out in December when I spoke to the House Homeland Security Committee subcommittee in DC about the threat of AI-powered cybersecurity attacks. What should organizations do today? This is not an exercise in being clever. Rather the need is to be comprehensive. 1. Understand your exposure - Establish an automated inventory of your packages, libraries, operating systems, full tech stack, etc. 2. Understand when you need to respond - Build automated monitoring systems that monitor public CVEs and cybersecurity chatter and cross-reference this with your inventory. Response time is moving from days to hours to minutes. You need automation and alerting. 3. Mobilize and plan for response - The issue will inevitably hit at 2am. How will you mobilize the right team members? Can you bring the system offline in moments (operationally, and do you have internal authorization)? What team members are needed? Do you have reliable paging and response? Practice now. 4. Reduce Attack Surface & fix issues you can now - AI chaining is increasingly tying together otherwise low-risk issues into critical outcomes. This means you either need to comprehensively analyze all known vulns to better understand if a low is actually a high risk issue. Or, lacking this capability, be more aggressive to fix known issues. One simple way to fix issues - remove the access and exposure. A device that can’t be reached is much harder to exploit! This is not business as usual. Your cybersecurity posture and strategy over the next 18 months are an opportunity to survive when your competition fails (and they may no longer be a competitor at that point). If you’ve been saying “We take cybersecurity seriously...” This is your chance to put your money where your mouth is.
Show more
What would Solana’s consensus look like in a post-quantum world? Meet Quantumglow: a proposed adaptation of Alpenglow that aims to protect consensus while preserving fast finality. @jacobvcreech and @qkniep explain how it works. Full video below👇
Show more
Got an ai generated LinkedIn pitch to fix Solana’s php infrastructure Solamp
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Show more
Alpenglow is live on mainnet-beta ⛰️ 🎉 Solana’s new consensus protocol: finality reduced from 12.8 seconds to 150 milliseconds, built by Anza. Why this is important 🧵
Show more
0
284
1.7K
422
Forward to community
We put Solana on the big screen because that’s the big heart Solana has for the Chinese community, and that’s the warm welcome we are so thankful to feel from the Chinese community. Due to the publicity, event registrations quadrupled overnight, far exceeding the event cap we had registered with local authorities, and we had no way to prevent people from overwhelming the venue. So, in order to comply with local requirements, we are going to postpone this event for when we can better accommodate the breadth and scale of our community. Apologies to everyone who came from near and far to come be part of Solana in Shanghai. See you soon!
Show more
0
264
1.2K
112
Forward to community
Ledger is Solana Mobile’s first hardware expansion partner. We’ve partnered with @solanamobile to bring the Seeker app to Ledger Atom. The Seeker app, combining the Solana dApp Store and wallet, comes preinstalled and featured on Ledger Atom™’s home screen, putting 1,500+ apps in front of Ledger users, with signing and approvals happening on the Secure Screen. More to come at Solana Breakpoint - stay tuned!
Show more
Solana is so far ahead of the curve. Great work @gansersol @multisig and the @blueshift team (@deanmlittle, @L0STE_) and anyone else involved
Tested and working on Solana mainnet. Post-quantum signing for voting members of your Squads @multisig using Falcon-512.
Alpenglow is coming october 21st! dig into the deets on my pod w/@Ashwinningg LFGLOW
Alpenglow is live on testnet. Handoff was smooth with no issues. Testnet cluster handling 25K+ tps w/150ms finality. Solana
This is an example of how to do incident response right. * have proper monitoring in place * work quickly to identify and patch the issue * utilize Solana’s SIRN program for assistance * publicly acknowledge and address the impact as soon as possible * make affected users whole Great example to set for the ecosystem and a case study we’ll use to improve the Solana ecosystem’s security posture even more in the future.
Show more
Suuuuch a good one. Never feel comfortable pushing my work but @bw_solana makes it easy. Lots of good info here about the upcoming v4.2 changes and their implications
Just wrapped my talk at @fintechdevcon on incorporating real-time stablecoin settlement into existing fintech infrastructure. Amazing attendees and talks, dev focused with no sales. Learned a ton too: fintech development, ISO 8583, loyalty programs, and more. Would definitely recommend.
Show more
our subscriptions program has been live for about a month and successfully pulled 10k+ payments. Want to learn more about embedding this into your app?
When all of finance is on Solana. All you need is Solana. Blackrock and Franklin Templeton and VanEck and Amundi and State Street and Nasdaq and WisdomTree and Bitwise and Fidelity and Morgan Stanley and Grayscale and Apollo and Figure and Hamilton Lane and Baillie Gifford and BNY and J.P. Morgan and Citigroup and Société Générale and Visa and Mastercard and Western Union and PayPal and Cross River Bank and Lead Bank and Ondo and Securitize and Galaxy and Spiko and Bullish and Superstate and Backpack and and and.. Do you get it yet?
Show more
Happy p-token day! If you want to hear about what went into this massive efficiency unlock, checkout my episode with @0x_febo from @anza_xyz where he walks through the process