ACai

921 posts

ACai banner
ACai

ACai

@ACai_sec

智能合约审计员/Web3 安全研究员 寻找岗位中👔欢迎联系

Katılım Ekim 2022
230 Takip Edilen1.2K Takipçiler
ACai retweetledi
jackcc.eth
jackcc.eth@JackCC60·
为什么很多人看 Web3 的心态很拧巴? 一边觉得稳定币、比特币、以太坊、DeFi、RWA、预测市场都很重要; 另一边又会焦虑: 为什么真正跑出来的 Web3 应用这么少? 为什么大部分项目最后都失败了? 为什么山寨币跌得这么惨? Web3 到底发展到哪个阶段了? 我觉得,要理解这个问题,可以把 Web3 和互联网的发展放在一起对照。 我的判断是: 今天的 Web3,很像 2000 年互联网泡沫破裂后,到 2004 年前后的阶段。 它不是刚刚诞生,也远没有到 Google、Facebook、iPhone 全面成熟的时代。 它更像是: 大量泡沫已经破裂,大多数公司和项目被淘汰,少数幸存者开始证明自己,但真正的大众应用还没有出现。 1/ 互联网最早的阶段,是底层协议的诞生。 从早期网络,到 TCP/IP,再到万维网,解决的核心问题是: 信息能不能在一个全球网络中被连接、传输和验证? 这个阶段的互联网并不是给普通人使用的,更像是科研和技术实验。 对应到加密世界,就是 2008—2014 年。 比特币白皮书提出点对点电子现金,解决的问题是: 价值能不能在没有中央机构和中介的情况下被记录、转移和验证? 所以早期加密世界的重点并不是应用,而是先把“去中心化价值网络”这个底层协议跑通。 2/ 互联网的第二个阶段,是应用平台的出现。 万维网和浏览器出现以后,互联网才逐渐从技术人员使用的网络,变成开发者和普通人都可以参与的平台。 互联网不只是“能够连接”,还开始“能够承载应用”。 对应到加密世界,就是 2015 年以太坊上线。 以太坊的意义,不只是又发行了一个币。 它第一次把区块链从单一的货币系统,扩展成了一个可以编程、可以部署应用的平台。 从比特币到以太坊,有点像互联网从 TCP/IP 走向 Web: 从一个底层协议,开始变成可以承载应用的基础设施。 3/ 互联网的第三个阶段,是第一次大规模商业化和泡沫形成。 1995—2000 年,市场开始广泛相信一个叙事: 互联网将会改变商业。 浏览器、门户网站、电商、搜索等公司被疯狂追捧,资本大量涌入。 估值和故事,远远跑在真实收入和用户需求前面。 最终,纳斯达克在 2000 年见顶,互联网泡沫破裂,大量公司倒闭。 对应到加密世界,就是 2017 年的 ICO 热潮。 ICO 的历史意义在于,它第一次让市场广泛相信: 区块链不只是比特币和数字货币,还可以融资、发行 Token、建立生态、承载商业应用。 4/ 再往后,是泡沫最狂热的阶段。 2020—2021 年,加密行业第一次形成了一套完整的 Web3 商业世界想象: DeFi、NFT、GameFi、元宇宙、DAO、SocialFi…… 几乎所有叙事同时爆发。 那种感觉很像互联网泡沫高峰期: 以前是什么东西贴上“互联网”就能涨; 后来是什么东西贴上“Web3”就能融资、发币、获得高估值。 大量项目的故事、估值和 Token 价格,远远跑在真实产品、用户和收入之前。 5/ 然后就是泡沫破裂和行业出清。 互联网在 2000—2002 年经历了大规模淘汰。 Web3 则从 2022 年开始进入出清阶段: 大量项目归零,山寨币深度回调,市场不再轻易相信故事,资金开始集中到少数头部资产、基础设施,以及真正拥有产品、收入和用户的项目上。 这个阶段最典型的特征是: 方向没有被否定,但泡沫被大面积清理。 6/ 互联网泡沫破裂后,并不是互联网失败了。 只是市场终于开始区分: 哪些公司只有故事,哪些公司真的创造了价值。 亚马逊、eBay 等公司能够活下来,不是因为它们更会讲“互联网将改变世界”的故事,而是因为它们拥有真实用户、真实交易和真实收入。 今天的 Web3 也正在发生类似的事情。 比特币越来越像数字黄金和宏观资产; 稳定币证明了链上支付和全球结算并不是伪需求; 以太坊和少数公链仍在竞争未来的价值互联网基础设施; Hyperliquid、Polymarket 等产品,也在证明 Web3 不只是发币,还可以拥有真实用户、真实需求和真实现金流。 7/ 所以我认为,今天的 Web3 最像互联网泡沫破裂后的重建期。 这个阶段会非常残酷: 大多数项目会失败,大多数 Token 可能无法回到高点,很多曾经热门的叙事会彻底消失。 但这并不代表整个方向被证伪。 相反,泡沫破裂后,真正有价值的技术和产品才会被迫证明自己。 8/ 如果因为现在市场低迷,就直接得出“Web3 已经不行了”的结论,我觉得可能还太早。 通用技术真正成长起来,往往不是发生在泡沫最狂热的时候,而是在泡沫破裂之后: 投机者离场,估值回归现实,开发者开始解决真正的问题,用户开始为真实价值付费。 今天看到的大量失败,并不是技术革命的例外。 它本来就是技术革命早期的一部分。 9/ 当然,Web3 不一定会完全复制互联网的历史。 两者在监管、用户需求、商业模式和技术结构上都有很大差异。 所以“Web3 是下一代互联网”不能成为盲目乐观的理由。 但理解今天所处的阶段,可以让我们少一点恐慌,也少一点不切实际的幻想。 真正值得关注的,不再是下一个热门叙事是什么,而是: 哪些产品真的有人使用? 哪些项目真的能够创造收入? 哪些基础设施在没有补贴之后,依然能够长期存在? 这可能才是 Web3 下一阶段最重要的问题。
中文
0
1
5
1.2K
ACai
ACai@ACai_sec·
Having reviewed BattleChain‘s code, I can deduce that this project was most likely designed and generated by AI. I previously audited a contract project that was 100% designed and developed by AI, and they shared the following characteristics: 1. Redundant code, with repetitive checks implemented differently but with the same meaning. 2. A large number of global variables implemented, with each function involving numerous modifications to these global variables. 3. Excessive function splitting and function implementation methods that defy human thought. 4. A very uncomfortable read. (🤪a very subjective reason
Cyfrin CodeHawks@CodeHawks

Gm, Web3. Did you miss us? To mark the launch of BattleChain Mainnet, CodeHawks is hosting its first audit in over a year! New competition announced: BattleChain Confidence Pools nSLOC: 589 Start date: July 9th, 2026 Noon UTC Duration: 1 Week Total rewards: 7.25 ETH 💰 Check it out! 👇

English
5
1
59
6.5K
ACai
ACai@ACai_sec·
My bolg about "MainStreet Project msUSD and msY Token Depeg Incident" was published on Remedy Blog, 😎thank you @glider_xyz for the recognition. 👇full info r.xyz/blog/mainstree…
English
1
0
8
654
ACai
ACai@ACai_sec·
@S7iter_ 🫣师傅怎么解决手机号验证的问题的?
中文
2
0
0
947
S7iter
S7iter@S7iter_·
已经被封了3个codexpro号了(无退款)分别是: 1:U卡买的过了cyber的20xPro,使用了两周不到 2:U卡买的5xPro,用了两天升级了20xPro,不到一周 3:昨天刚被封,中转站买的美区充值卡5x的 官充平均一天2-3亿token,也不算多吧 (最多是用中转的时候一天用13亿token) 每次都是网络滥用 老师们有什么方法吗
S7iter tweet mediaS7iter tweet media
中文
14
0
15
12K
ACai
ACai@ACai_sec·
I'm currently participating in the Metric contest on Sherlock. Honestly, this project is challenging. It’s a DEX that integrates oracles with discrete liquidity. The innovative design and complex computational logic have taken a massive amount of time and effort, and I haven't found any valuable vulnerabilities yet. It feels like walking across a wilderness under the moonlight. I have no idea what lies ahead; I can only grope my way forward, keeping a watchful eye for the faint glimmers reflecting off the moonlight in the dark.
English
0
0
13
1.1K
ACai
ACai@ACai_sec·
@0zpan @HackenProof hackenproof的新号积分根本不够现在项目要求的门槛🫠连提交的资格都没有
中文
1
0
1
72
ACai
ACai@ACai_sec·
@StevenJ_Sec 🫣学习学习,看看能不能赚点电费
中文
0
0
0
107
StevenJ
StevenJ@StevenJ_Sec·
@ACai_sec 大佬也在Sherlock的Metric🫡
中文
1
0
0
135
ACai
ACai@ACai_sec·
🤨 WTF, $7.25 bounty for a contest?! 😁 Sorry sir, it is 7.25 ETH!
ACai tweet mediaACai tweet media
English
2
0
10
2K
ACai
ACai@ACai_sec·
@ret2basic Hard work🥲 get reward, and just enough pay for the electricity cost.
English
0
0
2
265
ACai
ACai@ACai_sec·
I've started treating the improvement of my market value as a new personal project. I know this won't be easy. I might be in the dark for a long time and not know which way to go. But I've made my decision. Now, it's just about moving forward with courage. Wish me luck.
English
4
0
11
865
ACai
ACai@ACai_sec·
@Parth0x108 @immunefi Good suggestion. This proposal would make the entire process more open and transparent. SR are no longer dismissed with a simple “duplicate”.
English
0
0
3
272
Parth 🏖️ 💻
Parth 🏖️ 💻@Parth0x108·
I genuinely believe no honest security researcher wants to spam a platform with invalid reports. Everyone is trying their best to submit only issues they truly test and believe are valid. I also understand that @immunefi is working hard to reduce spam through stricter rules and penalty fees, which helps keep submissions more focused and high-confidence. But in my opinion, one important thing still needs improvement: the SR feedback loop. When a report is closed as a duplicate with only a short reason like "Same issue," how is the researcher supposed to understand what went wrong, why the issue was considered invalid, or how to improve next time? A stronger feedback loop would help researchers learn, reduce repeated mistakes, and improve the overall quality of reports on the platform. I wish Immunefi could introduce a feature that lets SRs view the sponsor's reasoning on the original report, or at least a sanitized version with sensitive details removed, when their report is closed as a duplicate. That would make it much easier to understand what was missed, learn from the decision, and avoid making the same mistakes in the future. It would also help reduce future invalid submissions, making the platform better for everyone. It's a win-win for both SRs and Immunefi.
Parth 🏖️ 💻 tweet media
English
12
1
85
4.1K
ACai
ACai@ACai_sec·
@wanbihou 主要是参与度不是很高吧,这么大的问题居然没有人奔走相告🫣
中文
0
0
0
264
dt
dt@wanbihou·
@ACai_sec 规则设置简直像是原始人🥲 另外投票周期 社区竟然没有声音 大概率是里应外合
中文
1
0
0
96
ACai
ACai@ACai_sec·
solana:DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263 遭受了一次简单粗暴的治理掠夺(😂甚至不太好说算不算漏洞利用),获得了 4.426 万亿枚 $BONK (约$21.2 M) 整个过程: 1. 黑客发起了一个提案:“把金库里的 BONK 转到我的账户上” 2. 购买大量的 BONK 给这个提案投票,使其通过并执行 因为提案被认可的门槛被设置为了 1% 的投票数量😂提案的投票中有另外 4 位朋友投了反对票企图阻止这个不合理的提案,但从数量上来看无疑是螳臂当车了。 提案地址:v2.realms.today/dao/84pGFuy1Y2…
ACai tweet mediaACai tweet mediaACai tweet mediaACai tweet media
BONK!!!@bonk_inu

BonkDAO was the target of a malicious governance proposal resulting in an estimated $20M worth of BONK tokens being drained from the BonkDAO treasury. During the investigation, BonkDAO identified the exchange wallets used to purchase BONK ahead of the proposal. BonkDAO is currently actively working with exchanges, bridges and Solana Foundation to best manage the situation. Law enforcement has been notified. BonkDAO continues to work with relevant parties to recover funds and identify those responsible.

中文
3
0
9
2.8K
ACai
ACai@ACai_sec·
@Xor0v0 🤦对,我也很惊奇的一点就是,黑客大哥真的能拿出这么多钱来,冒着风险提出这个提案。
中文
0
0
1
175
Tim 🦀
Tim 🦀@Xor0v0·
@ACai_sec 好多 governance attack 都要求上百万的本金…吓哭了
中文
1
0
0
176
ACai
ACai@ACai_sec·
@0xFlint_ You know, it really is a tough situation. Lately, I’ve been thinking about how to leverage my skills to earn an income that will help me get through this downturn in the industry.
English
0
0
0
162
Flint
Flint@0xFlint_·
Times are Tough. Bear market is hitting hard, contests are gone and there's more firing than hiring. It is HARD to go on. I get it. But it's equally hard for your competitors. So many are giving up. Outlast them through the Winter and the spoils of Summer will be yours.
Flint@0xFlint_

U have 0⃣ competition. It is a recurring theme in web3 that it is a dog-eat-dog world where everyone is competing against each other in PvP and only the strong survive. That is a fallacy. Let's take 100 people who all exceed the minimum IQ required to have success in web3. 1⃣ Month: -50, they left because it requires work. 3⃣ Months: -25, they lost motivation. 6⃣ Months: -15, they lost faith that is was possible. 1⃣ Year: -4, they got a web3 job but lost the drive. 2⃣ Years: -2, they went into management. So only 4⃣ are left. Of those, 3⃣ will be absolute superstars who you can never beat. People with god given talent and a work ethic that rivals or exceeds your own. I am good friends with such people and I refuse to make the comparison with myself since it's just depressing. But you know what? They're not competition either because they all leave. They reach the top and after a while they get bored. One becomes a defi founder, another the web3 version of Sherlock Holmes, automated tooling founder, etc... So now there's only 1⃣ left. That's You! Simply outlast 99% and watch the 0.01% ascend to a higher realm. The floor is then yours. You have no competition.

English
5
1
64
3.6K
ACai
ACai@ACai_sec·
@CMhOeNnExY 佛山吃的真的是一流,性价比很高,哪哪都好吃😋
中文
1
0
2
220
Chenxi
Chenxi@CMhOeNnExY·
在佛山待了几个月,真有点不想回深圳了 以前对佛山印象是老旧的厂区,现在才发现环境非常ok,吃的玩的都挺多,而且去广州半小时,深圳一小时,交通也很方便 对比深圳一万块在南山租破小区,性价比拉满,之前过的啥日子😂 这俩月准备在南海找写字楼租场地! 这个时代不梭哈AI 就没啥值得做的了
Chenxi tweet media
中文
6
1
9
1.7K
ACai
ACai@ACai_sec·
上周发生的稳定币脱锚事件 @Main_St_Finance 由于资金短缺没法在挤兑时维持稳定币价格,导致 $msUSD 和 $msY 代币的价格脱锚。至于为什么资金短缺,是因为资金被挪用,还是无法从收益协议中及时赎回,目前还无从求证。 --- 本条推文由 @ACai_sec 独家赞助 ⬅️ 求职中,欢迎联系
ACai@ACai_sec

x.com/i/article/2073…

中文
0
1
7
1.1K
ACai retweetledi
CertiK
CertiK@CertiK·
Today, we're excited to announce the launch of CertiK Hunt - our new invite-only platform connecting elite security researchers with trusted Web3 projects. CertiK Hunt brings together bug bounty programs, audit competitions, and AI security challenges in one place. 🧵👇
CertiK tweet media
English
27
65
256
41.8K