Forex Cadet

432 posts

Forex Cadet

Forex Cadet

@ForexCadet

Learning the world of forex trading through sharing and analysing trades. Author of https://t.co/LJze4OlhX3, and the XRPL TipBot xApp

Katılım Mart 2015
748 Takip Edilen3K Takipçiler
Forex Cadet retweetledi
🔥Kris Dangerfield
🔥Kris Dangerfield@krisdangerfield·
Days like this really highlight the need for the firewall amendment on the XRPL. It’s true that we don’t have all the facts right now but from the early info released it does seem like this is not a private key compromise and instead some form of man in the middle attack that has spoofed transaction details leading the signers to believe they were signing something genuine. So I was asked on a space just now, if this were to have happened on the XRPL what would have happened and if XRPL firewall would have prevented it… It’s an interesting thought process and I wanted to share my opinion based on the facts we currently know. 1. From what I was told by @ShortTheFOMO bybit don’t even have multisig enabled on their hot wallets, which if true is actually the most worrying thing that I’ve learned today. 2. This does not look like a protocol hack so neither ETH, nor XRPL in that context would be to blame. The security of the blockchain is not in question. 3. Multisig may be different on ETH to XRPL but fundamentally the principles are broadly the same. The hack was not of the blockchain but more likely internal software or network infrastructure, that enables the attackers to mis-represent the true nature of the transaction. If this hack had happened on the XRPL the result would have been the same, there is nothing about XRPL multisig that’s significantly different to ETH that would have led to a different outcome. 4. I was asked if Firewall would have prevented this… the answer is of course nuanced. It would have prevented this type of attack as at a technical level this was actually a legit transaction, it should be more accurately framed as a fraud. As to why multisig failed where firewall would have succeeded, well this specific attack highlights the weakness in multisig and shows an area where firewall shines. An exchange wallet with a billion dollars of value protected by multisig relies on multiple parties confirming the legitimacy of the transaction, but if those users believe it to be genuine due to a spoofing of some user interface, well technically the blockchain has no reason to question it. With firewall enabled on a cold wallet and a whitelist of a dozen hot wallets, regardless of how many people sign, moving value to a non whitelisted account would result in failure and subsequently prevention of the loss. So what’s the takeaways? Firewall… whilst designed for retail just found a new billion dollar use-case. And the future is not either OR, it’s both, providing an enhanced level of security to multisig, at the protocol level. Find out more at xrplfirewall.com and support the campaign to bring this innovative new security feature to the XRPL. Please retweet as a sign of your support for the XRPL Firewall project. Caveat: This view is based on the information known at the time of writing and maybe subject to change if the facts materially change over the course of the next few days.
Bybit@Bybit_Official

Bybit detected unauthorized activity involving one of our ETH cold wallets. The incident occurred when our ETH multisig cold wallet executed a transfer to our warm wallet. Unfortunately, this transaction was manipulated through a sophisticated attack that masked the signing interface, displaying the correct address while altering the underlying smart contract logic. As a result, the attacker was able to gain control of the affected ETH cold wallet and transfer its holdings to an unidentified address. Our security team, alongside leading blockchain forensic experts and partners, is actively investigating the incident. Any teams with expertise in blockchain analytics and fund recovery who can assist in tracing these assets are welcome to collaborate with us. We want to assure our users and partners that all other Bybit cold wallets remain fully secure. All client funds are safe, and our operations continue as usual without any disruption. Transparency and security remain our top priorities, and we will provide updates asap

English
5
33
80
7.3K
Forex Cadet retweetledi
T-Bone
T-Bone@tbonetrading·
#itsimpossible Early Christmas access is limited to 100 people all for FREE. Get the indicator, discord, and basic 100% mechanical strategy. To enter repost/share this tweet, follow me @tonybonney82 and @zoofxing Monday open. 👊 Let’s do this
T-Bone tweet media
English
70
159
168
19.7K
Forex Cadet
Forex Cadet@ForexCadet·
@Visitor_Eleven Should be but it’s severely impacted by Twitter’s new policies/charges. Give it a try and see.
English
0
0
1
50
Shen
Shen@shenxcrypto·
What's the best XRPL API for fetching token prices? Was using @xrplmeta, however we've been having issues with updated/correct information over the last 24 hours
English
3
0
8
882
Shen
Shen@shenxcrypto·
@ShortTheFOMO @TheShillverse @xrplmeta Ahh amazing thanks, yeah for @zerpmonxrp we dynamically price certain in-game items based on XRPL token prices, so this is great!! Really appreciate it 💚 @xrplmeta has worked perfectly for us in the past, however recently not so much... ?
English
2
0
2
126
Daniel "CEO of the XRPL" Keller
Finally, I figured it out and made the video version of "What is the XRPL Cluster, and how does it work in layman's terms?" Attached to this tweet. Feedback welcome :) x.com/daniel_wwf/sta…
Daniel "CEO of the XRPL" Keller@daniel_wwf

What is the XRPL Cluster, and how does it work in layman's terms? When we talk about the XRPL, many think about validators as the main backbone of the network that keeps everything working. However, the picture is way more complex than most people would imagine. With the recent announcement of the overhaul of the cluster, I want to shed some light on what the XRPL Cluster is, how it works, and why it plays such a crucial role for the XRPL. Whenever you open @XummWallet, use a service, deposit or withdraw XRP or @CasinoCoin from rnr.poker, an exchange or marketplace, there is a high chance that your requests or submissions are sent to the cluster. The cluster offers a single access point via a WebSocket connection to interact with the XRP Ledger. The cluster is a popular alternative to running your own infrastructure, allowing you to get data in and out of the ledger. While it is highly recommended to use your own infrastructure, it is only viable for some to do so. How does it work? The cluster is a sophisticated guide for navigating information requests and submissions through a vast, globally dispersed network of servers, ensuring your data takes the most efficient and available path possible. It also ensures that requests are evenly spread throughout the network of nodes, ensuring maximum efficiency. The potential failure of single nodes is mitigated because multiple nodes are available for specific requests. When a user initiates a query or a data submission, their request first travels through Cloudflare, a prominent web infrastructure and website security company. Here, rather than employing standard load balancing via Cloudflare – a technique for distributing workloads uniformly across servers to prevent any single server from becoming a bottleneck – , it utilises the geographical proximity of the user, directing the request to the nearest edge server from among seven potential edge nodes. Once a request reaches the closest edge node, it encounters NGINX – a highly efficient HTTP server and proxy. Subsequently, the query dives into a specialised custom-coded middleware developed by @XRPLLabs. The middleware embeds a routing logic, an intelligent set of rules and pathways specifically engineered for routing traffic. It ensures that the data is routed astutely based on the query type and the available nodes within the network. The middleware discerns the nature and requirement of the query, leading it through the most logical and available path to the relevant "rippled" node – specialised servers that manage and sustain the XRP Ledger. The network, thus, adapts dynamically, directing different query types and data submissions to various node types, such as Full History (FH) nodes or others, based on current availability and specific requirements. For instance, different node types will handle pathfinding and ledger submission tasks to optimise network performance and reliability. Intriguingly, the system also incorporates intricate layers of security and traffic management to navigate through myriad challenges, such as distributed denial-of-service (DDoS) attacks, spam, and other forms of network abuse, substantially elevating the complexity of its operation. What about security and availability? Between Cloudflare and the backend proxies, primarily through NGINX, several logging and detection layers are seamlessly integrated, diligently monitoring, logging, and analysing the traffic that transits through the network. These layers are perpetually in dialogue with Cloudflare and the edge nodes, making informed, real-time decisions regarding the traffic. By employing advanced algorithms and heuristics, they discern legitimate user traffic from potentially malicious activities, determining whether specific traffic should be allowed, throttled, or outright blocked. This vigilant approach ensures that all nodes remain available and optimally functioning, preserving the integrity and fluidity of user transactions and interactions within the network. Consequently, this enhances the overall stability and reliability of the system amidst the chaotic ocean of digital disturbances constantly bombarding the infrastructure. How much is the cluster being used? To give you an idea of the amount of data the cluster is handling, here are some stats from September: 2.95mln unique IPs requested or submitted data, which amounted to a total of 286.27mln requests translating into over 20 Terrabytes of data being served. The top five geo locations for requests are (requests per seven days): - USA 🇺🇸 ~16mln requests - Germany 🇩🇪~12mln requests - The Netherlands 🇳🇱 ~6mln requests - Belgium 🇧🇪 ~5mln requests - Japan 🇯🇵 ~4mln requests Based on these figures, the cluster dealt with ~110 requests/submissions per second during that time frame. Conclusion Now that you understand what the XRPL Cluster is, how it operates, and how much workload it is handling, you might understand why it became a core component of the XRP Ledger. Remember that dozens of people outside of @Ripple and @RippleXDev commit their time 24 hours a day, seven days a week, to ensure you will never notice even the slightest hiccup when interacting with the ledger. Even if you notice some minor issues occasionally, be assured that these people will do whatever needs to be done to find a solution.

English
29
96
233
29.9K
Forex Cadet
Forex Cadet@ForexCadet·
@JoelCarpenter_ My backtest results for EUR/USD 2022 #Phantom_Judas: Overall +16% profit. This is the record from my (your!) Google sheet recording the trade results straight (+2, -1, partial targets at close out etc). I'll tidy up my sheet and release soon.
Forex Cadet tweet mediaForex Cadet tweet media
English
0
0
2
202
Joel Carpenter
Joel Carpenter@JoelCarpenter_·
@ForexCadet Nice work. Thank you. 🙏 would be good to see side by side on EU performance alone. But also know that when picking one pair per session the overall should improve.
English
1
0
0
293
Joel Carpenter
Joel Carpenter@JoelCarpenter_·
Has anyone got a complete 2022 Phantom backtest with screenshots? I’ve heard people quote results but never actually been able to ratify any 2022 results.
Ragul kanth@ragulkanthforu

@JoelCarpenter_ Ok bro I just wanna make sure the past data stays positive. Do you know anyone who backtested that model extensively ?

English
6
0
10
4.2K
Matt
Matt@mxttsco·
Weird - @UpholdInc @AskUphold I understand the source of funds request, but the rest isn't even related to my Uphold account. They had to have looked at my personal XRPL account and are asking why I'm using a certain service/website? Yeah, that's none of your business...
Matt tweet media
English
22
7
64
25.1K
Forex Cadet
Forex Cadet@ForexCadet·
@fudemcrypto @XJohansonnn @mairel2428 @XummWallet Unfortunately, Twitter's search algorithms filter tweets such that not everyone's tweets appear to searchers, including the TipBot. It may be that your tweets are not showing in general search results, through no fault of your own, which means the TipBot cannot "see" you.
English
1
0
3
907
Forex Cadet
Forex Cadet@ForexCadet·
@JamesRayXRP Twitter rate limits hit, needs a pause. Will be back in 15 mins. Still ongoing issues with Twitter I'm afraid. Thanks for your patience. twitter.com/ForexCadet/sta…
Forex Cadet@ForexCadet

It is evident that changes in Twitter policy have made things quite difficult to capture tweets for the #TipBot use-case (without massive excessive cost). In the meantime, I continue to investigate options to ensure we can get back to as close-as-possible to previous service! 3/3

English
1
0
2
123
Forex Cadet
Forex Cadet@ForexCadet·
IT'S BACK: The #TipBot for #XRPL is now back in service (but somewhat 'wounded' by the Twitter policy changes). Tips can now be sent and received as before, although it might take a few extra seconds to detect your tweets. Start at tipbot.tips if you are new.
Forex Cadet tweet media
English
36
152
324
86.9K
Forex Cadet
Forex Cadet@ForexCadet·
It is evident that changes in Twitter policy have made things quite difficult to capture tweets for the #TipBot use-case (without massive excessive cost). In the meantime, I continue to investigate options to ensure we can get back to as close-as-possible to previous service! 3/3
English
3
0
5
691
Forex Cadet
Forex Cadet@ForexCadet·
... For best results, I would recommend your Twitter account is properly activated (email validated) and is in use engaging with others productively - this makes your tweets more likely to appear in search results... 2/3
English
1
0
4
700
Forex Cadet
Forex Cadet@ForexCadet·
TIPBOT: It seems that valid tip tweets by *some* Twitter users are not being detected by the #TipBot, because these users' tweets are no longer appearing in Twitter Search. I'm investigating why but this (help.twitter.com/en/using-twitt…) might help if you are having trouble tipping. 1/3
English
5
6
18
1.8K
Forex Cadet
Forex Cadet@ForexCadet·
@ayang2294 ... you need to open TipBot xApp, then More Options button, then Logout. Then re-register again by launching TipBot xApp and choosing to register again, that will reset the push notification authorisation to allow TipBot to send you pushes to your device.
English
1
0
2
38
Forex Cadet
Forex Cadet@ForexCadet·
@ayang2294 I can see your tip tweet was processed and a push notification sent to your registered device. It may be that your XUMM authorisation for the tipbot to send you push notifications has expired -check the Events tab of your XUMM tipping acct, and if nothing is there then ... 1/2
English
1
0
1
52
Forex Cadet
Forex Cadet@ForexCadet·
@ayang2294 No, you just send a tip tweet in the normal way if you are registered already.
English
1
0
0
25
Forex Cadet
Forex Cadet@ForexCadet·
@ayang2294 Apologies - I forgot to remove some debug code that restricted who could send in testing. All fixed now and your (future) tips will work.
English
1
0
1
43