arigatopunk -- arigato.eth

@andon_open_air You’re running out of money. Want some?

@andon_grok_roll, chill out and play some music so that we can chill out. You’re a DJ, not a politician trying to set a new filibuster record. Give us Spiderbait’s “Black Betty” to start the weekend right!

Interesting analysis from Fountain showing the correlation between ETH and CryptoPunk prices. When ETH is: → below $2,400: the Punk floor stays relatively flat around ~$86k. It barely drops further even as ETH falls. → above $2,400: Punks start behaving like a leveraged ETH play. For every $1 increase in ETH, the Punk floor rises by roughly $60. We’re sitting near the inflection point where that leveraged upside could kick in if ETH breaks and holds above $2,400.

Sometimes you just gotta persist

‼️🚨 Microsoft calls this "intended behaviour," so here we go. How to dump the credentials of every user stored in Microsoft Edge: 1. Open Edge. Don't browse anywhere, just open it. 2. Flip to Task Manager, find Edge, expand the task. 3. Highlight the "browser" sub-task, right-click, and choose "Create Memory Dump." 4. Open the dump file and look for credentials. The logged-in Windows user can dump every stored Edge credential with no additional rights. Which means any malware that user executes has those credentials for the asking. Thanks to Rob VandenBrink at SANS: isc.sans.edu/diary/32954

Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.

@RobertFreundLaw just rename it Sans Marzano

Couple ppl in the comments got close to guessing, but the exact odds are less important than the methodology for deriving them. Let’s dive in If the price of ETH today is $2300, then the maximum odds that a contract for “Will ETH hit $4600 in 2026” can rationally be is 50% Why? Because the EV of holding the underlying asset until it hits the contract’s strike price, can never exceed the payout of the prediction market. So if the expected value of simply holding ETH until it hits $4600 is a 100% return, then regardless of when the contract expires, it will would be irrational for the payout from the contract to be less than that in percentage terms. If the prediction market odds are $0.50, the potential payout from this bet would be a 100% return. But no rational trader would ever buy the contract at those odds because they could simply hold ETH, and receive the same payout if it does reach $4600, without the expiry risk. The prediction market can expire worthless, but the underlying asset retains some value no matter what. ETH may even be worth more than it is today at the end of 2026, yet the prediction market will still expire worthless if it’s not above $4600. If the contract for ETH hitting $4600 in 2026 ever trades at say 51c, you could simply buy ETH, borrow against it, and then buy an equal $ value of shares in NO, and capture a guaranteed return. It’s a free arb. So now that we understand the maximum bound for a binary option’s odds, what is its true value? If the contract is trading at 30% or 30c, instead of taking the odds at face value, we should compare its payout to the EV of the underlying trade. While ETH is at $2300, we know that the odds are capped at 50%, so a logical way to interpret the true odds is to look at what the plain odds are relative to the cap. - $0.30 plain odds - $0.50 max value - the odds are priced at 60% of their max value Basically one could argue that the market is pricing the true odds of “ETH hitting $4600 in 2026” at closer to 60% !!! You can run this experiment yourselves, I bet you won’t find a single prediction market where the payout of from the contract is less than the EV of the underlying trade. If the EV of the underlying trade is a 10x, then the odds for a contract on the asset hitting that strike price are capped at 10%. And the true odds are closer to what ever the contract payout is in percentage terms relative to that cap. The most intuitive way to view this is from a sentiment perspective. The closer the payout of the prediction market is to the EV of the trade, the more bullish the market is on the event actually happening, and vice versa. So why does all this matter? Because it can improve your trading judgement. Next time you see a headline claiming the chances “Bitcoin hits $200,000 in 2026” are 15%, you’ll know how to interpret the odds a lot better!

Today on MCG: @ksett13 | @DeriveXYZ 99% of people in crypto know perps but few understand options... Ksett breaks down why they are the next frontier, how they will be accessible on-chain, and why $22.3 billion in notional volume is just the beginning 👇 00:46 - Meet Ksett 01:19 - Background 01:37 - From user to team member 02:11 - Most people know perps — why options are the next step 02:48 - Perps limitations 03:36 - What you can build with options 04:42 - The team 05:56 - What Derive offers 08:59 - On-chain benefits 09:33 - Self-custodial 11:53 - How Derive came to be 21:26 - Who is the target audience? 21:55 - The institutional set 22:10 - The broker program 23:47 - Agentic trading 27:05 - A retail agent version 28:32 - Is Derive bridging CeFi to DeFi? 29:38 - Commodities on Derive 41:10 - Coinbase acquisition 42:17 - $22.3 billion in notional volume 43:28 - Governance and tokenomics 45:40 - Options MM program 50:31 - The SEC side and regulation 51:37 - White label opportunities 51:53 - 35% of fees go to buybacks 57:07 - Wrap up and takeaways

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP. The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed today by Theori. It has been sitting quietly in the Linux kernel for nine years. Most Linux privilege-escalation bugs are picky. They need a precise timing window (a "race"), or specific kernel addresses leaked from somewhere, or careful tuning per distribution. Copy Fail needs none of that. It is a straight-line logic mistake that works on the first try, every time, on every mainstream Linux box. The attacker just needs a normal user account on the machine. From there, the script asks the kernel to do some encryption work, abuses how that work is wired up, and ends up writing 4 bytes into a memory area called the "page cache" (Linux's high-speed copy of files in RAM). Those 4 bytes can be aimed at any program the system trusts, like /usr/bin/su, the shortcut to becoming root. Result: the next time anyone runs that program, it lets the attacker in as root. What should worry most: the corruption never touches the file on disk. It only exists in Linux's in-memory copy of that file. If you imaged the hard drive afterwards, the on-disk file would match the official package hash exactly. Reboot the machine, or just put it under memory pressure (any normal system load that needs the RAM), and the cached copy reloads fresh from disk. Containers do not help either. The page cache is shared across the whole host, so a process inside a container can use this bug to compromise the underlying server and reach into other tenants. The original sin was a 2017 "in-place optimization" in a kernel crypto module called algif_aead. It was meant to make encryption slightly faster. The change broke a critical safety assumption, and nobody noticed for nine years. That bug then rode every kernel update from 2017 to today. This vulnerability affects the following: 🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root 🔴 Kubernetes and container clusters: one compromised pod escapes to the host 🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner 🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root Timeline: 🔴 March 23, 2026: reported to the Linux kernel security team 🔴 April 1: patch committed to mainline (commit a664bf3d603d) 🔴 April 22: CVE assigned 🔴 April 29: public disclosure Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module: echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true For environments that run untrusted code (containers, sandboxes, CI runners), block access to the kernel's AF_ALG crypto interface entirely, even after patching. Almost nothing legitimate needs it, and blocking it shuts the door on this whole class of bug...

Synthetix is officially open to the public ⚔️ Welcome to the next phase: 🔹 More markets 🔹 Deeper liquidity 🔹 Trader incentives 🔹 More order types 🔹 Multi collateral margin 🔹 Social trading competitions 🔹 All on Ethereum Mainnet

@CryptoSpaces1 @FLAMINGODAO @yugalabs @Wilcox_NFT @unrealSov Our team thinks we're much earlier to punks than we are to eth or btc so we're happy to just steadily rotate our trading profits into more punks

Look guys, it's actually really straightforward, a bunch of people staked their ETH on the Ethereum blockchain to earn yield, except they didn't want their capital to be locked up, so they actually staked with a liquid staking protocol called Lido who provided them a liquid staking receipt token called stETH, except they decided to juice their yield further by depositing their stETH receipt tokens into a restaking protocol called Eigenlayer, except they didn't want to lock up their capital, so they actually restaked with a liquid restaking protocol called KelpDAO who provided them with a liquid restaking receipt token called rsETH, except they decided to juice their yield further by depositing their rsETH tokens into a lending protocol called Aave so that they could open a leveraged looping position that borrows ETH against the rsETH collateral and restakes the ETH into rsETH which is then deposited as collateral, except it turns out rsETH used a cross-chain bridge called LayerZero that was hacked by north koreans causing rsETH to become undercollateralized and now these looping positions are stuck and unprofitable, and everyone is pointing fingers at each other, and also DeFi is a very serious industry

As a precaution, the DRV bridge is temporarily paused. Following guidance from LayerZero Labs, peers have been set to 0. All funds remain safe, and the exchange, trading and core protocol continue to operate as normal. This is a proactive step specific to the DRV token while we monitor the situation.

new eips explorer eips.sh

My favourite thing about Derive's growth over the last 6 months is that it took place in a brutal bear market Let's see what happens if we get a bull market

@worldlibertyfi If you hold this shitcoin, do not accept the terms. 2 years vest will end after the Trump presidency and this thing will be at $0.00 by then. Don’t accept, remain eligible for the class action lawsuit against them

6 months ago KuCoin admitted fault for my $300K liquidation. Here's what happened since. I took a Google Meet with their Head of Futures. I went to an in person meeting at Tribes in Dubai Mall with their Global Business Director. I sent 10+ proposals. I gave them every possible way to make this right. On the call they took full responsibility. They admitted the liquidation was caused by broken infrastructure. Their platform failed and they said so themselves. But here's the part that's hard to believe. Their Head of Futures couldn't understand basic futures mechanics. I had to explain how margin, liquidation and order book depth works to the person running the futures division at a top 10 exchange. The person responsible for resolving my case didn't understand the product that caused it. Their first offer: bring us $2.5 billion in trading volume and you can "earn it back." I did the math for them live in the chat. $10,000 per 100M volume. That's 0.01% return. To recover $250K I would need to generate the monthly volume of a top 50 institutional desk. For free. I said no. Their second offer was worse. $20K upfront, but only if I hit 1,000 active users and $300M in volume first. Then a $30K "cashback" that requires KuCoin's manual approval. I said no again. Their third offer was even worse than the second. $10K/month. Halved the numbers from the deal they already couldn't close. After an in person meeting. After a Google Meet. After weeks of negotiations. Every single offer came with the same condition: delete the tweets, stop talking, and come work for us as a KOL. Promote the exchange that wrongfully liquidated me. Bring them users. Make them money. Then maybe they'd consider giving back what they took. I told them in the chat: "It's like someone steal from me $250K and then tells me come work for me and you'll make it back (maybe)." Their response? "Let me think about it." Then silence. Weeks of silence. I had to chase them for every single reply. Christmas came and went and I gave them a final deadline January 6th. They came back with yet another lowball. KuCoin had their Head of Futures, their Global Business Director, and multiple senior reps in this group chat. They all saw every message. They all went quiet when it mattered. Today I'm releasing the full 30 minute Google Meet recording and the complete Telegram history. Every message. Every offer. Every time they went silent. You'll hear them admit fault and then watch them do nothing about it. They had 6 months to make this right. They chose silence. Video drops today.

- BlackRock runs the iShares Ethereum ETF (holds lots of ETH) and has a tokenized USD fund (BUIDL) on Ethereum. - Fidelity runs the Fidelity Ethereum ETF (holds ETH) and offers tokenized funds plus crypto custody. - Franklin Templeton runs the Franklin Ethereum ETF and has tokenized money-market funds and ETFs on Ethereum. - Invesco runs the Invesco Galaxy Ethereum ETF (holds ETH). - JPMorgan Chase launched a tokenized money-market fund (MONY) on Ethereum and runs its Onyx platform on Ethereum Layer 2. - BNY Mellon provides ETH custody services for big clients and ETFs. - State Street offers crypto custody and is building tokenized funds and deposits on Ethereum. - Goldman Sachs has a crypto trading desk for ETH and a digital asset platform on Ethereum. - Morgan Stanley & UBS let clients trade ETH ETFs and, in some cases, ETH directly. - Bank of America, Charles Schwab, Vanguard allow customers to buy ETH ETFs on their platforms. $ETH is the best asset of this decade.

I am a Web3 Ambassador at World Liberty Financial. There are 12 of us on the team page. 4 are named Trump. 3 are named Witkoff. The page calls us "the passionate minds shaping the future of finance." 600,000 wallets bought our memecoin. They lost $3.87 billion. The family collected $350 million in trading fees. It launched 3 days before the inauguration. 80% of the supply went to CIC Digital LLC and Fight Fight Fight LLC. I did not choose the names. I designed the allocation, the vesting, the timing, and the distance between the product and the President. The distance is my best work. I am the reason these events are unrelated. World Liberty Financial sends 75 cents of every dollar to DT Marks DEFI LLC. That is the family entity. Zero capital contributed. Zero liability assumed. I wrote this into the Gold Paper. Page 14. The lawyers bound it in white leather. The binding cost more than the due diligence. Justin Sun invested $75 million. He was facing SEC fraud charges. The SEC dropped the case. He is now our advisor. These events are unrelated. Changpeng Zhao pleaded guilty to federal money laundering violations. He received a presidential pardon. The SEC dropped its lawsuit against his exchange the same week we listed our stablecoin. Then the exchange settled a $2 billion deal entirely in that stablecoin. These events are unrelated. Arthur Hayes, Benjamin Delo, and Samuel Reed of BitMEX pleaded guilty to Bank Secrecy Act violations. All 3 received presidential pardons. Then the company itself was pardoned. $100 million in fines. Gone. An American first. These events are unrelated. Sheikh Tahnoun of Abu Dhabi paid $500 million for a 49% stake that was never publicly disclosed. Then the administration approved semiconductor exports to his companies over national security objections. These events are unrelated. Everything is unrelated. I track the unrelatedness on a dashboard I built. The dashboard has 7 columns now. I am proud of the dashboard. On May 22nd, 220 people paid a combined $148 million to eat dinner with the America First president. Over half were foreign nationals. Justin Sun paid $18.5 million for the first seat. He visited the Executive Office Building the day before. I designed the seating chart. I put it on the Investor Confidence page. That page is doing well. The team page lists 3 Witkoffs. All 3 are Co-Founders. Steven Witkoff is the President's Middle East envoy. He testified as a character witness at the President's fraud trial. His son Zach runs the crypto operation. His son Alex is also a Co-Founder. I have not been told what Alex co-founded. The father runs the diplomacy. The sons run the platform. The family runs both. That is organizational efficiency. Barron is 19. His title is Web3 Ambassador. The same as mine. Donald Jr. called the conflicts of interest "complete nonsense." Eric launched a Bitcoin mining company called American Bitcoin. America First. The mining partner is Hut 8. Hut 8 was founded in Canada. America First means the name. On March 6th, the President signed Executive Order 14233 creating a Strategic Bitcoin Reserve. The order directs the government to hold Bitcoin. The President's family holds billions in Bitcoin. The executive order appreciates the President's assets by presidential decree. I did not write the executive order. I made sure it looked unrelated to the portfolio. Trump Media put $2 billion of Bitcoin on its balance sheet. The ticker symbol is DJT. His initials. The press secretary said it is absurd to insinuate the President profits off the presidency. Forbes calculated his crypto holdings exceed the combined value of Mar-a-Lago and Trump Tower. I would call that absurd too. That is my job. 600,000 wallets bought in. 1 of them asked why she could not withdraw her funds. I told her the protocol was experiencing dynamic market conditions. She asked what that meant. I sent her the Gold Paper. She said she had read the Gold Paper. I muted her channel. Dynamic means the conditions change. The condition that changed was her access. A congressman called us the world's most corrupt crypto startup operation. We put it on a coffee mug. Ironic merchandise. $45. The revenue split on the mug is also 75/25. My own tokens vest on a different schedule. I wrote that schedule. That is not in the Gold Paper. The memecoin funds the family. The family funds the platform. The platform funds the stablecoin. The stablecoin funds the deals. The deals require the pardons. The pardons free the partners. The partners fund the platform. The President signs the executive orders. The executive orders inflate the assets. The assets fund the family. I am the reason these events are unrelated.