cl0w

Security is not something you achieve - it’s something you continuously defend In an adversarial system, survival belongs to those who assume failure, constrain it, and outlast it

Lessons…….not quite learned

@hydration_net @THORChain could learn from this.

Basejump is live on @hydration_net Bridge EURC from Base to Hydration in 22s ⚡️ Instant bridging experience that eliminates user friction Up to 10k EURC at a time Try it: app.hydration.net/cross-chain?sr…

Healthy rates on @hydration_net which might help you these days: - you can borrow ETH for less than 1% - USDT for 6%+ - USDC for less than 5.5% - even SOL for 3.8% which is way bellow SOL staking rate

@hydration_net implemented rate limits for sus high deposits last year and for sus high withdrawals this year, having all these exploits in mind and trying to do our best to mitigate them. Doesn’t matter if they happen outside or inside of Hydration if they can cause losses for our users. Whole industry should implement such mechanisms ASAP

Hyperbridge wasn’t used by us and fake 1B of DOT printed out of thin air stayed mostly on Ethereum side and didnt get to us. Polkadot wouldn’t allowed to use them anyway as it’s tracking their “reserve” on every parachain which was obviously tiny fraction of what was minted. There was obviously some lucky & happy arbitrageur but overall no exposure here. When I woke up and saw what happened I immediately asked @_snowbridge team if they are validating BEEFY proofs via similar or different implementation, then we checked some other dependancies. @cl0w5 offered some support w tracking & forensics and we just wish maximum of funds will be recovered.

The Hydration Technical Committee has voted to enable the global withdraw limiter Withdrawals will be temporarily paused if the total liquidity net outflows exceed 2B HDX worth within 6h Security on-chain, by design

gm stay hydrated, not liquidated

Vibe coding front ends is cute, but having own agent for double, tripple checking code is a must. Ofc its just additional layer of security not a silver bullet.

Hydration is at the forefront of web3 security We just launched our security_audit AI skill Inspired by the skills of @pashov, specifically tailored to audit Rust, Substrate, and DeFi With references to 200+ ecosystem audit findings by @dotpal_ github.com/galacticcounci…

USR-style vulnerabilities are fundamentally constrained on Hydration * No single key-controlled unlimited mint * Deposit & withdrawal rate limiters * Mint caps per reserve * Controlled buyback rates Even in worst-case scenarios, impact is bounded — by design

Two weeks into the Grey/JAR project, an uncomfortable truth gradually becomes clear: JAM is already outdated before its launch. * Slow PVM design, architecturally wrong for hostcall performance. (ref. Grey/JAVM benchmarks) * Inflexible and currently broken Safrole consensus. (ref. graypaper#516) * Old DA design. (ref. jar#17) In the JAR project, we want to address all of the issues discovered. The entire project is open source from the start -- for the benefits of the blockchain community!

Hydration just got a major UX upgrade 💧 A faster, smoother app with a fully redesigned interface Now with dark mode and light mode Cleaner flows, easier navigation, less friction

2 massive features which were stucked on our roadmaps and boards for more than 2 years were demonstrated working in the same afternoon yesterday. Heck, order matching (later coined fancy as intents) originated as idea by us 🙃 will have even 6 years when it came as an idea in 2020 😐 And last missing piece from roadmap proposed in 2023 and supported by majority of HDX holders while Parity & W3F leadership just decided to let us die as we were running out of VC funding. Other improvement of life will be our new massively accelerated bridging as protocol can provide small immediate sharia compliant short term loans for users bridging to us slashing arrival time from 15-30 minutes to 1-2 minutes. Bridging to Hydration shouldn’t feel like going 2-3 years to Dagestan. But up to certain amount. Honestly, last 6 months I was feeling quite terribly about speed and quality of our development which was still pretty good relatively to other projects in crypto but thats low bar and reason why crypto has still such low adoption despite plowing tens of billions $ to crypto infra circle jerk perfectly described by Matti as Dev2Dev industry of couple thousands folks flying around the world sponsored by dumping tokens which they printed out of thin air but you paid for them with hard cash. So thx to Mr. Claude and high agency & ownership people within Hydration team we are improving velocity of our development to bring you better features which can serve your needs, faster. The revenge of idea guys like me and @lolmcshizz is starting to be sweet sweet 😼🫵

Angry message from Parity: "congratulations on beating my unoptimized interpreter and my unoptimized hostcall dispatch mechanism". Do they realize that their "unoptimized interpreter" is what is currently in production in Polkadot Hub?

Announcing Grey 0.1: LLM tries to build a JAM node implementation. forum.polkadot.network/t/announcing-g…

The timeline cleanse you’ve been waiting for: Bridging from Polkadot Hub to Base, Arbitrum, and Optimism and back is now live on Snowbridge! 🚀 L2 support has been one of the most requested features, and we’re excited to ship it. Note: We’re in beta for one month with a $100 transfer cap. After that, the cap will be lifted.

Drop it like it's 🔥 HOLLAR borrowing APR has just been reduced to 4.50% Provide higher yielding assets -> borrow HOLLAR -> buy higher yielding assets -> repeat & chill