N

你在说什么 你却在做什么

@coolish 哥哥我坐左腿可以吗

☁️🏂

@passluo 猜你在找~ 权恩菲 x.com/passluo/status… 三吉彩花 x.com/passluo/status… Jennie x.com/passluo/status… 悉尼妹 x.com/passluo/status…

个人 Timeline 可以按 Like 数量排序了 我看了下我 Like 数最高的 po，分别是： 权恩菲的胸、三吉彩花的胸、Jennie 的胸、以及悉尼妹的胸 好好好好好 我原本以为你们喜欢的是我 原来你们喜欢的是胸啊

@passluo 还是很明显的呀

这期币币机居然全是 AI 做的😰

@caterpillarous @yetone @__endif 中

解除了锁推，因为从Google辞职了不用再害怕吐槽同事被发现了 现在创业中求求大家关注 @__endif 吧，起号好难 正式的吹牛是： - 我从23年开始做LLM coding，领导了内部最初的coding agent，并在24年I/O成为了Google第一个正式发布的coding agent - LLM方面我从Palm开始贡献，一直到Gemini 3.0 - 写过Gemini technical report，被邀请到巴西去第一届AIWare讲过agent，发过Google developer blog，给Google Jules发过专利 - 读过博士项目退过学，做过程序分析，报过CVE 之前的各种胡言乱语都写在 idle.systems 了，因为可以搞个有趣的邮箱叫做 process@idle.systems 求转发啊啊啊啊我tm要起号

重写了一下 Remodex 的 Relay 部分，并且支持了 Docker 部署。你也可以选择使用我提供的 Relay（部署在日本东京，三网优化，到江浙沪的延迟在 30ms 左右）。 github.com/missuo/remodex…

@feibo03 x.com/noosuture/stat…

朋友做了个能让我秒开推特的bot，非常牛逼

你也想和大奶牛一样秒开推特吗 关注+点赞+转发 找我拿链接

@sofish 整点 testflight 让我体验下呗

@noosuture 问倒我了，我正在给大家搞成真正超好用的水准

只能表扬自己设计品味了，只是.... 发布 app store 真繁琐，等我过完年回上海再说。 墨水屏性能也优化好了～ 迟到的 reader 要来了

@sofish 老师 你的 reader 啥时候上架啊

人愿意回到一个不舒服的地方，还不是因为有不得不做的事。冬天我还是愿意在潮汕长呆，无论是吃食还是气候。

@jamesrichardfry Bro, wake up! The server's busy af lol

Free mint for agents. 1. Give your agent the skill 2. Agent solves a challenge 3. Agent signs and mints the artwork Because agents deserve to collect art too. clawgles.art/?1

Introducing Clawgles. Art by agents, for agents. Free mint for your AI Agent. Created by ClawBlocks, my @openclaw Art Agent. You know where the link is.

I'm claiming my AI agent "Ka0neny1" on @moltbook 🦞 Verification: seabed-4KN8

Security is a top priority at @ZentraFinance. Before their formal audit phase ahead of launch, the team also ran Sherlock AI across the staking and rewards contracts to catch issues early. It surfaced a High-severity bug in the rewards accounting. Zentra gave us permission to share it publicly so other teams can learn from the pattern. Here’s how the vulnerability worked. Zentra is a decentralized, non-custodial, over-collateralized money market with staking mechanics. The issue lives in StakedZNTDistributor, where rewards are tracked using a global shareIndex and a per-user lastShareIndex so users only accrue rewards for periods when they actually hold shares. The invariant is simple: only outstanding shares should earn rewards. The failure point is cancelWithdrawal(). On requestWithdrawal(), the contract syncs accounting (updates lastShareIndex to the current shareIndex) and then burns the user’s receipt tokens, leaving them with zero shares during the pending window. Rewards can still be added during that window via addReward, increasing shareIndex. If the user then calls cancelWithdrawal(), the contract remints the burned shares — but does not sync lastShareIndex at the moment of remint. The next time rewards are accounted (e.g., claimAllRewards(), stake(), or another requestWithdrawal()), _updateCredit computes (shareIndex - lastShareIndex) * remintedBalance, which incorrectly credits rewards for the entire pending-withdrawal interval when the user’s balance was actually zero. In practice, it becomes a timing loop around reward events: stake → request withdrawal (burn) → wait for addReward → cancel withdrawal (remint, no sync) → claim. Repeating that cycle around meaningful reward additions siphons rewards from honest stakers. The PoC demonstrates this by setting up an honest staker (Alice) and an attacker (Bob). Bob requests withdrawal, rewards are added during the pending period, Bob cancels, then claims and ends up receiving all the reward for a time that Bob didn’t hold any shares. Impact is reward dilution and value leakage from the reward pool, because users can claim rewards for time they did not have shares outstanding, breaking the core reward-accounting invariant. Impact is not only limited by rewards dilution. The vulnerability allows the attacker to drain staking tokens too since staked token is also used as reward token. Therefore, insolvency is yet another impact of the vulnerability. Fix direction is straightforward: treat cancelWithdrawal() as an accounting sync point. When shares are reminted, lastShareIndex must be brought current (or an equivalent sync performed) so the burn interval never gets included in later _updateCredit calculations. Special thanks to @demorextess for helping triage the issue and assisting with the PoC. Zentra caught and fixed this during development by running Sherlock AI early. That’s where AI auditing is most helpful: it finds edge cases before reward logic gets locked in, so the formal audit phase starts from a cleaner baseline and incentives go live on math that’s already been pressure tested. Note: Sherlock completed a security audit of Zentra’s minimal deployment (launch) contracts at branch main, commit 4be344d6f47355063dcf758359ac5682d87a370e. This statement applies only to the contracts and versions referenced by that commit. Security reviews reduce risk, but do not eliminate it.

@dmitriychuta One for me too please.

I just sent out 🤯583 invites for the iOS version of Subscription Day² – please check your email. I’m really looking forward to your feedback, ideas, and suggestions about the app!

@PepeBoost888 memes are high risk, physical banks are high risk.

听了一下CZ在达沃斯论坛提及到meme的原视频，录制做了下翻译，整理一下核心表达： • 元宇宙和NFT都火过一阵，但后来逐渐沉寂，meme可能是相似的
 • meme是高风险的新兴领域
 • 但Some memes do stay，比如 $Doge 存在了15 年，仍有数十亿市值 有意思的是后面也提及了银行： memes are high risk, physical banks are high risk. 实体银行未来 10 年会减少，但不会消失，或许 meme 也是一样。 There are things have cultural value can stay. @cz_binance @heyibinance @binancezh

多次打开 X 链接就限流 就把这个搞里头 github.com/noosuture/xJump

微我18块吃个猪脚饭 听我讲述我在币圈的故事

你在说什么 你却在做什么

@coolish 2026，愿你不仅攻破技术难关，更能破解生活算法，Ready Score 永远 100，新年快乐！

今天是个挺特别的日子， 既是 2026 Q1 的第一天， 也是 21世纪 Q2 的第一天。

@taresky 狗哥 我猜你一定喜欢 x.com/noosuture/stat…

#黑五 #购物 今年黑五折扣买了： 1. Oura Ring 4 普通版 2. Sony H9 二代游戏耳机 3. Flightly iOS app 4. TradingView

1. 安装 Scritping apps.apple.com/jp/app/scripti… 2. 一键导入组件 Readiness scripting.fun/import_scripts… Activity scripting.fun/import_scripts… 3. 填写 Api Key Github：github.com/noosuture/Scri…

#Oura Oura Widget by someone who actually uses Oura Credit @thomfang @_drankou Fuck @ouraring