singsing

Why borrowing rates in DeFi lending protocols remain difficult to accurately calculate — and why fixed-rate lending via order book mechanisms presents a relevant alternative worth exploring 🧵A Thread🧵

@afrijaldz tengs bro ini yang ku butuhin, soalnya dari kemarin bingung mau review hafalan dimana 😇

Aku bikin app simpel buat bantu review hafalan (murajaah) Al Quran. Tinggal pilih surat atau juz, bisa quiz diri sendiri atau review santai. murajaah.afrijal.dev github.com/afrijaldz/mura…

Zero-knowledge will transform blockchain, and blockchain will revolutionize our society. They deserve a book! After dedicating years to these topics, I wrote one, co-authored with @NathanOnCrypto: what they can fix and what future they promise. Coming soon, order now! blockchainthebook.com

🚨 ALERT: A Kraken user lost ~$18M (8,662 $ETH) in a social engineering hack, with the attacker bridging $1.7M via THORChain and depositing over 5,300 ETH into HitBTC.

Cara Submit ke Proof of Ship Season 2 Buat yang belum tau, Proof of Ship itu program bulanan dari Celo. Simpelnya: kamu bangun app di Celo, tunjukkan hasilnya, dan ada prize pool $5K USDT/bulan buat Top 50 projects Kalau app kamu udah live di chain lain (Base, World, dll) dan pengen ekspansi ke Celo, ini kesempatan yang bagus. Games, utility apps, X2Earn, AI agents semua bisa ikut selama sudah ada user dan terintegrasi MiniPay. Cara submit: Buka talent.app/~/earn/celo-pr…, login, dan submit project kamu. Selesai. Leaderboard di-update mingguan. Top 10 dapet bagian terbesar dari pool, Top 3 dapet sesi mentor langsung dari tim Celo. Timeline April: - Submission sampai 26 April - Review 27-30 April - Pengumuman 30 April Daftar: bit.ly/celo-proof-of-… Tanya-tanya? Reply atau DM aja.🫡 @Celo @CeloDevs

The Drift exploit wasn’t a smart contract bug. Someone on the multisig changed the admin, another member approved it, and then the attacker initialized a fake token with an inflated oracle price and drained real assets through cross-margin. The code worked exactly as designed. That’s what makes this scarier than a typical hack. You can audit the contract a hundred times and never catch this. The vulnerability wasn’t in the logic, it was in who had the keys.

Update: $230M+ USDC bridged via CCTP from Solana to Ethereum across 100+ txns. 6 hours is how long Circle had to freeze stolen funds from the $280M+ Drift hack. Circle is a centralized stablecoin issuer headquartered in New York and the attack began around 12 pm ET. Why does our industry allow them to stay silent? @jerallaire @circle @usdc

** Correction on key compromise ** A week ago, Drift moved to a new multisig, created by a signer from the old multisig. This signer did not add themselves to the new one. The exploiter also initiated the proposal in the old multisig to hand over admin control to this new wallet. Of the 5 signers on the new multisig, only 1 came from the previous setup; the other 4 were brand-new. The wallet was set with a 2/5 threshold and a 0-second timelock. ~Five hours ago, that sole carryover signer used the new multisig to propose changing Drift’s admin. One of the new signers co-signed a second later, instantly meeting the 2/5 threshold. With no timelock in place, the transaction was executed immediately. ** Note ** Some of the relevant Solana programs are not verified, which limits full analysis. We're continuing to dig into the onchain data and will publish a more thorough post-mortem covering the multisig migration, Solana DeFi contagion, and vault exposure in a follow-up.

🚨BREAKING: @Solana based perpetuals protocol @DriftProtocol exploited for over $200M, onchain data confirms.

Proof of Ship Season 2 udah live. @CeloDevs Buat yang lagi build MiniApp atau AI Agent di Celo, ini program buat kalian. $5K USDT/bulan buat top 50 projects. Daftar: bit.ly/celo-proof-of-…

@CeloIndonesia @Celo keren emng L2 celo iniii, LFG celooooooo

Apa itu @Celo? Celo adalah Ethereum Layer 2 yang dibangun untuk real-world adoption. Mobile-first, stablecoin-first, dan fokus di financial inclusion untuk emerging markets Beberapa hal yang bikin Celo beda: 1) Fee Abstraction User bisa bayar gas pakai stablecoin (USDT, USDC), ga harus punya native token dulu. Ini ngilangin barrier terbesar buat new users 2) Mobile-first Arsitektur Celo didesain buat smartphone. Kirim crypto cukup pakai nomor HP, Simple 3) Stablecoin ecosystem 25+ stablecoins native di Celo, termasuk USDT, USDC, dan local stablecoins buat berbagai negara. Weekly active USDT users: 5M+ 4) MiniPay Self-custodial stablecoin wallet dari Opera dengan 14M+ users di 66+ negara. 400M+ transaksi diproses. Ini distribution channel terbesar di Celo 5) Tech stack Celo jalan di OP Stack, secured by Ethereum. 1-second block time, sub-cent fees, dan ZK fault proofs buat enhanced security Celo sekarang jadi L2 #1 by daily active users di Ethereum ecosystem Mau build di Celo? Stay tuned, kita bakal share lebih banyak resources buat developer Indonesia 🇮🇩

@hwisesa23 🤣🤣🤣🤣

@singgihTara kata claude “touch more grass”

mau ikut protes claude, masa iya 4x nge prompt limitnya abis anjir 😭😭

ternak kambing sama budidaya lele aja yokkk 😊

"Shor’s algorithm is possible with as few as 10,000 reconfigurable atomic qubits" A neutral-atom architecture could support quantum computation at cryptographically relevant scales using a smaller number of qubits than was previously thought necessary. arxiv.org/abs/2603.28627

🇮🇩 If you’re in Indonesia and have some followers, please follow, retweet, and leave a comment—there are gifts for you.

@DogPay_ gm it’s me, got some followers, mostly web3 devs

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

@0xyunss menarik bang, ijin clone

ini agent dlmm gua yang ngehasilin duit 20-100$ sehari. gua open source, gua kasih tau cara setupnya, simak aja videonya. meridian ini udah jalan 2 minggu, banyak juga temen temen yang udah profit dan atau masih struggle loss buat train agent mereka. ada repo githubnya juga. kalian bisa cek github dan tele channel untuk detail fiturnya. ini bukan ajakan finansial atau nfa. dan selalu kasi ilmu dulu ke diri kalian bagaimana agent ini bekerja. edge dari agent ini adalah gimana cara kalian ngasih lessons ke meridian. cheer to @mininghelium1 for help me improving this agent.

@hwisesa23 Hard warning for DeFi. Back then, hacking took skill and time. Now you just need your daily coffee money to scan thousands of contracts...

It costs $1.22 to scan a smart contract for exploitable bugs using AI. Not $1,200. Not $12,000. One dollar and twenty two cents. Anthropic tested their AI agents against 2,849 live contracts with no known vulnerabilities. The agents found two zero-days and produced profitable exploits. Let me break this down.