Trevor Porter ⏩

@sschuldenzucker @banteg How would it not be a sensitive secret / something with special trust held in it? If the RPCs are LZ’s sole source of truth to decide what to sign then they certainly hold special trust in those configured RPCs

@banteg The RPC list is not a sensitive secret though. No security architecture would assume that. And they didn't hold special trust to those select RPCs. So poisoning does seem to be the right frame. Do we know anything about which RPCs those were though?

layerzero attack was not rpc poisoning in networking poisoning is when the attacker outside the trust boundary taints a shared lookup (dns, arp, cache). the consumer has no reason to distrust the source. this was not that. the attackers got inside layerzero's trust boundary. they accessed the rpc list, compromised two nodes the dvn depended on, and swapped the op-geth binaries. that's an infra breach within the perimeter. supply-chain shaped, not network shaped. and the payload was surgical. the malicious binary cloaked by ip, served forged payload only to the dvn, told the truth to scan and every other caller, then self-destructed to wipe logs and binaries. rpc poisoning makes it sound like something that happened to the infra from the outside. the real story is a targeted implant operating inside the trust boundary. that's a meaningfully scarier attack than the label suggests.

I keep finding some part of myself thinking for just a moment that I can delegate laborious irl tasks to Claude Code — cooking, laundry, dishes, etc Claude code too addictive 🥵

Always a little chuffed when Claude tells me I'm a good driver ☺️☺️

@aroralanuk @hyperlane hahaha thank you sir

@trevorkporter @hyperlane Woahh, congrats!

Excited to share I’ll be stepping in as Head of Engineering for the team behind @hyperlane! After joining as a founding engineer > 3 years ago, I’ve seen our interop thesis developed and proven. Hyped to continue on this mission with relentless execution ⏩🫡🤠

@medhakothari @hyperlane Thank you Medha!!

@trevorkporter @hyperlane Congrats trevor!!!!

@orphan_crypto @hyperlane Thank you!!

@trevorkporter @hyperlane Congrats Trevor!

@connormcewen @hyperlane You’ll be sorely missed Connor! The team wouldn’t be where we are without your hard work, and it’s been a joy to grow alongside you

Today marks my transition to an advisor role for the team working on @hyperlane. We're passing the torch to @trevorkporter as the new Head of Engineering.

on @LayerZero_Core's solana session: "executing packets between evm and solana is completely permissionless, which is not currently done by any other messaging protocol" (25:27) it is indeed a great design, but @hyperlane has had this live for over a year similar to L2 sequencing, avoiding censorship risk shouldn't be optional

@web3gelato @init4tech Congrats Anthony!! Cutting edge stuff

Jazzed to join @init4tech to lead Growth and build a pragmatic approach to Ethereum scaling! init4 aims to radically modernize rollups with sustainable economics and elegantly-simple design. We're a research-centric team contributing to next generation Ethereum. 🎀💻 DMs open.

@dferrersan Telepathy is a great example of consensus-specific interop, like IBC. It doesn't scale to the dozens of chains being launched, each with their own tweaks if only there was an interop protocol with customizable security depending on the chains or msg content.. 😇 @hyperlane

@dferrersan My hot take is also that security that depends on liveness on the order of hours is too risky with the current state of blockchain infra

Why has nobody tried to make a bridge with the same architecture as Nomad? Why has Telepathy only been used for Ethereum to Gnosis? Why is it that in 2025 most interop solutions are committee based? (Be it validators, MPC, etc)

@YourBuddyConner important word!

@trevorkporter "almost" 😅

Solana txs only requiring you to sign a recent blockhash instead of a nonce / chain ID is a super underrated DX improvment Almost makes up for needing to read 5 pages of tips and tricks, using proprietary fee estimation APIs, and needing a staked RPC connection 🙂‍↕️

@0xAlex_ We're using docs.helius.dev/guides/priorit… and their staked endpoint. The important feature is it considers the global fee market, so much better than `getRecentPrioritizationFees` Also check out helius.dev/blog/how-to-la… for some good tips on landing them

@trevorkporter What are these fee estimation providers? Have also had problems landings txns. Working on Solana support for SB rn

@andell_anton @nosleepjon @hyperlane @LayerZero_Core we're already are live on both Solana and Eclipse, and more SVM chains and VMs are soon to come! 🤠 You can see some data here flipsidecrypto.xyz/hbd1994/svm-ex…

@nosleepjon @hyperlane @LayerZero_Core When is @hyperlane adding Sol and SUI?

Huge day for interoperability. @Hyperlane is now the widest available interop solution, passing @LayerZero_Core in chains connected. Expansion.

Expansion above all else. Proud to be on a team that is fanatical about shipping

I can’t stop thinking about Scottish people calling Macklemore “Mack-lemore”

@DestinerX @zerodev_app very cool 🔥

breaking down the "userop by eoa" demo: 1) signing & sending the 7702 authorization 2) initializing the @zerodev_app kernel account 3) sending the userop