Kaushik Swaminathan
590 posts
@proofofk
many things @zellic_io, venture partner @strobefund
I’m on week five of trying to vibe code a replacement for some dumb saas that we use and it’s so incredibly frustrating that I’m slowly realizing it’s actually a quite complex and thoughtful piece of software.
🚨 V4 Swap Router by z0r0z - Loss $42.6K (2026-03-03) Type: ABI Encoding / Authorization Bypass The swap(bytes,uint256) function in UniswapV4Router04 uses inline assembly with a hardcoded calldata offset (calldataload(164)) to verify that the payer in the swap data equals msg.sender. This assumes standard ABI encoding where the bytes parameter offset is always 0x40. An attacker crafted non-standard (but valid) ABI-encoded calldata with the bytes offset set to 0xc0, placing their own address at position 164 to pass the authorization check, while the actual decoded bytes data contained the victim's address as the payer. This allowed the attacker to drain 42,607 USDC from a victim wallet (an EIP-7702 delegated EOA) that had approved the router, swapping it for 21.2 ETH via Uniswap V4's ETH/USDC pool. TX: etherscan.io/tx/0xfe34c4bee… Victim: etherscan.io/address/0x65A8… Router: etherscan.io/address/0x0000… We have reached out to @z0r0zzz, but the contract is not upgradeable and cannot be paused. Revoke approvals to UniswapV4Router04!
Introducing EVMbench—a new benchmark that measures how well AI agents can detect, exploit, and patch high-severity smart contract vulnerabilities. openai.com/index/introduc…
Molly Mielke McCarthy is on a quest to find exceptional people before the world catches on. I talked to @mollyfmielke about the art of "peopling", playing your own game, vocation, and why great founders are often the least legible. Today, she runs @mothfund, where she backs founders at the beginning. In the past, she's worked across design, product, and editorial at @figma, @NotionHQ, @stripepress, @browsercompany, and scouted for @sequoia. Her background in film and design echoes in the people she backs and in the quality of her curation and writing. Molly is people-centric yet fiercely individual, intuitive yet pragmatic, and truth-seeking yet full of care. We discuss: - Why it takes 3 months for her to know someone well enough to invest - Why authenticity is magnetic - The difference between agency and ambition - Why commerciality is a lens you can learn - Illegibility as private confidence, not public uncertainty - How your brand is a bell in other people's heads - Vocation as "stalking your calling" and then yielding to it - Why we should focus on doing something rather than being someone Timestamps: 0:00 - Opening Highlights 1:29 - Intro to Molly 3:36 - Thanks to Notion 5:14 - Start: People, Spikeyness, and Discernment 21:36 - Agency and Ambition 34:45 - Commerciality 49:19 - Investing, Feedback Loops, and Creating a Bat Signal 59:46 - Coaching and Working with Young People 1:06:54 - Self-Knowledge, Uncertainty, "Should," Others' Acceptance, Motivations 1:16:38 - Illegibility & Legibility, Principles, Authentic Service 1:29:28 - Friends, Seeing in the Third Person, Femininity in a Masculine World, Love 1:42:07 - Grab Bag: Art, Catholicism, Gratitude, Beauty @DialecticPod Ep. 38: Molly Mielke McCarthy - The Art of Peopling - is out now, below and on all platforms.
V12 is now live for open beta. It can: - Find valuable bugs - Generate working, runnable PoC - Generate patch and test the PoC against it In our testing during audits at Zellic, Zenith, and Code4rena we've been consistently impressed. Best of all: it's free. (Don't abuse it!)
@claudeai Impressive. Very nice. Now do this, but for smart contracts
Low IQ high agency continues to be one of the most OP human builds
Lines are blurring between investing and gambling and here are my basic thoughts: INVESTING = OWNING GAMBLING = HOPING
Most competent people try and do everything ~moderately well, but it's better to concentrate hard on doing a few things unreasonably well and spend minimum effort on the rest. (In practice, most people fail at the 'unreasonably well' part bc it's so rare to see anybody do this.)
