meltedblocks

1.8K posts

meltedblocks banner
meltedblocks

meltedblocks

@meltedblocks

@quaymarkets co-founder / protocol @project0 / shipped @RUNNRtrade / member @SuperteamPOL / NFA

Solana شامل ہوئے Ocak 2019
1.1K فالونگ535 فالوورز
meltedblocks
meltedblocks@meltedblocks·
@greg_rog depends what you are building and how much leverage you like to have. some businesses are ultra hard, close to not possible to build in Poland, like innovations in finance
English
1
0
1
30
Greg
Greg@greg_rog·
San Francisco offered me funding. The only condition: move to California. I said no, stayed in Poland, and built 4 companies instead. Here's why I'd rather have 100% of 4 Polish companies than 15% of one US company chasing a Series B I'd hate building:
Greg tweet media
English
12
0
36
1.8K
Pawel Rainer
Pawel Rainer@pawel_rainer·
They have a nap room in @colosseum office🤯 that place is sooooo perfect
English
1
0
1
35
meltedblocks
meltedblocks@meltedblocks·
@armaniferrante hard to move fast and innovate with all this regulatory burden and required funds to operate. But imo you are right there will be place for both type of venues
English
0
0
2
182
Armani Ferrante
Armani Ferrante@armaniferrante·
A lot of fundamental misunderstandings about how regulation works. You can't just slap KYC onto a frontend to comply with laws. If you think that, please ask your friendly neighborhood policy guy in DC. Regulation is about the infrastructure, the liquidity, the market integrity, and the million other details required to operate within the realm of traditional finance. There's a reason why none of the offshore CEXs have gotten access to the USA. It's really hard, and, my guess is that they probably think it's just not worth the time and energy for their business. As crypto goes mainstream, the market will continue to bifurcate. Regulated venues will serve a separate institutional segment than the unregulated venues. Both will be huge, but ultimately they are a separate set of users. The offshore unregulated CEXs will go toe to toe with Hyperliquid. The onshore regulated CEXs will go toe to toe with the TradFi venues. But at this point none of this even matters. Whether you're a Hyperliquid maxi, a Solana maxi, a Binance maxi, or a maxi, the final boss for perps hasn't even reared its head yet. It will soon.
wlstrhppie@moneyhippie

what is the point of HL if every cex on earth will have 24/7 perps apart from no kyc no one can answer this

English
24
15
156
12.8K
meltedblocks
meltedblocks@meltedblocks·
@minnus @Raydium @solana our focus is on high-demand, major equities, regardless of whether their current tokenized equivalents already have deep liquidity
English
0
0
2
29
Sam Schubert
Sam Schubert@minnus·
Could @Raydium and @solana AMM pools be coming back into focus? Many tokenized equities should start in the long tail: thin markets are better suited to pools before they become large enough for deep prop AMM quoting. Pools have always had a role in bootstrapping liquidity, and memecoins proved that model at scale. Which was perhaps the test run for tokenized equities. Raydium’s revenue mix is already starting to show tokenized assets becoming a meaningful category.
Sam Schubert tweet media
Sam Schubert@minnus

I expect this tokenized asset volume chart to keep going up and to the right. @Backpack is bringing regulated stock trading into a crypto-native account, with users able to purchase tokenized equities on @solana through Backpack Securities. @sunrisedefi is helping turn those assets into native Solana liquidity, making them tradable and composable across DeFi. Interested to see how this plays out.

English
4
6
39
3.4K
r0bre | Accretion.xyz
Seems like there's an exploit of Raydiums old AMM v3 program. You can find an exploit transaction in the next message. But all you need to know is in the screenshot. Raydium LP positions mint a position NFT, which allows you to transfer the LP position. To withdraw your LP tokens, you just supply the NFT, it gets burned, and you get your tokens back. The bug seems to be simple: Attacker created a new NFT mint and token account with 1 token. They then withdrew real liquidity with the fake random NFT account. While it seems like no source is available, the bug is clear. The code didn't check that the NFT mint and the token it's burning are actually real position NFT mints. Just a missing account check, $1.5m gone, but will be repaid from the treasury it seems. Just the day that claude fable dropped. coincidence?
r0bre | Accretion.xyz tweet media
Infra | Raydium@0xINFRA

Raydium is aware of an exploit involving unauthorized removal of liquidity from its legacy AMM V3 program which was previously phased out in 2021. No current users of Raydium are affected by this exploit or would have been able to interact with these pools through the UI since their deprecation. Raydium’s SDK and DAPP do not support mainnet interactions with legacy AMM V3 pools. The exploiter’s address is: 4WnPebowR4HHfumvNPaDjG6Pa5Hi1jxLm6xmmBq33QVk There were 5 pools affected: Sollet USDT - RAY Sollet ETH - RAY SRM - RAY USDC - RAY RAY - SOL An initial review of exploited assets of value are: ~150,177 RAY ~5,603 SOL ~893,700 USDC The market value of assets exploited is ~$1.34m. Full compensation will be handled by Raydium’s treasury. Legacy AMM V3 was previously only enabled to use deposited funds to place orders on the Serum order book. The program did not provide swap functionality and following the deprecation of Serum, the associated liquidity remained idle. For proportion checks, the program relied on the LP token supply. The vulnerability stemmed from insufficient validation of the LP mint. Because the program did not properly verify the LP mint address, an attacker was able to create a new mint and use it as the LP token, bypassing the intended proportion checks. By contrast, all other Raydium mainnet programs use a virtual supply mechanism for proportion checks and correctly verify the LP mint along with all other relevant account information, preventing this class of vulnerability. It is important to note that the vulnerability was caused by a self-contained logic flaw, not a key compromise or authority-level issue, so there is no propagation risk. Raydium's current programs are unaffected by this exploit. @Raydium core contributors are conducting a security review on all mainnet programs.

English
5
2
37
6.3K
meltedblocks
meltedblocks@meltedblocks·
most probably how it was discovered: 1) program is closed source. 2) no one take a effort to decompile it by hand before, no one cared for "only" 1.34M 3) new AI models can easily decompile and run harness like smart fuzzing 4) no or weak check for LP mint was discovered 5) exploit
SolanaFloor@SolanaFloor

🚨JUST IN: @Raydium says an exploit hit its legacy AMM V3 program, phased out in 2021, with about $1.34M drained from five deprecated pools. The attacker was initially funded from KuCoin and later moved 810 ETH to Tornado Cash.

English
0
0
2
253
meltedblocks
meltedblocks@meltedblocks·
Anthropic is pushing me to be Robin Hood. Break the rules and bypass their terms for good cause. I help secure a crypto protocol with $120M+ in TVL. We are not large enough to be on every AI security whitelist, but we are definitely large enough to care if models like Mythos make vulnerability discovery faster and cheaper. And this is where it gets strange. The strongest cyber capabilities are gated, filtered, or partially routed away. I understand why. Nobody wants to hand attackers better exploit tooling. But attackers will obviously try to bypass those limits. So what should defenders do? Follow the rules and accept weaker tooling? Or test the real limits of the system, because that is exactly what attackers will do anyway? Or do you believe in their moral compass? That feels backwards. Defenders should not have to fight the attacker, the model restrictions, and the ToS at the same time. And there is another problem: cost. For an attacker, one good run can be enough. One bug. One exploit path. One protocol with money sitting in contracts. For a protocol, defense is not one run. It is every release, every dependency update, every new integration, every small change touching user funds. So if the best AI security tooling becomes gated or extremely expensive, the economics get very weird. Attackers only need to be right once. Defenders need to be right every day. In normal software, that asymmetry is already uncomfortable. In crypto, it is brutal. Because here, a bug is not just a bug. It is live money and instant loss.
meltedblocks tweet media
English
3
2
17
1.7K
RUNNR
RUNNR@RUNNRtrade·
We’re excited to announce that we’ve partnered with @quaymarkets 🤝 Together, we’re building the best USDC trading experience in the market. Coming soon.
RUNNR tweet media
English
9
11
36
2.3K
meltedblocks
meltedblocks@meltedblocks·
@lmrankhan @olivetreeyield agree, yield is missing piece and is highly needed. Next phase is long term investments in indexes like s&p500
English
0
0
0
104
Imran
Imran@lmrankhan·
We're going to see an entirely new class of financial products emerge for consumers that strengthen the position of neobanks as the middle layer between trad banking and onchain finance. One example is @olivetreeyield from our current batch. They're bringing differentiated yield to crypto through insurance backed annuities. While most crypto yield comes from staking, lending, vaults and treasury products, Olive Tree unlocks insurance balance sheets as a new source of principal protected yield (e.g 5.5%) This gives consumers access to more predictable, returns while helping fintechs and neobanks offer financial products that are differentiated from the competition. Over time, this market will likely become winner take most, with neobanks competing not just on UX, but on the strongest suite of savings, yield, credit, and investment products for their customers.
English
22
7
135
15.2K
Neony
Neony@NeonyExchange·
We're excited to partner with @quaymarkets Together, we're exploring new opportunities across the Solana and Neony ecosystems.
Neony tweet media
English
5
1
13
937
meltedblocks
meltedblocks@meltedblocks·
over for AI spending funds
English
0
0
1
63
meltedblocks
meltedblocks@meltedblocks·
mythos today? is it over
English
2
0
3
92
Backpack 🎒
Backpack 🎒@Backpack·
Public Beta is live. Trade real US stocks and ETFs alongside crypto, perps, and yield, all within one account. Real ownership under New York law. Cash dividends, brokerage transfers, and corporate actions rolling out during Public Beta. 24/5. Instant execution. Traditional market liquidity. No fees in June: backpack.exchange/stocks
English
138
180
658
142.8K