0x7181be7f573079305316257ef19e8b5cbf553821ebc27845596b305031f3c5ed
1
12
416
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
ENS Labs built something significant on the backs of a huge community of enthusiasts that deeply cared about the protocol independent of whether they got paid for their work. and are now robbing everyone that participated in that. not of money they expect to receive - but of time invested and integrations built.
16
9
177
14,737
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
Replying to @JamesJohnBeck
Imho you're missing the point. Just like a blockchain, ENS generates revenue by design. Blockchains take transaction fees to safeguard its working, ENS take registration and renewal fees to ensure the protocol is usable long term. If either didn't take fees, they would not work. This makes ENS is entirely distinct from other internet protocols like "Signal" or foundations like "Mozilla". They don't generate revenue based on their usage. The comparison with Mozilla is especially hilarious, since sadly they're doing a terrible job and Firefox is dying. 10 years ago they held over 30% market share, now they are below 3%. For any revenue generating protocol you have to figure out where that money goes. When ENS was profitable, and all fees went to True Names this was the biggest valid critique of ENS. To become an internet level protocol you have to distribute these to the network enabling the protocols existence. BTC and ETH distribute it to those who run the network. What does this mean for ENS? ENS should distribute its revenue to those who enable users to interact with it in valuable ways. Labs has been doing this quite badly for the last few years. There are almost no significant integrations, there are very few application level improvements. The main mechanism through which valuable integrations and applications are developed are through the Service Provider program. Labs doesn't like this, for obvious reasons. They see other teams as inefficient and bloated. Meanwhile they are bloated themselves. Most of the fees generated, actually MORE than the fees that the protocol generates are going to ENS Labs. In the past the DAO has approved every budget request of ENS Labs, but their inefficiency is becoming obvious, raising the question whether that should be the case. For example, a budget of close to $10m/y was requested for the development and operation of a new L2, and there is no change to this even though that project is canceled. Why should the DAO continue to pay ENS Labs the requested amounts? Instead of seeing things realistically and downsizing (there is much less to go around), Labs wants to increase its spending, and to ensure they are well funded for a long time, cut others out of the pool. This would bring us full circle back to the True Names non profit days, where one entity runs the entire protocol. For early development, and as long as the entity actually builds efficiently, that's fine, but it nullifies the notion of the protocol being internet scale, independent, and decentralized. The success of ENS would be limited by how well Labs executes, and how it is seen as such (!). Decentralization story telling and branding matters: I and many others are excited about ENS as an unowned internet level protocol that by design will survive forever. If we're just paying a single entity (for profit or not), its brand as an internet protocol goes away. Integrations that would have happened don't happen. ENS dies a slow death. Alternatives exists. True competition (everyone should be equal to the DAO, Labs should be an SP like any other), retroactive funding (don't fund things that have no proven value, do so retroactively), and general downsizing (lower spend across the board / redirect to actual value ads) can fix this. One of the best ideas in the last few years is the revenue share / referrals. Applications would be incentivised to implement best in class ENS integrations and drive ENS adoption because they are economically aligned with that happening. Nicks counter argument is that all this is unnecessary because users can just use the ENS App built by Labs. He is missing the point: ENS is valuable because integrations, not because the ENS app. And there are currently no incentives to build good integrations. Without more and better integrations, ENS dies a slow death. ENS as a protocol (DAO) shouldn't spend significantly more than what it makes. It should only fund true value adds, when the value add is proven and there is actual ecosystem need for it. The mechanism to decide that should be a DAO. Even if friction is high. That's the point. And most importantly: ENS must not loose its brand as an internet protocol vs a random non profit open source project that users have to pay for to use. It's like expecting a blockchain to work when all transaction fees go to one entity.
5
10
65
5,156
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
It's like we dug up a powerful alien artifact and society is humping it while taking selfies
106
316
3,941
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
The soul of Ethereum was Cypherpunk. It _is_ Cypherpunk. It will always be Cypherpunk. You can chase your glossy, VC-driven narratives, build your fancy protocols, but the ones that will endure are the ones that preserve our privacy, defend against censorship, and stand tall in the face of tyranny. Those are the projects that will outlast all the distractions, all the fleeting trends. Because principles do fucking matter. Because this is our fight, it's my personal fight, it's our soul. Cypherpunk will always rise. And in the end, Cypherpunk will win.
100
123
696
63,937
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
Replying to @SuhailAhmad
Yea, happy to weigh in. Ethereum focuses on having a robust, credibly neutral base layer which sometimes comes with the tradeoff of having to do more research and implementation to increase throughput Blockchains that don't prioritize being credibly neutral and removing centralization pressure can move faster on increasing throughput and this is where you probably see a lot of the "better tech" conversation come in Any brand new blockchain today can come in and ostensibly have much better throughput than Ethereum but they don't have the censorship resistance that Ethereum is building and maintaining at its base layer There's an abundance of very impressive research coming out of the Ethereum ecosystem on how to maintain and improve this censorship resistance without constraining its throughput in future upgrades Being a credibly neutral tech that guarantees censorship resistance is the entire point of blockchain. If one class of users can influence the base layer of the protocol more than any other users, trust in the tech breaks down, institutions aren't willing to use it over their proprietary stacks, and we have nothing more than an ultra-complex, incredibly inefficient database masquerading as a blockchain And if you want the easier argument - Ethereum has still never had any downtime. It has multiple, well-adopted implementations of its software to protect against bugs. Other top chains can't say the same.
4
14
119
1,938
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
100 ETH were assumed lost but could eventually be recovered. Here's what happened, how it became a happy ending and what's needed to prevent this from happening again. Context A user of Safe{Wallet} wanted to bridge 100 ETH from Mainnet to Base. But then they realized that they can't actually access the funds on the Base. The Safe on Base had a different set of signers than their original Safe, meaning they had no control over it. How can this happen? Unlike EOAs (Externally Owned Accounts), smart accounts like Safe are governed by deployed smart contract code. It's technically possible to deploy a smart account with the same deployment config (same signers) on different chains at the same address (using counterfactual deployment). So normally bridging to a chain where the smart account is not deployed yet is merely an annoyance as the user first has to deploy the smart account before they can access the bridged funds. But this case was different. The user used their @Safe smart account since 2020. The smart account version from back then (v1.1.1.) was not yet written with multichain in mind, so it was possible for anyone to deploy a smart account on a different chain with completely a different config at the same address. Something that has been changed since the v.1.2.0. version. Rescue Once the Safe team became aware of the incident, @tschubotz took immediate ownership. He examined the Safe on Base and noticed that the address had been deployed by an account that had preemptively deployed many other v1.1.1 Safes on Base. Through further onchain analysis, the trail led to @protofire. As it turns out, the Protofire team was aware of this edge case for older Safes and white-hat deployed Safes to frontrun a malicious hacker taking advantage of it. So just two hours after the incident was reported, there was hope that the funds could indeed be recovered. And few minutes later, a first test transaction and then a full transfer of the 100 ETH back to the user could be done. This is commendable anticipation of @protofire, strong leadership from @tschubotz and fantastic support by the wider @Safe team to get the funds safely back to the user. 💪 Learnings The root cause was the use of an older Safe version (v1.1.1), which didn’t account for multichain deployments. Since version v1.2.0, Safe includes protections that prevent conflicting deployments across chains by modifying how the CREATE2 salt is constructed. To bridge, the user chose the native bridge integration which is essentially a @lifiprotocol widget but with some optimizations for smart accounts. For example, the bridging feature warns users explicitly if there is NO code at the destination chain, meaning that no smart contract was deployed there. However, there was no warning in place for there being different code deployed on the destination chain. This additional layer of protection has now been introduced to cover the edge-case for old v.1.1.1. accounts. The deeper fix lies in improved keystore infrastructure (like keystore rollups) that can guarantee a consistent account config across chains. Until then, deployment behavior will remain difficult to reason about for developers and end-users. Finally, we are still at a point where users are expected to do test transactions before moving bigger funds. This is not scalable and shouldn't be expected from users. There needs to be more innovation around hooks, guards, and other safety mechanisms that allow strong protections for users. I'm glad this case could be resolved with a happy end and there is important learnings for wallet developers, especially ones using smart accounts. But it also clearly showed once again that a lot more work is ahead of us to truly make self-custody easy and secure for everyone.
I lost my life savings in one click using @safe last night. That's after 8 years of holding ETH and avoiding scams. A UX bug within the official Bridge feature, implied the destination address was my Safe on Base. It wasn't. Essentially, due to the age of my Safe, a bad actor had exploited a window of time last year to deploy my Safe mainnet address on Base with a different owner address. Those bridged funds are now unrecoverable. I appreciate that Safe's staff have transparently explained to me that this was an extreme edge case and apologised. I'm in a lot of pain. I'm now praying that they can make me whole. cc: @koeppelmann @SchorLukas
175
190
1,361
410,955
Yes, very much yes. I do remember that Nixo. 😉
Remember when you were like "I wish someone would spend way too much time making an overly complicated graphic that no one will read that shows all the Ethereum upgrades"? Well I gotchu fam
1
1
4
386
The King of the North ⚔️
After the 5th Cir. ruled against the government in November, it repeatedly tried to avoid entry of a final judgment in the Tornado Cash case. It asked the Court TWICE for long delays before claiming the case was moot (with no final judgment needed) b/c they had chosen to remove Tornado Cash from the Sanctions List in "their discretion." Today the Court said no to this nonsense. OFAC is now legally prohibited from re-instating the original sanctions. 1/3
4
260
The Gnosis team and ecosystem are like that quiet best friend that never lets you down and always seems to be the source of your most memorable adventures… Early owl gets the worm.
This time we'll hardfork 1 week before Ethereum so that all client teams can follow the last and real chain before on Ethereum mainnet. Client teams will be published all packages at the latest on 23rd April like Ethereum and @dappnode team will release client packages. LFG!
1
2
14
712
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
I’m thrilled to announce that I’m joining as a cofounder of @etherealize_io to help onboard the world to Ethereum I’ll be at the helm of the ship alongside @vivekventures and the incredible team he is building
432
635
3,623
1,393,015
It’s always great to hear Erik articulate these concepts. Our Principles. We don’t do this because it’s easier.
On illicit funds in crypto... Background The entire purpose of crypto is to build neutral, objective, transparent protocols. "Permissionless" is the phrase. It's a belief that regardless of the ethics of the *users* of a protocol, the protocol itself should simply act under the protocol rules. That honesty, that integrity, provides immense societal value. And upon such a foundation, further layers of coordination/rulemaking can be built. Coinbase as a central exchange can make its own rules about its property and systems, *built on top* of permissionless, neutral Bitcoin and Ethereum protocols. Questions When crypto funds are illicit, what should happen? Should Bitcoin nodes block illicit txs? Should Ethereum nodes block illicit txs? Should Uniswap contracts block illicit txs? Should Thorchain nodes block illicit txs? Should miners and validators be policing content? If the answer to any of those is "yes!", then we are not designing an ecosystem of permissionless, objective, protocols, are we? We're designing something else. If the answer to any of those is "yes!", then we're building permissioned financial services, but on a blockchain. Of what value is this to society? And to do so, suddenly the definition of "illicit" must be defined, and it cannot be. Illicit to whom? Illicit under what standard of suspicion, or proof? These are social and legal questions about which people will disagree. If crypto protocols are built to incorporate this social/legal layer, then they are truly useless, for they lose their entire reason for existence... objective, transparent operation. An objective protocol must permit bad actors operating on it. Mathematics doesn't "turn off" when a bad man solves an equation. Language doesn't fail to execute when a bad man speaks it. These are permissionless protocols and so too must be crypto. To those advocating that illicit funds be blocked by protocols, please explain the standards by which such things shall be determined, and please explain why you're involved in crypto in the first place? If a hack is $100, nobody will advocate for censorship. If a hack is $1.5 billion, suddenly, many do. At what dollar value shall a blockchain halt? It's easy to vilify North Korea. What about when Western governments violate law, and confiscate without due process, digital assets from a rightful owner? This is illegal, this is illicit. When our own government commits crimes, shall we permit their action across our protocols, yet when "bad" governments do the same, we put a stop to it? Should a German node operator enforce Saudi law? Should a Chinese operator enforce American law? Should chains be halted and addresses blocked before trials and legal guilt even been established? Just the *accusation* of illicit funds is enough to violate that which we claim to build as inviolate? I am vehemently opposed to crime; to actual crime: to fraud, to theft, to violence. I see open, transparent protocols as an antidote to crime, and as a tremendous boon to good civilization. Laws, which are a human *social layer,* are in place to prevent and punish such crimes and the best governments should vigorously pursue actual criminals. Dear law enforcement: please pursue the criminals that stole those funds! Law enforcement is your job, and you've taxed us upon the promise of fulfilling it. But that social, subjective layer of laws and legal enforcement, must exist above and separate from more foundational underlying strata that operate *objectively* and equally to all parties. When the human world of right and wrong, which must always be subjective, is transposed into an otherwise objective, permissionless system, the latter will fail to be so, and there is no purpose to it. In such case, let us admit we are merely building a more complicated apparatus for subjective social policy. Being decentralized is a gradient Being permissioness is not
1
4
258
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
ACD call today spoke of the hardware requirements again (EIP will be finalized in a week) - my suggestion was that we aim to keep validators net profitable after hardware costs within 6-12 months (we're currently at 4 months to make up hardware costs) There was pushback today on that suggestion because "what if LSTs push up to 99% ETH staked and rewards go to zero, we can't be expected to decrease the hardware requirements" First - this is a legitimate flaw in the proposal but, second, suggests to me that Ethereum researchers have decided that it's inevitable to have to optimize the network for the eventual scenario that it just won't be economically rational to run a validator, unless it's professionally as an LST operator. If that's the direction we're going in, we should at least be aware and explicit that it's where we're headed: our current trajectory leaves us with an LST-only scenario and nodes run from home are purely hobbyist or development-related endeavors and certainly not profitable. imo, we should be choosing where we're headed, not let our network's direction be defined by capitulation or inability. If this is where we need to go, then that's that and we should be explicit about it. If it's not a good direction, then we're not being forthright about lacking the creativity to develop a solution that keeps solo stakers existing. With inclusion lists and the ability to run a (zero rewards) node from home, it certainly doesn't kill Ethereum's original intent of censorship resistance and universal auditability, but it looks a lot different than what it was aiming for with at-home validation. This kills the solo staker.
25
16
125
13,696
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
The Struggle is when you wonder why you started the company in the first place. The Struggle is when people ask you why you don’t quit and you don’t know the answer. The Struggle is when your employees think you are lying and you think they may be right. The Struggle is when food loses its taste. The Struggle is when you don’t believe you should be CEO of your company. The Struggle is when you know that you are in over your head and you know that you cannot be replaced. The Struggle is when everybody thinks you are an idiot, but nobody will fire you. The Struggle is where self-doubt becomes self-hatred. The Struggle is when you are having a conversation with someone and you can’t hear a word that they are saying because all you can hear is The Struggle. The Struggle is when you want the pain to stop. The Struggle is unhappiness. The Struggle is when you go on vacation to feel better and you feel worse. The Struggle is when you are surrounded by people and you are all alone. The Struggle has no mercy. The Struggle is the land of broken promises and crushed dreams. The Struggle is a cold sweat. The Struggle is where your guts boil so much that you feel like you are going to spit blood. The Struggle is not failure, but it causes failure. Especially if you are weak. Always if you are weak. Most people are not strong enough. Every great entrepreneur from Steve Jobs to Mark Zuckerberg went through The Struggle and struggle they did, so you are not alone. But that does not mean that you will make it. You may not make it. That is why it is The Struggle. The Struggle is where greatness comes from. ~ Ben Horowitz
13
11
120
6,056
Please, help this ratio become epic. 😂
Replying to @jack
I tried and Im currently being prosecuted for doing it
1
2
185
Absolutely incredible. Promise made, promise kept. 8 years in the making.
7
374
5pence.eth | Spence | 🐼🦉| 🛡️⚔️ retweeted
“Malicious MEV is organized theft, plain and simple, with powerful entrenched players systematically extracting value from normal people.” Read more in my recent editorial about transaction privacy, decentralization and encrypted mempools: crypto.news/transaction-priv…
1
2
122
This is going to sound weird to most but yeah Gnosis chain is probably one of my favourite chains to use for actual real defi and real world use cases of crypto. No memecoins, only honest, grass fed, good yields and good people building truly the future of the world.
1
1
2
337
1/ What happened to the Ledger Co-Founder was deeply troubling and tragic. The "$5 wrench attack" remains one of our industry's Achilles' heels, but @_SEAL_Org's response demonstrates something remarkable about crypto.
It's been an absolutely wild week. My deepest gratitude goes to the Ledger Co-Founders for trusting us (= SEAL 911) to assist with handling this highly sensitive case. Over 90% of the ransom funds are already frozen, and we're determined to hit 100%. Let this be a reminder—crime doesn't pay.
1
2
173
3/ Supporting SEAL_911 isn't just about this incident - it's about sending a clear message: if attackers know the "wrench" won't yield value, we remove the incentive.
1
1
53
4/ This industry is unique in how we face challenges together. A perpetual thank you @pcaversaccio and the entire team. Donate here: github.com/security-alliance…
1
52