Reading the reconstructed bytecode of the Binance EIP-7702 sweeper (`0x63e8...6fae`) is wild. This wasn't a generic drainer. It was custom-engineered for Binance 14's architecture: - Leaves exactly 1 ether behind (`bal - 1 ether`) when sweeping ETH so Binance's automated hot wallet queue wouldn't error on gas and trip alarms. - Uses raw `staticcall` + `continue` loops with custom error codes (`SweepItemFailed`) so one bricked or blacklisted ERC-20 wouldn't revert the $6B batch. - Includes a custom `callExecute` function to impersonate Binance 14 as controller of an external vault holding $823M in USDC. They leave a comment: "robberies could be prevented if getaway cars were slower." You can't fully blame EIP-7702, but it sped up the attack. Without 7702, draining 64 tokens plus an external $823M vault from a live exchange hot wallet meant fighting moving nonces across 70+ transactions. Defense systems would've killed it after tx #3. With 7702, Lazarus sprayed 50 consecutive nonces in one type-4 payload, turned an EOA into a custom proxy, and atomically swept billions in a single block. Ethereum core devs built the ultimate getaway car. Surgical state-sponsored engineering. This could be etched onchain: `if (bal > 1 ether) { to.call{value: bal - 1 ether}(""); }`
The Binance $5.6B drain is a masterclass in modern EVM exploitation. It wasn't a complex logic bug. It was an EIP-7702 delegation hijack: 1. Setup: Attacker funds 0x7c86 via Tornado Cash, deploys a sweep contract (0x63e8), and runs three live dry-runs on external wallets. 2. Execution: Attacker submits an EIP-7702 batch with 50 pre-signed authorizations (nonce n to n+49) to hit Binance 14's moving nonce window. 3. One authorization hits. Instantly, Binance 14 (an EOA) is reprogrammed to run the attacker's contract bytecode. 4. Execution looks totally organic: Binance 14 sweeps itself clean. Internal threshold alerts don't trigger because, from the nodes' perspective, the hot wallet is just executing its own transaction. 5. Binance 16 immediately auto-refills 28,000 ETH due to automated treasury rebalance scripts, feeding the exploit loop. The cold truth: you cannot forge an EIP-7702 delegation list. For this to execute, the attacker already held the raw private key or unconstrained signing access to Binance 14's HSM/KMS. But hey, 5.64 billion drained across ETH, BTC, and Tron. 2.54 billion frozen by Tether, Circle, Ripple, and World Liberty within hours. Code is law until the stablecoin admin keys log in. Binance got bailed out by the very centralized choke points the cypherpunks warned you about. Hardware wallets leak your home address. Centralized exchanges leak the keys to the kingdom. Self-custody on native, non-delegated chains remains the only honest baseline. At least you know what to avoid.
Community note
The quoted comment appears only in an AI-reconstructed source (explicitly labeled not original) uploaded to explorers; no source comments exist in deployed bytecode, and core features match independent decompilations/on-chain data. etherscan.io/address/0x63e8… gist.wavey.info/Ta3FgAxastgj42… x.com/thearsondragon…
103
310
2,013
279,927
Lock retweeted
90% of software engineering in 2026: Engineer 1 → AI: “Build this and open a PR” Engineer 1 → Engineer 2: “Can you review?” Engineer 2 → AI: “Review this PR” Engineer 2 → Engineer 1: “LGTM” The irony: both engineers use the exact same AI model.
150
44
1,063
154,066
Lock retweeted
Fascinating mind virus ripping through parts of open source right now. Listen, the code is good or bad whether it was written by math or by mind. Coder or clanker. Merge good code, reject bad code. You don't need a fucking code of conduct or contributor covenant for that!
Guix banned every AI contributions Nix has no competition anymore, cool
199
158
3,318
95,832
Lock retweeted
Launching the 💎 Timeless Typeface Family One super family of Grotesk, Sans, Serif and Text, all variable with matching italics. Free to use. We’ve been working on this for a couple years now, hope you enjoy them Everyone deserves beautiful typography. timeless.co/type
82
141
1,809
324,448
Lock retweeted
Cursor can now build charts and diagrams right in the chat. Use /visualize to analyze data and see the answer inline. Available now in the Agents Window.
201
231
3,836
454,900
Lock retweeted
Info dump on Bend, HOC, next steps, etc. I'm preparing my trip to SF for the $20m raise. Plan is to have 2 internal teams: - BendCore: Bend's theory, compiler, ecosystems, adoption, etc. - SupGen: internal symbolic AI R&D (goal: GD-free GPT-3) Below are some ways on which the language will improve. Proof Kernel: - fully rewritten in Bend (no more TypeScript) - support for live λ contraction (largest Lean expressivity gap) - funext + univalence (most likely HOTT-like, NOT cubical) - perhaps bring self types back from Kind; they're powerful - of course, all that must be justified by the formalization Compiler: - fully rewritten in Bend (no more TypeScript) - keep improving in all directions. faster, safer, better - target HTML apps (WASM + WebGPU) and AMD GPUs - support for clustering, so it runs on 8x DGX B300 etc. - way better support for shared atomic arrays - more parallelism options (not just fork/join) - apps must run identically on desktop, server, web, mobile - all use cases of CUDA & Metal must be reproducible in Bend Ecosystem: - a 3d game engine, Unreal level - AI framework / PyTorch / llama.bend / etc. - full blown crypto libraries - full blown networking libraries - every database / api integration - all good parts of mathlib, npm, hackage should be in Bend - anything else the community asks for The teams will be small and focused. We'll ship all these things with world-class quality, because we will heavily use AI inference, guarded by Bend's LAWS, to grow our own ecosystem, to the point it becomes the largest and most compelling language to use. Bend 2 launch is just the first stage. What matters is how it scales. It is a language evolved by AI, secured by math. That's Bend's thesis. I'm also merging StudioVibi and HOC. Vibi will be a sub-team on the BendCore team, responsible for building vibe-coded games with Bend. That makes sense since we'll be maintaining our own 3D game engine now. Also, we've recently published BendHub. Access it on BendLang's website. You can now publish a named, versioned library for other people to use, and there is even a "mini hacker news" on Bend's landing page, so you can discover and post packages, and upvote, downvote, and discuss them. This is just a first step. You can also finally spend Bend Credits on something: a namespace. Not the most compelling use case (BendAI, or whatever we call it, will be the main one). But it is the first use for it. I also should talk about Bend Credits quickly. These should be seen as the Robux of Bend's ecosystem. You will be able to use it for everything that HOC produces. For example, once we ship games, these same Bend Credits will be spendable on in-game assets. If we launch Kindelia, Bend Credits will be convertible. And, of course, once we have our models, and SupGen, this is how you'll have access to them. You can buy Bend Credits in our website today, at a time-limited 50% founder discount. If you do buy them, please keep in mind there isn't much use for it yet, but you can expect more to come. We sold ~$3.5k so far 🥳 I'm very thankful to these who bought, despite the limited applications. That's basically the first time HOC makes any money lol On adoption. This month, we had more installs than Zigs on Homebrew, which is kinda nice, but not really expressive given it was a launch. Roughly 400 distinct non-cloud IPs use the Bend command every day, and that number seems to be stable. I have no idea what this means but looks low, so I'll keep working to make Bend more useful and to let it be seen by way more people. I like Bend's AI+LAWS evolutionary idea, because it dogfoods Bend's own thesis. If it works, the ecosystem will grow at an unprecedented rate - faster than any other language to ever exist. And that will make it way more useful and compelling to use. If it doesn't, then that means the entire thesis behind Bend itself wasn't that good to begin with, and the language thereby deserves to die anyway. Makes sense, doesn't it? I can't wait to see this play at scale. That's all for now bye
60
40
842
38,401
This is so good! wnat everyone to read it.
1
66
This is exactly my thought after working on a few ai-driven projects. new era of compilers.
I’m seeing teams at Vercel iterate just as fast on Zig, Go, Rust projects as TypeScript & Python ones. The days of language or runtime choice based on human convenience are over. Agents are the new compilers. They compile intent into fast software.
26
Lock retweeted
Grok 4.7 comes out in 10 days
Replying to @haider1
But just look how incredible grok 4.6 is
2,801
2,713
34,362
10,391,803
Lock retweeted
some engineers are struggling to adapt to using agents because they are not used to being outcome oriented.
149
205
3,595
246,954
Lock retweeted
Introducing terminal-code: VS Code inside the terminal - VS Code compatible CLI - works over ssh - syncs with your terminal theme terminal-code.com
517
617
7,636
2,634,520
it’s about time.
Introducing Grok 4.6. It delivers frontier intelligence and is a significant improvement over Grok 4.5 at the same price.
41
Lock retweeted
Agents can write code faster than teams can review, deploy, and maintain it. Today we’re introducing the Agent Development Lifecycle and the Cloudflare primitives that underpin it. cfl.re/4bw6XU5
22
55
429
43,626
Lock retweeted
Accurate 😂
3,769
4,614
47,399
13,666,607
Lock retweeted
now that the dust is settling around the last wave of model releases, and i've had enough time to use all these models in practice, let me share a more complete set of thoughts 1. grok 4.5 is probably the single most significant event during the last couple of weeks i've been talking with many heavy users across model families, and it's pretty much a consensus that grok 4.5 is the most "pleasant" frontier model to work with day to day. it's incredible how precisely the team behind it found this perfect sweet spot and created a model that's so fast, efficient and capable it proved spacexai is now a 3rd real player in addition to anthropic and openai. they have real time data from the biggest public townsquare of humans, they have acquired a popular agent harness, and now they have proven they can build great models. and if you look closely, they are designing their own chips, they have their own data centers, they can send GPUs into the space and create tokens out of sunshine holy shit 2. speaking of data, human usage over a harness proved to be extremely important for training good models. grok 4.5 was the first model that incorporated cursor's data and it made a massive difference compared to previous generations of grok this explained why amazon mandates employee usage of kiro, why meta installed mass surveillance over employee devices, why anthropic bans 3rd party harnesses, and why google is still struggling with gemini - because they don't have a popular harness with mass adoption to collect the data this is part of why i don't think the subsidized LLM subscriptions will end any time soon, because a wide consumer adoption is the best source of data collection. we're paying the subsidized tokens by teaching their models how to get work done 3. opus 5 flopped. almost no one likes it. the only people who like it seem to be using it to one-shot 3d games that look impressive but no one will ever buy anything that AI can one-shot is just the definition of garbage, because if you can one-shot this thing with a quick prompt, you should know that it means billions of other people can also do it - you will not create anything of value this way and this is just a symptom of a more fundamental problem that model training is heading down a slippery slope where machine verifiable outcome is dominating over human feedback the latest training process rewards the agent for running for a long time and finishing a complex project, yet no longer seems to care about how the agent talks to its human jargons, walls of text, "an honest mistake" - opus 5 showed us that we need AI that's more human friendly. let's not build a world where we end up working with robotic a**holes all day 4. fable 5 remains undefeated as the upperbound i talked about this in my previous post about wisdom vs diligence. the benchmarks blend both together so it's not easy to see, but fable 5 is the GOAT on the "wisdom" dimension despite it not winning on every benchmark. if you used it meaningfully, you know what i'm talking about that said, it seems anthropic is extremely paranoid about other players, including open models, reaching the same level of intelligence, which is an indication that the moat is not strong. kimi k3 is just a preview of what it looks like at the same time, fable is the first time token cost is becoming a very real problem. it's the only model so far that i can't afford to keep using all day. i suspect this will remain true for a while, that we have to pick and choose what tasks to give to fable-tier models, not using them as a daily driver 5. openai is in an interesting position gpt models have been great at efficiency, but now grok is also very competitive. gpt also haven't quite reached the same wisdom upperbound where fable is yet - although gpt 6 may change that i think there are two angles for openai to pursue: - continue to bet on efficiency, and go after enterprise adoption while claude is too expensive and grok has a brand tax to pay there. this is a very viable strategy - or.. compete head on with fable on wisdom and win against them on the "human friendly" aspect. although traditionally this hasn't been the strength of openai models either, so this feels like a low-ROI option alright, that's a bit of a long post but the landscape is just becoming increasingly complex. hope these thoughts are helpful in terms of providing a reference for how to rationalize everything happening
156
102
1,571
140,929
This chart says so much.... - Literally the exact same prompt. - All long horizon one-shots. - Totally reflects real-world experience.
252
238
5,854
1,707,005
Lock retweeted
Introducing Nimbus - docs for the agentic web 🌧️ Nimbus is an Astro framework for building docs, made for human and agentic workflows. - own every file, no theme to fork - agent-native: llms.txt, .md twins, MCP - features install as recipes your agent applies - support for agentic authoring, with a built-in prose linter - open source We've dogfooded it on our Cloudflare Docs this week (which has 8,700+ pages) and cut build times from ~19m to ~7m now. Your docs are product zero, they deserve the same care as the product itself. It's still really early and a bit of an experiment, so I'm excited to see where this ends up.
11
17
181
21,197
win-win
SuperGrok Heavy now includes X Premium+ at no extra cost. Just link your X account in the Grok app to activate it instantly.
1
2
55
I like what you just said Grok 4.5. good job!
41