The teams and I are focused on the CryptoBilis incident. If you bought a Ledger signer from CryptoBilis and have not set it up, do not set it up. If you have set it up, transfer your assets promptly to a new signer with a new recovery phrase. Ledger will never call you, message you directly or ask for your 24-word recovery phrase. If you have a tampered signer, contact Ledger Support before sending it anywhere. We want to examine tampered signers, and Support will give shipping instructions. If you lost funds, file a report with local law enforcement first and coordinate with them before opening or sending the signer. Ledger is reviewing its reseller controls and anti-tamper protections. We invite researchers and other vendors to work with us on tamper-detection and chain-of-custody practices. If you did not buy from CryptoBilis and want to inspect the inside of your signer, the guide is at support.ledger.com/article/4…. Use caution and make sure your recovery phrase is backed up first, because opening a signer can damage it. Some claims and figures circulating online are unverified. Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates.

Financial privacy just went institutional. Regulators are paying attention. Grayscale Investments, the world's largest digital asset-focused investment platform¹, joins @GFI_charter at @token2049 Singapore on Monday, October 5, for a panel discussion on privacy-preserving assets and Asia's regulatory ecosystem. Panelists include: ↳ @zooko, Founder of @Zcash ↳ @Krista_Lynch_, Head of Trading and Capital Markets at Grayscale Investments ↳ @sudo_ml, Executive Chair, @sovright_ ↳ @liz315, CEO, @LeastAuthority & GFI Industry Fellow ↳ Moderated by Prof @DavidKChuenLEE, Chairman, Global Fintech Institute. Register here: luma.com/y362597j

1/ Somewhere in your company today, an expert rejected a perfectly plausible answer. A controller caught a revenue figure that counted deferred bookings. A security engineer blocked a release that passed every test but would have handed an AI agent write access to the production database.

10h ago @litecoin experienced a coordinated attack on the chain that resulted in 13 blocks reorg that took more than 3h to generate. During this time attackers were performing double spend attacks on multiple cross-chain swapping protocols. We are investigating the situation.

I was recently at Real World Crypto (that's crypto as in cryptography) and the associated side events, and one thing that struck me was that it was a clarifying experience in terms of understanding *what blockchains are for*. We blockchain people (myself included) often have a tendency to start off from the perspective that we are Ethereum, and therefore we need to go around and find use cases for Ethereum - and generate arguments for why sticking Ethereum into all kinds of places is beneficial. But recently I have been thinking from a different perspective. For a moment, let us forget that we are "the Ethereum community". Rather, we are maintainers of the Ethereum tool, and members of the {CROPS (censorship-resistant, open-source, private, secure) tech | sanctuary tech | non-corposlop tech | d/acc | ...} community. Going in with zero attachment to Ethereum specifically, and entering a context (like RWC) where there are people with in-principle aligned values but no blockchain baggage, can we re-derive from zero in what places Ethereum adds the most value? From attending the events, the first answer that comes up is actually not what you think. It's not smart contracts, it's not even payments. It's what cryptographers call a "public bulletin board". See, lots of cryptographic protocols - including secure online voting, secure software and website version control, certificate revocation... - all require some publicly writable and readable place where people can post blobs of data. This does not require any computation functionality. In fact, it does not directly require money - though it does _indirectly_ require money, because if you want permissionless anti-spam it has to be economic. The only thing it _fundamentally_ requires is data availability. And it just so happened that Ethereum recently did an upgrade (PeerDAS) to increase the amount of data availability it provides by 2.3x, with a path to going another 10-100x higher! Next, payments. Many protocols require payments for many reasons. Some things need to be charged for to reduce spam. Other things because they are services provided by someone who expends resources and needs to be compensated. If you want a permissionless API that does not get spammed to death, you need payments. And Ethereum + ZK payment channels (eg. ethresear.ch/t/zk-api-usage-… ) is one of the best payment systems for APIs you can come up with. If you are making a private and secure application (eg. a messenger, or many other things), and you do not want to let people to spam the system by creating a million accounts and then uploading a gigabyte-sized video on each one, you need sybil resistance, and if you care about security and privacy, you really should care about permissionless participation (ie. don't have mandatory phone number dependency). ETH payment as anti-sybil tool is a natural backstop in such use cases. Finally, smart contracts. One major use case is _security deposits_: ETH put into lockboxes that provably get destroyed if a proof is submitted that the owner violated some protocol rule. Another is actually implementing things like ZK payment channels. A third is making it easy to have pointers to "digital objects" that represent some socially defined external entity (not necessarily an RWA!), and for those pointers to interact with each other. *Technically*, for every use case other than use cases handling ETH itself, the smart contracts are "just a convenience": you could just use the chain as a bulletin board, and use ZK-SNARKs to provide the results of any computations over it. But in practice, standardizing such things is hard, and you get the most interoperability if you just take the same mechanism that enables programs to control ETH, and let other digital objects use it too. And from here, we start getting into a huge number of potential applications, including all of the things happening in defi. --- So yes, Ethereum has a lot of value, that you can see from first principles if you take a step back and see it purely as a technical tool: global shared memory. I suspect that a big bottleneck to seeing more of this kind of usage is that the world has not yet updated to the fact that we are no longer in 2020-22, fees are now extremely low, and we have a much stronger scaling roadmap to make sure that they will continue to stay low, even if much higher levels of usage return. Infrastructure for not exposing fee volatility to users is much more mature (eg. one way to do this for many use cases is to just operate a blob publisher). Ethereum blobs as a bulletin board, ETH as an asset and universal-backup means of payment, and Ethereum smart contracts as a shared programming layer, all make total sense as part of a decentralized, private and secure open source software stack. But we should continue to improve the Ethereum protocol and infrastructure so that it's actually effective in all of these situations.

Happy Monday aka Web3Privacy Newsletter day! The tool of this week is @fileverse as that's the tool you all keep talking about! Also, as you all know, this year's Privacy Awards are happening so don't forget to send your inquiries here on X. For newsletter, we have article from @veilnyx_hq called New Era of Privacy, @brave testing their AI browser mode or information about Device Activity Tracker that exposes flaw in Singal and WhattsApp from @CyberInsidercom Other news from @WIRED, @arstechnica, @EFF, @404mediaco, @CoinDesk or @a16zcrypto. Also featuring great educational video from @naomibrockwell on how to shop online anonymously and speech about sexism from @ml_sudo from Etehreum Privacy Stack. You can read it all here: news.web3privacy.info/2025-5… Newsletter curated by @xgotchmax

Ethereum Privacy Stack lineup is a blast! 50+ minds shaping all stack domains from network-level privacy to application privacy. feat @VitalikButerin, @ameensol, @SCBuergel, @LefterisJP, @ncsgy, @hwwonx, @tsu_kareta, @Fatalmeh, @MarinaMarkezic, @miroyato, @ml_sudo, @Pol_Lanski, @ontologymachine, @PryvitKyle, @austingriffith, @oskarth & much more Tomorrow: eps25.web3privacy.info Brought to you by @PrivacyEthereum & @web3privacy

Everything would be better if we stopped talking about the values of Ethereum and instead started talking about the value propositions

Updated Privacy dashboard: explorer.web3privacy.info New features: 1. Pie charts for visual privacy scoring instead of a 0-100 nominal scale 2. Card system for individual projects 3. Tooltips when hovering over scoring breaks down chart into three categories (Technology, Openness, and Privacy) 4. Migrated from Nuxt and vue :right_arrow: next.js and react.js 5. Replaced the table layout for all projects with a catalog layout 6. Targeted mobile browsing :mobile_phone: with a responsive design 7. New filtering and pagination engine which creates a snappier response. All projects won’t need to load at once when interacting with the explorer. 8. Individual project pages contain more concise information regarding Openness, Technology, Privacy, Security and Audits. 744 privacy projects across more than 6 ecosystems You can read the latest forum post on the updated explorer here: forum.web3privacy.info/t/exp… check @AndyGuzmanEth, @barinov, @wslyvh, @pcaversaccio, @ml_sudo