Quit_

More than 80% of Umbrella depositors are trying to exit the Umbrella module now that there's a real chance of getting slashed.
Aave is freezing the module in case resolution takes longer than the withdrawal cooldown (20 days) to ensure these users are fully slashable if needed.

Incident statement from LayerZero is out. As expected, the attacker was likely DPRK.
The DVN itself was not compromised as previously speculated, but rather TWO separate RPCs the DVN used to ingest state.
On top of that, attackers DDOS'd the DVN's primary RPCs to force it to fail over to the two compromised ones.
And the compromised RPCs served real state to anybody querying them, only serving malicious state to the DVNs. This enabled the attackers to bypass some of the other safeguards that were in place.
Do NOT underestimate Lazarus. This attack was sophisticated as fuck, make no mistake.
LZ

Hey @elonmusk dunno if you've seen but we've got this little thing going on in crypto and could use a bailout. You'd be doing us a huge solid, and what's $300M between friends after all?

Confidence in DeFi is at an all time low right now.
We need to go back to basics. No reason somebody looking to deposit eth to borrow usdc should be vulnerable to contagion from a bridge for liquid restaked rsKxyzstETH.
Return to pristine collateral.

from what I can tell re: kelp dao, this seems to be a combination of a 1-of-1 dvn setup and a compromised layerzero dvn. Apechain and other protocols with at least 2 required DVNs should be unaffected, but might be worth pausing out of an abundance of caution.

Wish I had better news but looks like WETH on aave is fucked.
Withdraw if you can but likely too late. After umbrella settles normal deposits should be partially withdrawable.
A big hit to the DeFi vision

Ok, genuinely impressed with the models that can be run on a single 3090.
Tool calls are still finicky without very direct guidance, but as a general knowledge chatbot there are some very capable (and fast!) options.
Makes it very tempting to jump into the blackwell deep end.

Check the date

Claude code is insane because it means you're no longer ever truly free from work.
At the gym? Can still write and deploy production code.
Out with the fam? Shouldn't get in the way of triaging that error that just cropped up.
I imagine this is how project managers have felt for years.

I've always been so careful. I always check addresses before sending: the first four, the last four, a random slice from the middle. Confirm on screen, confirm on ledger, do it again. Run a simulation, check the outputs.
Never made a mistake.
But last month I fat fingered my bank account number for my pet insurance coverage and today they directed my $5000 reimbursement to that wrong account.
And they say it posted successfully.
ggs. Pour one out for your boy, for today I join the ranks of the victims.

Situation: I have 14 competing side projects.
14? Ridiculous! You need to install openclaw and start bulldozing your to-do list!
Yeah!
Situation: I have 15 competing side projects.

First it was accounts paid to shill products, then accounts paid to slander competitors, now they're paying accounts to defend corporate decision making?
It's probably best to operate under the assumption that everybody on X is a paid shill except for yourself.
People think more followers = better content, but generally the opposite is true. There is likely an inverse relationship between number of followers and quality of content (and I say this as somebody with a "high" follower count).
Just as civilizations tend to destroy themselves upon reaching a certain degree of technical acumen, so to

Today, Kodas and Otherdeeds were upgraded to ERC721C compatible Creator Token contracts. This replaces our legacy royalty enforcement path with LimitBreak’s model, which is more compatible with how modern NFT marketplaces operate.
For now, both collections are in an open ruleset to avoid disruption. Existing listings remain fillable, however new listings on OpenSea / Magic Eden will include a 5% creator royalty.
Next week, we will switch to a restrictive ruleset. at that point, listings that don’t satisfy royalty rules will no longer be fillable.
If you have a deed or a koda that's currently l

OpenClaw security is quite simple: it's a desperate, underpaid personal assistant.
Yeah it can have an email and internet access, even sudo on a computer (not YOUR computer).
Firewall it, don't give it your logins, don't hand it your rolex and expect to ever see it again.