ZRC20 Explained The first native on-chain token standard built for Zcash. Learn how ZRC20 works and how it brings fungible tokens directly on-chain. ⏳ Applications are closing soon. → zrc20.io

24 hours left to bring Deaton, the first ever tokenized dinosaur, to @Solana Own a piece of history: app.jurassic.finance

The European Parliament voted AGAINST Chat Control. 314 to 276. And it passed anyway. Let me tell you how: they needed 361 votes to say no. On the last day before vacation. Every empty seat counted as a yes. They lost the vote. They won the law. That’s not democracy. That’s a trick. #ChatControl

we are all concerned with the token economics favouring the blackhats - while a simple git scraper enabled a 1.7M hack today. Commit pushed to github in '24 btw. How do we recommend dApps to our friends and family with such things happening?

🚨Taiko drained for ~$1.7M. Root cause: a private key committed to a public GitHub repo. enclave-key.pem, the RSA key used to sign all of Taiko's SGX enclaves, sat in the public taikoxyz/raiko repo. That key is the whole trust model. The attacker derived MrSigner from the public key, signed their own malicious enclave with the leaked key, and registered as a trusted prover. The L1 contracts trust any enclave whose MrSigner matches. It matched. From there: forged SGX attestations on fake L2 blocks, processMessage() sets the message to RETRIABLE, retryMessage() does zero proof verification, funds leave. No key theft. No social engineering. No SGX exploit. Just a .pem in a public repo. Good opportunity to recall that SGX is broken. But here, nobody even had to break it. It's just yet another key management failure. The whole system was only ever as strong as the secrecy of one RSA key, and that secrecy depended on a human not running git add . on the wrong folder. AI greps every commit of every public repo at machine speed. Assume that is already happening. The only real exit: a verifier that checks a succinct validity proof of the L2 state transition. It trusts no enclave, no MrSigner, no operator discipline. It checks the math. In that world this exact attack becomes cryptographically impossible rather than operationally unlikely, because there is no privileged key whose leak forges the entire system. There is just a proof. Stay safe.