The rsETH markets on Aave V3 and Aave V4 have been frozen. Aave's contracts have not been exploited and this is an exploit related to rsETH. The freeze follows an exploit of the Kelp DAO rsETH bridge. Freezing the rsETH markets prevents new deposits and borrowing against rsETH collateral while the situation is assessed. We are reviewing information about rsETH borrows on Aave that occurred after the exploit and will share more details as soon as possible. If the protocol accumulates bad debt from this incident, we'll explore paths to offset the deficit.

As much as it pains me, but for the things I have influence over, I will switch to the default: SECURITY > NEUTRALITY A “pause everything” function? A daily limit? An extra safety-net layer that every transaction has to pass through before being processed? Yes!

the negative and positive things that have happened since saturday are the result of _centralised_ points of building. everything that has happened (the bad and good things) would not have happened if we built in a truly decentralised way. overall, dprk would have far fewer "gains" if we stuck to cypherpunk principles. like, dprk does _not_ focus on smart contract hacks, they almost exclusively target centralised attack vectors. if we want to win against dprk (and any other state actor, which all focus on web2-based attack vectors), we need to go full cypherpunk mode. if this is not a wake up call, i do not think we will get a second chance.

User protection is a core promise of CoW Swap. We are therefore proposing a discretionary grants program so that victims of the April 14 DNS hijacking incident can be made whole as quickly as possible. Proposal details can be found on the CoW DAO forum, here: https://forum.cow.fi/t/cip-draft-discret… Note that because of the high sums involved in the incident, this proposal will need to pass governance to go into effect. Please signal your support or give feedback directly in the forum.

41 kidnappings of crypto holders in France in 3.5 months of 2026. Why? 🥖 French tax officials selling crypto owners' data to criminals (Ghalia C.) + massive tax database leaks. Now the state also wants IDs and private messages of social media users. More data = More victims.

Effective Monday, 5 pm EST, the @foundation platform will be decommissioned and will not be brought back online by the Blackdove team. - @TransientLabs is offering a migration option. - All assets from FND have been pinned by the community separately from the platform to ensure availability in the future. Any questions related to this next phase can be posted tagging the @foundation account.

I left a little gift for you. Do not open til Christmas 40,000,027 AD. -----BEGIN AGE ENCRYPTED FILE----- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNjcnlwdCAxZkFiRzhPU24vU0pnQy8x YWlBY1R3IDE4CnN6UFFTcVg0VTF4K0xDZTlpYVNZUnJQQmpQZWxySUNQMkdlYXhu Z2MyNHcKLS0tIDBvTjQwbFE4bTgydTVwV1VZUWg5dG5OQXVNWTVHdFE4RzZrR2xT eUt4aHcKLevHi4k80grNqdAU103UrMNX5h++THwl+ReCwzOfDHMwj4AuCW2R5qGz xpNdWWX1eodU309FXoNCgw== -----END AGE ENCRYPTED FILE----- This is what "paper keys" should look like. And this is how you can store them. The zen of key management is: there is no "key" to steal or to lose. Just encrypt, and exhale. Otherwise: If you try to lock down a plaintext key, you're in a double bind: 1. If the only copy of your key is in the fire-proof safe that got washed away in a flood, game over. 2. If the key gets stolen, game over. What a constant-anxiety cocktail. But if the key is encrypted? Well, it's pretty hard for me to lose it now that I put it on Twitter. And those would-be key thieves can have at it all they want. Whenever I need to use this key, I'll just type in the password, and be back to slinging my stack of CryptoKitties NFTs. Oh - did I just give away the surprise? But where is the "actual" key? No where. Not in a safe. Not in a password manager. Not etched in platinum. There is nothing to leak, and nothing to misplace. -- If you got yourself a Ledger "hardware wallet", you'll see they ship it with a little piece of paper that has the plaintext key written on it. (Just typing that last sentence makes me want to pull my hair out) Now, my brother, what do you do with this paper? Hide it? If the Ledger bricks (which I've seen happen) and the paper gets lost/stolen (which everyone has seen happen), you're done for. The fragility of that method is nerve wracking to the extreme. Here is how to reduce your key management anxiety dramatically: 1. Create an encryption key. This is your Master Key, and new best friend. 2. Encrypt that encryption key with a strong password. 3. Shred all remnants of the plaintext Master Key. 4. Now use your encrypted Master Key to encrypt all your "wallet private keys". It's easy: type in the password to decrypt the Master Key, and use that to encrypt all your "private keys." 5. Shred all remnants of your plaintext private keys. 6. Whenever you need to use your private key to sign something, reverse the process: decrypt the Master Key to decrypt the private key, and sign the thing. Diversify and make redundant to taste. Store copies of your encrypted private keys. Store copies of your encrypted Master Key. However much or little you want. As long as you have a good password, it doesn't really matter if it leaks. In one line: The key to storing keys is encrypt them with an encrypted key.

GRANT OPPORTUNITY: We have 1 slot open in our upcoming epoch. Since 2023, we've given over 2870 ETH in funds in our epochs thanks to @GolemFoundation's staked ETH. This is a BIG opportunity to receive a no-strings attached grant. You should apply if you are: - growth stage - have early or promising traction - will benefit from funding - have a stellar track record and results to show for it - have a solid team If you're an impactful project building on @ethereum or categorize yourself as a Digital Public Good (DPG) as defined by @DPGAlliance please consider applying. Link to what qualifies as DPG in the reply to this tweet. Deadline: 18 May @ 3 pm ET. https://octant.fillout.com/epoch-12-new-…

What happens when you post a real Monet and say it’s AI? The coolest art social experiment I’ve seen in a while. Thank you @SHL0MS

You cannot understand cypherpunk in 2026 if your framework is macro. If your favorite hacker can explain what the Fed did last week, unfollow them.

Ethereum Foundation just quietly published kohaku-eth/railgun on npm. public access. signed build. transparency log. 32 downloads so far. the privacy layer is live. most people just don't know yet. @RAILGUN_Project

DO NOT use Telegram in sensitive applications. Telegram does not need to have its message encryption broken for users to be tracked at the network layer. Telegram sends MTProto over unencrypted TCP, exposing auth_key_id - a long-lived identifier tied to the client’s authorisation key. An ISP, hotel WiFi operator, mobile carrier, transit provider, or surveillance system on the network path can see that identifier if they can observe the traffic. It can remain stable across app restarts, IP changes, VPN use, network switches, and location changes. Secret Chats protect message content, but this leak is below that layer. That makes the attack passive. The risk is in retroactive correlation. Think a journalist using Telegram from different networks for months, then joining hotel or corporate WiFi under a real name. That one identity anchor could make old logs searchable for the same auth_key_id. The fix is simple - mandatory transport encryption for all MTProto connections, with no unencrypted fallback. Telegram chose not to do this. Source: @kaepora https://symbolic.software/pdf/gnmx-01.pd…

── Dappcon 2026 Speaker ── Ethereum stops being a single chain. It becomes an economic operating system. 🎙 The panel featuring @tw_tter and @VitalikButerin ↳ "The Ethereum Economic Zone" Ethereum’s credible neutrality makes it the only settlement layer everyone can agree on. The @etheconomiczone builds on that: specialized zones each optimized for a different purpose: nation-state compliance, security-first infrastructure, low latency, consortium coordination. Individually interesting. Together, transformative. The panel featuring Friederike Ernst and Vitalik Buterin explores what happens when these zones compose. Ethereum stops being a single chain and becomes an economic operating system.

The biggest problem that post-attention artists are facing today is that nobody has ever heard of them.

I was told everyone was going to sweep the CryptoPunk floor after the SpaceX IPO?

Base was down for almost two hours today, and the reason is the whole story: one bad block, and nobody else to keep the chain alive. A single consensus bug sequenced one invalid block, right after block 47806542, and every block after it just stopped. Base runs a single sequencer, so when that one machine choked, the entire network choked with it. no backup producer, no other validators to route around the problem. The exit was worse. the chain couldn't heal itself: node operators across the ecosystem had to manually restart before syncing recovered. and for those two hours there were no blocks, which means no trades, no liquidations, no withdrawals. if you wanted out, you couldn't, because leaving is also a transaction. And this isn't the first time. a sequencer handoff failure froze Base for 33 minutes last August, today it was nearly two hours. that's the part the "L2 is a blockchain" pitch skips: a chain with one sequencer isn't decentralized infrastructure that happens to be fast, it's one server with great branding, always one bad block away from a full stop.

Surveillance is creeping into everyday life. Even in Berlin, police are pushing for broader camera powers, and new surveillance laws are being rushed through. So I built 𝐤𝐚𝐦𝐞𝐫𝐚𝐟𝐫𝐞𝐢 (dot com): a walk/bike route planner that avoids cameras, fully offline on your device!

Everyone was mocking @brian_armstrong for using a fake CryptoPunk as his profile picture. Congratulations. Now he doesn’t use a CryptoPunk at all. Whether it was an official Punk or not, one of the biggest names in crypto was putting CryptoPunks in front of millions of people every day. Instead of appreciating that, people obsessed over whether the PFP was real. If someone with Brian’s reach chooses to represent your culture, maybe the first reaction shouldn’t be to push them away. Sometimes the community becomes the brand’s own worst enemy.