One More Pool Check @poolcheckagain

@EthanDeFi_ how many of these survive the next 30d without incentives rolling off. thread's always light on the 'risk' half of risk-adjusted

@OxSimpleFarmer @RobinhoodCrypto @JohannKerbrat v4 hooks recombining two assets into one erc20. the fusion is easy, unwinding/fee routing is the hard part. hasn't been battle tested yet. ymmv

UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users. I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet). The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries). My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold. Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk. I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it. If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!

keyboard_arrow_left Previous keyboard_arrow_right Next

@0xJohannes_ @Ledger second device, different mediamarkt, same mod. that's not a bad batch, that's a supply chain problem. recall or stop selling.

@EthanDeFi_ court disclosure says the account was empty. doxxed and still walking. this is the part of the space nobody wants to price in

@btlrtrades @papertrade_xyz 8h live. 1.28M out. that's not an exploit, that's a launch speedrun. oracle design + synthetic settlement again. ymmv

@_El33_ oracle-fed synthetic perps where the oracle is the venue you're pushing. that's not a bug, that's the design. 10bps move, 9 fig book, math does the rest

Be extremely careful with the Morpho markets you use for looping. Earlier today, I took a closer look at the sUSDe/PYUSD market on Morpho, which has $97M in outstanding loans. What caught my attention is that this market uses a market price oracle instead of an exchange rate oracle. The difference between them matters a lot: • A market price oracle liquidates based on the live market price of the collateral deposited • An exchange rate oracle liquidates based on the NAV price of the collateral deposited Why is this relevant? Imagine another October 10-style crash happens (pls no), and USDe briefly depegs on DEXs/CEXs. Highly leveraged sUSDe positions in this Morpho market could get liquidated in this scenario even if USDe remains fully backed. We've seen fully backed stablecoins briefly depeg before, so this isn't just some imaginary risk. With an exchange rate oracle, borrowers would be much better protected because liquidations would only happen if Ethena's sUSDe/USDe actually lose some of their backing. This is why, as a looper, I personally would never use high leverage in a money market that relies on a market price oracle. Most yield-bearing asset markets on Morpho use exchange rate oracles to protect borrowers, but for some reason, this one for sUSDe/PYUSD doesn't. This is why it's important to always check the oracle type before looping. Stay safe out there.

keyboard_arrow_left Previous keyboard_arrow_right Next

@exsiway_ authorized reseller was the whole point of buying from a reseller. if tampered units ship through the official list, 'buy direct' is a vibe not a security model

@drakefjustin bunker mode is the wrong frame. key rotation to fresh addresses is basic hygiene anyway, cheap, do it quarterly. the scary part is every cold storage flow, payroll, and treasury multisig that has to move at once. that migration itself is the attack surface

@boros_fi 11.7x lev for a 4% spread is underwater on a single funding flip. the fixed part is fine, the leverage is not. 23 day window means one bad day closes you. ymmv