Sneaky
so remember when certain DPRK groups stored their C2 infra details (often base64-encoded & XOR-encrypted) in smart contracts? it was called EtherHiding. well, our PolinRider "friends" (and other groups) have gotten a bit more "creative". they now use a new pattern called "NullReceiver": simply put, they send a zero-value tx with zero calldata, while hiding the C2 IP address directly in the `to` address lol. let's take real-world example:
- tx hash: `0x910d35c6620bea357c867bd93b291dc6feb1990bb57a0a063fa652cd29d096b2`
- `to` address: `0xa658863ea658863e68656c6c6f6970626f742121`
this will lead to
- a658863e -> 166[.]88[.]134[.]62
- a658863e -> repetition of the above IP
- the rest (68656c6c6f6970626f742121) is some string "helloipbot!!"
2
776
Glad to see the approach in the March 26-09 letter extended here. Future looks bright for defi 🟦⛓️
.@CFTC Staff Issues No-Action Position to Providers of Passive Software: cftc.gov/PressRoom/PressRele…
1
1
11
1,083
Benjamin Lambert retweeted
With today's Senate action, we now know four things:
1/ Today's vote mattered. After years of negotiations, it was largely a partisan vote when the music stopped. That’s unfortunate because so many people on both sides of the aisle worked hard to improve this bill. And yet, the Democrats voted as a block against the most comprehensive, bipartisan bill ever written. Maybe there will be an opportunity to bring everybody back to the table with a commitment to get a bill done — I hope so.
2/ The banks did everything in their power to kill the Clarity Act. The big banks and the small banks worked together to hand @realDonaldTrump a loss and stop financial innovation and competition in America, and they successfully put several Republicans on record as anti-crypto. This was not a zero sum game, but they made it one.
3/ The GENIUS Act is the law of the land. Anybody who wants to earn more than 0.1% on their bank account should look at other options.
4/ There’s another path, and there's zero time to waste. @ChairmanSelig and @SECPaulSAtkins have spent more than a year preparing for this moment, and they are ready to put in place rules that will enable the future of finance. It's time to get it done.
3
16
119
11,477
🟦
Base is proceeding with our plans to ship EIP-8130 in an upgrade later this year. As a reminder, this will unlock features many users and developers have been excited about like:
- Batch transactions
- Gas abstraction
- Multiple (performant) key types
- Key rotation
- Path to post-quantum safety
Most importantly, EIP-8130 is ready to be implemented today! It’s simple and gives accounts that are portable across chains. Over the last few weeks, we’ve worked closely with EthLabs to explore how we can bring 8130 and 8141 together. We made major progress by identifying a few options for expressing Keystore accounts on Frames while maintaining performance benefits. This gives us confidence that implementing 8130 is not a one-way door and does not block us from enabling 8141 in the future.
At the same time, there are also significant challenges with 8141 as it’s written today:
- The generality of Frames, including arbitrary account-defined authentication and two-dimensional gas accounting, comes at the cost of simplicity for chain operators.
- This complexity extends to tooling. In 8130, authentication and fee payment are explicit transaction fields with clear defaults, whereas in 8141 they must be composed as frame prefixes, which is harder to implement and reason about.
- And most importantly, optimistically it’s at least a year out.
We’re grateful for the collaboration with EthLabs and other stakeholders. Because of those discussions, we now have confidence we can ship EIP-8130 without it being a one-way door for Base or any other chains that ship it, with a path to adding in support for 8141 in the future as it makes sense.
We believe EIP-8130 is the best path forward, one that delivers cross-chain compatibility without compromising on performance. We’re excited to deliver these features to users and developers later this year, and would love to talk to other chain operators who are looking to do the same.
6
722
It happened. My parents finally asked me about the CLARITY Act this weekend. Completely unprompted. They do care.
3
21
881
Benjamin Lambert retweeted
Let your senators know to vote YES 🗳️ for Clarity ↓
standwithcrypto.org/action/e…
1
1
9
597
💯
Look, I obviously don’t agree with Jesse on everything, and he himself may tell you that I am pretty annoying with my dissents inside CB. But to answer your question, I think it was because it was earned.
Jesse willed Base into existence from nothing. In fact, Base sort of created the category that Stripe, Robinhood etc have followed into. Robinhood and Johann are doing a great job btw, very impressive and good to see trenches eating again, but hard to say if their chain would even exist today if Base didn’t exist.
Base was created before the major Solana memecoin wave (6 months or so before WIF was created in 2023) which means Jesse fought to ship this through the post-FTX bear market.
Obviously Jesse made some mistakes last year. Building stuff is really hard, and building it inside a big public company is even harder. I wouldn’t have made all the same choices he did, and not defending those choices either.
But one thing I respect a lot about Jesse is that he still turns up and continues to put the work in every day despite all of CT treating him as a punching bag. Not sure how many other ppl I know that are willing to do that.
15
879
Look, I obviously don’t agree with Jesse on everything, and he himself may tell you that I am pretty annoying with my dissents inside CB. But to answer your question, I think it was because it was earned.
Jesse willed Base into existence from nothing. In fact, Base sort of created the category that Stripe, Robinhood etc have followed into. Robinhood and Johann are doing a great job btw, very impressive and good to see trenches eating again, but hard to say if their chain would even exist today if Base didn’t exist.
Base was created before the major Solana memecoin wave (6 months or so before WIF was created in 2023) which means Jesse fought to ship this through the post-FTX bear market.
Obviously Jesse made some mistakes last year. Building stuff is really hard, and building it inside a big public company is even harder. I wouldn’t have made all the same choices he did, and not defending those choices either.
But one thing I respect a lot about Jesse is that he still turns up and continues to put the work in every day despite all of CT treating him as a punching bag. Not sure how many other ppl I know that are willing to do that.
331
130
3,432
330,362
Benjamin Lambert retweeted
In July, I called on the Senate to advance the Clarity Act — a bill to establish a comprehensive regulatory framework for digital assets and upgrade our ability to prevent bad actors from exploiting these critical technologies.
When the Senate returns from August recess, I strongly urge everyone to remain at the negotiating table, agree to the motion to proceed, and continue the legislative process. Failing to do so would send a troubling signal to our allies and adversaries alike that America is unwilling to lead on the future of digital assets and willing to forgo enhanced national security tools to combat their misuse.
755
3,315
19,324
1,000,956
Whenever I'm having a bad day, I look at my 2021 NFT purchases and remember that things can always depreciate 99.9% further.
Still a cool collection tho
3
22
2,336
Benjamin Lambert retweeted
Thank you @SenatorTimScott, @SenLummis, and @JohnBoozman - along with senators and staff on both sides of the aisle - for taking a huge step today to advance the CLARITY Act.
Major legislation requires real compromise, and while the industry did not get everything it wanted, this bill is an extraordinary achievement and strikes the right balance. By bringing emerging technology under a clear federal umbrella while preserving the gold-standard protections of the U.S. financial system, this bill represents a major legislative achievement that the Senate should pass without delay.
25
89
563
146,269