AussieWayne retweeted
🚨 DCENT HACK — WHERE THE HELL WAS EVERYONE?
When my XRP was stolen, I traced transactions involving ChangeNOW-labeled and Binance-linked addresses, raised concerns about THORChain, contacted companies, and filed an FBI report.
WE SOUNDED THE ALARM WEEKS AGO!
Where was the urgency? Where was the accountability?
And to the CRYPTO INFLUENCERS:
You have NO PROBLEM discussing the Binance hack. Suddenly, your microphones work again!
WHERE WERE YOU WHEN DCENT VICTIMS NEEDED YOUR VOICES?
You promoted wallets. You built audiences on trust.
When victims needed support?
CRICKETS.
Over 40 days later, still no publicly confirmed compensation or recovery plan.
THANKS FOR ABSOLUTELY NOTHING.
@DCENTWALLETS @binance @cz_binance @ChangeNOW
And to the influential voices who could help bring attention to victims:
WILL YOU SPEAK UP FOR DCENT VICTIMS?
#DCENT #XRP #Binance #ChangeNOW #THORChain
AussieWayne retweeted
Our new Community Hub brings two weeks of progress together: Stripe's actual test system, clearer Wallet screens and Gate preparation on a real phone.
See what works today and the next connected ticket test:
youtu.be/ZjqDZOO8O8k
#ZAVV #CommunityHub
ALT ZAVV Community Hub thumbnail. Hands hold a phone against warm evening lights. Large text reads "Real tests. Real progress." with "Stripe / Wallet / Gate", "Double-week development update" and "October 2026". The ZAVV mark appears at the top left.
AussieWayne retweeted
Follow Flare Metrics to get latest stats. Want something missing? Suggest it!
Top Validators · Oct 19, 2026
Most delegators: AU (1,109)
Most stake: Flare.Space (1.06B)
Top APR*: LightFTSO (10.83%)
Most free space*: NORTSO (547.9M)
*Reliability 100, live for more than 30 epochs
AussieWayne retweeted
One ticket. Next test.
Our new Community Hub update is on YouTube: Wallet progress, Gate testing and what still needs proving.
Watch the full episode:
youtu.be/QINzYbmkJX0
#ZAVV #CryptoWallet #SelfCustody #BuildInPublic #LifeCompanion
AussieWayne retweeted
🌍 ZAVV is on YouTube!
Follow Community Hub updates on identity, ownership, Wallet and ticketing, with 20 dubbed languages + subtitles.
Subscribe 🔔 Follow us on X. Repost!
youtube.com/@zavvnetwork
#ZAVV #ZAVVHub #LifeCompanion #DigitalIdentity #DigitalOwnership #DigitalWallet
AussieWayne retweeted
Built a quick web security scanner covering security headers, TLS/Certificates, DNSSEC/DNS hygiene with bonus SEO and Is-Agentic scoring.
Keep security as the #1 priority. Everything else secondary.
AussieWayne retweeted
Under 1% APY. With slashing risk and a 30-60 day lock.
That is what @Firelightfi 's stXRP vault paid in its first 13 hours, read straight from the contract.
Early data, one interval. But here is how to track it yourself, and why this is not enough yet 👇
How to read it:
The stXRP vault on Flare is an ERC-4626 contract. Its redemption rate is public.
Vault: 0x4c18ff3c89632c3dd62e796c0afa5c07c4c1b2b3
1. Open the address on flare-explorer.flare.network
2. Contract → Read proxy
3. Call convertToAssets(1000000). The result is FXRP per 1 stXRP, 6 decimals.
4. Write down value and time. Repeat a day later.
5. Change ÷ days × 365 = APY.
My readings:
Oct 6, 17:13 UTC: 1.0000719
Oct 7, 06:02 UTC: 1.0000846
That is about 613 FXRP accrued on 48.5M staked in 12.8 hours. Annualized: ~0.86%.
Let me be plain: that is not enough.
Stakers now carry slashing risk if a cover event exceeds the first-loss buffer. Unstaking takes until the end of the following 30-day period. In return they get less than 1%, plus points with no stated value. In Phase 1 the vault accrued roughly 3,500 FXRP in ten months. Points were the only compensation, and the early contributor pool (aka Firelight Points) still has no number.
What is missing to judge this properly:
- the covered amount per vault
- the premium rate operators pay
- the split between stakers, protocol and first-loss buffer
- the size of that buffer
- the Cover Registry address. The docs say all terms sit onchain "where anyone can check them" and then give no address.
Two things move the rate from here. More cover pushes it up. More deposits push it down, and the cap was just raised to $115M.
One interval is not a trend. Post your own readings and we will have one.
Firelight coverage is embedded in @SentoraHQ's USD Protected and Protected RWA Vaults. 🔥
RWA Vault: RWA strategies incl. leveraged looping and lending with RWAs as collateral.
USD Vault: diversified USD-denominated strategies, fully onchain via established DeFi protocols.
AussieWayne retweeted
A new app popped up wanting to serve an application on Flare - a self custody wallet that generates a seed phrase in the browser and allows you to manage the wallet.
Due to the nature of the website requesting a seed phrase a community member, @Deepincrypto1, flagged this project with a post warning about its risk and further pushed by @xrpen15.
This was the right call as it should go against all persons interests to allow the exposure of seed phrases/private keys in any website for any reason.
Further investigation into the application revealed a general lack of security which a website of this nature should certainly be employing including DNSSEC and security headers such as 'Content-Security-Policy' which prevents hijacking of the website, XSS attacks and such.
Additionally the seed phrase was not being stored securely. It was kept in the apps memory as well as remaining inside the pages HTML code (DOM). This makes XSS and similar attacks an even larger threat - if attacked the seed phrase could easily be stolen and thus user funds.
With these threats established, finding an attack vector is the next step - something that appeared far too quickly.
An XSS attack vector presented itself from the websites use of the official Flare Explorer's API to list transactions which includes ERC20 tokens. This is perfectly acceptable EXCEPT that the data was pushed into the page's HTML with a method 'insertAdjacentHTML' - this is dangerous as it will put any text into the page - which could even be: scripts!
So the attack became: deploy an ERC20 token and using the name field to push a payload (literally code). So when you send this token to a wallet that was created on the vulnerable website and the transaction history is loaded, the code will execute.
That's the attack: Deploy an ERC20 token with a token name that is malicious code and send any amount of the token to a victim.
Testing then suggested that this attack would have progressed to execute the payload from the ERC20 token. HOWEVER, somewhat ironically, the vulnerability was present in the codebase, but the exploit was mitigated by a separate functional bug that prevented the data from rendering.
Basically, if they fixed the bug in their website that was preventing ERC20 tokens from loading (as they normally should) - the attack would have succeeded.
It was hard to determine what was more disappointing, the absolute ease in discovering the XSS vulnerability or the fact that the website clearly had not even been tested with a wallet holding any tokens to confirm the page works.
So, the community worked here to protect users. An issue was flagged and an investigation could ensue. This led to reaching out to the project (@flare_vault) who, to their credit, promptly took the app down.
From the sounds of it, they have an underlying product that they wanted to push with a self custody wallet - something they now are reconsidering. Before use of any of their products I'd expect a security audit for safety.
This incident highlights the danger of inexperienced developers "vibecoding" products. AI is not good enough yet to hold your hand. You must still prompt it - and it couldn't be easier.
The bare minimum is to ask for a security review by AI which almost certainly would have discovered these issues immediately. It wouldn't even take a frontier model to detect this simple attack.
Using AI to code is fantastic - but use it to its fullest extent, especially for security. Keep asking questions about security and how to improve security on all fronts: in code and in deployment.
Keep safe - keep suspicious!
Oh yes please and thank you.
You deposit into a vault. You earn yield. But do you actually know what they're doing with your money?
Most people don't ask that question. They see an APY and click deposit. That's it. No idea where the yield comes from, what pools the funds are sitting in, or how much risk is being taken on your behalf.
@flareforward is looking at building a public transparency page where you can track exactly how protocols like @upshift_fi manage vault funds. Every position, every pool, every layer of risk laid out in the open.
Web3 makes this possible. The data is already there. We just want to make it easy for you to see it.
Would you use a page like this? Let us know. Like, comment, share. If the community wants it, we'll build it.
AussieWayne retweeted
At @Firelightfi , we are trying to build a world class team that combines many skillsets: DeFi, blockchain, tradfi, insurance and others. Makes it fun and full of intellectually intensive debates.
Recently, I had a fascinating discussion with one of our team members about the "refresh rate" of risk in traditional finance versus DeFi. And the need of what we call algorithmic actuaries.
In TradFi, the "Actuary" is a batch processor. They take a static dataset of historical failures—car accidents, floods—and compile a probability table. This table updates maybe once a year.
In DeFi, the solvency state of the world changes every 12 seconds.
A protocol that is "safe" in Block N can become critically insolvent in Block N+1 because a whale pulled $50M of liquidity or a lending parameter was tweaked via governance.
The root of it: We are trying to insure a high-frequency economy with a low-frequency tool. You cannot underwrite a 12-second block time with a 365-day feedback loop. The latency is fatal.
Enter the Algorithmic Actuary
This is the architectural shift we are building at @Firelightfi . We are deprecating the human actuary in favor of the Algorithmic Actuary.
We don’t view risk assessment as a "consulting job." We view it as a computational primitive running in an infinite loop.
Here is the difference in the stack:
1. From Static Tables to Dynamic OraclesThe traditional model asks: "What is the historical probability of a hack?"Firelight’s Sentora Stack asks: "What is the current state of the pool? Has the utilization rate spiked? Is the collateral factor drifting?"We are moving from looking at the rear-view mirror to looking at the radar.
2. Streaming Risk Premiums (The Price Signal)Because the risk assessment is continuous, the pricing is continuous. If a protocol becomes riskier—say, its TVL drops below a safety threshold—the Firelight premium creates a gradient. The cost of cover rises in real-time. This is the ultimate DeFi signal. It tells LPs to exit before the crash. It is "Risk Discovery" acting as a leading indicator.
3. Deterministic Settlement (No Voting)Most DeFi insurance today relies on DAO voting ("The Wisdom of the Crowd") to decide if a hack occurred. In finance, this is called a conflict of interest. The Algorithmic Actuary doesn't vote. It verifies. It runs a deterministic simulation on the chain state: Did the vault violate its invariant?If True, the Uncorrelated Vaults (XRP/XLM) pay out automatically. Zero governance drama. Just execution.
The "Programmable Solvency" Moment
We are effectively turning the "Insurance Company" into a smart contract primitive.
The inputs are on-chain vectors (transactions, liquidity depth, volatility). The output is a price. The loss function is solvency.
We cannot scale DeFi to trillions of dollars if we rely on committees to price risk. We need to push risk assessment down the stack, into the protocol layer itself.
The Actuary of the future isn't a person. It's a daemon.
AussieWayne retweeted
Announcing EasyA Labs
Designed to accelerate the adoption of the XRP Ledger and the entire crypto industry
We’re making it happen
AussieWayne retweeted
The UK’s shift on mandatory digital ID highlights something bigger than a policy reversal: the world’s identity systems are reaching a trust ceiling.
People expect digital services that protect their privacy, not systems that gather and store unnecessary personal data. Organisations want verifiable outcomes without the liability of holding sensitive information. Governments need trust, compliance and security without creating surveillance-style identity frameworks.
Digital identity has to evolve. It should be:
• user-controlled
• minimal by default
• verifiable without exposing underlying data
• portable across systems
• consent-driven
• auditable without surveillance
• based on proof, not data accumulation
Because the future isn’t government-held identity or corporate-held identity — it’s user-held identity, where people choose what to share, when to share it and with whom.
Zavv is built on this trust-first model.
We leverage the strengths of Xahau, Evernode and on-ledger Hooks to enable selective disclosure, outcome-based verification, cryptographic proofs and user custody — without expanding data exposure or centralising identity.
This global shift is already underway: from collecting data to verifying outcomes, from identity dumping to minimal disclosure, and from siloed records to privacy-first infrastructure.
Identity systems earn trust not by collecting more data, but by giving users control — and by proving only what is required, nothing more.
#DigitalIdentity #DigitalTrust #GovTech
@GOVUK @ICOnews @OpenWalletOrg
AussieWayne retweeted
We want to have the choice, that’s what innovation is about. In any logical world the holder of the asset gets the yield! This isn’t blurry or not clear.
Yet you guys in congress once again love to support the extractors who are funding them. Robbery treachery and betrayal, people are watching.
AussieWayne retweeted
Quick update for the LOX community 👋
Our work has grown far beyond the original LOX concept, and the technology behind it has evolved significantly.
AussieWayne retweeted
The way we handle digital identity is broken.
Most systems still treat identity as data collection — the more you hand over, the more “trusted” you're expected to be.
That model is outdated. And it’s failing users, businesses, and governments alike.
Trust should come from:
🔹 Verifiable proof
🔹 Explicit consent
🔹 Minimal data exposure
🔹 Clear, auditable outcomes
Zavv is built on that principle from the ground up — a privacy-first infrastructure for proving eligibility, access, and ownership without turning people into data sources, and giving organisations trust and compliance without hoarding information.
Because:
✔️ Identity shouldn’t be intrusive
✔️ Access shouldn’t require oversharing
✔️ Ownership shouldn’t be disputed
A better model of digital trust is not only possible — it’s necessary.
#DigitalIdentity #DigitalTrust #PrivacyByDesign
@ICOnews
AussieWayne retweeted
CRITICAL - PAY ATTENTION
The Bank 🏦 Lobby is trying to hand China the keys to the future of money. 💰 💴
Right now, U.S. Senators are being pressured to "revisit" the GENIUS Act to ban third-party rewards on Stablecoins.
THIS IS A NATIONAL SECURITY TRAP 🪤
Today, the stakes are higher than ever because China officially began paying interest on the Digital Yuan (e-CNY) - making it a "yield-bearing" competitor to the USD.
Meanwhile, the Bank Lobby - the American Bankers Association - is currently pressuring the Senate to close the "third-party loophole" in the GENIUS Act - which would stop companies like @coinbase @krakenfx @Gemini or @UpholdInc from giving those rewards to everyday Americans.
If we ban American companies from offering yield to YOU - we’re not "protecting banks" like the bank lobby claims - we’re forcing the world to use China’s currency instead of the USD.
Why is the Bank Lobby so afraid of your Digital Dollars? Because they can’t "rent" your money back to you if you’re earning the yield yourself!
That’s why the Banking Policy Institute, led by Jamie Dimon, wrote @ewarren’s Anti-Crypto Bill in 2024 and why I continue to call her and @EdMarkey puppets for the Banking Industry.
If the Senate sells out to the Bank Lobby they are effectively taxing every retail investor and customer in MA and across the country to protect Wall Street's bottom line. PERIOD.
President Trump promised to make the U.S. the Crypto Capital of the World. We can't do that if career politicians serve as puppets for the bank lobby at the expense of ordinary Americans while also threatening NATIONAL SECURITY.
Stand with regular Americans - not the lobbyists - and keep the "Genius" in the Act and stop this sell-out.
@realDonaldTrump @SenatorTimScott @SenLummis @berniemoreno @SecScottBessent @DavidSacks @davidsacks47 @howardlutnick @BoHines @patrickjwitt @tyler @cameron @bgarlinghouse @s_alderoty @chrislarsensf @brian_armstrong @faryarshirzad @iampaulgrewal @jespow @DavidLRipley @SMcLoughlin00 @gregkidd
@paoloardoino @DonaldJTrumpJr @EricTrump
#mapoli #MASen #Deaton
The Senate Banking Committee marks up the Market Structure bill next week, and stablecoin rewards remain under debate. Congress already settled this in GENIUS—reopening it now only creates uncertainty and risks the future of the US Dollar as commerce moves onchain. Here’s why Congress should protect the GENIUS Act, and why rewards help consumers without harming community banks. 1/ 🧵
AussieWayne retweeted
Hello world 👋
Meet Zavv — identity, access and ownership, re-imagined.
Every day people are asked to give up far more data than necessary just to get access.
We believe identity, access, and ownership should work differently.
Zavv is privacy-first infrastructure that lets people prove who they are, what they’re eligible for, and what they own — without oversharing personal data — while giving businesses the trust and auditability they need.
With Zavv, users can:
🔹 Prove eligibility and ownership, not expose raw data
🔹 Sign in using their wallet via QR and explicit approval
🔹 Control what’s shared, when, and with whom
🔹 See a clear, auditable history of access and ownership use
For businesses, Zavv enables compliant, real-world verification and access flows built around user consent, minimised data, and verifiable outcomes — not data hoarding.
This goes beyond login.
It’s identity, access, and ownership you control.
More updates soon.
Visit our website at zavv.network for more information!
#Zavv #DigitalIdentity #DigitalOwnership #PrivacyByDesign #UserOwnedData #AccessControl #IdentityWallet #ZeroProof #DigitalTwin #Xahau #Web3 #XRP #XRPLEDGER #XRPL #Blockchain #EverNode @XahauNetwork @EvernodeXRPL @DecentralizedID @W3C @trustoverip @OpenWalletOrg @owasp
AussieWayne retweeted
With @Firelightfi , we have been considering a new metric for DeFi protocols: Total Value Covered(TVC) as a complement to TVL.
Every DeFi protocol faces the same dilemma. You build a vault, an earn program, or a lending protocol. You audit the code. You offer attractive yields. But eventually, you hit a glass ceiling.
Retail users might ape in for 20% APY, but the massive, sticky capital—institutional funds, family offices, and risk-averse whales—stays on the sidelines.
Why? Because in the current landscape, depositing into a protocol is a binary bet: You either get the yield, or you lose the principal.
This is where the conversation needs to shift from Total Value Locked (TVL) to Total Value Covered (TVC). Or at least take TVC into consideration.
The "Risk-Adjusted" Era
For a lending protocol or yield vault, TVL is just a measure of current liquidity. It says nothing about the durability of that liquidity.
Firelight changes this dynamic. By providing "Economic Security Services" (ESS), Firelight allows protocols to wrap their products in a layer of protection.
Think of the difference between two vaults:
Vault A: 12% APY. Uninsured. 100% loss upon exploit.
Vault B: 10% APY. 100% Covered by Firelight.
Vault B might have a slightly lower nominal yield due to the cost of cover, but its risk-adjusted return is infinitely higher. Vault B is the only one that can attract serious capital.
How @Firelightfi Unlocks Growth
@Firelightfi isn't just an "ambulance" waiting for a crash; it is infrastructure for growth. We allow protocols to transform their native TVL into TVC.
For Earn Programs: You can offer "Principal Protected" tranches, where Firelight’s stakers underwrite the slashing risk, allowing you to onboard conservative users who would never touch DeFi otherwise.
For Lending Markets: You can insure against bad debt creation or oracle failure, effectively acting as a decentralized FDIC for your depositors.
The New Standard
We are moving toward a future where "Uncovered TVL" will be seen as "Junk Bond" status—high risk, speculative, niche.
To break the glass ceiling and unlock the next trillion dollars in DeFi, protocols need more than just smart contracts; they need economic guarantees.
Firelight provides that guarantee. We don't just protect the downside; by enabling High-TVC environments, we unlock the upside.
The question for builders is no longer just "How do I get liquidity?"
It is: "How do I make my liquidity safe enough to stay?"