MevRefund retweeted
let's start a new trend: GOOD VIRTU SIGNAL
I donated 💪
where all ETH community ppl now?
(pls RT to help Roman)
My trial is fast approaching and time is running out, but I have faith thanks to this community’s consistent support. Please donate towards my defense if you’re able.
wewantjusticedao.org/juicebo…
#defendromanstorm
MevRefund retweeted
How to get multiple concurrent proposers on mainnet:
1. Let multiple proposers submit transactions for inclusion in the same slot
2. Come up with a fair ordering rule for the union of their transactions
MevRefund retweeted
"Crypto is for the unbanked", I say as I send $1000 to Kenya to buy goats for a villager,
"The greatest transfer of wealth in human history", I whisper as I demand he turn them into a racing team
"The future of finance", I mumble through gritted teeth while naming the goats after every word for breasts I can conceive of
MevRefund retweeted
Pretty crazy these guys found a bug that could crash most nodes on the network and got 0$ from EF
and 1000$ from Flashbots
MevRefund retweeted
The MEV supply chain and its complicated interactions with all parts of Ethereum could use more study and testing. For me this was most clearly illustrated about a year ago in the fallout of lowcarbcrusader's equivocation attacks.
At the time it felt to me that something like pandora's box had been opened. We quickly fixed the relay bug that lowcarbcrusader used, but then found several other equivocation attacks we needed to quickly patch. Soon lowcarbcrusader themself had reached out to a few of us to disclose another attack (in return for rebranding themself away from sandwichtheripper). They pointed out a small nuance in CL client behavior in propogating blocks could give an attacker a substantial advantage (~500ms) in equivocating. And they were right.
When you saw it, it seemed obvious something like this would exist. But the reality was that very few people had knowledge of both the depths of the CL p2p and MEV, so I don't think anyone else had put this together before. If you're interested you can read more here: collective.flashbots.net/t/d…
It was clear to me then, as it is now, that we needed people studying the complicated intersections of MEV and every part of Ethereum. I see the bug that Bloxroute's BDN had in its interaction with Lighthouse as the same sort of thing as the above disclosed attack from lowcarbcrusader. And fewer people are working at these intersections than Ethereum needs - especially those working in the open.
I can't fault Bloxroute for looking for every edge that they can get in lowering latency, which I presume is why they were propogating blocks first without their blobs. For BloxRoute to stay competitive with other relays they need to look for this kind of edge. And I expect if they didn't another one of the other relays probably eventually does something similar if it helped with latency. The MEV industry is brutally competitive. Searchers, relays, and builders fight over literally milliseconds. That is the reality of MEV.
What is unfortunate here is that they weren't more forthcoming with what they were doing. Of course, there is a thin line between "closed source edge" and what we can expect someone like BloxRoute to disclose given the importance of the BDN. But if they were more open with what they were doing I would've expect someone like @sproulM_ or @terencechain to have helped catch this challenge earlier on if they were. Moreover, it isn't clear to me why this wasn't caught on a testnet too. There were several testnets that included the whole relay, builder, mev-boost stack that were carried out to test the interaction between that stack and the client changes being made in a live environment. I'd make the contention that if your infrastructure is a major part of how mainnet blocks work we should expect it to be mirrored on testnet(s) and be a part of testing too. That goes for everyone in the supply chain too, not just BloxRoute. Perhaps this was tested on a testnet too, I don't know.
I also wish that we have more people effectively red teaming the complicated interactions that result from the incentive to make money. In my ideal world before the latest fork happened a cracked group of people somewhere had thought "if I was a builder I would want to publish my blocks as late as possible. How can I shave off latency and get an edge in block propogation with the deneb changes?" and then came up with "Well, we could publish blocks without blobs first." And tested that interaction. Then, we could have caught this before mainnet went live and given those folks a grant for discovering a bug that later caused proposers to lose money.
And this could be done across the stack too, where we'd hopefully find this recent bug as well as others - like the attack lowcarbcrusader highlighted and future bugs which will result from similar things.
The reality is that Ethereum is complicated and the interactions between its clients - both execution and consensus - and MEV driven behavior are too much to expect any one stakeholder group to handle. Effectively managing that complexity requires across the board collaboration, openness, and leveraging the efforts of the whole community.
It is long past the time where we realized that and built for it. To that end I'm heartened by the collaboration that we have with many CL teams, who have always been a pleasure to work with, and things like the PBS Foundation. I would like to see more people demanding MEV projects to uphold the tenets of crypto that we all cherish, like fairness, permissionlessness, and transparency. That would go a long way.
As a community we can, and should, do much more. Flashbots stands ready as ever to join in the efforts to do so.
MevRefund retweeted
This post-mortem misrepresents the issue as a Lighthouse p2p bug, when in fact it was caused by an untested interaction between Bloxroute's centralised "block distribution network" (BDN) and Lighthouse's HTTP API
Here's an account from my perspective
post mortem - missed slot incident on 27/3
TLDR
1) bloXroute relays published blocks & blobs correctly throughout the entire incident
2) but "something" caused slots to be missed (now fully resolved)
3) by design, bloXroute's relays broadcasted blocks thru its BDN, while the blob sidecars propagated thru the p2p
4) the sidecar is expected to propagate slower, and is allowed to be accepted until t=8 sec, and did propagate
5) this uncovered a specific CL behavior - it only accepted blobs from the first peer who suggested the block - even if other peers announced they have them
6) since bloXroute's relays are more integrated with the BDN, the issue was mostly observed in our relays, which publish the blocks themselves extremely fast thru the BDN, causing nodes to reject these blocks and cause missed slots
xitter.cf/terencechain/status/17…
MevRefund retweeted
Mr. Wright is not Satoshi. The Court has just ruled definitively and without qualification. We are grateful that the rule of law has again prevailed.
MevRefund retweeted
.@hal2001 I think this relate to our discussion about Oval, and whether it matters or not if an oracle update is delayed by 3 blocks
this happened *without* a delay in chainlink's oracle
thoughts?
MevRefund retweeted
Today I conducted a massive whitehat operation for the JUP airdrop, a hacker came with nearly 5k "compromised" wallets , I think its a group of scammers that didnt get along and one went rogue ,
the wallet I sent to is:
HF88dwazGWNq7XuiTPh36DLh6ABnXzp6uqyg7PyeN4ZJ
Replying to @CryptoEdgar_
MevRefund retweeted
Vanguard knows that there’s an ultra sound money and that it’s irresponsible to let their clients invest in an ETF that is merely sound money
MevRefund retweeted
OK this is hilarious.
"09/01/24 SEC Chairman on the brink of second ETF approval"
MevRefund retweeted
Flight attendant: is there a doctor on this flight?
Dad: this could have been you
Me: not now dad
Dad: Not asking for a crypto bro for help now are they?
Me: Dad there’s a medical emergency right now
Dad: go and see if “blockchain fixes this”
MevRefund retweeted
This hacker made ~$20k by copycat exploiting Thirdweb and NFT trader vulnerabilities. And they have been tipping @BlockSecTeam for sharing the vulnerabilities on Twitter.
Made my day 😂😂
etherscan.io/idm?addresses=0…
MevRefund retweeted
Taylor Swift is rerecording her albums because the first Taylor Series was only an approximation.
MevRefund retweeted
Replying to @GwartyGwart
I'm keeping this Saylor quote in my notes as a constant reminder of how little I understand



































