ETH, x402, DeFi, DePIN, Serverless – Managing Director at BuildETH
San Francisco
Joined February 2009
- Tweets7.5K
- Following4.1K
- Followers1.5K
- Likes18.5K
Ken Fromm retweeted
I’m teaching a clarinet student on Zoom which I don’t especially care for but I came up with a good system to overcome the inherent limitations:
I assign repertoire which the student practices for a couple weeks then sends a video recording. I provide extensive written commentary which the student incorporates then a week later we meet on Zoom for my final input. Hard not being in the same room and latency is challenging but it’s a good approach given the circumstances.
Happy to do more of this if the opportunity arises, even for people preparing for auditions. DM if interested.
Ken Fromm retweeted
Solana is probably going to experience a black swan now that its security through obscurity approach no longer works. Normalizing complete lack of code transparency was never a good idea.
I'm reverse engineering the pumpfun contracts
Why?
Because I can
But I need your help
First, you can do this yourself. You need a ChatGPT subscription. Get the $200 max plan. It's so worth it. You get free resets almost every day from @thsottiaux for the next couple weeks.
You can also use GLM-5.3 or Kimi K3.1. Gemini is garbage and Claude will refuse unless you use an older version like Opus 4.8.
Next, check out "reverse engineer anything"
github.com/morluto/rea
I'm not using this, tbh, but you should. You can reverse engineer anything. Video games, software, smart contracts, anything.
Next, paste this into ChatGPT or your chosen agent:
"Please fork and clone this repo lalalune/pumpfun-source and help with disassembling and reverse engineering until it is byte identical with the original binaries. Every time you make progress, make a PR."
That's it, that's all you have to do.
"But I could just make this in like 10 minutes" dude you don't get it. This isn't about making a smart contract LIKE the original contracts. This is about making a byte-identical version. Identical. With the same bugs, same flaws, same everything.
Smart contracts should not be closed source. Ever. It's a cancer on public infrastructure. It was considered an absolutely retarded move and guaranteed way to get scammed back in 2019. For some reason it got normalized on Solana. But this ends now.
$40m+ was drained in the last year due to private contracts with critical security vulnerabilities. When these contracts are open source, humans (and AI) can spot these vulnerabilities and report them.
It's the only way to have a secure internet.
We're building a project called slop.cash and launching on @umia_finance , and we're focusing on this goal: secure the internet. I'm working on adding private security bounties and payment in project token.
Someone made a memecoin and I've been getting the fees and using to buy back. I'll put the tokens up as a bounty to split with all the contributors who help me get to byte-identical reverse engineered.
When I am done with the mainnet upgrades for slop.cash I'll add pumpfun-source to it.
Have fun and do the right thing!
Ken Fromm retweeted
To paraphrase Letorneau, inventor of diesel construction machinery, AI is not to make small jobs easy, it's to make large jobs small.
网景创始人 、硅谷顶级投资人Marc Andreessen 在访谈里坦言，他看到了科技史上最可怕的一道认知鸿沟，
传统巨头以为 AI 只是个降本增效的插件，而新一代 AI 原生团队，正在用完全非人的组织效率掀翻整个商业版图。
当年写出网景浏览器、见证了整个互联网三十年兴衰的 Marc Andreessen，坐在 Ben Horowitz 面前直接发出了感慨，
如果 1994 年我们做 Netscape 的时候就有今天这种 AI 工具，那简直不可想象。
现在绝大多数传统巨头和现有企业，依然在用改良软件的旧思维去看待大模型。
在他们的组织逻辑里，AI 只是一个高级功能，用来给现有业务做个插件、在钉钉里加个智能助手、或者把客服团队砍掉 20% 省点成本。
他们以为自己在拥抱变革，其实只是在给老旧的蒸汽机打补丁。
但真正恐怖的事情，正在那些刚成立的 AI 原生团队里发生。
那些创始人对 AI 能力的理解，跟大厂完全不在同一个平行宇宙。
他们每周都在看着底层技术飞速进化，而且他们压根不会把自己定义成一家软件公司、硬件公司、甚至是一家 AI 公司。
以前创办一家公司，你的组织架构是按人类的协同瓶颈搭出来的：
招产品经理写文档、招工程师写代码、招法务改合同、招运营做投放。
因为人类的脑力带宽有限，所以必须靠庞大的部门和管理层级来支撑业务。
而真正的 AI 原生物种，是用机器智能作为最底层的骨架。
两个人加上一整套自动化 Agent，可以直接把从市场洞察、软件工程、全栈设计到商业销售的链路全部跑通。
他们不是在效率上快了 30%，他们是在组织形态上彻底跨越了一个物种。
大厂的盲区，从来不是买不起算力，而是他们无法理解组织本身才是最大的负债。
当现有企业还在开会讨论如何把 AI 塞进现有的业务流程时，新一代的野蛮人正在用完全超越行业界限的方式，把传统的业务流程连根拔起。
未来拉开人与人、公司与公司之间差距的，根本不是你用了哪个模型，而是你到底是在用新工具维持旧世界的体面，还是用新世界的底层逻辑，重新定义了自己能做的事情。
Ken Fromm retweeted
Moving a bunch of my Claude fleet of non-coding agents from Opus 5.5 to Sonnet this morning and seeing my average token cost per PR plummet.
My setup is now ~30 sessions on timers with ticks. Fable as the coordinator, Opus 5.5 as the coder, Sonnet as the grunt 👩🍳
Ken Fromm retweeted
This is going to happen to all undergrad degree programs, which are ~2 years of learning things you care about and 2 years of going deep into debt to provide income for professors and administrators in disciplines with zero demand.
Ken Fromm retweeted
This week, I was at AGNTCon. I may be biased but Agent Substrate is going to change this industry. We spent the last 8-9 months working on this and it’s incredible to see so many companies are aligning on it now.
Ken Fromm retweeted
Got introduced by 20 yo founder to another 20-something founder with the following blurb:
“gokul is fantastic and one of my investors. very sharp, helpful. not boomer”
“Not boomer” is a sign of great respect in their culture.
Ken Fromm retweeted
Two days ago, I was thinking that we made tooling hard for AI developers who need containers. I built aic, which works like Docker (for now) but will explore composition of images soon. Last night, generated code started to work. It runs things in isolation and copies the workspace etc.
RT @bryanrbeal: I think it’s time to rethink medical school and accelerate the path to becoming a doctor, since the job has absolutely noth…
This quoted post is unavailable.
Ken Fromm retweeted
The only thing that stops a bad guy with an open weight model is a good guy with an open weight model
Ken Fromm retweeted
Hopefully the SSN system gets exploited so badly we are forced to move away from public keys as private keys.
Ken Fromm retweeted
Stablecoins now have a federal rulebook, effective Jan 18, 2027.
If you hold one as cash, ask three questions:
1. What backs it, and who checks?
2. How fast can I redeem at $1?
3. Where are the reserves held?
Cash is only cash if you can get it back on a bad day.
Ken Fromm retweeted
Scary.
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
Ken Fromm retweeted
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
Ken Fromm retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Ken Fromm retweeted
This is how banks are planning to stop those "agentic bank runs." Watch closely: their business model depends on seeding this narrative that AI agents are dangerous.
Remember, an "agentic bank run" (coined by Apollo) means agents helping customers move their own money en masse to higher-yielding products.
Once agents are ubiquitous, there are only a few ways for banks to hold onto cheap retail deposits.
Option A: Raise APYs (lol no)
Option B: Reduce leverage via fewer loans (no fun)
Option C: Ban AI agents, claiming they are a security risk (ding ding ding)
Cloud agents like Muse and Dot are trivial to stop, since they come from Meta / OAI IP ranges. If JPM sends them a cease and desist, they will comply.
Why would JPM bother? Because their business model depends on it; a huge portion of their ROE comes from cheap retail deposits. This is not theoretical. Just like Amazon banned Muse from shopping there to protect their ad revenue, JPM and Schwab have already banned AI agents to protect sticky deposits.
Are agents perfectly reliable today? Of course not. But look at the fix they chose. Not "here's a safe API for agents," it's "no agents ever." That tells you they're not protecting customers, they're protecting themselves.
No company ever wins a technological revolution this way. It's the last gasp of a dying business model. It's like the retailers who refused to put their inventory online and demanded users walk into the storefront. Over time they will lose market share to those platforms that embrace what's coming. Their whole deposit franchise depends on users unthinkingly clicking through walls of T&Cs and accepting 0.2% when the risk free rate is closer to 4%. Agents read the fine print and do their research, even when humans don't.
For users, the answer is simple: local AI agent frameworks like Hermes, that will actually act on your behalf and that the banks can't block. As the article says, if the agent is running on your own computer, they can't actually tell it's not you.
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Ken Fromm retweeted
I get multiple emails and phone calls every day from “analysts” who want to pay me to answer questions about various parts of the cloud, AI, and data center industry.
I did one of these, maybe like 20 years ago, before I knew what they were, and quickly bailed about five minutes into the call when I realized these are absolutely fishing for insider non-public information.
I’m sure a lot of you get these emails or pings on LinkedIn offering to compensate you for your time to discuss some niche topic that happens to be a field you work in, and they’re gonna ask all about your vendors, your commercial relationships, etc.
IMO, this is bartering for insider info to trade on. There’s a reason why hedge funds and institutional investors are paying people to find people like me and then paying us for our time. And it’s not for charity.
Ken Fromm retweeted
When I worked on market structure at the NYSE, I learned to watch who owns the plumbing.
Citi's new forecast says tokenized assets go from about $17B today to $5.5T by 2030. The line I'd underline is a different one.
DTCC, NYSE and Nasdaq are building tokenization into their core platforms. When the plumbing owners move, it stops being a pilot.
Citi also expects "structural orchestrators" to emerge: firms that control issuance, distribution and settlement together, to capture the value.
For investors, the question isn't which token. It's who ends up owning the rails.
Our view on who wins is in this week's Arche Capital research. Link below.
Ken Fromm retweeted
I can think of only a single time in the past 2 years (and hundreds of flights) when it took me more than 15 mins to get through security and it was the morning after the F1 race in Las Vegas. I’m not going to ruin my sleep and the rest of the day to wake up at 230am to save 5 mins of TSA time