Quit_

Look, fact is if we can raise the money ourselves the whole problem goes away: Kelp is made whole, rsETH holders suffer no losses, Aave has no bad debt, umbrella is not slashed, aWeth is unpaused, and crypto is saved.
I've got $60. Who's with me?

Of all involved parties I actually think LZ is being treated the most unfairly.
Yes they could have added additional safeguards but it's not like they had negligent security, they had very good security and were the target of a state sponsored and highly sophisticated attack.
All KelpDAO had to do on the other hand was read the LayerZero docs before using it to secure their multi billion dollar protocol.
All Aave had to do was look at KelpDAO's LayerZero config.
Not saying all three aren't to blame (they all deserve a share) but that's how I see it.

More than 80% of Umbrella depositors are trying to exit the Umbrella module now that there's a real chance of getting slashed.
Aave is freezing the module in case resolution takes longer than the withdrawal cooldown (20 days) to ensure these users are fully slashable if needed.

Incident statement from LayerZero is out. As expected, the attacker was likely DPRK.
The DVN itself was not compromised as previously speculated, but rather TWO separate RPCs the DVN used to ingest state.
On top of that, attackers DDOS'd the DVN's primary RPCs to force it to fail over to the two compromised ones.
And the compromised RPCs served real state to anybody querying them, only serving malicious state to the DVNs. This enabled the attackers to bypass some of the other safeguards that were in place.
Do NOT underestimate Lazarus. This attack was sophisticated as fuck, make no mistake.
LZ

Hey @elonmusk dunno if you've seen but we've got this little thing going on in crypto and could use a bailout. You'd be doing us a huge solid, and what's $300M between friends after all?

Confidence in DeFi is at an all time low right now.
We need to go back to basics. No reason somebody looking to deposit eth to borrow usdc should be vulnerable to contagion from a bridge for liquid restaked rsKxyzstETH.
Return to pristine collateral.

from what I can tell re: kelp dao, this seems to be a combination of a 1-of-1 dvn setup and a compromised layerzero dvn. Apechain and other protocols with at least 2 required DVNs should be unaffected, but might be worth pausing out of an abundance of caution.

Wish I had better news but looks like WETH on aave is fucked.
Withdraw if you can but likely too late. After umbrella settles normal deposits should be partially withdrawable.
A big hit to the DeFi vision

Ok, genuinely impressed with the models that can be run on a single 3090.
Tool calls are still finicky without very direct guidance, but as a general knowledge chatbot there are some very capable (and fast!) options.
Makes it very tempting to jump into the blackwell deep end.

Check the date

Claude code is insane because it means you're no longer ever truly free from work.
At the gym? Can still write and deploy production code.
Out with the fam? Shouldn't get in the way of triaging that error that just cropped up.
I imagine this is how project managers have felt for years.

I've always been so careful. I always check addresses before sending: the first four, the last four, a random slice from the middle. Confirm on screen, confirm on ledger, do it again. Run a simulation, check the outputs.
Never made a mistake.
But last month I fat fingered my bank account number for my pet insurance coverage and today they directed my $5000 reimbursement to that wrong account.
And they say it posted successfully.
ggs. Pour one out for your boy, for today I join the ranks of the victims.

Situation: I have 14 competing side projects.
14? Ridiculous! You need to install openclaw and start bulldozing your to-do list!
Yeah!
Situation: I have 15 competing side projects.

First it was accounts paid to shill products, then accounts paid to slander competitors, now they're paying accounts to defend corporate decision making?
It's probably best to operate under the assumption that everybody on X is a paid shill except for yourself.
People think more followers = better content, but generally the opposite is true. There is likely an inverse relationship between number of followers and quality of content (and I say this as somebody with a "high" follower count).
Just as civilizations tend to destroy themselves upon reaching a certain degree of technical acumen, so to