You’re still early. 🔔 Where the zero decides if you deserve it. The longer you wait, the less likely it is. Apply for GTD on zeronft.art

It seems many people have been misled these past few days. Initially, I also thought @zinc_cash was going to privatize, but after reviewing the proposal, it seems that's not the case. What I see now is more like MetaDAO wanting to acquire the remaining ZFKG shares to further concentrate control, rather than Zinc suddenly deciding to sell the project. Many people on X are saying it was Zinc that proposed it, but after reviewing the proposal, it seems like MetaDAO is shifting the blame more. The real issue isn't who proposed it, but why are people suddenly in such a hurry? The answer is quite simple. Because Zinc is incredibly profitable. The daily revenue generated by the protocol has reached an outrageous level, and many are starting to compare it to Pump. If a protocol can consistently generate revenue every day and has a reserve of revenue, then capital will definitely be interested. No one will fight over a project that doesn't generate revenue. Therefore, the discussion now isn't about whether Zinc has value, but about who wants the right to its future cash flow. Conversely, this is actually Zinc's greatest strength. While most projects in this market are still telling stories and drawing roadmaps, Zinc has already begun to generate significant profits, leading to equity battles. There's another point many haven't noticed. Currently, there's considerable opposition from the community, and whether the proposal will ultimately pass is uncertain. But the market has already started trading sentiment based on the expectation of a successful privatization. This is also the biggest problem with FUD (Fear, Uncertainty, and Uncertainty) lately. Many people haven't even read the proposal before spreading it. I've always believed that a truly good protocol isn't one where no one questions it when it's rising, but one where people start scrambling to acquire it after it becomes profitable. If Zinc were truly garbage, no one would have invested so much effort in figuring

☂️ The umbrella gets bigger... much bigger. ☂️ Arcium acquires Inpher’s core technology and team—one of the biggest Web2 Confidential Computing companies! A major step toward building a global supercomputer for a hyper-encrypted internet. 🚀

I felt bored and vibe-coded a neobank in a week. The best part? You don’t even realize it runs entirely on crypto rails under the hood. Main functionalities: - On/off-ramp fiat to stables via BridgeXYZ - Send, receive, and request stablecoin payments on Base - Deploy funds to selected blue-chip DeFi protocols - Get a free Gnosis Pay crypto debit card All of this is powered by account abstraction and non-custodial wallets. Users receive a Privy wallet upon registration and never have to worry about signing transactions or approvals. Transactions are sponsored and batched via EIP-7702, so no separate token approvals are required either. In a nutshell: one-click access to stablecoin transactions sent directly to users via email, plus seamless entry into DeFi. Tech stack: - BridgeXYZ – on/off-ramp fiat to stables - Privy – non-custodial wallets - EIP-7702 – transaction batching and sponsoring - iOS app built with React Native - LIFI API – swapping between USDC and EURC - Resend – email notifications - DeFi protocols: Aave, Morpho, Compound, and YO - Gnosis Pay API – virtual crypto debit cards - NodeJs Backend Inspired by @alliance's request for startups. If you want to check it out, let me know so I can add you to TestFlight.

Introducing the first sealed-bid auction on Solana, open to everyone. Raise Zero is a mock raise for fair price discovery, inspired by the mechanics behind Google’s IPO and U.S. Treasury auctions. Enter now ↓

‼️ Polymarket, the decentralized prediction market platform, has allegedly been breached, with 300,000 records and an exploit kit leaked on a popular cybercrime forum. The actor states Polymarket has no bug bounty program and was not notified. ⠀ ‣ Threat Actor: xorcat ‣ Category: Data Leak / Exploit Kit ‣ Victim: Polymarket ‣ Industry: Cryptocurrency / Prediction Markets ⠀ The actor states the data was pulled via undocumented API endpoints, pagination bypass, and CORS misconfiguration on Polymarket's Gamma and CLOB APIs. The pack also includes working POCs for multiple CVEs and an auto-dump script. Date of extraction: 2026-04-27. ⠀ What's in it: ⠀ ▪️ 300,000 total records ▪️ ~750 MB extracted / ~8.3 MB compressed JSONs ▪️ 10,000 unique user profiles with full PII (name, pseudonym, bio, profile image, proxy wallet, base address) ▪️ 4,111 comments with attached profile objects ▪️ 1,000 report records containing 58 unique ETH addresses admin_auth_addr indicator ▪️ 48,536 gamma markets with full metadata, condition IDs, token IDs ▪️ 250,000 active CLOB markets with FPMM addresses ▪️ 292 events with submitter/resolver ETH addresses and internal usernames ▪️ 100 reward configurations with USDC contract addresses and daily rates ▪️ 9,000 follower profiles with names, pseudonyms, proxy wallets ▪️ Internal user IDs exposed in createdBy/updatedBy fields ⠀ Vulnerabilities included (POCs in ZIP): ⠀ ▪️ CVE-2025-62718: Axios NO_PROXY Bypass (CVSS 9.9, SSRF to internal services) ▪️ CORS Misconfiguration on CLOB API (wildcard origin credentials=true) ▪️ CVE-2024-51479: Next.js Middleware Auth Bypass (CVSS 7.5) ▪️ CLOB Pagination Validation Bypass (limit=999999 accepted, no rate limiting) ▪️ Unauthenticated /comments/{id} endpoint (brute-forceable, leaks full profiles) ▪️ Unauthenticated /reports endpoint (leaks user activity admin indicator) ▪️ Unauthenticated /v1/data/followers/{address} (full social graph enumeration) ⠀ Pack contents: ⠀ ▪️ All dumped JSONs (markets, events, profiles, comments, reports, rewards, series) ▪️ 5 working POCs (CORS exploit, Axios SSRF, Next.js bypass, pagination DoS, WebSocket exploit) ▪️ Auto-dump script (continuously pulls fresh data until endpoints are patched) ▪️ Full redteam report with MITRE ATT&CK mapping ▪️ Additional 350MB data dump

Just saw what benefits the @Plasma card has Access is still invite-only for now Anyone got an invite?