Impressed with the Taiwanese student devs that came through. Thanks to @martinetlee for making it happen!

We’re happy to share that @Quantstamp is contributing $50,000 to the Ethereum Security QF matching pool 🛡️ A global leader in blockchain security, Quantstamp has conducted 1,300 audits and secured $500B in digital assets since 2017, working across smart contracts, L1s, and web infrastructure. This contribution strengthens the round at its core, increasing the matching pool and helping every community donation go further. The round launched with 500 ETH from @thedaofund to fund Ethereum security. With Quantstamp’s support, the impact of that funding grows even further. Explore the round and support projects 👇 qf.giveth.io/qf/ethereum-sec… Help grow the matching pool 👇 giveth.io/project/ethereum-s…

The final 100 ETHSecurity Badge holders are in! That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer. Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.

Mark your calendars 👀🔥 ETH Taipei is back in 2026, Sep 11–15 (tentative) 🇹🇼 4 days of builders, ideas, and the energy you only get when the right people come together. See you soon 🫡

Following the ongoing situation in Iran, I am convening a special Security College on Monday. For regional security and stability, it is of the utmost importance that there is no further escalation through Iran’s unjustified attacks on partners in the region.

if youve ever been drained or rugged by a protocol, this video... might be therapy 🛡️ i finally got a chance to walk & talk with @martinetlee, co-founder of @zircuit to learn more about the ethereum L2 "with antivirus". 2 min trailer 👇

Some misconceptions and paradoxes in DeFi lending: Lending is based on trust. This is the self-evident truth on which banking is built. Losing trust means losing capital, and that can cause bank runs or systemic collapses. The way to preserve trust is to create a system that is fundamentally risk-averse throughout the entire supply chain. Ignore this rule and you are effectively in the business of risk-taking, which is more akin to today’s hedge funds. DeFi lending protocols follow the same basic principles as banking. The fundamental difference between traditional finance and DeFi lending systems is that lending protocols encode trust mechanisms into the code for reasons like improving automation, capital efficiency, and liquidity provisioning etc. Some people have a flawed idea that if a lending protocol fixes parameters around trust, it will somehow improve trust. Of course, this does not make sense since you are simply moving trust from one place to another. From one market level to another, but not really improving the trust assumptions, at all in fact. You also cannot rely on fully immutable systems in dynamic marketplaces such as lending and borrowing. This is why comparing lending protocols to AMMs does not work either. Traders on AMMs do not depend on ongoing trust; their transactions are one-off trades, while borrowers and lenders maintain a relationship until the debt is repaid. Applying immutable parameters means the system cannot adapt to changing market conditions, and financial markets are nothing if not dynamic. It’s relatively straightforward to run immutable model during up cycle, however bear markets is where the true resiliency is tested out. Now, back to the idea of moving trust from one place to another. Since trust always exists in lending, and most markets will likely rely on some level of human involvement, the real question is: at what level and under what circumstances should that involvement occur? In isolated lending protocols like Aave, decision-making happens at the lowest level, close to the markets. This has benefits, such as ensuring that parameter decisions remain aligned with the protocol’s risk framework in a non-conflicted way. Risk managers are paid fixed fees to protect the protocol. If they fail, they get replaced, as we have seen before. In designs where human involvement is moved higher up and risk curators are incentivized based on fund performance, hidden issues can emerge that are highly detrimental to the system. First, the idea of risk curation as isolation is misleading. While markets may be separated, risk curators often share liquidity across markets by supplying to the same markets and comingling strategies. This means users can be exposed to the weakest curator or market in the system, with no capped protection. For example: Curator A supplies liquidity to markets B and C, while curator D supplies liquidity to markets C and E. If market E loses trust, for instance through a depeg event like xUSD or deUSD, it could trigger a bank run from market E, driving utilization to 100% and creating a race for withdrawals and even full insolvency. At the same time, LPs withdrawing from the curated vaults cause another bank run at the vault level, meaning markets B and C are affected too. As a result, curator A’s LPs, even those subscribed to less risky strategies, would also be impacted, intensifying the liquidity contagion, even if they didn’t supply the liquidity into the problematic market, creating protocl-wide bank run. This is my biggest concern with this type of design model: it leads to contagious liquidity effects that break trust while marketing some sort of risk isolation, which doesn’t in reality exist. It is especially problematic for RWAs, which require greater isolation due to their specific characteristics. The problem worsens when considering curator incentives. DeFi risk strategies are highly commoditized. Lending against ETH or BTC is not particularly profitable or exciting for degens. So curators often go on the offensive, adding new types of collateral, sometimes untested or poorly understood. Other curators then rush to copy and allocate capital to these new markets. It becomes a speed race to capture reward at the cost of additional risk, much like hedge funds today operate. It’s especially problematic for integrators that are looking to run their own strategies, knowing they would be commingled with strategies ran by riskier vault curators, making integrations more challenging. Also this design comes at the cost of liquidity segregation, without truly improving or isolating risk, while introducing potential systemic contagion on every bank run. Given the permissionless nature, we will see more events of contagions spread. It’s important for everyone to understand the mechanisms. DeFi is still relatively young, less than a decade old, and any large-scale issue could set the industry back significantly. We are close to building safe and secure DeFi, and we need to protect the users. Hope this is a good learning on how to build better DeFi. Just use Aave.

✨ A glimpse into the vibes at Gmeow Meetup Bangkok: Zircuit x Bitkub! . Big thanks to our special partner @zircuit 💚 . See you all soon! . #BitkubExchange #GmeowMeetup #BitkubxZircuit #Zircuit #ZRC

.@zircuit took over Urbe Village tonight 🐱🇮🇹 Builders, and curious minds gathered on the Urbe Terrace for a high-signal evening, a great workshop, amazing vibes, and an unforgettable aperitivo with Trapizzino. Rome showed up. Gmeow y’all!

It's almost here. No more honeypots. No more irresponsible handling of sensitive KYC/KYT data. No more PDFs. We're picking Genesis participants now, and our docs are open to everyone in the next quarter. A new era of highly secure, pain-free compliance via one clean protocol.