与「CryptoOG」相关的搜索结果

币圈 OG 郭宏才（宝二爷）确认出席 4月19日 Meta Girls Party 区块链意见领袖、资深投资人 @ChandlerGuo 确认受邀出席本次活动。作为行业极具影响力的传奇人物，二爷将以其敏锐的市场直觉与硬核的投资逻辑，现场拆解 Web3 未来演进风向。在中环 18F，与最具流量号召力的 OG 面对面。 🍸 主办方： @MetaEraCN, @iPolloClaw, @DesunHK 🤝 联合主办： @trondao, @TheoriqAI, AImall 📅 时间：2026.04.19｜19:00–23:00 📍 地点：香港中环云咸街60号中央广场18F 🎟️ 报名锁定席位，预定您的社交高光时刻： #CryptoOG# #Web3Festival2026# #MetaGirlsParty#

Over the past few months, we have restructured MEGA to move in a new direction. We’ve brought together new capabilities and reorganized our teams, a process that has resulted in a 20% reduction in our staff. These are people who helped build MEGA from its earliest days ( building out the chain / wallet, supporting our ecosystem, and telling our wild stories). To everyone who is leaving: I appreciate you. Your work is foundational in what we’re doing next. If you are hiring, please reach out. These are some of the best people we have worked with, and we will gladly make introductions. Our founders, early employees and core engineering team remain committed to MEGA and to the work we started three years ago with MegaETH. We believe cryptography and distributed systems will change how the world produces and accesses purified intelligence. We have a lot to prove, and a lot of work ahead.

Ever wondered how #XELIS# decodes encrypted balances in milliseconds? Here's the mathematics behind the magic! 👇 🔥 Encrypted on chain: Your balance stays confidential. 🔥 Baby Step, Giant Step (BSGS): A clever mathematical algorithm that avoids checking billions of possibilities individually. 🔥 2⁴⁸ decoding range: Handles an enormous range of possible values. 🔥 Precomputed tables: Around 330 MB of data helps accelerate the decoding process. 🔥 Cuckoo hashing: Enables efficient lookups to find the right values. 🔥 Milliseconds: Complex cryptography becomes a fast, practical wallet experience. 🔥 The result? Strong financial privacy without sacrificing usability. That's how #XELIS# turns advanced mathematics into real world technology. 🎬 Enjoy watching! 👁️ @xelis_project @xelis_fans @web3 @alkazarauniiii @xelisvault #Web3# @Awen__crypto @cryptoprvcy #Crypto# #CryptoMining# #Smartcontracts# #Privacy#

And yeah @fermah_xyz started with a problem that sits deep inside the ZK stack. Zero knowledge applications can prove that a computation was done correctly, but producing those proofs at scale takes serious infrastructure: specialised hardware, several proving systems, workload scheduling, and reliability and cost controls. A team building a ZK rollup, zkVM, bridge or coprocessor cannot simply ask for "a proof" and move on. Fermah's first answer was a universal proof generation layer. Provers with GPUs and other hardware supply capacity, applications that need proofs create the demand, and Fermah matches the two. That marketplace is now called Froben. The problem behind the proof Running this in production exposed something bigger. A proof is one step in a longer sequence. Something has to trigger the work, the work has to run, the result has to be verified, and then the result usually has to start the next action. Fermah's argument is that blockchains are good at recording state and weak at starting what happens next. Take a lending position that crosses its liquidation threshold. The chain records the fact, but nothing forces the liquidation. A keeper, bot or backend still has to notice the condition, build the transaction and submit it. Consensus settles what happened, and a human run service still decides what happens after. Fermah calls the missing piece protocol agency: a protocol's ability to act on a verifiable condition without depending on an outside operator. What Kernel does Kernel is Fermah's Protocol Agency Engine, and its pitch is short: Define. Execute. Attest. A developer defines a workflow, Kernel runs it, and the result is published onchain with a cryptographic proof. Three design choices matter here: -Typed nodes. Workflows are built from a library of verified building blocks such as HTTP calls, onchain reads, price feeds and math functions. The type system validates how they connect before anything runs. -Sandboxed execution. Workflows run in an isolated environment built for untrusted code, and the same inputs always produce the same output. - AI where it helps, code where it counts. Fermah says AI agents can compose workflows, but deterministic code executes them, with no LLM in the execution path. Kernel can work as an oracle too. A smart contract requests a workflow, Kernel runs it, and the contract receives the result with a proof that the workflow ran exactly as written. Froben and Flashcast Fermah did not walk away from ZK. Froben still runs, now on top of Kernel, and its paying customers include ZKsync Era and Abstract. In Froben, a workflow defines the proving pipeline and Kernel schedules the work across the prover fleet. Flashcast Social shows a different use of the same engine. A user posts a question, and within seconds it becomes a live prediction market. Kernel then runs the resolution workflow and settles the market automatically when the event happens, with no committee and no dispute window. Proof generation and market resolution have little in common on the surface. What they share is a condition that has to produce an action, and that is the workload Kernel is built around. Fermah also lists data aggregation, pricing oracles and cross chain coordination as things Kernel can run. Where agents fit Fermah's latest thinking extends this to autonomous software agents. An agent working onchain needs to find available actions, check whether it is allowed to run them, pay, execute, and use the output as the input to its next step. Fermah describes this as action manifests, which make actions machine readable across discovery, eligibility, execution, payment and output. The shift in one line The old question was how to generate ZK proofs efficiently at scale. The new one is how a protocol can turn a verifiable condition into a complete, executable sequence. Proving is still part of the system, but it is now one workload among several that Kernel coordinates.

Every step between your agent and the GPU can read your prompts. The proxy. The host. The operator. Every plan. Every tool call. Every retry. Plaintext. The only thing stopping them is a policy. Not cryptography. We seal prompts on the client. They open only inside an attested GPU. Nobody holds the key. End-to-end encrypted inference. Richard Rizk, Co-Founder & CTO 🫡

Ethereum is both an abstract philosophical concept (the ontological Turing machine) and a practical research and development effort that aims to answer this question that pertains to the nature of Ethereum. How the nature of "Ethereum" as a protocol comes to be determined through the ACD governance mechanism, how cryptographic truth comes to be defined, and how convergent consensus is reached using majority representation of Ethereum's observers is what reduces the ontology of the world computer down to what we today call the Ethereum network. Here's how the world computer comes to be defined:

The cryptographic world computer: My attempt to express in somewhat concise terms the true meaning of basically everything planned to happen to Ethereum starting from the fork after Hegota. It's really not just a blockchain anymore. It's a hybrid architecture that combines together blockchains and modern cryptography, to enable much more powerful properties. FOCIL, EIP-8288, Lean consensus, state management, formal verification, advanced mempool improvements (including privacy), and the longer-term specter of obfuscation all mentioned.

🚨 On September 6, 2026, @Liquid_BTC was affected by a cache key collision vulnerability in rangeproof verification. An attacker minted ~3,998.5 L-BTC with no corresponding peg-in. Within minutes, the unbacked L-BTC was pegged out into real BTC on the Bitcoin mainnet. About 3,400 BTC was later returned to the federation peg wallet, while ~598.5 BTC remains under the attacker’s control. The SlowMist Security Team traced the fund flows on the #Bitcoin# side using @MistTrack_io and fully analyzed the incident. 🧩 Attack flow: 1️⃣ Two setup transactions first landed valid rangeproofs and commitments, while embedding a crafted payload in the locking script to seed node caches. 2️⃣ A follow-up minting output reused a colliding cache key — the same raw concatenation of proof, commitment, asset commitment, and scriptPubKey, but with different field boundaries. 3️⃣ On a cache hit, nodes skipped secp256k1_rangeproof_verify and min-value checks, accepted an unbacked commitment, and minted ~3,998.5 L-BTC. The fake UTXOs were consolidated and pegged out within minutes. ⚙️ Root Cause: The Elements rangeproof cache key concatenated variable-length fields without length prefixes. Distinct argument tuples could hash to the same key, so a positive cache hit meant skipping cryptographic verification. 🛡️ SlowMist Insight: A positive-result cache in a consensus verification path is itself a cryptographic primitive. Every field the verifier reads — and every field boundary — must be unambiguously bound into the key. Treat cache-key integrity as a mandatory item in consensus-layer audits. Full analysis👇

A note on recursive STARK mempools (EIP-8288) This is an EIP that I am hoping we can get included in I-star (the fork after Hegota) that you can think of as the next step after Frames, that would unlock extreme amounts of power. Particularly: * Ultra-cheap quantum-safe signatures (SPHINCS-). Much of the cost savings comes from the fact that the signature data (~3 kB) does not have to go onchain * Ultra-cheap quantum-safe privacy protocols. Status quo minimum cost for private txs is ~300k if you engineer very well (no one does), status quo quantum-safe is ~10M gas, this could reduce it to low tens of thousands. * Universal support for your favorite new signature or proof scheme without needing EVM changes. Whatever you use (Falcon, ML-DSA, some other lattice-based thing, something code-based or isogeny-based or even more esoteric), you can just wrap it client-side in a STARK, onchain gas cost low tens of thousands just like privacy protocols. Hopefully, Ethereum will never need "please support my favorite cryptographic algo" politics again. * Private account abstraction: keep your account logic private, and in a private location onchain. Then you can make one transaction to change the ownership of all your onchain state - accounts, defi positions, privacy protocol notes, everything - without revealing which objects' ownership you're changing. Here's how it works. Your transaction can include a type of frame that we call a "dependency frame". The frame is a list of statements, asserting claims like "message hash M was signed by SPHINCS- public key P" and "data hash D was proven to satisfy a statement defined by verification key V". When you send your transaction, you send it in an envelope, which includes a signature or a STARK for each statement in a dependency frame. Once the transaction reaches the mempool, nodes aggregate them. Each node runs a loop: wait one tick (eg. 500ms), aggregate all new envelopes (either single-tx or multi-tx) that you've seen, remove any transactions that are expired, generate a STARK recursively proving all dependencies, and send a new multi-tx envelope containing that STARK. Hence, the bandwidth load is bounded: each node's outbound is one STARK (~100-300 kB) per tick, plus each transaction getting broadcasted through the network once (as happens already). The block builder acts as "yet another mempool node", receiving envelopes from the mempool (plus any side channels), generates its own STARK covering the subset of transactions it intends to include in the block, and adds that STARK to the block. Total onchain overhead: one STARK (100-300 kB), plus 96 bytes for each statement being proven. This is what I've called before ( ) "The Proof Singularity". Today, we have all the ingredients to actually implement it. As a developer, this requires a somewhat different workflow than you are used to, but it is conceptually simple. Any signatures or STARKs, you put into a separate frame. Then the main logic that today is verifying a signature or STARK, you replace with checking for the existence of a frame that includes the correct statement as a dependency. Examples of useful statements: * [tx sighash] verifies against [the pubkey at sload(0)] * there exists a secret and a merkle branch such that hashing secret+0 and applying the merkle branch outputs (public) root R, and hashing secret+1 outputs (public) nullifier N * there exists a secret address A, salt S and signature Z such that sload(0) = hash(A, S) and a merkle proof of address A inside a recent ethereum state contains some pubkey D where [tx sighash] was signed by D [this is private account abstraction; all variables except [tx sighash] and sload(0) are private; you can also make D a STARK verification key] * there exists an ML-DSA signature signing [tx sighash], that verifies against an ML-DSA pubkey whose hash is sload(0) At the core, this is moving any compute and data other than bookkeeping "business logic" outside the core path of Ethereum execution, sharding and parallelizing it via the mempool. Notice also that this requires agreeing on a _language_ (aka. an ISA) for the recursive STARKs to define statements in. The current leading candidate is RISC-V. So this would also de-facto be Ethereum adding RISC-V (or something else we decide on) as a canonical ISA - a big decision that should be done carefully, but that I think will be necessary to drive Ethereum forward.

Welcome Havenex. Series A is underway and closing soon, already applied for all required licenses (even more than required). DM me if interested to invest, note that allocation is already quite packed. After extensive discussions with regulators, central bank governors, Financial Market Authority leadership, banks, family offices, exchanges, wallet providers and custodians, my mission became very clear: Build the most transparent, safest, institutional-grade, fully regulated exchange possible, with continuous, verifiable proofs of solvency. Not just web3. Havenex is not trying to become another Coinbase, Binance, Bybit or Kraken. The focus is different: infra that allows financial institutions to offer digital and traditional financial assets to their customers, while meeting the standards they expect around regulation, custody, security and transparency. My principles are simple: 100% multi-chain. Verifiable custody. Continuous solvency proofs. Multi-sig by default. Quantum-safe keys. Hardware 2FA wallets. Confidential and RWA assets wherever regulation allows. Unique self-custody and key-loss protection mechanisms. Some of the best engineers and experts in cryptography, exchanges and privacy-preserving technology are joining the effort. Havenex will use Sui tech wherever it makes sense, but it will also integrate the best primitives, assets and bridges from other ecosystems. I'm personally helping Havenex as an advisor, although it was my idea. Mysten Labs and Sui remain my focus, nothing changes there. Chief & Hacker team Officer, as always, innovating at daily basis :) As all of you know since my Satoshi days, my goal has always been bigger: help crypto meet regulation without sacrificing ownership, transparency or security, while protecting users against malicious and shady activity and giving the best ecosystems room to thrive. We cannot keep accepting another FTX or Mt. Gox as the cost of doing business, nor the silly, insane bugs driven by LLMs lately. Havenex intends to set a different standard. The most transparent effort in regulatory-friendly crypto. You have my signature.