exploring stories and fun ways to tell them, avg crypto and ai user (ex @supra_labs)
Joined October 2022
- Tweets329
- Following3.1K
- Followers573
- Likes14.1K
Pinned Tweet
I spent almost four years working on something I actually believed in. That ended last month after six months of being told payment was coming next week, week after week. It still hasn't.
All this while work was being done with the same conviction, fresh agreements signed on their request, promises made and remade more times than I can count, all with no follow through or accountability.
Some will say "you should have left earlier" truth is I had three years of real trust with the people I worked with. Took six months of not being paid to realize something had changed at the very top. But it doesn't excuse their actions or change what's owed.
Tbh I'm still figuring out what to do with this stretch. watching four years of conviction dissolve into this has been one of the strangest things I've gone through professionally.
Also apparently I'm just one of dozens going through this exact thing here, let that sink in.
nornalize not announcing announcements and just shipping product like this
instipunk era full steam ahead 💨
JUST IN: The Zenith EVM Testnet is live and open to the public.
For the first time, 31800+ Ethereum developers can deploy standard Solidity applications that compose atomically with @CantonNetwork - the institutional blockchain where DTCC, JPMorgan, Goldman Sachs, and Visa process $9T+ in monthly settlement volume.
Point your existing tools at the Zenith RPC endpoint and deploy. Your contracts don't change, your tooling doesn't change, and every transaction is finalized through Canton's consensus with deterministic finality in seconds. The external_call() primitive enables atomic composability with Canton-native Daml workflows directly, and the Linked Transactions explorer shows you the full lifecycle of every transaction across both environments in one place.
Zenith is already contributing to two of the most significant tokenization initiatives running on Canton: @The_DTCC 's DTC Digital Assets Solutions Industry Working Group bringing $114 trillion in U.S. securities on-chain, and @progmat_en's Tokenized JGB working group targeting Japan's $1.6 trillion JGB repo market alongside MUFG, Mizuho, and BlackRock Japan.
This is the first public venue where Ethereum's programmability and Canton's institutional rails meet.
Get started: docs.zenith.network
Explore: explorer.testnet.zenith.netw…
Full announcement: zenith.network/resources/blo…
To test atomic cross-environment workflows with the Zenith Gateway, reach out to us directly: [email protected]
Zth.
three months later - still unresolved.
and multiple new promises were made and not kept yet again and again and again in these three months
talk about clueless financial management and leadership
think we're like over nine months since the issues first began at this point
may the gods protect us from men who think of themselves as odysseus when they are in fact agamemnon
1
117
So there is a 100k budget for a bounty and large budgets for lawyers, while us former team members who gave supra years of service are still waiting for large sums of payments that have been overdue for how many months now?
Being a founder in DeFi can feel like your worst nightmare of showing up to school naked...
everyone laughing at you, pointing at how shriveled your dick is, over and over again.
Except it's not a dream. It's Monday.
Our DeFi partners' clients just lost ~$9M through a cleverly simple attack that every reviewer in the world in the last 2 years missed, including us.
This X tweet is more than just about DeFi though, this is for the Web3 brotherhood — the programmers and protocol designers in the trenches with us who trusted that our onchain verifier code would catch every malicious output.
Our verifier had a fault in it. Live. Transparent. For two years straight — through the tail end of the last bull market. Fully visible. Fully on-chain. Anyone could have found it.
Nobody did.
Not until now.
Not until AI-assisted hacking made it trivial to find what human eyes had missed.
And that's our new reality. The attack surface just changed forever. Every vetted protocol live today was audited by humans against a threat model that no longer exists.
AI doesn't get tired. It doesn't skim. It reads every line, every branch, every edge case. We're all naked in the hallway now. All of us are vulnerable.
But here's what most don't get about founders in this space: we do it despite everyone laughing at our naked body of work. Despite the exposure. Despite the risks. That's the job.
To work long in this space, you actually have to believe in the importance of Web3 for the world. Otherwise, it's just not worth it.
To the hacker. Or hackers. Because I suspect there's a crew of you out there right now, pointing AI at every verifier, every bridge, every contract, hunting for the next one to exploit...
I want to talk to you directly.
If you are angry at the system — I get it. I actually get it. Fiat is a scam. Governments debase your savings. The banks front-ran your parents. The system is rigged and you are right to be furious.
But, do not hurt DeFi.
DeFi is your liberation. Non-government controlled global currency is the one exit that actually exists. And its early and new; it didn't exist before Satoshi Nakamoto.
You destroying DeFi doesn't hurt the system you're angry at... it hurts the only thing standing against it.
Channel that anger into creative destruction. Not through the destruction of what liberates you.
Help us in Web3 fix it instead.
Aggressively. Ruthlessly.
Point your AI at every protocol and tell us what's broken before someone worse does.
That's the war worth fighting.
To the specific person holding our partners' customer's funds right now: please return the funds.
Keep $100K - All charges dropped. Guaranteed job offer on the table. Walk away richer, employed, and able to sleep. That's the deal. It's real. It's on the record.
If you don't... there will be a $100K bounty on your head. Growing 10% a year on top of inflation. Forever. Payable to anyone who turns you in. Your partner. Your friend. The girl you bragged about it to at the pub.
Someone always talks.
Every year that passes, that number grows. Every year, more people looking. Every year you'll feel less safe. That's no way to live.
Law enforcement is going to inevitably get involved. It's not if. It's when.
Door one: $100K gift, charges dropped, a job, sleep well each night, build the future, change the world.
Door two: a $100K bounty that pursues you, growing every year, in every jurisdiction, forever.
The offer is open for 72 hours.
If you're open for this, start sending ETH here, this address is a ~16 person multi-sig:
0x913BDd807608DEA920C689a7c3222E94e07551cC
Anything returned all goes back to the protocols affected and their customers.
You'll get $100K and the Web3 world will move forward more safely together.
______________
To our partners and their clients who got hit: Please stay optimistic about our space. DeFi and Web3 right now is a little delicate and brittle with the advent of AI-assisted hacking.
We all must harden DeFi and Web3 together, and we all need to do this fully within the next 3-6 months before DeFi can properly flourish.
We need more formal verification (we recently started this work at Supra, ironically), protocols should also have their own circuit breakers, and at the same time...
we all genuinely need to make Web3 more secure by decentralizing...
To everyone still building in our space: let's keep going. Naked in the hallway, body of work out in public, transparent, onchain, doing it live...
We need to make Web3 better and safer for all.
ETH Return Address:
0x913BDd807608DEA920C689a7c3222E94e07551cC
Nipun retweeted
This is incredible, great message etc. But before offering someone else a job, how about paying us former employees what we have been owed for months so we can finally sleep too?
Being a founder in DeFi can feel like your worst nightmare of showing up to school naked...
everyone laughing at you, pointing at how shriveled your dick is, over and over again.
Except it's not a dream. It's Monday.
Our DeFi partners' clients just lost ~$9M through a cleverly simple attack that every reviewer in the world in the last 2 years missed, including us.
This X tweet is more than just about DeFi though, this is for the Web3 brotherhood — the programmers and protocol designers in the trenches with us who trusted that our onchain verifier code would catch every malicious output.
Our verifier had a fault in it. Live. Transparent. For two years straight — through the tail end of the last bull market. Fully visible. Fully on-chain. Anyone could have found it.
Nobody did.
Not until now.
Not until AI-assisted hacking made it trivial to find what human eyes had missed.
And that's our new reality. The attack surface just changed forever. Every vetted protocol live today was audited by humans against a threat model that no longer exists.
AI doesn't get tired. It doesn't skim. It reads every line, every branch, every edge case. We're all naked in the hallway now. All of us are vulnerable.
But here's what most don't get about founders in this space: we do it despite everyone laughing at our naked body of work. Despite the exposure. Despite the risks. That's the job.
To work long in this space, you actually have to believe in the importance of Web3 for the world. Otherwise, it's just not worth it.
To the hacker. Or hackers. Because I suspect there's a crew of you out there right now, pointing AI at every verifier, every bridge, every contract, hunting for the next one to exploit...
I want to talk to you directly.
If you are angry at the system — I get it. I actually get it. Fiat is a scam. Governments debase your savings. The banks front-ran your parents. The system is rigged and you are right to be furious.
But, do not hurt DeFi.
DeFi is your liberation. Non-government controlled global currency is the one exit that actually exists. And its early and new; it didn't exist before Satoshi Nakamoto.
You destroying DeFi doesn't hurt the system you're angry at... it hurts the only thing standing against it.
Channel that anger into creative destruction. Not through the destruction of what liberates you.
Help us in Web3 fix it instead.
Aggressively. Ruthlessly.
Point your AI at every protocol and tell us what's broken before someone worse does.
That's the war worth fighting.
To the specific person holding our partners' customer's funds right now: please return the funds.
Keep $100K - All charges dropped. Guaranteed job offer on the table. Walk away richer, employed, and able to sleep. That's the deal. It's real. It's on the record.
If you don't... there will be a $100K bounty on your head. Growing 10% a year on top of inflation. Forever. Payable to anyone who turns you in. Your partner. Your friend. The girl you bragged about it to at the pub.
Someone always talks.
Every year that passes, that number grows. Every year, more people looking. Every year you'll feel less safe. That's no way to live.
Law enforcement is going to inevitably get involved. It's not if. It's when.
Door one: $100K gift, charges dropped, a job, sleep well each night, build the future, change the world.
Door two: a $100K bounty that pursues you, growing every year, in every jurisdiction, forever.
The offer is open for 72 hours.
If you're open for this, start sending ETH here, this address is a ~16 person multi-sig:
0x913BDd807608DEA920C689a7c3222E94e07551cC
Anything returned all goes back to the protocols affected and their customers.
You'll get $100K and the Web3 world will move forward more safely together.
______________
To our partners and their clients who got hit: Please stay optimistic about our space. DeFi and Web3 right now is a little delicate and brittle with the advent of AI-assisted hacking.
We all must harden DeFi and Web3 together, and we all need to do this fully within the next 3-6 months before DeFi can properly flourish.
We need more formal verification (we recently started this work at Supra, ironically), protocols should also have their own circuit breakers, and at the same time...
we all genuinely need to make Web3 more secure by decentralizing...
To everyone still building in our space: let's keep going. Naked in the hallway, body of work out in public, transparent, onchain, doing it live...
We need to make Web3 better and safer for all.
ETH Return Address:
0x913BDd807608DEA920C689a7c3222E94e07551cC
Nipun retweeted
As a former @SUPRA_Labs employee of almost 3 years, I find it incredibly hard to believe that a chain like @hedera with DeFi protocols like @bonzo_finance fully dependent on Supra's oracles could simply be "forgotten" or missed.
There were robust processes in place for releases like this (I was part of them): deployment/update scripts for all chains with automated pre and post deployment checks, multi-person sign-offs for approval, and direct communication to all external partners.
If the team was aware of this vulnerability and had already patched it on other chains, that's genuinely concerning, whether due to negligence or outright malice. This was a mission-critical P0.
rough one. looks like @SUPRA_Labs actually knew about this exploit in their oracle. on more important networks like Arbitrum they upgraded their impls over the last 2wks (previously untouched for years). someone must have noticed this and found the forgotten Hedera instance
It's surprising the lengths some folks will go to to protect their version of a story, to hide the real one, and to threaten the people they've already wronged for speaking up
2
12
760
"Be patient" and "stay professional" sound like virtues until they're used to keep you quiet about something wrong.
Six months of patience changes the picture when the patience is entirely one-directional, they keep asking, we keep complying based on trust built over four years. any reciprocal expectation gets met with empty promises while the real human cost that honest hard-working people have to carry just keeps adding up.
When "stay professional" comes from someone who owes you six months of pay, it really just means "please don't make this awkward for us." And "appreciate your patience" is just something they can say forever without any cost.
Most people going through this have been measured, cooperative, and quiet this entire time. Some out of fear, others out of hopium, but not sure how long the charade lasts.
Nipun retweeted
I think all can agree that if someone has been contracted to do work and they've done it, they should be paid the agreed amount.
Any delays in payment should be communicated clearly with actual timelines, not vague "soon" messages, or worse, long periods of total silence.
Nipun retweeted
I’ve officially stepped away from my role.
This wasn’t a quick or easy decision. I spent months trying to handle things privately and professionally. Based on my own experience, I reached a point where I could not continue taking on that risk.
I’m grateful for many of the people I met along the way. There are real builders and people I’ll continue to respect.
But I also want to be honest about why I’m leaving.
I continued showing up, doing the work, and trying to move things forward. As time went on, the alignment I expected between work performed and compensation no longer held up in a sustainable way.
At a certain point, continuing under those circumstances no longer made sense.
Closing this chapter is bittersweet. I’m thankful for the real ones, proud of what I contributed, and ready to move forward.
To the community: thank you for the support, conversations, and kindness. I won’t forget the good that was here.
To those still building: I genuinely wish you the best.
To the people I worked closely with and still respect, you know who you are.
still unresolved btw, after a full month of trying to handle matters privately, which itself was after six full months of grace and leeway
the truth comes out eventually
Finally @JoshuaTobkin paid attention and reached out.
I'm trying to help him come to a reasonable resolution privately but it seems unlikely so far. Hope we can resolve everything quietly.
More soon.
Nipun retweeted
Imagine being treated this way after 4 years of service, who does that?
Nipun retweeted
Finally @JoshuaTobkin paid attention and reached out.
I'm trying to help him come to a reasonable resolution privately but it seems unlikely so far. Hope we can resolve everything quietly.
More soon.
Finally @JoshuaTobkin paid attention and reached out.
I'm trying to help him come to a reasonable resolution privately but it seems unlikely so far. Hope we can resolve everything quietly.
More soon.
Imagine being treated this way after 4 years of service, who does that?