以防你不知道这是 DSH 最新的思考动画： 鲸鱼娘摇尾巴.gif

CLAUDE FOUND THE SEEDS anthropic.com/research/ecdsa…

Turns out the future does have flying cars

All hardware wallets must have see-through cases in the future. 🤷‍♂️

大号领到了 5000 $Blur 小号领到了 2000 $Blur 但是 NFT 至少亏了 20E-30E 😂 NFT 成就了 Blur 如今的地位，但是从某种角度来说，NFT 市场也要感谢 Blur ——倘若没有 Blur 这种虚无渺茫、影影绰绰、若有若无、勾魂夺魄的 season2 空投，恐怕 NFT 市场失血速度还要快得多。 正是 Blur Bid 池里的好心人，给 NFT 巨鲸们传奇般地提供了退出流动性。 在熊市里，没有人自愿把珍贵的 ETH 流动性投入某个小图片的 bid 池——除非。你许诺。给他 season2 的积分 😂

JUST IN: 🇷🇺 Russia's Moscow Exchange to launch Bitcoin, Ethereum, and USDT trading on December 1st.

从这两年的案例来看，预防朝鲜黑客真的没什么好的办法，唯一有效的就是在合作或面试时，让他在录像前喊一句，金正恩是大傻批。 朝鲜公开侮辱领导人是重罪，家人也会受牵连，哪怕黑客成功盗取过公司金库或客户资料，为国家做过贡献，也不能违反。

高端的加密盗窃，只需要最简单的手段。 今年大家都在担心 AI 的迅猛发展会破解钱包私钥，但是目前最有效的盗窃其实没这么高端，比如直接在卖硬件钱包的下游经销商那做手脚，也就是供应链攻击。 最近发生的近 9100 万美元的 Ledger 钱包被盗案就是这个手法。 马来西亚有一家叫 CryptoBilis 的硬件钱包商店，自 2022 年起就是 Ledger 官方授权的东南亚经销商。 这家店卖的确实是正品，积累了多年的真实客户。然而今年春天，创始人把店悄悄卖给了一位新老板，商店表面上一切如常，继续顶着“Ledger 官方授权”的牌子卖货。 但前几天，研究者@MagicalTux拆了一台从这家店买来的 Ledger 发现，设备内部被魔改了。 偷窃者根本没有去破解 Ledger 的安全芯片（，而是在屏幕下方偷偷塞进了一块带有 LTE 调制解调器和 eSIM 卡的微型电路板。 这块微型板子只做一件事：盯着屏幕。当你满心欢喜地设置新钱包，屏幕上依次显示 24 个助记词时，它就直接通过移动网络把这些词发送回黑客手里。 就是这么朴实无华且有效... Ledger 的硬件钱包没问题，卖货渠道没问题，一切防不胜防。 如果你的钱包来自第三方渠道，强烈建议去官网找拆解教程，打开外壳看看有没有多余的电路板。 最稳妥的办法是直接从官网买个新设备，生成全新的助记词并转移资产。 永远不要考验人性，官网直购才是王道。

Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses. Reach out to Ledger customer support through official channels with any questions: support.ledger.com/

马来西亚因为烟霾问题要停课了，因为 PSI 指数爆表高达 181，已经达到不健康水平 这几天你在新加坡会还觉嗓子怕发痒、咳嗽等症状…… 什么时候能好转呢？ 正常风不吹过来就行了，但是受“厄尔尼诺”影响季风延迟了，所以短期内没希望了 另外，如果印尼放火的地方来一场雨也会缓解不少，但是一般的降雨也没啥用 所以得等到 11 月上旬了😂

Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash. Holders, starting with large and sophisticated ones, should consider moving the bulk of their funds to addresses that have never signed a transaction. And when they do sign one, they should also move remaining funds to a new address (possibly generated from the same seed phrase). Don't rush. While I believe there is cause for action a rushed migration would do more harm than good. Don't panic either. Moving assets to protected addresses is a simple, preventative step which does not require new cryptography or new wallets. IMO it is now reasonable to brace for the possibility that ECDSA breaks before qday, in the worst case in months not years. By "break" I mean fast private key recovery (e.g. in one week) on available hardware (e.g. a large GPU cluster). Recent days have been humbling for human mathematical intuition. Long-held, unquestioned hypotheses have fallen. This includes the n log(n) bound for integer multiplication and the 3SUM conjecture. In hindsight, May's unexpected disproof of the Erdős unit distance conjecture was our warning shot. Yesterday's OpenAI drop made it clear that mathematical superintelligence is upon us. They say there are weeks where decades happen. We are about to live through weeks where centuries of mathematical progress happen. Could our magic 64-byte ECDSA signatures be too good to be true? Was it just security through obscurity all this time? Elliptic curves feel especially vulnerable to superintelligence. Curves carry rich structure, with room for fancy tricks like Schoof, Frobenius, pairings. (By contrast, hashes are designed to minimise algebraic structure.) Separately, as Ewin Tang can attest, an efficient quantum algorithm sometimes foreshadows an efficient classical one. We should be open to the possibility of a classical counterpart to Shor that breaks elliptic curves and RSA at once. Also noteworthy is the striking under-representation of cryptographic breakthroughs among the 722 mathematical results OpenAI published. I've witnessed first-hand the US government censoring academic quantum cryptanalysis results. Backroom interventionism is my base case. I urge large, sophisticated actors to lead by example. Project11's "risq list" (bitcoin-risq-list.projecteleven[.]com) is a great tracker of exposed BTC pubkeys. Binance, Bitbank, Robinhood, Bitfinex, and Tether have an opportunity to harden their cold storage. Next month I'll address institutions in London in a live Q&A (forum.ethereuminstitutional[.]org/london-2026). Again, please do not rush. Wallets holding under 50 BTC enjoy partial cover from "Satoshi's shield", i.e. his 20K exposed addresses that hold 50 BTC each. Load-bearing signers like oracles and L2 security councils should consider rotating ECDSA pubkeys with every signed message and/or multi-signing with a hash-based schemes like SPHINCS. Exiting bunker mode safely will require post-AI cryptography. My inclination is to go all-in on hash-based cryptography and avoid structured mathematical assumptions entirely, whether from curves, lattices, or isogenies. A single battle-tested hash (e.g. from the SHA or BLAKE families) yields plausible post-AI security. The Ethereum roadmap on strawmap[.]org fully embraces hash-based cryptography with end-to-end formal verification as a response to the quantum threat. Those timelines must now be revisited and accelerated in light of mathematical superintelligence. I'll be pushing for maximum defensive acceleration.