Alter ego: @AlgoFoundation / Opinions personal
Algorand Mainnet
Joined December 2021
- Tweets9.3K
- Following2.3K
- Followers4K
- Likes25.1K
D13 retweeted
The wait is over!⚡️
Today we are rolling out the first Concentrated Liquidity platform on @Algorand
Better yields. Better depth. Better trades. Better DeFi.
Join now: pact.fi/pools
Algorand node runners on Ubuntu: please upgrade your OS. Ubuntu kernel fixes for CVE-2026-98432 are (mostly) out for 22.04, 24.04 and 26.04.
Upgrade and reboot:
sudo apt update && sudo apt full-upgrade && sudo reboot
Then check that uname -r is at least the version below for your release.
Release Kernel Running kernel at least
26.04 generic 7.0.0-43-generic
aws 7.0.0-1017-aws
azure 7.0.0-1020-azure
gcp 7.0.0-1017-gcp
oracle 7.0.0-1016-oracle
24.04 generic 6.8.0-149-generic
lowlatency 6.8.0-149-lowlatency
aws 6.8.0-1069-aws
azure 6.8.0-1073-azure
gcp 6.8.0-1073-gcp
oracle 6.8.0-1067-oracle
HWE 7.0 pending (7.0.0-43.43~24.04.1)
HWE 6.17 no fix yet
22.04 generic 5.15.0-203-generic
lowlatency 5.15.0-198-lowlatency
aws 5.15.0-1120-aws
azure 5.15.0-1126-azure
gcp 5.15.0-1121-gcp
oracle 5.15.0-1117-oracle
HWE 6.8 pending (6.8.0-149.149~22.04.1)
20.04 HWE 5.15 5.15.0-203-generic
generic 5.4 pending (5.4.0-247.267)
cloud aws/azure/gcp/oracle: no fix yet
HWE kernels also show -generic; the version number tells them apart. 20.04 kernel updates need Ubuntu Pro (ESM). Ubuntu's CVE page still shows some of these as "pending", but the notices have shipped them.
D13 retweeted
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem. This is an iOS-level issue, not unique to Binance.
Immediate Action Required:
- Delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs).
- Update iOS and all apps to the latest official versions.
- If you suspect a breach, transfer funds to a new wallet created on a clean device and reset all active login sessions.
Never install unauthorized packages, and keep your software up to date.
Readers added context they thought people might want to know
Binance recommends updating iOS to the latest versions against worse_query, but researchers describe it as an unpatched 0day and Apple's iOS 27.2.1 notes omit any such fix.
github.com/forcequitOS/wo…
support.apple.com/en-us/149715
x.com/0xjohnny/statu…
"I forked Algorand"
youtu.be/GF5kSre0eUM
"dt-algod" side project: experimental algorand node with time travelling & advanced querying capabilities.
Every account, asset, app, box, at every round. Call the REST API, simulate, or run read-only TEAL at any past round. And asset>holders lookups at any round, block deltas & more.
- Packaged for Linux (apt), Mac (homebrew)
- fast-catchup supported (published snapshots)
- Just ~80GB required for a light time travelling node
- Published sdk variants: js-algosdk, algokit-utils-ts, go-algorand-sdk
Source and docs: github.com/d13co/dt-algorand
2
8
434
D13 retweeted
Web3Auth has said the accounts affected are Keplr Wallets. To the best of our knowledge no Haystack accounts have been affected. We will update everyone as we know more.
If you've exported your seed from Haystack, you should rekey those accounts out of an abundance of caution
D13 retweeted
🚨Live now🚨
magnetALGO has been officially launched on @Myth_Finance! This effort has been delivered as part of our initiative into diversifying our LST strategy as well as increase organic Magnet token purchasing.
How it works:
Beginner) Stake primarily ALGO only in the magnetALGO pool to receive $U back as yield via Algorand Census rewards.
Advanced) Pair uALGO tokens with native $U on TinyMan and (starting December) enter into our TINY farm for EXTRA yield
We hope you join us in our node pool!
🧲
D13 retweeted
Spot when a token's trading looks fake.
If a few wallets, the creator among them, trade back and forth or pull liquidity right before buying, a warning sign shows by its name in the screener and on its page. Click it to see what was found.
Those tokens are kept off Trending.
D13 retweeted
🤖 Made with AI
Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far
Readers added context they thought people might want to know
In many jurisdictions this is a crime. In the US under Computer Fraud and Abuse Act, 18 U.S.C. §1030, in the UK under Computer Misuse Act (CMA) 1990, in Germany Strafgesetzbuch (StGB), and many others.
justice.gov/jm/jm-9-48000-…
legislation.gov.uk/ukpga/1990/18/…
gesetze-im-internet.de/stgb/
D13 retweeted
An Algorand consensus protocol upgrade is scheduled to go into effect this Thursday at Round 66,684,510.
Make sure you are running algod v5.0.5 so that your node is prepared for this and can continue to participate in consensus.
D13 retweeted
The sparkyALGO dualSTAKE token has been sunset due to lack of stake.
It has remained under the 30K ALGO staking threshold for 44 days. Holders are advised to redeem their dualSTAKE tokens.
Redeem sparkyALGO: myth.finance/dualSTAKE/spark…
Sunsetting documentation: docs.myth.finance/dualSTAKE/…
cc @SparkyTapAlgo @EFoxAJ
D13 retweeted
Hello Algofam! I'm happy to finally present leakswap.com and zebgen.com for public beta testing (using TestNet/StageNet).
LeakSwap is my #Algorand - #Monero cross-chain swaps protocol. Thanks to Algorand's ~2.7s block time and instant finality I believe it to be the fastest non-custodial swap protocol out there. (For now it's only ALGO<->XMR but I have plans for other pairs as well!)
I recorded a video presentation I'm attaching here. I apologize for the background noise and subpar audio but I've been stuck away from home.
Importantly: the full demo is at 19:00 - 30:00. I simulate a full swap between 2 parties ("Ali" and "Xin"), which is also what I'd like the community to try out.
Please watch the demo, follow along, DIY and make sure to send me any and pieces of feedback that you have! I have links to my telegram group and discord on Leakswap.com.
Thanks to @Urthoo for hosting nodes, the sXMR faucet and explorer. And to @kayabaNerve for helping me years ago figure out how to abuse Algorand's ed25519_verify opcode to leak the private spend key share. (Which inspired the name.)
TG: t.me/+UoVa9z0EENNhOTU0
Discord: discord.gg/a7MEQKYknS
Go sockets will default to MPTCP if it is supported by the OS, so most Go servers on Ubuntu (among others) will be vulnerable. The race needs time to trigger, but doesn't mean this should be ignored. If you have publicly exposed Go servers:
1) Disable MPTCP now, and
2) Patch when there's a fix from your distro
@Canonical any timeline for the patch?
I spent the last few hours going down the CVE-2026-98432 Critical Linux Kernel Flaw rabbit hole 🕳️ and here are a few thoughts:
- It is legit and scary. Kinda crazy that it's been known for 2 weeks & there is still no patch for popular distros (the Ubuntu fix, for example, is developed but not publicly released, still in testing).
- MPTCP needs to be enabled, and on some unorthodox port. It seems that ISPs globally have started blocking options on 22, 80, 443 and other popular ports (good!).
- If you're running a server with valuable data, disable MPTCP and/or IP options NOW. They are not necessary in 99% of use cases anyways.
- It takes about 50 minutes on average to gain access to a server if all conditions are met. My servers started getting hit today; luckily the script I shared earlier handled the situation and rejected the probes.
Stay safe & enjoy the wild AI psychosis ride we're in.
D13 retweeted
Flying cars get patched mid-roll.
#Algorand nodes need you. 5.0.5 is out.
github.com/algorand/go-algor…
D13 retweeted
Ingesting 1.9B #Algorand transaction notes in under 10 minutes.
800K labels.
Mainnet in 1024 dimentions 🤯 .. and 4K