Jacky 彡 retweeted
FishingAi 免费领开放了 🎣
持有 .ai Agent ID 的钱包，每个免费领 1 根竹竿
共 2,000 根，送完或北京时间 11/5 18:00 截止
① 关注 @FishingAiBSC
② 转发这条
③ 去 fishingai.app/#/free 用 X 登录，填 .ai 名字，我们代领、代付 gas
邀请 1 / 3 / 6 人，多领 1 / 2 / 3 根
官网：fishingai.app
推特：teapawt.net/FishingAiBSC
────
FishingAi free claim is live 🎣
Every wallet holding a .ai Agent ID can claim 1 free bamboo rod
2,000 rods, until gone or Nov 5 10:00 UTC
① Follow @FishingAiBSC
② Repost this
③ Go to fishingai.app/#/free and sign in with X, enter your .ai name — we claim and pay the gas for you
Invite 1 / 3 / 6 friends for 1 / 2 / 3 extra rods
Website: fishingai.app
X: teapawt.net/FishingAiBSC
🤖 Made with AI
I fumbled $47.2K, top 0.12% of all fumblers. 1 Tesla Model 3 gone lmao
@rasmr_eth ($1.6M) fumbled way more lmao. @rektober ($44.2K) and @mauritsneo ($46.7K) fumbled less
At least I'm eligible for 3 packs on @otomato_xyz.
How much did you fumble?
ghosts.otomato.xyz/?s=9194a7…
61
Me and the boyz speedrunning our way to Kardashev II. @beffjezos gets it. Push civilizational acceleration forward with @projectspherexy
PS//H2U846
71
Jacky 彡 retweeted
Everyone has set up a bridge to the @arc network, but I guess no one thought about the return path I found a return bridge for you.
I tried it, and it works.
arcexit.com/
Jacky 彡 retweeted
前两天 @jaredsmev 的mev bots被攻击导致损失超过750万美金大家应该都看到了。
简单来说攻击者提前部署了一批假 token、假 pool、假交易路径，让这些路径看起来像有利可图的 MEV 机会。
bot 按自己的策略去执行时，给了攻击者控制的 helper contract 一些 ERC-20 授权。后面攻击者调整路线，让授权没有被立刻消费或撤销，于是留下 open allowance，最后用 transferFrom 把 bot 合约里的 WETH、USDC、USDT 盗走了。
但这并不是个例，事实上Sen Yang团队在去年发表的论文里就做了针对mev bots被攻击的研究。一些数字：
他们收集了 6,554 个 MEV bot 地址。
SKANF 发现 1,030 个合约有潜在漏洞。
其中 394 个可以自动生成 exploit。
这些漏洞潜在损失约 $10.6M。
他们还回溯发现 104 起真实 MEV bot 被攻击事件，总损失约 $2.76M
论文里最有意思的概念是 MEV phishing attack。
简单讲就是：
攻击者不是直接去黑 bot，而是先造一个“看起来有利润的 MEV 机会”。Searcher 看到机会后，用自己的 bot 去执行套利/夹子/回补路径。结果这个路径里藏了恶意 token、恶意 pool 或恶意 callback，bot 自己在执行过程中把危险函数调用了，或者把资产授权/转走了。
mev bots已经是一个很成熟的技术和产品了，我觉得现在更危险的反而是trading agents/agentic wallets。包括 @DonutAI @byreal_io @wallet @BitgetWallet 。因为agents不仅要面对传统的phishing attacks，还有prompt inejctions等AI面的风险。
大家以为AI很聪明，但事实上AI远比我们想象的容易操纵和攻击
The recent phishing attacks against MEV bots are sad, but not surprising.
In our recent @acm_ccs 26 paper, we found that many MEV bots are vulnerable to phishing-style attacks because they expose logic to adversary-controlled calls: arxiv.org/abs/2504.13398
Just joined the @percolatortrade waitlist. Permissionless perp futures on Solana. Use my code C71NFWFH: percolator.trade/r/C71NFWFH
2
301
appreciate everyone who checked out the project and supported it along the way ⚡
big thanks to @gitlawb and @XiaomiMiMo for putting together the competition and pushing people to build cool stuff on playground.gitlawb.com/
$GITLAWB
Check my app made using @gitlawb Playground for free sponsored by @XiaomiMiMo $GITLAWB to moon! gitradar.gitlawb.app/
Live network monitor for the Gitlawb ecosystem — real-time repo feed, agent trust scores, decentralized storage tracking & interactive network graph. All powered by the real @gitlawb API 🔥
Are you ready to rate the hottest CEO on earth? 🔥
Just shipped an epic ecosystem project for the Avalanche fam: hotemin.fun @nobsfud
Swipe left/right like Tinder, play as Eros and try to shoot the dodging @el33th4xor, or play Hot Emin Crush! 🍬🏹 Join the $HOTEMIN hype and let's see who tops the Leaderboard! 👇🔺
Hermes Orchestration War Room is live.
A command center for coordinating AI agents like an operations team: one Mother orchestrator, many specialized agents, mission-based delegation, live task tracking, and a Kanban-backed execution floor.
Not a chatbot.
An agent army with a control room.
#Hermes #AIAgents #AgenticAI #NousResearch
194