holly retweeted
This was a genuinely interesting conversation (and at times a debate).
Tldr; of my argument: no global fx won't trade in an AMM
Tokenization is happening. But how efficient is DeFi, really? Could we ever see price discovery happening on-chain?
Post-Aqua, we sat down to talk liquidity with Bebop CEO @katiabanina, Curve founder Michael Egorov @newmichwill, @Dragonfly Partner @tomhschmidt and our very own CPTO Holly Atkinson @holdoesdev.
Catch the full conversation tomorrow at 9AM ET on Youtube: youtu.be/jgpWD-ONkcQ
holly retweeted
what doesn't kill you introduces you to carl jung, marcus aurelius, epictetus, friedrich nietzsche, james baldwin, bell hooks, audre lorde, frantz fanon, paulo freire, joseph campbell, alan watts, ram dass, gary zukav, brene brown, gabor mate, shadow work, attachment theory, nervous-system regulation, ancestral trauma, existentialism, stoicism, meditation, emotional intelligence, neuroplasticity, metacognition, pattern recognition, game theory, delusional optimism, boundaries and discernment.
Expansion mode: on.
1inch is live on HyperEVM. Everything from the start: intent-based swaps with no gas fees and MEV protection, cross-chain in with no bridge, self-custodial throughout, plus Aqua.
The house of finance just got a new wing. Welcome to the @HyperliquidX era for 1inch.
holly retweeted
My Forbes interview is out.
Let me be clear: DeFi and 1inch are set to become central to global finance. The profits and size will come.
But you don't get there by only focusing on extracting from users today.
You get there by building better products, better outcomes and expanding the market.
Build the rails now. Charge when all of finance runs on them. That's what @1inch is all about.
My @Forbes interview: forbes.com/sites/boazsobrado…
holly retweeted
Replying to @holdoesdev
@holdoesdev, CPTO of @1inch, on DeFi's dirtiest secret: most of the liquidity is doing nothing 👇 youtube.com/watch?v=WRpf1hY9…
Why does most LP capital in DeFi sit idle? And what changes when one wallet balance backs many positions?
Our CPTO @holdoesdev took both questions to the @StanfordSBA stage. Her full segment:
holly retweeted
Pragma Lisbon 🇵🇹 | 3:00pm
The Liquidity Efficiency Gap with @holdoesdev of @1inch
July 25 ∙ Pavilhão Carlos Lopes
ethglob.al/HKRXP56HKA
holly retweeted
🚨BASS Speaker Announcement🚨
@holdoesdev Chief Product and Technology Officer of @1inch
the science of blockchain conference is coming home 🌲
stanford campus. july 30. one day, all frontier
@StanfordSBA @StanfordCrypto @theBBFund have been heads down all summer
lock your spot: luma.com/basssbc2026
holly retweeted
🌟 NEW Pragma Lisbon speaker announced:
@holdoesdev, CPTO at @1inch
July 25 • Pavilhão Carlos Lopes 🇵🇹
ethglob.al/HKRXP56HKA
holly retweeted
Excited to welcome Holly Atkinson to 1inch as our new CPTO.
Holly will help build on our current product ecosystem while also launching Aqua as we continue shaping 1inch into a key pillar of DeFi infrastructure. Welcome aboard, @holdoesdev
Welcome to the team, Holly Atkinson.
@holdoesdev joins 1inch as Chief Product and Technology Officer, leading product strategy across our core routing infrastructure and the upcoming launch of Aqua, our shared liquidity product.
Her background spans full-stack engineering, blockchain architecture and executive leadership.
The goal stays the same: the best rates, the deepest liquidity, the strongest infrastructure in DeFi.
holly retweeted
NEWS: 1inch strengthens leadership team with new Chief Product & Technology Officer to drive Aqua launch and accelerate product innovation | @1inch @holdoesdev
thestreet.com/crypto/innovat…
DNS hijacks are spiking in crypto. CoW Swap and eth (dot) limo were both hit. You visit a frontend, everything looks normal, you sign a transaction and funds go to an attacker's wallet.
The defense isn't better detection. It's frontends that STRUCTURALLY can't be cracked.
Two approaches already exist:
> IPFS + ENS: Your frontend lives on a distributed file network instead of a server. Point your web3 domain (ENS) at that file. No DNS, no central server to compromise
> Fully onchain (ERC-4804): The app itself lives inside smart contracts. The frontend is served directly from Ethereum
Sadly though, regular browsers can't load either. That’s why we have web3 browsers like:
> Freedom Browser: open-source browser that loads ENS domains and IPFS sites natively, the same way Chrome loads (dot) com addresses
> EVM Browser: built around the web3:// protocol, loads apps served directly from smart contracts on Ethereum or any EVM chain
The proof of concept is already live. @z0r0zzz built zSwap is a DEX frontend deployed ENTIRELY into Ethereum contract bytecode for under $5. Anyone can load it through EVM Browser. In other words: No servers, No DNS, Nothing to hack.
Every DeFi project should ship a permanent onchain frontend as a fallback. Best security is just to go straight to the contract. The tools exist. Build toward it.
Following the KelpDAO hack, we built an open analysis of DVN security configurations across every active OApp on LayerZero over the last 90 days.
Of ~2,665 unique OApp contracts: 47% run a 1-of-1 DVN security floor, 45% run 2-of-2, and ~5% run 3-of-3 or higher.
As we know, KelpDAO's rsETH sat in the first bucket.
Open query, public methodology, feedback welcome:
dune.com/dune/layerzero-dvn-…
holly retweeted
the kelp rsETH post-mortem is wild
lazarus (dprk) compromised two rpc nodes that layerzero dvn was relying on. swapped the op-geth binaries. wrote a custom payload that forged messages *only when the dvn queried* - every other IP, including monitoring, saw clean truthful data.
then they DDoS'd the healthy RPCs to force failover onto the poisoned ones. drained $290M. self-destructed the malicious binaries to erase tracks.
they targeted rsETH because kelp ran a 1-of-1 DVN config with layerzero as sole verifier
holly retweeted
come work with me & the comms coordination team.
we're looking to expand the @ethereumfndn's comms coordination team with a new hire
you'll work with a small team to support everything we do on socials today, help expand our capabilities in asia, and take on much more as we take on new challenges
great role for someone junior but looking to learn fast and take on more responsibility
more info 👇
holly retweeted
Fully agree. This is exactly what keeps me in this space.
Ethereum is not about winning the finance game on finance’s own terms — that race makes no sense, and we would lose it anyway.
The real game is resilience: permissionless access, censorship resistance, and the ability to keep working when institutions, platforms, or power structures fail.
If we stay true to these values, we give humanity something far more important than efficiency: a tool for freedom, sovereignty, and equality between humans.
“Ethereum was not created to make finance efficient or apps convenient. It was created to set people free”
This was an important - and controversial - line from the Trustless Manifesto ( trustlessness.eth.limo ), and it is worth revisiting it and better understanding what it means.
“efficient” and “convenient” have the connotation of improving the average case, in situations where it’s already pretty good. Efficiency is about telling the world's best engineers to put their souls into reducing latency from 473 ms to 368ms, or increasing yields from 4.5% APY to 5.3% APY. Convenience is about people making one click instead of three, and reducing signup times from 1 min to 20 sec.
These things can be good to do. But we must do them under the understanding that we will never be as good at this game as the Silicon Valley corporate players. And so the primary underlying game that Ethereum plays must be a different game. What is the game? Resilience.
Resilience is the game where it’s not about 4.5% APY vs 5.3% APY - rather, it’s about minimizing the chance that you get -100% APY.
Resilience is the game where if you become politically unpopular and get deplatformed, or if a the developers of your application go bankrupt or disappear, or if Cloudflare goes down, or if an internet cyberwar breaks out, your 2000ms latency continues to be 2000ms.
Resilience is the game where anyone, anywhere in the world will be able to access the network and be a first-class participant.
Resilience is sovereignty. Not sovereignty in the sense of lobbying to become a UN member state and shaking hands at Davos in two weeks, but sovereignty in the sense that people talk about "digital sovereignty" or "food sovereignty" - aggressively reducing your vulnerabilities to external dependencies that can be taken away from you on a whim. This is the sense in which the world computer can be sovereign, and in doing so make its users also sovereign.
This baseline is what enables interdependence as equals, and not as vassals of corporate overlords thousands of kilometers away.
This is the game that Ethereum is suited to win, and it delivers a type of value that, in our increasingly unstable world, a lot of people are going to need.
The fundamental DNA of web2 consumer tech is not suited to resilience. The fundamental DNA of _finance_ often spends considerable effort on resilience, but it is a very partial form of resilience, good at solving for some types of risks but not others.
Blockspace is abundant. Decentralized, permissionless and resilient blockspace is not. Ethereum must first and foremost be decentralized, permissionless and resilient block space - and then make that abundant.
holly retweeted
Someone (can't remember who, sorry!) said (more or less) this very true sentence:
Blockchain is a terrible technology. It's complex, and slow, and expensive. It does everything bad, except(!) for allowing decentralize control of the network.
Today, we can build solutions to make blockchains fast and cheap and with simplified UX, but it's important to remember why we need blockchains to begin with: Decentralization. Decentralized control means no one entity is in control.
Return to fundamentals: Make sure no one single entity can control your assets and your life.
holly retweeted
Privacy, self-custody, and security -- these are all foundations that help guarantee Freedom.
holly retweeted
We have identified that certain npm packages starting with @ensdomains published around 5:49am UTC today may be affected by a Sha1-Hulud supply-chain attack that has compromised over 400 NPM libraries, including several ENS packages.
The team has updated all latest tags and is proceeding with key rotations and currently attempting to unpublish all impacted versions.
USERS: Current reviews indicate that ENS Labs-operated websites, including app.ens.domains, have not shown signs of impact related to this issue. At this time, there is no evidence that names have been affected.
DEVS: If you have not installed ENS packages within the past 11 hours [since 5:49am UTC on November 24, 2025], there is no indication you are affected.
If you have, please refer to the following link with a list of affected packages and install the latest version.
We will continue monitoring and provide updates as more information becomes available. Developers or teams with questions can contact us through established support channels.
go.ens.xyz/npm-attack
holly retweeted
19/23
Circling back to DeSoc, #devconVI closed with a poignant reminder from @kurtopsahl of why we’re all in this: decentralization changes lives. And privacy is a fundamental human right. But it is also fundamental in OTHER human rights. 🌪💔 @TornadoCash





























