yoav.eth retweeted
Onchain security is everyone’s problem and nobody’s job.
ETHSecurity Initiatives is how we are changing that.
Propose the work. Fund the work. Build the work.
initiatives.thedao.fund/
yoav.eth retweeted
this industry has spent more than a decade lying to itself about building the future while shipping systems that can't survive the people who built them. if your application fails the walk away test, you've fucking failed. period. i don't fucking care how many users, investors, or billions it has. sooner or later every company disappears, every foundation dissolves, and every multisig stops signing. the only things worth building are the ones that keep working after everyone walks away. build something that no longer needs you.
yoav.eth retweeted
Have you ever had your bank account frozen ? If you haven't, you'll never truly understand the current debate between permissionless and permissions chains. Some TradFi people want to trick you into thinking that baking TradFi rules into the low-level blockchain infra is the only way for blockchain adoption. These are the same people that were building intranets assuming the internet is too dangerous, does not protect privacy and is full of illicit use.
Anything that can be done by private, permissioned blockchains can be done more efficiently by private distributed databases. It is a fact well known for years to all IT professionals.
Public blockchains are slow, inefficient and achieving privacy there is hard. And yet this is where we will all be transacting in years to come for a very simple reason - they give guarantess that permissioned networks will never be able to give to all transacting parties. You will never be debanked holding ETH. Your trade on Uniswap will never be blocked by anyone and will always settle. TradFi orgs adopting these properties are forward looking. TradFi reimplementing existing rules on permissioned chains will fail in exactly the same way they failed in 2015. Just ask IBM, Corda/R3 and the likes
If you're an institution considering onchain activity, make @l2beat a part of your risk assessment. That's where you learn about the hidden trust assumptions.
I think people are seriously misunderstanding the role of audits. To quote the article below:
"Resolv’s smart contracts had received multiple audits from well-regarded security firms, none of which identified the privileged key vulnerability prior to the exploit"
I have no idea why anyone would think that audits should surface trust assumptions of smart contracts. Their role is to check if the implementation of whatever they are auditing is bug-free, ie the code does exactly what it is supposed to do. If the code allows a single EOA to mint tokens by design - it's fine from the perspective of auditors. This is simply not a bug, it's a feature.
What we're doing at @l2beat is exactly what auditors are not doing. We expose "features" to end users. Make them visible and transparent with constant online monitoring (because "features" can change, most contracts are not immutable). You can call them "trust assumptions", "counterparty risks", however you want. But minting by EOA is a feature. If you held USR, you simply had to trust that EOA.
If analysing trust assumptions of chains, interop, defi protocols, tokens is not (yet) part of your risk assessment, talk to us. That's exactly what we've been doing for years now
I'm deeply honored, and excited to see @thedaofund taking off!
Replying to @thedaofund
With no further ado, below are the first batch of applicants that were minted badges today:
@samczsun
@yoavw
@nicht_tintin
@GNSPS
@montyly
@gf_256
@hritzdorf
@Fredrik0x
@tinchoabbate
Gustavo Grieco
@AndrewMohawk
@iphelix
@dxo1312
@SoosMate
@rv_inc
@0x11b6
@MatthiasEgli
@a_permenev
@FrankResearcher
@DanielVF
@sbetamc
@RenaudDUBOIS10
@dr_zircuit
@notdeghost
@1nf0s3cpt
@poojaranjan19
@theRaz0r
@x86NOP
@mattaereal
@palinatolmach
@k3mmio
@donnoh_eth
@auryn_macmillan
TheDAO Curators also all received an ETHSecurity Badge:
@VitalikButerin
@GriffGreen
@jbaylina
@Pol_Lanski
@pcaversaccio
@avsa
@tayvano_
yoav.eth retweeted
It's increasingly clear that L2BEAT's future is ANYBEAT. Looking for a good new name for the only trusted source of truth regarding public blockchains, not just ETH L2s. Even more needed in the AI era where virtually all news you consume are AI generated
The Ethereum Foundation’s new Mandate is the right document at the right time.
The core argument is very simple: self-sovereignty only counts if it's real. The commitment to CROPS (the principles that made Ethereum credible in the first place and the same principles we prioritize in our assessments) does not define a specific roadmap, it defines the values of the foundation, a cultural North Star. Whatever direction Ethereum's development takes, these principles don't get traded away.
We also value EF’s commitment to the "walkaway test" - striving to make itself less necessary over time so the protocol remains decentralized. We believe Ethereum’s strength lies in this shared commitment to an open, neutral, and resilient commons.
And we’re proud to be fellow travelers in building this machinery of freedom!
yoav.eth retweeted
guys, writing _simple_ software is becoming a true lost art. We are all so fucking addicted to dependency bloated, hyper composable Frankenstein systems where every tiny diff triggers a transitive verification nightmare. Oh and we keep pretending abstraction is free. Well guess what it is fucking NOT. Every layer introduces more state, more edge cases, more undefined behaviour, and more emergent interactions that nobody really fully models. Remember: observability decreases as indirection increases. I mean, formal reasoning effectively collapses when the effective system boundary is the entire ecosystem. Oh and then you guys vibe code even more dependency stuffed software and implicitly feed it back into the same LLM, great. Can we stop this insanity for a second?
Fewer dependencies (or even better _no_ dependencies). Smaller trusted computing base. Deterministic builds. Reproducibility. Code you can actually read, reason about, and audit e2e. Simplicity is not nostalgia. It is the only thing standing between us and a fucking systemic collapse.
I’ve worked with Bastian for years. He’s a thoughtful, principled strategist who seeks to understand and truly cares about Ethereum’s long-term success. After years quietly solving hard problems behind the scenes, it’s great to see him step forward. Excited for what’s ahead.
I am stepping into the role of interim co-ED @ethereumfndn to continue the progress that Tomasz has made over the last year.
Tomasz brought an energy and urgency that the EF needed at a critical time, and I join the community in thanking him for his work on behalf of the Foundation and the network.
This task isn't something that I take on lightly, knowing the weight of responsibility of the role through seeing it up close for some time, but it is one that I am prepared to handle.
I've served in a management position at the EF over many years, working closely with Hsiao-Wei, Tomasz, Josh Stark, Danny Ryan, Aya, and Vitalik at different points in time. My focus has been deliberately on illegible but essential work, helping management try to make well-informed decisions, working with EF's team leads, considering budgets, articulating strategy, setting priorities, and more.
The decisions I make will be guided by a principled insistence on the properties of what we're building (censorship resistance, open source, privacy, security). These properties are what make Ethereum relevant and competitive, and they are the foundation of Ethereum's value proposition to the world and everything the world builds on it; just as Ether is the foundational store-of-value that underpins every transaction across it; and just as both are indispensable to the EF's own treasury.
The mandate of the EF is to make sure that real permissionless infrastructure, cypherpunk at its core, is what gets built. Ethereum should outlast us, and it has been our job from the beginning to make sure it is robust enough to do so. I, and the rest of the EF, will work alongside other members of the community - core protocol contributors, researchers and client implementers, auditors and whitehats, incident responders, spec authors, solo stakers and validator operators, node runners, MEV gremlins, rollup and L2 teams, bridge and interoperability integrators, UX and product builders, infra providers and tooling maintainers, educators, community organizers, forum crews, lurkers, and free software advocates, grant-givers and culture-makers, artists, memers, cypherpunks, cyberanarchists, Landian accelerationists, financepunks, femboys, soundcloud rappers, transgenders, disinformationalists, cyborgs, anons, revolutionaries, shitposters, trolls, federal lists, hypebeasts, pirates, preppers, the bros, incels - to make it last 1000 years or more.
Safe module integrates EIL for cross-chain operations. Kudos @heymarcopolox @candidelabs
We lost a valued customer last year.
They needed chain abstraction. Managing Safe accounts across multiple chains, and the signing overhead was killing their UX. Every key rotation meant six separate ceremonies. Every guardian update, same thing. Their users were drowning in signatures.
They asked if we had a solution. We said no.
Not because we couldn't build it. Chain abstraction was the 2025 narrative. Everyone was shipping it. We could have done it in weeks. Feature velocity, customer win, done.
But every solution we looked at had the same problem: trusted intermediaries. Relayers you had to trust. Wrapped assets. New points of failure. For infrastructure that secures savings, checking accounts and treasuries? No.
So we told them we didn't have it. They went with someone else.
That one stung.
You second guess it. Maybe we're being too pure. Maybe we're just slow.
But the teams we work with are building neobanks. Real money, real users. If a relayer goes down, if a bridge gets hacked, it's not our problem to solve. It's their users' funds. We can't sell infrastructure we don't control.
Then EIL was announced at Devconnect.
I was skeptical at first. But I read @yoavw's post on how EIL work under the hood. L1 as source of truth. Voucher system with economic guarantees. No trusted relayers. No new intermediaries.
It clicked.
Suddenly we had a way to build chain abstraction without compromising on what matters.
So we built Safe Unified Account.
Here's what it does:
• Sign once for operations across multiple L2s (Merkle proof verification)
• Atomic cross-chain via EIL integration (L1-anchored, not trust-based)
• No bridges, no relayers, pure cryptographic verification
The flow:
1. Construct UserOps for each chain
2. Arrange in Merkle tree
3. Sign root once
4. Submit with proofs to bundlers
5. Each chain verifies independently
For atomic operations, EIL's voucher system provides economic guarantees through XLP staking/slashing. Same signed voucher that claims funds on source releases funds on destination. Guaranteed by L1, not by trust.
The module is feature complete. Audit pending. We're sharing now to get feedback before we lock it down.
I don't know if we'll get that customer back. Maybe they're happy with what they chose. Maybe the trusted relayer approach works fine for them.
But I know we can finally offer chain abstraction to the teams building on Safe without asking their users to trust what they shouldn't have to trust.
Sometimes saying no is just buying time until you can say yes the right way.
yoav.eth retweeted
The Ethereum Interop Layer (EIL) Explained 🎙
Ethereum is pushing toward a UX that feels single-chain. Is the Ethereum Interop Layer (EIL) the missing piece?
In our latest episode, @ThewizardofPOS and @yoavw from the Ethereum Foundation break down how lessons from Account Abstraction are being extended to enable trustless multi-chain execution with the EIL.
Key timestamps:
00:00 Meet the team working on EIL at the EF
8:20 What is the Ethereum Interop Layer?
16:50 Solvers vs XLPs — the censorship risk in intents
29:05 What EIL means for bridges
32:20 EIL vs OIF: how they fit together
43:00 Mainnet timeline & how builders can get involved
Ethereum is Trustless. Cross-L2 interop should be as well.
And that's what EIL does: empower the wallet to transact directly on any chain without intermediaries.
What is the EIL?
The EIL focuses on trustlessness. Wallet-centric, cross-chain orchestration where the user is always in control - without the intermediaries.
But what does this mean for markets today, and how could markets look with wider adoption of the EIL?
Read more: li.fi/knowledge-hub/what-is-…
yoav.eth retweeted
> Our job should be to make it clear to users what guarantees they have, and to build up the strongest Ethereum that we can
The market is changing but the original mission of @l2beat is the same. We will keep the projects accountable with ever-expanding scope. Today L2s, tomorrow interop and in the future, hopefully, all DeFi and token issuers
There have recently been some discussions on the ongoing role of L2s in the Ethereum ecosystem, especially in the face of two facts:
* L2s' progress to stage 2 (and, secondarily, on interop) has been far slower and more difficult than originally expected
* L1 itself is scaling, fees are very low, and gaslimits are projected to increase greatly in 2026
Both of these facts, for their own separate reasons, mean that the original vision of L2s and their role in Ethereum no longer makes sense, and we need a new path.
First, let us recap the original vision. Ethereum needs to scale. The definition of "Ethereum scaling" is the existence of large quantities of block space that is backed by the full faith and credit of Ethereum - that is, block space where, if you do things (including with ETH) inside that block space, your activities are guaranteed to be valid, uncensored, unreverted, untouched, as long as Ethereum itself functions. If you create a 10000 TPS EVM where its connection to L1 is mediated by a multisig bridge, then you are not scaling Ethereum.
This vision no longer makes sense. L1 does not need L2s to be "branded shards", because L1 is itself scaling. And L2s are not able or willing to satisfy the properties that a true "branded shard" would require. I've even seen at least one explicitly saying that they may never want to go beyond stage 1, not just for technical reasons around ZK-EVM safety, but also because their customers' regulatory needs require them to have ultimate control. This may be doing the right thing for your customers. But it should be obvious that if you are doing this, then you are not "scaling Ethereum" in the sense meant by the rollup-centric roadmap. But that's fine! it's fine because Ethereum itself is now scaling directly on L1, with large planned increases to its gas limit this year and the years ahead.
We should stop thinking about L2s as literally being "branded shards" of Ethereum, with the social status and responsibilities that this entails. Instead, we can think of L2s as being a full spectrum, which includes both chains backed by the full faith and credit of Ethereum with various unique properties (eg. not just EVM), as well as a whole array of options at different levels of connection to Ethereum, that each person (or bot) is free to care about or not care about depending on their needs.
What would I do today if I were an L2?
* Identify a value add other than "scaling". Examples: (i) non-EVM specialized features/VMs around privacy, (ii) efficiency specialized around a particular application, (iii) truly extreme levels of scaling that even a greatly expanded L1 will not do, (iv) a totally different design for non-financial applications, eg. social, identity, AI, (v) ultra-low-latency and other sequencing properties, (vi) maybe built-in oracles or decentralized dispute resolution or other "non-computationally-verifiable" features
* Be stage 1 at the minimum (otherwise you really are just a separate L1 with a bridge, and you should just call yourself that) if you're doing things with ETH or other ethereum-issued assets
* Support maximum interoperability with Ethereum, though this will differ for each one (eg. what if you're not EVM, or even not financial?)
From Ethereum's side, over the past few months I've become more convinced of the value of the native rollup precompile, particuarly once we have enshrined ZK-EVM proofs that we need anyway to scale L1. This is a precompile that verifies a ZK-EVM proof, and it's "part of Ethereum", so (i) it auto-upgrades along with Ethereum, and (ii) if the precompile has a bug, Ethereum will hard-fork to fix the bug.
The native rollup precompile would make full, security-council-free, EVM verification accessible. We should spend much more time working out how to design it in such a way that if your L2 is "EVM plus other stuff", then the native rollup precompile would verify the EVM, and you only have to bring your own prover for the "other stuff" (eg. Stylus). This might involve a canonical way of exposing a lookup table between contract call inputs and outputs, and letting you provide your own values to the lookup table (that you would prove separately).
This would make it easy to have safe, strong, trustless interoperability with Ethereum. It also enables synchronous composability (see: ethresear.ch/t/combining-pre… and ethresear.ch/t/synchronous-c… ). And from there, it's each L2's choice exactly what they want to build. Don't just "extend L1", figure out something new to add.
This of course means that some will add things that are trust-dependent, or backdoored, or otherwise insecure; this is unavoidable in a permissionless ecosystem where developers have freedom. Our job should make to make it clear to users what guarantees they have, and to build up the strongest Ethereum that we can.
yoav.eth retweeted
The day after Vitalik declares rollups are no longer 'centric'
@payy_link migrates to being a private L2 on Ethereum
Ethereum's network effects remain undefeated.
yoav.eth retweeted
TheDAO is back. BULLISH
A decade later, we’re opening a new chapter.
TheDAO Security Fund: activating 75,000+ ETH to strengthen Ethereum security.
thedao.fund/
yoav.eth retweeted
While some shake hands at Davos, others bring uncomfortable truths @VitalikButerin. The World Economic Forum convenes to discuss "rebuilding trust" in institutions. Meanwhile, @yoavw, Vitalik, @ThewizardofPOS answered with The Trustless Manifesto: we shouldn't need to trust at all.
trustlessness.eth.limo/gener…
The inconvenient reality: Every centralized system begins with good intentions. Gateways become platforms. Platforms become landlords. Landlords decide who enters and what they do.
@ethereum wasn't built to make the old system more efficient. It was built to make it obsolete.
The manifesto's message is clear:
-Self-sovereignty over delegation
-Verification over blind trust
-Code over policy
-Math over middlemen
Trustlessness costs complexity, latency, and mental effort. It buys resilience, longevity, neutrality, and freedom.
The drift is already here: Hosted RPCs as defaults. Centralized sequencing. Upgrade keys that never disappear. Cross-chain relayers acting as gatekeepers.
Decentralization doesn't die through capture, it erodes through convenience.
So yes, I'm at Davos. Not to participate in the theater of "rebuilding trust," but to remind the architects of centralized systems why we're building the alternative.
Someone has to be here as well @VitalikButerin
Some conversations need to happen in uncomfortable rooms.
The world doesn't need more efficient middlemen. It needs fewer reasons to trust them.
yoav.eth retweeted
In the next few threads, I will do a deep dive into EIL - Ehtereum Interoperabiliy Layer. The protocol allows for trust-minimized cross-chain execution with many interesting use cases and it's worth building intuition around it. This is Part 1 of the explainer 🧵👇
yoav.eth retweeted
Ethereum isn’t here to win the average case.
It’s here to survive the worst case.
Ethereum is forever.
That’s why we wrote the trustless manifesto in the first place - to remind people what Ethereum truly stands for @VitalikButerin @yoavw 🚀
“Ethereum was not created to make finance efficient or apps convenient. It was created to set people free”
This was an important - and controversial - line from the Trustless Manifesto ( trustlessness.eth.limo ), and it is worth revisiting it and better understanding what it means.
“efficient” and “convenient” have the connotation of improving the average case, in situations where it’s already pretty good. Efficiency is about telling the world's best engineers to put their souls into reducing latency from 473 ms to 368ms, or increasing yields from 4.5% APY to 5.3% APY. Convenience is about people making one click instead of three, and reducing signup times from 1 min to 20 sec.
These things can be good to do. But we must do them under the understanding that we will never be as good at this game as the Silicon Valley corporate players. And so the primary underlying game that Ethereum plays must be a different game. What is the game? Resilience.
Resilience is the game where it’s not about 4.5% APY vs 5.3% APY - rather, it’s about minimizing the chance that you get -100% APY.
Resilience is the game where if you become politically unpopular and get deplatformed, or if a the developers of your application go bankrupt or disappear, or if Cloudflare goes down, or if an internet cyberwar breaks out, your 2000ms latency continues to be 2000ms.
Resilience is the game where anyone, anywhere in the world will be able to access the network and be a first-class participant.
Resilience is sovereignty. Not sovereignty in the sense of lobbying to become a UN member state and shaking hands at Davos in two weeks, but sovereignty in the sense that people talk about "digital sovereignty" or "food sovereignty" - aggressively reducing your vulnerabilities to external dependencies that can be taken away from you on a whim. This is the sense in which the world computer can be sovereign, and in doing so make its users also sovereign.
This baseline is what enables interdependence as equals, and not as vassals of corporate overlords thousands of kilometers away.
This is the game that Ethereum is suited to win, and it delivers a type of value that, in our increasingly unstable world, a lot of people are going to need.
The fundamental DNA of web2 consumer tech is not suited to resilience. The fundamental DNA of _finance_ often spends considerable effort on resilience, but it is a very partial form of resilience, good at solving for some types of risks but not others.
Blockspace is abundant. Decentralized, permissionless and resilient blockspace is not. Ethereum must first and foremost be decentralized, permissionless and resilient block space - and then make that abundant.
yoav.eth retweeted
“Ethereum was not created to make finance efficient or apps convenient. It was created to set people free”
This was an important - and controversial - line from the Trustless Manifesto ( trustlessness.eth.limo ), and it is worth revisiting it and better understanding what it means.
“efficient” and “convenient” have the connotation of improving the average case, in situations where it’s already pretty good. Efficiency is about telling the world's best engineers to put their souls into reducing latency from 473 ms to 368ms, or increasing yields from 4.5% APY to 5.3% APY. Convenience is about people making one click instead of three, and reducing signup times from 1 min to 20 sec.
These things can be good to do. But we must do them under the understanding that we will never be as good at this game as the Silicon Valley corporate players. And so the primary underlying game that Ethereum plays must be a different game. What is the game? Resilience.
Resilience is the game where it’s not about 4.5% APY vs 5.3% APY - rather, it’s about minimizing the chance that you get -100% APY.
Resilience is the game where if you become politically unpopular and get deplatformed, or if a the developers of your application go bankrupt or disappear, or if Cloudflare goes down, or if an internet cyberwar breaks out, your 2000ms latency continues to be 2000ms.
Resilience is the game where anyone, anywhere in the world will be able to access the network and be a first-class participant.
Resilience is sovereignty. Not sovereignty in the sense of lobbying to become a UN member state and shaking hands at Davos in two weeks, but sovereignty in the sense that people talk about "digital sovereignty" or "food sovereignty" - aggressively reducing your vulnerabilities to external dependencies that can be taken away from you on a whim. This is the sense in which the world computer can be sovereign, and in doing so make its users also sovereign.
This baseline is what enables interdependence as equals, and not as vassals of corporate overlords thousands of kilometers away.
This is the game that Ethereum is suited to win, and it delivers a type of value that, in our increasingly unstable world, a lot of people are going to need.
The fundamental DNA of web2 consumer tech is not suited to resilience. The fundamental DNA of _finance_ often spends considerable effort on resilience, but it is a very partial form of resilience, good at solving for some types of risks but not others.
Blockspace is abundant. Decentralized, permissionless and resilient blockspace is not. Ethereum must first and foremost be decentralized, permissionless and resilient block space - and then make that abundant.
























