On October 24, 2023, South Korea’s Upbit announced the inclusion of a trading pair with the Korean won for MINA on its platform. This addition is set to make the buying and selling of MINA more convenient. Considering the buying activity and FOMO among ...

Future Price Trajectory for MINA and PEPE Explored, as VC Spectra Skyrockets 500%

The announcement made on 30 October explicitly stated that it was only the Etherscan-powered explorer service that will be discontinued. The team did not offer a detailed explanation for this move. However, some industry observers have pointed fingers at the service fees associated with Etherscan’s Explorer-as-a-Service (EaaS) toolkit.

Avalanche explorer SnowTrace to halt operations

SnowTrace, a blockchain explorer for Avalanche, will be shutting down its version powered by Etherscan at the end of next month. Users are advised to save backups of important information before the Nov. 30 deadline. The decision to discontinue the service ...

News Explorer — Avalanche Block Explorer SnowTrace Announces Shut Down of Etherscan Version

Snowtrace.io to discontinue Etherscan-powered services amid concerns over high fees and centralized smart contract verification

Snowtrace to Close Etherscan-Powered Explorer Amid Rising EaaS Service Fees

In a recent announcement, Snowtrace.io, a prominent blockchain explorer tool for the Avalanche network, has confirmed that it will be shutting down its website. This decision pertains specifically to the explorer powered by Etherscan’s Explorer-as-a-Service (EaaS) toolkit.

Snowtrace.io Shuts Down Etherscan-Powered Explorer

Snowtrace.io, a prominent blockchain explorer tool for the Avalanche network, has confirmed that it will be shutting down its website.

Snowtrace.io, a popular blockchain explorer tool for Avalanche ( AVAX ), will shut down its website, powered by Etherscan's Explorer-as-a-Service (EaaS) toolkit, on November 30. The Snowtrace team clarified that only its explorer powered by Etherscan will be shut down.

AVAX blockchain explorer to shut down as Etherscan fees draw controversy

Crypto project Avalanche made headlines on Monday following a notable announcement to its community. The developments indicate that Avalanche’s blockchain explorer will end its operations on November 30.

Avalanche’s browser Snowtrace ceases operations with a tight deadline

Phishing scams targeting the cryptocurrency community have taken a troubling turn as scammers have begun to clone websites of prominent crypto media outlets like Blockworks and Ethereum blockchain scanner Etherscan.

Scammers clone Blockworks site to drain crypto wallets

Etherscan

etherscan

Etherscan is the Ethereum network blockchain explorer that allows you to search for transactions, blocks, smart contracts, wallet addresses, and other on-chain data. Since Ethereum is a public blockchain, the website is a free blockchain explorer, and it's one of the most popular websites to look through all interactions on the Ethereum blockchain. According to , Smart contracts are computer programs stored on the blockchain that allows us to convert traditional contracts into digital parallels. As a computer program, it entails a collection of code—its function— and data—its state. Smart contracts are entirely rational, following an "if/then" pattern. This means they follow the program precisely and cannot be modified. Ethereum.org After the hard work of writing your smart contract, what is next is to share it with the rest of the world by verifying it on Etherscan. Anybody can view your source code and interact with your smart contract aftermath. Below are the steps to submit your smart contract to Etherscan: STEP 1: Create an API key on your Etherscan account The Ehterscan API key is essential to authenticate that you own the smart contract you're about to publish. So, log in to your Etherscan account or create one if you don't have an account. here Once you've logged in to your account, click on your username in the top right corner and click on the "My Profile" tab. Then click on the "API Keys" tab from the bottom left corner of the page. Another tab will pop up. Click on the blue tab that reads "+ Add" on the top right corner of this tab to add your API key. Next, input your App name in the field required and click on "Create New API Key." ·         Then you have your API Key, as shown below. Copy the API key to your Notepad or clipboard. STEP 2: Deploying the smart contract using Hardhat Install the plugin and run the following command in your hello-world directory to install hardhat-etherscan: hardhat-etherscan npm install –save-dev @nomiclabs/hardhat-etherscan Next is to replace the hardhat.config.js with the hardhat-etherscan information in your file. Ensure you include your etherscan API key where required, as shown below: Next is to verify your smart contract on Etherscan by running the command below in the terminal provided in the hello-world directory. The command is: npx hardhat verify –network goerli DEPLOYED_CONTRACT_ADDRESS "Hello World!" Ensure that the is the same smart contract address you deployed on the goerli test network. In addition, the last argument— —must have the same string value as the one you used in the initial deployment. DEPLOYED_CONTRACT_ADDRESS "Hello World!" If everything goes smoothly, your terminal should display the following message: Congrats! Your smart contract code should be on Etherscan! STEP 3: Go to Etherscan and check out your smart contract. You should be able to view your smart contract code, and ABI published on Etherscan when you click the link supplied in your terminal. Now, anyone can interact with your smart contract.

How to Submit Your Smart Contracts to Etherscan

In the process of learning blockchain programming, whether it's the most popular on YouTube or the Alchemy's , content related to Hardhat is inevitable. This is not surprising as in the field of Web3 development, Hardhat is undoubtedly one of the most mainstream frameworks. However, I encountered the same pitfall in the process of learning these two courses, that is, after using Hardhat to deploy smart contracts, I could never succeed in the verification. The same error always occurred: video tutorial solidity bootcamp An unexpected error occurred:
ConnectTimeoutError: Connect Timeout Error
...... I searched on Google for a long time but didn't find a complete solution. Then I tried to ask GPT-4 but still failed to solve it. Eventually, I found some insights in this on GitHub. Now, in combination with the actual process of solving this problem myself, I will record the process of analysis and verification, hoping to help those who also encounter this problem. post Firstly, I want to analyze the causes of this problem： I'm using the WSL2 system. The proxy is set in the Windows environment, and the WSL2 system shares the proxy from the Windows environment. Therefore, the solution idea in the aforementioned post did not initially catch my attention. I originally thought that my WSL2 system had set up to share the proxy from the Windows environment, and that I could connect normally using the command, so the inability to use Hardhat's verify function should not be a problem with the proxy settings. curl http://google.com Moreover, my error message and the content in the aforementioned post were quite different, aside from the ConnectTimeoutError. Given that Hardhat itself frequently updates, I thought it was an issue with the Hardhat version or a problem with one of its dependencies. What's more, GPT-4 analyzed the situation in the same way at the time, which somewhat misled my thinking. I tried to upgrade and downgrade and adjust the versions of libraries and dependencies like Hardhat, @nomicfoundation/hardhat-verify, @nomicfoundation/hardhat-toolbox several times, and even tried to apply for multiple API keys on Etherscan, only to find it didn't help. In the end, I realized that although I globally shared the proxy from the Windows environment in WSL2, the verify plugin might not use the global proxy under the WSL2 environment when Hardhat is running due to some reason. Problem Solution and Contract Verification Process Environment configuration: I have a simple here, which deploys an upgradeable contract. You can refer to my package.json file. Many answers online are quite outdated, but my libraries are all up to date. Of particular note is the need to install the Undici library, which will be used to set the proxy for verification. example project Writing the contract and deployment script: This is a standard step and not the focus of this article. But if you are a beginner like me, you can also refer to the simple contract and deployment script in my aforementioned repository. After the writing is done, we can deploy the contract under the Hardhat localhost environment or on the testnet. However, only when deployed on the testnet or mainnet can we use Hardhat's verify plugin. Apply for an API key on the website, which is free. After application, create a new .env file in the root directory of the Hardhat project and paste into it. Then set it in the hardhat.config.js configuration file. You can also refer to the configuration method in this file in my repository. Etherscan ETHERSCAN_KEY=yourApiKey Use the command to view your IP address, assuming it's , then check the "LAN" corresponding HTTP port through the VPN client in your Windows environment, assuming it's yyyyy. Add the following content to your hardhat.config.js file: ip route | grep default | awk '{print $3}' http://xxx.xx.xxx.x const { ProxyAgent, setGlobalDispatcher } = require("undici");
const proxyAgent = new ProxyAgent("http://xxx.xx.xxx.x:yyyyy");
setGlobalDispatcher(proxyAgent); Please note that you should not use the IP address and port in the aforementioned GitHub post, because everyone's VPN client and IP are different. The post also mentioned looking at the DNS server IP using and adding it to the configuration. But if you, like me, share the Windows proxy in the WSL2 environment, then your DNS is likely set by yourself, such as 8.8.8.8. So using the method I mentioned in the fourth point above is the safest. Also, don't forget to turn on options like "Allow LAN connections" in your VPN client. If your client doesn't have this option, you may need to switch to another one. cat /etc/resolv.conf Use the command to verify the contract, or you can write an additional verification function in the deployment script, which will complete the verification immediately after deployment. npx hardhat verify --network yourNetWork CONTRACT_ADDRESS

Solving the ConnectTimeoutError When Verifying Smart Contracts with Hardhat

With the use of blockchain explorer or by retrieving it from the smart contracts that manage them, you may locate the metadata for your NFTs. is data that provides information about other data; in the case of an NFT, it describes that NFT's essential properties, including its name, description, and anything else its creator feels is important. In many cases, an NFT's metadata also contains links to the images and other "primary" digital assets that give an NFT its value. Metadata (opens new window) Individually identifiable digital representations of blockchain-based tangible or intangible objects called are not typically divided into smaller parts. Instead, structured metadata related to actual or virtual things is represented by NFTs. Often, the tokens are not connected to the objects and serve as distinct identifiers, advancing the interoperable commercialization of the physical or digital items, according to their proponents. nonfungible tokens (NFTs) Hashes of files or other data were added to in 2012 or 2013 to demonstrate their existence or legitimacy at a particular moment. This development served as the foundation for creating "Colored Coins," uniquely identified tokens, which are recognized by adding metadata to Bitcoin transactions. the Bitcoin blockchain What is Metadata? So, what is this metadata, and how is it generated? In this article, we will explore these questions and also deep dive into how you can retrieve metadata of the NFT from the contract; how you read NFT files; and how you can view the metadata of any NFT. What exactly is the location of NFTs that are stored off-chain? Is it anything like Amazon Web Services or Google Drive? This is a crucial point that causes confusion surrounding NFT information. Who else is in charge of the NFT metadata storage online? Since NFT marketplaces use metadata to show nonfungible tokens to buyers and sellers, metadata must be in a format that marketplaces can understand. In other words, you're writing computer code—a smart contract—that instructs the blockchain to initialise a table on your behalf. Your NFTs' ownership and metadata are kept in this table. More particular, each table row has the following details: The Token Identifier (or ID) The Owner of the Token The Metadata associated with the token How can you view the metadata of any NFT? When an NFT project is made available for the minting and you buy it, a random number generator will give your NFT a set of characteristics. The metadata contains this information. The blockchain contains an immutable record of the token's info. This record contains information about the token's purpose, present owner, and previous transactional activity. Consequently, how can you create NFT metadata? Viewing an NFT's metadata, confirming its ownership and tracing its transaction history are all possible using an NFT tracking and verification service through which you can verify that the token ID and contract address are connected to the legitimate owner of the content using a marketplace database. If you select a service that complies with NFT's coding standard, one of the many NFT verification tools available can search for you. An Ethereum blockchain explorer called is a well-known tool for locating and confirming NFTs. The platform allows users to verify transaction histories, wallet addresses, metadata, smart contracts and other on-chain data. Similarly, you can access all the NFT metadata you require on the BNB Chain network by using a blockchain explorer like BscScan. Etherscan However, to retrieve the metadata of a nonfungible token from the smart contracts that control it, you'll need to access the NFT's smart contract. The metadata should be accessible for inspection and verification under the contract's "Details" section. If the NFT complies with the current nonfungible token standard, the following details ought to be shown: Here is a JSON metadata file for a sample NFT. ash-nft.json{ "description": "Friendly OpenSea Creature", "image": "https://opensea-prod.appspot.com/puffs/3.png", "name": "Dave Starbelly", "attributes": [ { "trait_type": "Base", "value": "Starfish" }, { "trait_type": "Eyes", "value": "Big" }, { "trait_type": "Mouth","value": "Surprised" }, ] } The second essential component of NFTs that lets them work is NFT metadata. NFTs have the ability to link to data outside of their smart contract, effectively enabling the network to refer to off-chain data. As a result, executing NFTs on a network like expenses than it otherwise would. Ethereum has lower computing The asset itself often resides off-chain, whereas the Non-Fungible Token that defines the provenance of an asset resides on the blockchain. There are a few exceptions; one is the collection OnChain Monkeys, which was totally built on chain in a single transaction. Since the complete collection is hosted on-chain, no file storage solution is required.

Easy Way to Find Your NFT’s Metadata

Most people are familiar with the first two iterations of the internet: Web1 and Web2. These were incredible times that enabled us to exchange information like never before. Although Web2 made it easier for us to access the internet, most of us will agree that we are still at the whim of centralized entities such as Facebook and Google. This brings me to the last iteration of the commercial internet: web3. I've listed all the tools you'll need if you want to learn web3. Decentralized Applications(Dapps) Decentralizing applications is something that has been happening for a while now, but you might not have heard of it. There’s a reason for that — the technology is still new and the community around it is small, so you may be confused about what Dapps even are. It’s about time that changes, though. The advantages of decentralization are numerous and game-changing. Defi ( Decentralized Finance) Financial systems all over the world revolve around networks of organizations (banks and financial institutions) that are responsible for safeguarding assets, facilitating payments and providing various financial services. These organizations work together in order to let consumers exchange money and hold assets across countries. Uniswap ↗️ Uniswap Protocol is a way to trade different types of cryptocurrency without having to go through a bank. The Uniswap protocol allows you to trade cryptocurrencies with the click of a button. It is a decentralized crypto trading protocol that relies on liquidity pools vs. order books making Uniswap’s automatic market makers (AMMs) resilient to front-running and impervious to flash loan attacks AAVE ↗️ Aave is an open source and non-custodial protocol for money market creation. It enables users to lend and borrow assets from a shared pool of liquidity providers. Aave Protocol is unique in that it tokenizes deposits as soon as they are made, meaning that users retain access to their funds at all times. This makes Aave Protocol a first-of-its-kind decentralized money market protocol. Sushiswap ↗️ Do you know that you can turn your money into a money machine? Sushi is a decentralized community-driven finance platform built on top of the Ethereum network that allows users to trade and use assets in unique ways. Borrow assets with no interest, leverage your assets, and participate in the decentralization of finance. All products are available through web and mobile apps. Identity & Auth ENS ↗️ Ethereum Name Service (ENS) allows users to own a unique and decentralised name that they can use across websites and services, as well as wallets. By registering an ENS name, you can have your own username that you can use to access services, view your profile data, and launch a decentralized website. Users do not need to register separately on each website they use, as they can use their ENS name across all internet requests. MetaMask ↗️ It is trusted by over 21 million users worldwide and offers a simple, secure way to connect to blockchain-based applications. Its user interface looks like a checkbook or an excel spreadsheet and is super easy for beginners to understand. Play games, buy goods and access the world of decentralized applications in just one click. Argent ↗️ Argent is a secure, easy-to-use, and inexpensive way to store your Ethereum. If you’re looking for an easier way to trade and exchange tokens with low fees and high speeds, then you’ve come to the right place. Argent allows users to trade Ethereum and other tokens at nearly instant speeds and it takes a fraction of the cost of other Ethereum wallets. NFTs Non-fungible tokens (NFTs), sometimes called unique tokens, are non-interchangeable units of data stored on a blockchain, a form of digital ledger, that can be sold and traded. Types of NFT data units are associated with physical or digital assets. For instance, you might purchase an NFT that represents a specific car by linking the asset to your blockchain wallet. OpenSea ↗️ OpenSea is the largest marketplace for user-owned digital goods, including in-game items, crypto collectibles, gaming accounts, domain names, and more. Buy and sell your favorite cryptos through an in-app wallet on a peer-to-peer exchange for Ethereum. Nifty Gateway ↗️ Nifty Gateway makes it easy to purchase digital art, collectibles and blockchain-based cards. Discover the rarest and most coveted artworks in the NFT community with the Nifty Gateway app. Rarible ↗️ Rarible is a marketplace and distributed network built on Ethereum that empowers creators to monetize their digital work. Rarible allows artists and creators to issue custom digital tokens (non-fungible digital assets or NFTs) that represent ownership in their work. These assets can be traded on the Rarible marketplace without fees, censorship, or centralized data storage by relying on the decentralized Ethereum network. Data Nansen ↗️ Nansen is a new way to track and analyze where money is going. Users can trace investments and chart liquidity in order to find hidden opportunities and monitor risks before investing in a new project. The idea of Nansen was born from an interest in seeing how top-performing funds invest, how their strategy changes with market conditions, and how they outperform other professional investors. Chainlink ↗️ Chainlink is the most trusted and widely used decentralized oracle network that enables smart contracts to securely access off-chain data feeds, web APIs, and traditional bank payments. By providing smart contracts secure access to these critical resources, Chain Link allows them to mimic real world actions that include everything from paying insurance claims and distributing loyalty rewards to selling products on e-commerce sites. The Graph ↗️ It is a protocol for building decentralized applications (dApps), running on top of networks like Ethereum, IPFS, PoA, and many more. The project consists of three main components: A graphQL API called subgraphs that are published by indexer operators and made available via a global graphQL API or hosted gateway. This new system for developers enables them to build powerful which can aggregate, search and retrieve data from a multitude of sources in different ways with great flexibility and speed. dApps Presentation Web3 Native Libraries Ethers.js ↗️ Ethers.js is a JavaScript library for interacting with the Ethereum blockchain and ecosystem. It is designed to be small, fast, easy to use and extensible. It enables secure cryptographic operations to be written in a convenient manner, which are verified by the Solidity compiler, while also providing facilities to easily interact with Ethereum's json-rpc api using a Promise-based interface. Ethers is being maintained by ethers.io and actively developed on GitHub. Web3.js ↗️ Alchemy Web3 ↗️ Alchemy is a blockchain service that makes it easy for developers to build applications on the blockchain. Alchemy's suite of products gives developers all the tools they need to build, monitor, and support Ethereum applications. Developer Environment Hardhat ↗️ Hardhat is a professional Ethereum development environment for professionals to build and test decdancent apps and smart contracts. You can develop your own video games or dapps, as well as integrate your local/remote node with Hardhat's world class developer tools such as the Hardhat debugger, or with the rest of your development toolchain. Hardhat also supports Windows, MacOS, FreeBSD, and Linux. Truffle ↗️ It provides an easy-to-use development environment with a comprehensive testing framework, and includes a package management system for managing contracts and files. Whether you're just getting started with Ethereum or looking to learn more about smart contracts, Truffle is the best way to get started. File Storage IPFS ↗️ IPFS enables the creation of completely distributed applications. It aims to make the web faster, safer, and more open.Ipfs is a way to store files on the internet so that they are always available, for anyone who wants access. It is also possible to connect with other people who are using Ipfs so that you can share files with them. FileBase ↗️ Filebase provides secure, modern, and easy to manage object storage for businesses and individuals. Filebase is encrypted and geo-redundant, meaning your data is always safe. Arweave ↗️ Arweave permanently archives data on a distributed network of computers, allowing it to be stored in perpetuity. Users make a one-time token payment which goes towards sustaining the network and this means users can store documents, applications and websites forever. This makes broken links and lost content a thing of the past. All data is timestamped, meaning its authenticity can be proven at any time and previous versions of files can always be recovered. The Arweave network is community-owned and operated by a large group of users who are able to make money by providing storage capacity, bandwidth and processing power for hosting applications on the network. Blockchain Interaction Layer Data Access ( Alchemy ) Supernode ↗️ Alchemy, the most widely-used Web3 API, enables billions of transactions per month on the Ethereum and Binance blockchains. Featuring low request latency, real-time data correctness, maximal uptime, disaster recovery protocols, and comprehensive security mechanisms, Alchemy powers DeFi applications for 8 of the top 10 projects in the world. Build ↗️ With Alchemy Build you can make changes to front-end code, executable code (Python, Node, or shell scripts), and database structures. When you change your backend code, the updates are reflected in the front-end browser immediately after you save your changes. You don't need to restart the server or reload any pages. Monitor ↗️ Alchemy Monitor lets you see app performance, health, and user behavior all in one place. It provides at a glance insight about what's happening in your app and helps you quickly evaluate data. Alchemy Monitor can be analyzed across teams to help you improve the way your organization builds apps. Notify ↗️ Alchemy Notify is a push notification service for developers and businesses. It allows you to send real-time push notifications from your web or mobile application to users across iOS, Android, and the web. Notify specializes in transactional and conversational notifications that help improve engagement with customers and build positive relationships. APIs ↗️ At the center of your digital currency infrastructure, our APIs help you control the exchanges in your app. Our growing suite of REST APIs make integration easier, enabling you to assemble information from multiple sources like transactions, token information, and debugging data in a few simple requests. NFT API ↗️ It enables you to seamlessly integrate NFTs into your app or product. It supports various functions including listing all available metadata associated with a given address of an NFT; querying a digital item on secondary market platforms (e.g., OpenSea, Rarible) and displaying in-depth technical details (such as display-only addresses). Block Explorers SnowTrace ↗️ Thanks to SnowTrace.com, you can now explore the Avalanche C-Chain blockchain explorer. This site allows you to see all of the latest transactions and blocks. There is also a verified contracts section where you can view ERC20 and ERC721 tokens as well as a resources section that includes charts, stats, and API info for developers. EtherScan ↗️ PolygonScan ↗️ Polygon is a blockchain explorer for the Polygon network. You can view blocks, transactions and contracts in detail on Polygon. There is a detailed graph of the transactions made over the last 14 days on Polygon. Network Layer EVM Blockchains Ethereum ↗️ It is a booming digital economy that is open to everyone in the world. Ethereum offers resources for those who are looking to enter its digital economy and build new applications. Developers can find all the information they need to start creating dapps with Ethereum and users can learn everything they need to know about Ether. Polygon ↗️ Polygon makes it easy for developers to build applications that scale on Ethereum, and they provide a full set of dev tools to help with scaling. Their variety of products include Polygon POS sidechain, Polygon AVAIL blockchain, Polygon SDK, Plasma framework and many more. The fact that it's EVM-compatible and uses a permissionless set of PoS validators means that Polygon is scalable, fast and secure. Another plus is the fact that their solutions are optimized for secure token transfers while being low-cost and usable at the same time. Arbitrum ↗️ Arbitrum solves some of the most challenging problems in blockchain, delivering lightning-fast transactions without sacrificing security or privacy. Arbitrum is a Layer 2 scaling solution for Ethereum that enables fast, private transactions using your favorite tools. Just install an npm module, write smart contracts the same way you do today, and deploy on Arbitrum. Users can perform Off-Chain Transactions while being confident they are secure and private Avalanche ↗️ The platform was created for the application layer of Avalanche which allows the development of fast and secure smart contract apps on top of it. Avalanche blockchain inherits its high performance from a network that supports multiple consensus mechanisms and cross-chain bridges. This makes it completely unique. Starknet ↗️ More than just a layer 2 scaling solution. StarkNet goes beyond Layer 2 by enabling dApps to scale off-chain, achieving the convenience and affordability for all use cases. Optimism ↗️ Ethereum has seen massive adoption since its release in 2015, but high transaction fees and slow processing times pose challenges to mass adoption. Optimism is a low-cost and lightning-fast Ethereum L2 blockchain that builds on the security, accessibility, and decentralization of Ethereum. zk Sync ↗️ Mass adoption of public blockchains requires solutions that can support transactions of billions of users at a time — but currently, this type of scalability is simply not achievable. There are two kinds of scaling approaches: layer one and layer two. zkSync uses zkRollup to scale transactions on the second layer. Using zkRollup is like having a separate blockchain for each currency in our system, which allows us to achieve near-instant transaction times and significantly reduce gas costs by a whopping 96%. Non-EVM Blockchains Near ↗️ People can use them to make new inventions with technology that is simple, secure, and scalable. For example, you can create virtual items using NFTs or build communities using DAOs. NEAR makes it easy for anyone to create and use decentralized applications. It's also one of the most scalable blockchains in the world. That means crypto assets are easier than ever to build and use. Flow ↗️ From NBA Top Shot’s digital collectibles to UFC's upcoming NFT marketplace, Flow powers the world’s most popular consumer applications. With proven technical foundations like unique resource management and strict determinism, Flow features innovations never seen before in blockchains such as parallel execution, developer-friendly tooling, human readable addresses, and a cryptography-based random beacon. Solana ↗️ Solana is a global blockchain network that powers decentralized applications without compromising on scale or user experience. With Solana, users can make transactions in less than one-tenth of a cent and developers can build apps that run at the speed of the internet. Terra ↗️ Terra is a protocol for a relatively new type of money. Live on the Ethereum blockchain, Terra is a stablecoin that links directly to the value of fiat money. Each Terra can be traded for a set amount of fiat currency. A DeFi protocol for constant value and even more security, Terra allows you to create new products and services on top of this stable infrastructure. Cover image generated by https://doodleipsum.com/ And all beautiful screenshots built with https://screenshot.rocks/

Learn Web3, Build the Internet of the Future

Accessibility remains a core challenge in mass DeFi adoption. Congested exchanges create ever-higher gas fees - over $20 during peak activity - that deter casual users from making small or frequent transactions.  This accessibility gap widens the wealth gap from a cryptocurrency lens, constituting a core barrier to widespread adoption. Too much technical complexity amidst an increasingly changing educational system continues to produce a learning curve for Web3 that has gradually steepened. This makes it hard for the everyday consumer to know which wallets to download, let alone how to protect or freeze them, adding another layer of adoption friction. Consumers need familiar interfaces and functionality to use Web3 accessibly, making messaging interfaces an incredible conversion tool. Chat-based cryptocurrency wallets integrate with p2p chat and online community apps and platforms to simplify crypto transactions, making them as effortless as sending a text message. They are massively overcoming the friction associated with traditional crypto transactions, simplifying crypto adoption while enhancing user experience. changing educational system Telegram Telegram Direct p2p chat app Telegram, with its 200 million+ monthly active users, has a built-in, chat-based cryptocurrency wallet, simplifying the user experience by eliminating the need for an external app. Running on the TON blockchain, the Telegram Wallet offers fast, cheap transactions, leveraging Telegram’s growing user base and existing encryption to secure transaction privacy for commercial online users. Telegram TeekPay TeekPay TeekPay integrates into WhatsApp to give their almost 3 billion+ active user base an in-app wallet, enabling peer-to-peer cryptocurrency exchange that is as simple as sending a text. TeekPay delegates gas fees, reducing transaction costs and eliminating the need for users to hold and manage underlying cryptocurrencies like Tron (TRX) for transaction purposes. TeekPay's unique selling proposition lies in its unparalleled reach. By leveraging WhatsApp's massive user base, TeekPay is onboarding millions of new users into the crypto ecosystem. 3 billion+ active user base Blockscan Chat Blockscan Chat Blockscan Chat, a powerful chat-based wallet feature from the makers of Etherscan Messaging, offers something new: a wallet-to-wallet chat interface for Web3. Blockscan Chat leverages secure communication and blockchain technology to enable Web3 wallet-to-wallet messaging. With end-to-end encryption and multichain support, Blockscan Chat provides users a private, versatile messaging experience, enabling individual wallets to connect and negotiate NFTs. While in beta currently,  its user base is growing, and its infrastructure, integrated with Etherscan, is highly compelling. Status Status Status is a chat-based crypto wallet designed for users focused on privacy and control. Users get to manage digital assets across multiple blockchains on the wallet side - buying, sending, and trading cryptocurrencies, as well as handling NFTs. Status’ chat feature secures private p2p chat with encryption, keeping your personal data - contact lists and communication patterns - safe. In a world where the lines between security and personal breach is more ambiguous than ever before, Status gives users a fully self-custodial, self-governed experience across chat and crypto alike. Overall Overall Chat-based wallets democratize cryptocurrency by simplifying UX through existing, popular encrypted chat apps, reducing transaction costs and enhancing security. With their gigantic user reach, these platforms have the potential to bring the benefits of DeFi to a broader audience. Leveraging existing messaging platforms enables chat-based wallets to eliminate the need for users to download and navigate separate wallet applications, significantly reducing the barrier to entry. Delegated gas fees also reduce transaction costs, making crypto transactions more affordable for everyday users. Advanced security features, such as biometric authentication and multi-factor authentication, enhance account security, mitigating the risk of unauthorized access. Democratizing cryptocurrency hinges on overcoming adoption friction. Chat-based wallets, with their user-friendly interfaces, reduced transaction costs, and enhanced security features, represent a significant step towards achieving this goal. By leveraging the power of ubiquitous messaging platforms, and given highs on all leading cryptocurrencies since December, chat-based wallets are poised to get a major market valuation boost from forces indicating investor willingness to deploy capital more toward this growing yet powerful niche.

Democratizing Cryptocurrency With Chat-Based Wallets

AI agents and bots increasingly dominate digital spaces, and distinguishing real human interactions from automated systems has become a pressing challenge. Steven Smith, Head of Protocol and Applied Research at Tools for Humanity, is in charge of solving this through the World project. With the recent mainnet launch of World Chain—a blockchain designed to prioritize verified humans—Steven and his team are pioneering proof of human technology to ensure fairness and trust in digital ecosystems. In this interview, we explore the technical breakthroughs behind Priority Blockspace for Humans (PBH), the role of World ID in combating AI-driven challenges, and the future of trust-first AI ecosystems that empower human agency. 1. Ishan Pandey: Steven, as the Head of Protocol and Applied Research at Tools for Humanity, you’re driving the World project’s mission to prioritize real humans in a digital world overrun by AI agents and bots. Can you tell us about the vision behind World Chain? Steven Smith: World Chain, our blockchain designed for real humans, was built for a few core reasons. First, World Network has grown substantially, and we anticipate even greater scale in the future – as such, we need to develop the best infrastructure to ensure that scaling is seamless. Second, we envision a future where humans can coexist with AI agents and bots. Contrary to the common perception that bots are inherently bad actors, many are essential to network operations. AI agents, in particular, serve as productivity enhancers and multipliers, amplifying what individuals can achieve. Steven Smith: The key is ensuring that humans remain central to any given network. World Chain enables this by creating a blockchain specifically designed to accommodate both AI agents and bots while insulating human users from their potential drawbacks. It’s a blockchain built for people – a human-centric network that prioritizes verified users. Since World Chain’s mainnet launch in October 2024, 24+ million World ID holders across 160+ countries have either migrated or are in the process of migrating to World Chain, making it the largest blockchain of individually verified humans in the world. World Chain is also maintaining the highest UOPS/TPS ratio of any Ethereum blockchain according to L2Beat. The network is supported by world-class blockchain service providers like Optimism, Alchemy, Uniswap, Safe, Dune, and Etherscan, and it integrates World ID natively to prioritize human transactions. 2. Ishan Pandey: What were some of the biggest technical obstacles you faced when designing Priority Blockspace for Humans (PBH) to ensure that verified human transactions take precedence over those from bots or AI agents? Steven Smith: The fundamental challenge in designing Priority Blockspace for Humans (PBH) was determining, at the blockchain consensus level, whether a transaction originates from a human. Fortunately, World ID, which is a proof of human credential used onchain, solves this problem. World ID leverages zero-knowledge proofs (ZKP), allowing users to prove their unique humanness without revealing personal data. PBH, which recently launched on the World Chain testnet, is like a dedicated highway lane for humans, ensuring smooth and prioritized transactions. Every human-verified transaction on World Chain carries an associated ZKP, enabling the network to identify and prioritize them. Steven Smith: Another consideration was how to architect PBH as a modular, generic service that could extend beyond its initial application. Our collaboration with Flashbots and consultation with Optimism and Paradigm played a crucial role in refining this approach. By cleanly separating the block-building mechanism from the execution client, we designed an architecture that can be adapted for various use cases beyond PBH. 3. Ishan Pandey: Can you walk us through how PBH works within World Chain’s architecture? How does it leverage World ID and the OP Stack to prioritize human transactions while maintaining security and decentralization? Steven Smith: PBH is currently live on testnet and is built on OP Stack, the rollup SDK from Optimism. OP Stack consists of multiple infrastructure components, one of which is responsible for block construction, deciding which transactions get included. Steven Smith: To implement PBH, our collaborations integrated the Reth execution client to modify the block-building process. PBH transactions carry a special payload that includes a World ID proof, ensuring that a transaction comes from a verified human. This mechanism enables priority inclusion of human transactions while maintaining decentralization and security. 4. Ishan Pandey: With World Chain now live on mainnet, how does your system handle a high volume of transactions while ensuring that verified humans aren’t outpaced by automated systems? What optimizations were key to achieving this balance? Steven Smith: The core optimization is reserving a portion of every block specifically for human transactions. These transactions are prioritized at the top of each block, ensuring timely processing and insulation from bidding wars. Automated systems, particularly bots, operate with economic incentives, often paying high fees to secure priority inclusion. Without intervention, human users would face rising costs and delays. Steven Smith: PBH eliminates this problem by guaranteeing a set amount of blockspace for human-verified transactions, ensuring they remain affordable and accessible regardless of network congestion. Additionally, verified users benefit from a gas allowance, helping to cover the cost of casual transactions and ensuring affordability for everyday users. Casual transactions make up a majority of activity on World Chain, and this is what makes the network unique. We are bringing all people onchain, not just power users. 5. Ishan Pandey: PBH and World ID have the potential to act as a global “blue check mark” for AI-driven services. How do these technologies enable safe and fair integration with other blockchains or platforms, and what impact do you foresee on the broader ecosystem? Steven Smith: PBH was designed with a specific application in mind – ensuring a special class of service for humans on World Chain. However, the underlying architecture is highly modular and can be adapted by other chains and platforms. The PBH code is open-source, allowing any blockchain to implement similar human-prioritized transaction mechanisms. Steven Smith: World ID functions as a global “blue checkmark” for unique humanness, providing a way to distinguish real users from automated entities across AI-driven services. In addition, it empowers users by allowing AI agents acting on their behalf to inherit the same verified privileges. The open-source nature of World ID ensures it can propagate across other chains and applications, further solidifying its role in civil resistance and human verification. Examples of World ID integrations include apps and services like Minecraft, Reddit, Telegram, Shopify, and Mercado Libre, as well as blockchain projects like DRiP, DSCVR, Galxe, and more. Most recently, World announced a global partnership with gaming company Razer to launch ‘Razer ID Verified by World ID,’ a secure, single sign-on proof of human technology designed to create a safer and more authentic gaming environment. These integrations demonstrate World ID’s growing role as a trust layer across Web3, AI-driven platforms, and beyond. 6. Ishan Pandey: Looking ahead, what technical advancements are next for the World project? How do you plan to further enhance human agency and tackle challenges like deepfakes, scams, and agent swarms in trust-first AI ecosystems? Steven Smith: We are continuing to develop innovative mechanisms to enhance human agency onchain. One major initiative is expanding the gas allowance for verified human users to cover a portion of their onchain activities, minimizing the friction of interacting with blockchain applications. We are also exploring new fee market structures to further insulate verified human transactions from volatility. Steven Smith: Beyond blockchain transactions, we’re actively working on technologies to combat deepfakes, scams, and agent swarms. This includes expanding World ID Credentials and developing World ID Deep Face, a tool designed to combat deepfakes in real-time video and chat interactions. Ultimately, our goal is to build a blockchain ecosystem that prioritizes human agency, ensuring that individuals remain at the center of digital trust and economic participation. Don’t forget to like and share the story! Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYO Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYO Vested Interest Disclosure: business blogging program business blogging program

How World Chain Ensures Humans Stay in Control: The Blockchain Built for Verified Humans

كيف تضمن سلسلة العالم بقاء البشر في السيطرة: بلوكتشين مصممة للبشر المعتمدين

Як World Chain гарантуе, што людзі застаюцца пад кантролем: блокчейн, створаны для правераных людзей

Jak světový řetězec zajišťuje, aby lidé zůstali pod kontrolou: Blockchain vytvořený pro ověřené lidi

Cómo World Chain garantiza que los humanos mantengan el control: la blockchain diseñada para humanos verificados

Como a cadea mundial garante que os humanos manteñan o control: a cadea de bloques creada para humanos verificados

वर्ल्ड चेन कैसे सुनिश्चित करता है कि मनुष्य नियंत्रण में रहें: सत्यापित मनुष्यों के लिए निर्मित ब्लॉकचेन

World Chain が人間による制御を確保する方法: 認証された人間向けに構築されたブロックチェーン

World Chain이 인간이 통제권을 유지할 수 있도록 보장하는 방법: 검증된 인간을 위해 구축된 블록체인

Как World Chain обеспечивает людям контроль: блокчейн, созданный для проверенных людей

Hur World Chain säkerställer att människor håller kontrollen: Blockchain byggd för verifierade människor

உலகச் சங்கிலி மனிதர்கள் கட்டுப்பாட்டில் இருப்பதை எவ்வாறு உறுதி செய்கிறது: சரிபார்க்கப்பட்ட மனிதர்களுக்காக உருவாக்கப்பட்ட பிளாக்செயின்

Чӣ гуна занҷири ҷаҳонӣ одамонро дар назорат нигоҳ медорад: Блокчейн барои одамони тасдиқшуда сохта шудааст

For years, Web3 advertisers faced challenges in running display ads on major crypto platforms. Fragmented providers, multiple dashboards, and limited targeting made ad placements inefficient. The latest partnership between Addressable and Sevio aims to change that by integrating premium display ads with AI-powered wallet-aware targeting. Addressable Sevio Addressable and Sevio Expand Web3 Advertising Reach Addressable, a Web3 Actionable Intelligence Platform, has partnered with Sevio to enable programmatic display ads across major blockchain platforms, including Blockchain.com, Solscan, Etherscan, DexTools, Polygonscan, Coinalyze, Basescan, and more. This partnership allows advertisers to reach high-intent crypto users with seamless campaign management and on-chain attribution. Addressable Sevio Blockchain.com Solscan Etherscan DexTools Polygonscan Coinalyze Basescan AI-Powered Web3 Ad Targeting Through this integration, Web3 advertisers can: Access premium programmatic ad inventory on high-traffic crypto sites such as Blockchain.com, DexTools, Polygonscan, Solscan, Watcher.guru, Coinalyze, and Basescan.
Utilize Addressable’s Audience Builder to target wallet owners instead of broad traffic.
Leverage Web2-Web3 attribution to track Cost Per Wallet (CPW) and optimize for real on-chain engagement.
Achieve CPW benchmarks ranging from $2–$8 per wallet-aware visitor.
Manage and optimize campaigns from a single platform, eliminating the need for multiple ad providers. Access premium programmatic ad inventory on high-traffic crypto sites such as Blockchain.com, DexTools, Polygonscan, Solscan, Watcher.guru, Coinalyze, and Basescan. Blockchain.com DexTools Polygonscan Solscan Watcher.guru Coinalyze Basescan Utilize Addressable’s Audience Builder to target wallet owners instead of broad traffic. Leverage Web2-Web3 attribution to track Cost Per Wallet (CPW) and optimize for real on-chain engagement. Achieve CPW benchmarks ranging from $2–$8 per wallet-aware visitor. Manage and optimize campaigns from a single platform, eliminating the need for multiple ad providers. Redefining Web3 Display Advertising Traditional display ads in Web3 have struggled with fragmentation, ineffective targeting, and weak attribution. By integrating Sevio’s premium ad network with Addressable’s AI-driven attribution, advertisers can now measure real engagement instead of just impressions. “With this expansion, advertisers can now run display ads across leading crypto websites with wallet-aware targeting and real-time optimization,” said Stefan Luta, CEO of Sevio. “This collaboration enhances programmatic ad performance by ensuring campaigns reach high-value users who are more likely to engage and transact on-chain.” Sevio Tomer Shlomo, Co-Founder and CTO of Addressable, added: “Programmatic advertising in Web3 has been limited by broad targeting and weak attribution. By integrating Sevio’s premium placements with Addressable’s AI-driven insights, we’re enabling crypto marketers to finally connect display ad spend to actual on-chain behavior.” Addressable Don’t forget to like and share the story! Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYO Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYO Vested Interest Disclosure: business blogging program business blogging program

Is Web3 Advertising Finally Solving Its Targeting Problem? Addressable & Sevio Expand Web3 Ads Reach

Ці нарэшце рэклама Web3 вырашыла праблему таргетынгу? Адрасныя і Sevio пашыраюць ахоп аб'яў Web3

Web3 рекламата най-накрая решава ли проблема си с насочването? Адресируеми и Sevio разширяват обхвата на рекламите Web3

¿Está la publicidad Web3 finalmente resolviendo su problema de segmentación? Addressable y Sevio amplían el alcance de los anuncios Web3.

Web3 広告はついにターゲティング問題を解決か？ Addressable と Sevio が Web3 広告のリーチを拡大

Web3 зар сурталчилгаа нь зорилтот асуудлаа эцэст нь шийдэж байна уу? Хаягтай & Sevio Web3 зарын хүртээмжийг өргөжүүлнэ

Is Web3 Advertising eindelijk zijn targetingprobleem aan het oplossen? Addressable & Sevio breiden het bereik van Web3-advertenties uit

Na Web3 Advertising e Rarolla Bothata bja Yona bja go Nepiša Mafelelong? Addressable & Sevio Atološa Web3 Dipapatšo Fihlelela

¿Web3 Publicidad tukukuypi allichachkanchu chay sasachakuyninta maskanapaq? Direccionable & Sevio Web3 Willakuykuna Chayayta mastariy

Reclamă Web3 își rezolvă în sfârșit problema de direcționare? Adresabil și Sevio extinde acoperirea anunțurilor Web3

Web3 Advertising แก้ปัญหาการกำหนดเป้าหมายได้ในที่สุดหรือไม่ Addressable & Sevio ขยายการเข้าถึง Web3 Ads

Web3 Advertising ኣብ መወዳእታ ንናይ ዕላማ ምግባር ጸገሙ ይፈትሕ ድዩ? Addressable & Sevio ዌብ3 ኣድስ ሪች ምግፋሕ

Web3 Reklamcılığı Sonunda Hedefleme Sorununu Çözüyor mu? Addressable ve Sevio Web3 Reklamlarının Erişimini Genişletiyor

CrossFi has dropped a bombshell with its 2025 Crypto Market Research Survey—a sprawling study of over 5,000 crypto users from India, Finland, and Russia. This isn’t your typical tech-bro echo chamber. It’s a vivid snapshot of a shifting landscape: 80% women, aged 28 to 43, earning $1,000 to $3,000 monthly, and leaning hard into cryptocurrencies and Web3 banking. The data challenges stereotypes, exposes pain points, and hints at a future where digital finance could rival cash. So, who’s driving this revolution? What’s holding it back? And what needs to happen by 2025 to make crypto as seamless as a dollar bill? Let’s unpack the numbers, decode the trends, and peer into the future of money. The Survey at a Glance: Scope and Credibility CrossFi surveyed 5,000 participants across three nations—India, Finland, and Russia—chosen, presumably, for their diverse economic and technological profiles. India’s a fintech hotspot with a booming middle class; Finland’s a Nordic tech leader with high digital literacy; Russia’s a wildcard with a complex financial history. Participants weren’t random; they were crypto users, likely sourced via CrossFi’s network or partnered platforms, giving the findings a focused lens on engaged adopters. This isn’t a general population poll; it’s a pulse-check on the crypto-curious and committed. Who’s Using Crypto? A Demographic Shake-Up Gender Flip: Women Take the Lead The standout stat? 80% of respondents are women, flipping the script on crypto’s male-heavy past. Compare this to Pew Research’s 2023 finding that just 16% of U.S. crypto users were women. What’s driving this? In India, women-led financial inclusion programs—like the government’s Jan Dhan Yojana—may be funneling more women into digital assets. Finland’s gender-equal tech culture could be a factor, while Russia’s economic volatility might push women toward alternative wealth-building tools. This isn’t a fluke, it’s a trend begging for deeper global research. Age and Income: The Middle Ground Most respondents fall between 28 and 43 years old, a sweet spot for earning, saving, and investing. Their monthly incomes—$1,000 to $3,000—align with middle-income brackets in their regions, per World Bank data. In India, that’s above the national average ($180 monthly); in Finland, it’s modest but livable; in Russia, it’s solid for urban professionals. Crypto’s not just for billionaires or the unbanked—it’s resonating with the global middle class, a group hungry for financial control. Why This Matters This demographic mix hints at crypto’s broadening appeal. Women in these regions might see it as empowerment—a way to bypass traditional banking barriers. Middle-income earners, meanwhile, may view it as a hedge against inflation (India’s hit 5-6% annually) or currency instability (Russia’s ruble woes). It’s less about Lambos and more about stability. Crypto as a Lifestyle: Usage and Income Patterns Holding Over Hustling Here’s the kicker: investing or holding cryptocurrencies is the dominant income source for respondents. Forget day trading or meme-coin flips—these users are playing the long game. This echoes Fidelity’s 2024 report, where 52% of institutional investors held crypto for growth. Respondents likely buy Bitcoin or Ethereum, stash it in wallets, and watch it (hopefully) climb. Some might stake assets on platforms like Lido or lend via Aave for passive income—low-effort strategies that fit their profile. Weekly Check-Ins Most engage with crypto one to two times per week. What are they doing? Probably: Buying: Snagging dips on exchanges like Binance or Coinbase.
Holding: Monitoring wallets via apps like Trust Wallet.
Earning: Adjusting staking pools or claiming rewards. Buying: Snagging dips on exchanges like Binance or Coinbase. Holding: Monitoring wallets via apps like Trust Wallet. Earning: Adjusting staking pools or claiming rewards. This isn’t the frenetic pace of Wall Street traders. It’s deliberate—like tending a digital garden. For middle-income users, it’s a side hustle, not a full-time gig. Insight Unlocked This behavior signals crypto’s evolution from speculative toy to financial staple. It’s not about “to the moon” hype—it’s about building wealth incrementally, especially in regions where traditional investments (stocks, real estate) feel out of reach. The Fee Problem: Crypto’s Biggest Roadblock The Pain of High Costs High transaction fees top the list of challenges—and it’s a universal gripe. Ethereum’s gas fees once soared to $200 per transaction (Etherscan, 2021), and while they’ve eased, a $10-$20 hit still stings for someone earning $1,000 monthly. Bitcoin’s no picnic either—fees peaked at $60 in 2021 (BitInfoCharts). For context, sending $50 via PayPal costs pennies. Crypto’s not competitive yet. Why Fees Bite Network Congestion: Ethereum’s clogged during NFT booms; Bitcoin’s slow by design.
Mining Costs: Proof-of-work chains like Bitcoin burn energy, driving fees up.
No Middleman Savings: Decentralization’s freedom comes at a price. Network Congestion: Ethereum’s clogged during NFT booms; Bitcoin’s slow by design. Mining Costs: Proof-of-work chains like Bitcoin burn energy, driving fees up. No Middleman Savings: Decentralization’s freedom comes at a price. Solutions on the Horizon Layer 2 Scaling: Polygon and Arbitrum slash Ethereum fees to cents.
Faster Chains: Solana and Avalanche process thousands of transactions per second, cheaply.
Fee Optimization: Tools like GasNow help users time transactions for lower costs. Layer 2 Scaling: Polygon and Arbitrum slash Ethereum fees to cents. Faster Chains: Solana and Avalanche process thousands of transactions per second, cheaply. Fee Optimization: Tools like GasNow help users time transactions for lower costs. The Stakes For crypto to hit mass adoption, fees must drop. A $20 fee for a $5 coffee is a nonstarter. Respondents’ frustration underscores a broader truth: cost is king in financial inclusion. Web3 Banking: Promise Meets Pain What Users Want Web3 banking—blockchain-powered, decentralized finance—dazzles with potential: no banks, no borders, just you and your money. Respondents prioritize safety and reliability, and it’s easy to see why. Traditional banks fail (think Lehman Brothers) or freeze funds (Russia’s 2022 sanctions). Web3’s promise? Your assets, your rules—secured by code, not CEOs. The Reality Check Yet satisfaction is lukewarm—most are only “somewhat satisfied”. Why? Frozen Accounts: DeFi platforms can lock funds due to bugs (e.g., Wormhole’s $320M hack, 2023) or liquidity dries up.
KYC Clashes: Regulations demand “Know Your Customer” checks, but decentralized systems balk at central ID hubs. Uploading a passport to a blockchain? Awkward. Frozen Accounts: DeFi platforms can lock funds due to bugs (e.g., Wormhole’s $320M hack, 2023) or liquidity dries up. KYC Clashes: Regulations demand “Know Your Customer” checks, but decentralized systems balk at central ID hubs. Uploading a passport to a blockchain? Awkward. Decoding the Disconnect Web3’s ethos is trustless freedom, but reality bites. KYC is a legal must—exchanges like Binance enforce it, yet DeFi resists. Solutions like decentralized identity (Civic, SelfKey) aim to bridge this, letting users prove identity without compromising privacy. Meanwhile, frozen accounts reflect Web3’s immaturity—smart contracts need audits, and users need insurance (think Nexus Mutual). 2025 Vision: Crypto as Everyday Cash The Big Dream Respondents predict that by 2025, crypto will flow like fiat. Imagine swiping Bitcoin for groceries or tipping in Dogecoin—no delays, no fuss. It’s bold, but tech’s catching up: Lightning Network: Speeds Bitcoin to seconds, costs to pennies.
Stablecoins: USDC and Tether nix volatility, mimicking dollars.
Payment Rails: Solana Pay and Binance Pay streamline merchant use. Lightning Network: Speeds Bitcoin to seconds, costs to pennies. Stablecoins: USDC and Tether nix volatility, mimicking dollars. Payment Rails: Solana Pay and Binance Pay streamline merchant use. The Hurdles Volatility: Even with stablecoins, Bitcoin’s wild swings scare vendors.
Adoption: Only 1% of U.S. merchants take crypto (PYMNTS, 2024).
Rules: Taxes and regs vary—crypto’s an asset in the U.S., currency in El Salvador. Volatility: Even with stablecoins, Bitcoin’s wild swings scare vendors. Adoption: Only 1% of U.S. merchants take crypto (PYMNTS, 2024). Rules: Taxes and regs vary—crypto’s an asset in the U.S., currency in El Salvador. What It’ll Take UX Overhaul: Apps as slick as Venmo, not clunky wallets.
Merchant Incentives: Cashback in crypto? Lower fees than Visa?
Global Regs: The EU’s MiCA is a model—others must follow. UX Overhaul: Apps as slick as Venmo, not clunky wallets. Merchant Incentives: Cashback in crypto? Lower fees than Visa? Global Regs: The EU’s MiCA is a model—others must follow. Safety First: Cybersecurity Fears Loom Large The Threat Landscape Safety and cybersecurity dominate concerns—and for good reason. Hacks siphoned $1.7 billion in 2024 (Chainalysis). Phishing snares private keys; rug pulls tank projects; exchanges like FTX collapse. For every win, there’s a scam. User Armor Hardware Wallets: Ledger and Trezor keep keys offline—only 10% use them (2023 survey).
Multi-Sig: Requires multiple approvals, thwarting thieves.
Education: Spotting phishing or fake ICOs saves millions. Hardware Wallets: Ledger and Trezor keep keys offline—only 10% use them (2023 survey). Multi-Sig: Requires multiple approvals, thwarting thieves. Education: Spotting phishing or fake ICOs saves millions. Industry Fixes Better UX: Biometric logins or social recovery (Argent wallet).
Insurance: DeFi cover from Unslashed or InsurAce.
Audits: Certik and Trail of Bits catch contract flaws. Better UX: Biometric logins or social recovery (Argent wallet). Insurance: DeFi cover from Unslashed or InsurAce. Audits: Certik and Trail of Bits catch contract flaws. CrossFi’s Play: Bridging Two Worlds CrossFi isn’t just reporting—they’re building. Their CrossFi Chain fuses fiat and crypto with non-custodial tech—users hold the keys, but transactions feel seamless. Targeting women in India or middle earners in Russia, they’re chasing inclusivity. It’s a blueprint for 2025: crypto that’s practical, safe, and open to all. The Big Picture: What’s Next? CrossFi’s survey isn’t static—it’s a roadmap. Crypto and Web3 banking are rewriting finance, but they’re not ready for primetime. Here’s the playbook: Slash Fees: Layer 2 and new chains must scale fast.
Simplify UX: Hide the blockchain, show the benefits.
Boost Security: User-friendly tools beat hacks.
Harmonize Rules: Global clarity unlocks adoption. Slash Fees: Layer 2 and new chains must scale fast. Simplify UX: Hide the blockchain, show the benefits. Boost Security: User-friendly tools beat hacks. Harmonize Rules: Global clarity unlocks adoption. Crypto’s shedding its niche skin, reaching everyday people with big dreams. By 2025, it might just deliver. Dive into CrossFi’s full report and see for yourself—the future’s digital, decentralized, and knocking. CrossFi’s full report Don’t forget to like and share the story! Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR Vested Interest Disclosure: This author is an independent contributor publishing via our business blogging program. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR Vested Interest Disclosure: business blogging program business blogging program

What Do Global Users Really Think About Crypto and Web3 Banking? A Dive into CrossFi’s 2025 Survey

বিশ্বব্যাপী ব্যবহারকারীরা ক্রিপ্টো এবং ওয়েব3 ব্যাংকিং সম্পর্কে আসলে কী ভাবেন? ক্রসফাইয়ের ২০২৫ সালের জরিপে এক ঝলক দেখুন

Què pensen realment els usuaris globals sobre Crypto i Web3 Banking? Una immersió a l'enquesta 2025 de CrossFi

Was denken globale Benutzer wirklich über Krypto und Web3-Banking? Ein Einblick in die CrossFi-Umfrage 2025

¿Qué opinan realmente los usuarios globales sobre las criptomonedas y la banca Web3? Un análisis de la encuesta CrossFi 2025

Que pensent réellement les utilisateurs mondiaux des cryptomonnaies et du Web3 Banking ? Enquête CrossFi 2025

Cosa pensano realmente gli utenti globali di Crypto e Web3 Banking? Un'immersione nel sondaggio del 2025 di CrossFi

世界中のユーザーは暗号通貨とWeb3バンキングについて本当はどう思っているのか？CrossFiの2025年調査を詳しく見る

Apakah Yang Difikirkan Sebenarnya Pengguna Global Tentang Perbankan Kripto dan Web3? Menyelami Tinjauan 2025 CrossFi

Vashandisi Vepasirese Vanofungei Nezve Crypto uye Web3 Banking? Kunyura muCrossFi's 2025 Survey

Je, Watumiaji wa Kimataifa Wanafikiria Nini Kweli Kuhusu Crypto na Web3 Banking? Jijumuishe katika Utafiti wa CrossFi wa 2025

Xana Vatirhisi va Misava Hinkwayo Va Ehleketa Yini Hakunene Hi Crypto Na Web3 Banking? Ku Nwela eka Ndzavisiso wa CrossFi wa 2025

Bacabangani Ngempela Abasebenzisi Bomhlaba Nge-Crypto kanye ne-Web3 Banking? Ukugxumela Ocwaningweni Lwe-CrossFi lwango-2025

The $1.4 billion hack of the Bybit exchange is a natural thunderclap. First, the amount of stolen cryptocurrency is staggering in scope. Secondly, the security systems of large CEX platforms are considered to be quite reliable and elaborate, but it seems that this is not the case. Entire companies (Arkham) and individual experts (ZachXBT) are looking for signs of outside influence and the path of funds to find out who the funds will lead to. In the meantime, anonymous security expert Dexaran, author of ERC-223 and head of Ethereum Commonwealth, has looked deeper into the attack itself and revealed that the defense mechanism wasn't really that robust, and that someone inside Bybit could conceivably be involved in the hack. Multisig has proven to be unreliable. The vast majority of exchanges use multisig wallets to store assets. In fact, it is a special smart contract that can only be acted upon if the persons involved in the management approve the proposed action with their signatures. Such smart contracts can be updatable, i.e. have a bundle of a proxy contract that stores data and an implementation contract - the logic to be executed. Dexaran in one of his posts gives the address of the proxy contract of the attacked Bybit cold wallet using Gnosis Safe as the implementation contract, rightly noting that it is a rather complex contract of 1080 lines. It may well be that the Bybit team never utilized the full functionality of Gnosis Safe. Most likely, the choice of a smart multi-signature contract was influenced by the widespread adoption of Gnosis Safe. In the meantime, complexity often leads to redundancy and misunderstanding of code behavior in complex situations, one can recall the incorrect user interaction with Gnosis Safe and the loss of $25 million. The Achilles' heel of the multisig used turned out to be signatures, or rather, how and with what help they are generated. As Dexaran notes, signatures are very complex and unreadable by humans, which means that most likely software is used to generate them, and the process itself is the same for all participants, the researcher suggests. That's why other members of the Bybit team didn't suspect anything, because everything looked as usual, and they couldn't read the substitution of Bybit's hot wallet for the hacker's wallet because of the complexity of the signature provided by the hacker. There is no reason not to trust Dexaran's expertise. He has extensive experience auditing smart contracts since the Ethereum split. He audited the multisig wallet for Ethereum Classic, developed the ERC-223 standard and the smart contract communication model to solve the ERC-20 problem. Why would a hacker be inside Bybit? Sure, the Gnosis Safe contract and the proxy contract are verified in the Etherscan block browser, anyone can read the code, the hacker could just be a smart guy. However, the fact that he clearly knows how signatures are generated is either a rare coincidence and a lucky break for the hacker, or he simply knows the inner workings of Bybit's security system from his direct job duties or from an informant. In addition, the hacker didn't just walk by, he deployed two copies of the target contract for practice the day before. Hacker trails A researcher under the nickname ZachXBT traced the flow of funds to an address that accumulated funds from the Phemex hack. This fact is taken as proof of Lazarus Group involvement in the Bybit hack. Considering that a hacker or group of hackers was crushing the funds and withdrawing them through various bridges and mixers, the researcher has done a Herculean task. \In turn, Dexaran draws attention to the chain of addresses, through which the hacker's addresses were replenished to pay for gas for calls to test contracts and send a transaction with a signature to withdraw funds from the exchange's cold wallet. It turns out the hacker funded his addresses through the Binance exchange. Binance is fully compliant with KYC/AML policies and is quite willing to work with various law enforcement agencies. Of course, hackers use the so-called “money mule”, but it's still a clue when an exchange cooperates with law enforcement. Community reaction. Call for the abolition of decentralization. As soon as it became known that the exchange had been hacked and an astronomical amount of ETH had been withdrawn, the market experienced selling pressure. Traders obviously rushed to hedge their bets believing that hackers would cash out the stolen money. CoinMarketCap After the opening of withdrawals from the exchange, users also rushed to withdraw their funds, resulting in an outflow of $5.3 billion (DeFi Llama). Various companies have gotten involved in tagging stolen funds and limiting the ability for hackers to use different platforms to mix and transfer funds between blockchains. Tether - the issuer of USDt - block hackers' funds (Paolo Ardoino). However, not everyone is moving in unison. Cryptomixer eXch has refused to cooperate with the exchange. “In light of these circumstances, we would like an explanation as to why we should partner with an organization that has actively defamed our reputation,” eXch wrote in a response posted on the Bitcointalk forum. Amazingly, there are people calling for a rollback of the Ethereum blockchain to recover Bybit funds, one of them Jan3 CEO Samson Mow. These calls sound a bit strange, when ordinary users who lose their funds are accused of negligence. It's not uncommon for users to mistakenly send funds to the exchange from the wrong EVM network, and all the exchange needs to do is use a public node to send the user's funds back, but in 99.9% of cases they refuse. Plus Bybit has assured that it has enough reserves to cover all losses. These people unknowingly call for burying all the efforts made by the blockchain industry by completely abolishing decentralization, thus reducing the very value of public blockchain technology to 0. Fortunately, the developers of Ethereum themselves are against such a move, and have more than justified their position. for example, kernel developer Tim Beiko. And they have enough supporters on this issue advocating decentralization and cryptopunk philosophy, such as Justin Bons. Bybit itself launched a bounty program, thus announcing a hunt for hackers involved in the hack. Conclusion The community is used to periodic hacks of DeFi protocols. On these platforms developers often neglect testing procedures and audits, choose modules whose code and logic they don't fully know. All in favor of development speed and fear of missing the wave. That's why CEX hack, especially a large one, is always a high-profile event that leaves a lasting impression on the whole industry. Developers at all levels should not forget that the race of defense mechanisms and hacking tools is non-stop and should be on guard. The $1.4 billion hack of the Bybit exchange is a natural thunderclap. First, the amount of stolen cryptocurrency is staggering in scope. Secondly, the security systems of large CEX platforms are considered to be quite reliable and elaborate, but it seems that this is not the case. Entire companies ( Arkham ) and individual experts ( ZachXBT ) are looking for signs of outside influence and the path of funds to find out who the funds will lead to. In the meantime, anonymous security expert Dexaran , author of ERC-223 and head of Ethereum Commonwealth , has looked deeper into the attack itself and revealed that the defense mechanism wasn't really that robust, and that someone inside Bybit could conceivably be involved in the hack. Arkham Arkham ZachXBT ZachXBT Dexaran Dexaran ERC-223 ERC-223 Ethereum Commonwealth Ethereum Commonwealth revealed revealed Multisig has proven to be unreliable. The vast majority of exchanges use multisig wallets to store assets. In fact, it is a special smart contract that can only be acted upon if the persons involved in the management approve the proposed action with their signatures. Such smart contracts can be updatable , i.e. have a bundle of a proxy contract that stores data and an implementation contract - the logic to be executed. multisig multisig updatable updatable Dexaran in one of his posts gives the address of the proxy contract of the attacked Bybit cold wallet using Gnosis Safe as the implementation contract, rightly noting that it is a rather complex contract of 1080 lines. It may well be that the Bybit team never utilized the full functionality of Gnosis Safe. Most likely, the choice of a smart multi-signature contract was influenced by the widespread adoption of Gnosis Safe. In the meantime, complexity often leads to redundancy and misunderstanding of code behavior in complex situations, one can recall the incorrect user interaction with Gnosis Safe and the loss of $25 million. proxy contract proxy contract interaction interaction The Achilles' heel of the multisig used turned out to be signatures, or rather, how and with what help they are generated. As Dexaran notes , signatures are very complex and unreadable by humans, which means that most likely software is used to generate them, and the process itself is the same for all participants, the researcher suggests. notes notes That's why other members of the Bybit team didn't suspect anything, because everything looked as usual , and they couldn't read the substitution of Bybit's hot wallet for the hacker's wallet because of the complexity of the signature provided by the hacker. as usual as usual There is no reason not to trust Dexaran's expertise. He has extensive experience auditing smart contracts since the Ethereum split. He audited the multisig wallet for Ethereum Classic, developed the ERC-223 standard and the smart contract communication model to solve the ERC-20 problem . audited audited ERC-20 problem ERC-20 problem Why would a hacker be inside Bybit? Sure, the Gnosis Safe contract and the proxy contract are verified in the Etherscan block browser, anyone can read the code, the hacker could just be a smart guy. However, the fact that he clearly knows how signatures are generated is either a rare coincidence and a lucky break for the hacker, or he simply knows the inner workings of Bybit's security system from his direct job duties or from an informant. In addition, the hacker didn't just walk by, he deployed two copies of the target contract for practice the day before. deployed deployed Hacker trails A researcher under the nickname ZachXBT traced the flow of funds to an address that accumulated funds from the Phemex hack . This fact is taken as proof of Lazarus Group involvement in the Bybit hack. Considering that a hacker or group of hackers was crushing the funds and withdrawing them through various bridges and mixers, the researcher has done a Herculean task. traced traced Phemex hack Phemex hack Lazarus Group Lazarus Group \In turn, Dexaran draws attention to the chain of addresses, through which the hacker's addresses were replenished to pay for gas for calls to test contracts and send a transaction with a signature to withdraw funds from the exchange's cold wallet. It turns out the hacker funded his addresses through the Binance exchange. Binance is fully compliant with KYC/AML policies and is quite willing to work with various law enforcement agencies. Of course, hackers use the so-called “money mule”, but it's still a clue when an exchange cooperates with law enforcement. draws draws Community reaction. Call for the abolition of decentralization. As soon as it became known that the exchange had been hacked and an astronomical amount of ETH had been withdrawn, the market experienced selling pressure. Traders obviously rushed to hedge their bets believing that hackers would cash out the stolen money. CoinMarketCap CoinMarketCap CoinMarketCap After the opening of withdrawals from the exchange, users also rushed to withdraw their funds, resulting in an outflow of $5.3 billion ( DeFi Llama ). DeFi Llama DeFi Llama Various companies have gotten involved in tagging stolen funds and limiting the ability for hackers to use different platforms to mix and transfer funds between blockchains. Tether - the issuer of USDt - block hackers' funds ( Paolo Ardoino ). involved involved Paolo Ardoino Paolo Ardoino However, not everyone is moving in unison. Cryptomixer eXch has refused to cooperate with the exchange. “In light of these circumstances, we would like an explanation as to why we should partner with an organization that has actively defamed our reputation,” eXch wrote in a response posted on the Bitcointalk forum. “In light of these circumstances, we would like an explanation as to why we should partner with an organization that has actively defamed our reputation,” eXch wrote in a response posted on the Bitcointalk forum. Bitcointalk Amazingly, there are people calling for a rollback of the Ethereum blockchain to recover Bybit funds, one of them Jan3 CEO Samson Mow. Jan3 CEO Samson Mow . Jan3 CEO Samson Mow These calls sound a bit strange, when ordinary users who lose their funds are accused of negligence. It's not uncommon for users to mistakenly send funds to the exchange from the wrong EVM network, and all the exchange needs to do is use a public node to send the user's funds back, but in 99.9% of cases they refuse. Plus Bybit has assured that it has enough reserves to cover all losses. These people unknowingly call for burying all the efforts made by the blockchain industry by completely abolishing decentralization, thus reducing the very value of public blockchain technology to 0. Fortunately, the developers of Ethereum themselves are against such a move, and have more than justified their position. for example, kernel developer Tim Beiko. Tim Beiko . Tim Beiko And they have enough supporters on this issue advocating decentralization and cryptopunk philosophy, such as Justin Bons. Justin Bons . Justin Bons Bybit itself launched a bounty program, thus announcing a hunt for hackers involved in the hack. launched launched Conclusion The community is used to periodic hacks of DeFi protocols. On these platforms developers often neglect testing procedures and audits, choose modules whose code and logic they don't fully know. All in favor of development speed and fear of missing the wave. That's why CEX hack, especially a large one, is always a high-profile event that leaves a lasting impression on the whole industry. Developers at all levels should not forget that the race of defense mechanisms and hacking tools is non-stop and should be on guard.

Security Expert Says the Bybit Hack May Have Involved an Insider

Sekuriteitskenner sê die Bybit Hack het moontlik 'n insider betrek

يقول خبير أمني إن اختراق Bybit ربما يكون متورطًا فيه شخص من الداخل

Эксперт па бяспецы кажа, што ва ўзломе Bybit мог быць задзейнічаны інсайдэр

Un experto en seguridad afirma que el hackeo de Bybit podría haber involucrado a alguien con información privilegiada

Ekspè Sekirite di Bybit Hack a ka enplike yon Inisye

Pakar Keamanan Mengatakan Peretasan Bybit Mungkin Melibatkan Orang Dalam

セキュリティ専門家、バイビットのハッキングには内部関係者が関与していた可能性があると主張

Nilaza ny manam-pahaizana momba ny fiarovana fa mety ho tafiditra ao anatin'ny atiny ny Hack Bybit

Pakar Keselamatan Berkata Hack Bybit Mungkin Melibatkan Orang Dalam

ආරක්ෂක විශේෂඥයෙක් පවසන්නේ බයිබිට් හැක් කිරීම අභ්‍යන්තරිකයෙකු සම්බන්ධ වී ඇති බවයි.

Nyanzvi Yekuchengetedza Inoti iyo Bybit Hack Inogona kunge Iine Mukati

பைபிட் ஹேக்கில் ஒரு உள் நபர் ஈடுபட்டிருக்கலாம் என்று பாதுகாப்பு நிபுணர் கூறுகிறார்.

Security is something I have been dealing with for the past 15–17 years. No matter how much you know, there will always be someone smarter, faster, or stronger. Yet, there is a set of rules and principles that should never be violated. The Bybit experience was particularly illustrative for me because the exchange's employees neglected all major security approaches—from fundamental and abstract principles to concrete, detailed measures. Thus, I will analyze several key aspects based on this hack. The Zero Principle of Security Years ago, I formulated this principle for myself: "Any system can be hacked. The only question is time, money, and effort." If hacking your system yields $1M while costing the attacker only $10K, the system will definitely be hacked. However, if hacking requires $1.1M, then the question becomes: why bother? Unless, of course, the motive is to harm a competitor or conduct a state-sponsored cyberattack. This principle was precisely what Bybit's employees violated. According to initial interviews, they believed their system was invulnerable. But the $1.4B price tag changed everything. Wherever you work, you must understand that anything can be hacked, anytime, and anyway. The only variables are money, time, and effort. Knowing this, let's move forward… Is a Hardware Wallet + Multisig Safe? Yes and no. Hardware wallets have always been attacked—Ledger and Trezor are prime examples. Other brands fare even worse. However, you can mitigate risks and reduce negative impacts when using hardware/multisig wallets. Here are some recommendations compiled from researchers and personal experience: Verify what you're signing: Always ensure that what you see matches what you're actually signing or transferring. If you notice discrepancies, stop, pause, and evaluate the situation carefully.
Browser-based wallet connections are safer than direct ones: Why? Browser wallets have extensive contract databases and can sometimes provide false positives, but they highlight interactions with new and, especially, unverified contracts (which was relevant in this case).
Update your wallet firmware: Install only official firmware, unless you're into ethical hacking. You can verify this on the manufacturer's website or via hash sums.
Simulate transactions before signing: Always check for unexpected changes. The key concepts here are pre-check and interrupt.
Use alternative verification sources: Some useful tools include:

Etherscan Input Data Decoder
PalmeraDAO Safe Interface (used after the Bybit hack)
CirclesTools SafeViewer (explained in the linked page)


Safe has also introduced alternative interfaces:

PalmeraDAO App
EternalSafe
Onchainden App


Add.:

Safe API
Safe Documentation
Trezor features These precautions are just a start. Now, let’s compare them with lessons learned from the Radiant hack: Multilayer signature verification: Any anomaly, even minor, should trigger a security review.
Independent transaction verification device: Generates verification codes that match hardware wallet data.
Enhanced Ledger/Trezor security: Avoid blind signing for critical transactions.
Audit repeated transaction failures: Recurrent issues should trigger a full transaction audit.
Manual transaction data verification: Extract and decode transaction data before signing, ensuring functions and addresses match expectations.
Dual message hash confirmation: Use Gnosis’ guide to verify transactions on hardware wallets. Did Bybit implement any of these? According to available data—no. The Human Factor: The Weakest Link Phishing, social engineering, and spam account for 80% of cyberattacks. The Bybit and Radiant cases prove this clearly. To mitigate risks, implement role separation: If you have multiple signers, they must have independent verification channels.
Ownership changes should be more complex than transaction approvals.
Cold wallets should never store more than acceptable loss thresholds (e.g., $1.5B is excessive for any exchange).
Any transaction discrepancies should default to cancellation, not approval.
Staff must receive ongoing security training—at least monthly.
Appoint at least one security verifier with expertise in multisig wallets and advanced security tools. Again, public data does not confirm that Bybit followed any of these steps. Researcher Opinions Many experts have weighed in on this hack. Here are some key perspectives: @dhkleung
@blainemalone
@pcaversaccio
SlowMist Report
@koeppelmann
Chainabuse Report
Radiant Post-Mortem The key takeaway? While the attack appeared highly technical, it ultimately succeeded due to human error rather than technological vulnerabilities. Therefore, I highly recommend studying the Radiant and WazirX cases as well. It’s clear that script kiddies are adopting these techniques, meaning that not only exchanges but a wider range of crypto projects will be targeted next. Stay safe! Security is something I have been dealing with for the past 15–17 years. No matter how much you know, there will always be someone smarter, faster, or stronger. Yet, there is a set of rules and principles that should never be violated. The Bybit experience was particularly illustrative for me because the exchange's employees neglected all major security approaches—from fundamental and abstract principles to concrete, detailed measures. Thus, I will analyze several key aspects based on this hack. The Zero Principle of Security The Zero Principle of Security Years ago, I formulated this principle for myself: "Any system can be hacked. The only question is time, money, and effort." If hacking your system yields $1M while costing the attacker only $10K, the system will definitely be hacked. However, if hacking requires $1.1M, then the question becomes: why bother? Unless, of course, the motive is to harm a competitor or conduct a state-sponsored cyberattack. "Any system can be hacked. The only question is time, money, and effort." This principle was precisely what Bybit's employees violated. According to initial interviews, they believed their system was invulnerable. But the $1.4B price tag changed everything. This principle was precisely what Bybit's employees violated. According to initial interviews, they believed their system was invulnerable. But the $1.4B price tag changed everything. Wherever you work, you must understand that anything can be hacked, anytime , and anyway . The only variables are money, time, and effort. Knowing this, let's move forward… anything anytime anyway Is a Hardware Wallet + Multisig Safe? Is a Hardware Wallet + Multisig Safe? Yes and no. Hardware wallets have always been attacked— Ledger and Trezor are prime examples. Other brands fare even worse. Ledger Trezor However, you can mitigate risks and reduce negative impacts when using hardware/multisig wallets. Here are some recommendations compiled from researchers and personal experience: Verify what you're signing: Always ensure that what you see matches what you're actually signing or transferring. If you notice discrepancies, stop, pause, and evaluate the situation carefully. Browser-based wallet connections are safer than direct ones: Why? Browser wallets have extensive contract databases and can sometimes provide false positives, but they highlight interactions with new and, especially, unverified contracts (which was relevant in this case). Update your wallet firmware: Install only official firmware, unless you're into ethical hacking. You can verify this on the manufacturer's website or via hash sums. Simulate transactions before signing: Always check for unexpected changes. The key concepts here are pre-check and interrupt. Use alternative verification sources: Some useful tools include:

Etherscan Input Data Decoder
PalmeraDAO Safe Interface (used after the Bybit hack)
CirclesTools SafeViewer (explained in the linked page) Safe has also introduced alternative interfaces:

PalmeraDAO App
EternalSafe
Onchainden App Add.:

Safe API
Safe Documentation
Trezor features Verify what you're signing : Always ensure that what you see matches what you're actually signing or transferring. If you notice discrepancies, stop, pause, and evaluate the situation carefully. Verify what you're signing Browser-based wallet connections are safer than direct ones : Why? Browser wallets have extensive contract databases and can sometimes provide false positives, but they highlight interactions with new and, especially, unverified contracts (which was relevant in this case). Browser-based wallet connections are safer than direct ones Update your wallet firmware : Install only official firmware, unless you're into ethical hacking. You can verify this on the manufacturer's website or via hash sums. Update your wallet firmware Simulate transactions before signing : Always check for unexpected changes. The key concepts here are pre-check and interrupt . Simulate transactions before signing pre-check interrupt Use alternative verification sources : Some useful tools include: Etherscan Input Data Decoder
PalmeraDAO Safe Interface (used after the Bybit hack)
CirclesTools SafeViewer (explained in the linked page) Use alternative verification sources Etherscan Input Data Decoder PalmeraDAO Safe Interface (used after the Bybit hack) CirclesTools SafeViewer (explained in the linked page) Etherscan Input Data Decoder Etherscan Input Data Decoder PalmeraDAO Safe Interface (used after the Bybit hack) PalmeraDAO Safe Interface CirclesTools SafeViewer (explained in the linked page) CirclesTools SafeViewer Safe has also introduced alternative interfaces: PalmeraDAO App
EternalSafe
Onchainden App PalmeraDAO App EternalSafe Onchainden App PalmeraDAO App PalmeraDAO App EternalSafe EternalSafe Onchainden App Onchainden App Add.: Safe API
Safe Documentation
Trezor features Safe API Safe Documentation Trezor features Safe API Safe API Safe Documentation Safe Documentation Trezor features Trezor These precautions are just a start. Now, let’s compare them with lessons learned from the Radiant hack: Multilayer signature verification: Any anomaly, even minor, should trigger a security review. Independent transaction verification device: Generates verification codes that match hardware wallet data. Enhanced Ledger/Trezor security: Avoid blind signing for critical transactions. Audit repeated transaction failures: Recurrent issues should trigger a full transaction audit. Manual transaction data verification: Extract and decode transaction data before signing, ensuring functions and addresses match expectations. Dual message hash confirmation: Use Gnosis’ guide to verify transactions on hardware wallets. Multilayer signature verification : Any anomaly, even minor, should trigger a security review. Multilayer signature verification Independent transaction verification device : Generates verification codes that match hardware wallet data. Independent transaction verification device Enhanced Ledger/Trezor security : Avoid blind signing for critical transactions. Enhanced Ledger/Trezor security Audit repeated transaction failures : Recurrent issues should trigger a full transaction audit. Audit repeated transaction failures Manual transaction data verification : Extract and decode transaction data before signing, ensuring functions and addresses match expectations. Manual transaction data verification Dual message hash confirmation : Use Gnosis’ guide to verify transactions on hardware wallets. Dual message hash confirmation Did Bybit implement any of these? According to available data—no. Did Bybit implement any of these? According to available data—no. The Human Factor: The Weakest Link The Human Factor: The Weakest Link Phishing, social engineering, and spam account for 80% of cyberattacks. The Bybit and Radiant cases prove this clearly. To mitigate risks, implement role separation: If you have multiple signers, they must have independent verification channels. Ownership changes should be more complex than transaction approvals. Cold wallets should never store more than acceptable loss thresholds (e.g., $1.5B is excessive for any exchange). Any transaction discrepancies should default to cancellation, not approval. Staff must receive ongoing security training—at least monthly. Appoint at least one security verifier with expertise in multisig wallets and advanced security tools. If you have multiple signers, they must have independent verification channels . If you have multiple signers, they must have independent verification channels Ownership changes should be more complex than transaction approvals . Ownership changes should be more complex than transaction approvals Cold wallets should never store more than acceptable loss thresholds (e.g., $1.5B is excessive for any exchange). Cold wallets should never store more than acceptable loss thresholds Any transaction discrepancies should default to cancellation, not approval . Any transaction discrepancies should default to cancellation, not approval Staff must receive ongoing security training—at least monthly . Staff must receive ongoing security training—at least monthly Appoint at least one security verifier with expertise in multisig wallets and advanced security tools. Appoint at least one security verifier Again, public data does not confirm that Bybit followed any of these steps. Again, public data does not confirm that Bybit followed any of these steps. Researcher Opinions Researcher Opinions Many experts have weighed in on this hack. Here are some key perspectives: @dhkleung @blainemalone @pcaversaccio SlowMist Report @koeppelmann Chainabuse Report Radiant Post-Mortem @dhkleung @dhkleung @blainemalone @blainemalone @pcaversaccio @pcaversaccio SlowMist Report SlowMist Report @koeppelmann @koeppelmann Chainabuse Report Chainabuse Report Radiant Post-Mortem Radiant Post-Mortem The key takeaway? While the attack appeared highly technical, it ultimately succeeded due to human error rather than technological vulnerabilities. human error Therefore, I highly recommend studying the Radiant and WazirX cases as well. It’s clear that script kiddies are adopting these techniques, meaning that not only exchanges but a wider range of crypto projects will be targeted next. Stay safe! Stay safe!

Bybit's $1.5 Billion Crypto Heist Sparks Debate on Centralized Exchange Security

Bybit-in 1,5 milyard dollarlıq kriptovalyutası mərkəzləşdirilmiş mübadilə təhlükəsizliyi ilə bağlı müzakirələrə səbəb oldu

Bybitova pljačka kripto vrijednih 1,5 milijardi dolara izaziva debatu o centraliziranoj sigurnosti razmjene

El robo de 1.500 millones de dólares en criptomonedas por parte de Bybit genera debate sobre la seguridad de los exchanges centralizados

O atraco criptográfico de 1,5 millóns de dólares de Bybit provoca un debate sobre a seguridade de intercambio centralizado

A Bybit 1,5 milliárd dolláros kriptográfiai rablása vitát indít a központosított cserebiztonságról

バイビットの15億ドルの仮想通貨強奪事件が中央集権型取引所のセキュリティに関する議論を巻き起こす

ການໂຕ້ວາທີຂອງ Crypto Heist ມູນຄ່າ 1.5 ຕື້ໂດລາຂອງ Bybit ໄດ້ກະຕຸ້ນການໂຕ້ວາທີກ່ຽວກັບຄວາມປອດໄພຂອງການແລກປ່ຽນສູນກາງ

Крипто грабежот на Bybit од 1,5 милијарди долари предизвика дебата за централизирана безбедност на размена

Bybit-ийн 1.5 тэрбум долларын Crypto Heist нь төвлөрсөн биржийн аюулгүй байдлын талаар маргаан өрнүүлэв.

O roubo de US$ 1,5 bilhão de criptomoedas da Bybit gera debate sobre a segurança de exchanges centralizadas

Bybitova lúpež kryptomien v hodnote 1,5 miliardy dolárov vyvolala diskusiu o centralizovanej burze bezpečnosti

Vjedhja e kriptove prej 1.5 miliardë dollarësh të Bybit ndez debatin mbi sigurinë e centralizuar të shkëmbimit

Stories, News & Mentions about ETHERSCAN

Categories

Trending Topics

Stories, News & Mentions about ETHERSCAN

Etherscan’s Stories on HackerNoon

Etherscan's News & Mentions

Categories

Trending Topics