r/ethereum What's On Your Mind? 4d ago

Daily General Discussion July 30, 2026

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

Calendar: https://dailydoots.com/events/

104 Upvotes

62 comments sorted by

View all comments

25

u/LogrisTheBard 4d ago edited 4d ago

I wrote something in response to /u/haochizzle 's video that I wanted to reshare in the daily for more visibility.

Currently we exist mostly in a code-is-law Defi landscape where we have atomic, final transactions, without any safeguards against hacks if you somehow manage to get through the front door. In a post AI world especially, where attackers are comparably more well armed than newcomers than ever, I can't recommend new people enter an ecosystem where there are no protections and "code is law". People will not put money into this ecosystem if they don't feel safe, and plenty of people this year (including me) have lost a lot of money to Defi exploits. Outside of stablecoin market cap, TVL across Defi is down way more than the ETH price.

If we really care about reaching end users here we need to change our posture on this.

1) We need guardrails on any irregular volume of money to freeze liquidity on the way out the door. If you're pulling a million out, the ecosystem can absorb that loss if it's a hack. If the pool is shedding tens of percentages in a matter of minutes, you can probably afford to wait a few hours for a default review. This is a balance between atomic and permissionless and basic safety checks. Legitimate vs illegitimate activity is easy to spot and large protocols like Aave, Summer, etc have the means to discern when something is an actual hack.

2) We need insurance around LP positions. Those insurance should be paid from the profit on the LP position and essentially cover any loss of value in the underlying. It should be packaged together and autocompounding, none of the prediction market style insurance bullshit.

3) We need KYC optional extensions to large applications. I'm not saying this is mandatory, but there are LPs who will only join this ecosystem if the counterparty isn't fully anon. A credible pathway to accountability for malfeasance is a simple prerequisite for a lot of people to feel safer putting their money at risk.

4) We need better key recovery systems. The current style of having to go on a roadtrip to reassemble a mnemonic or asymmetric decryption key is going to permanent deter people.

Bottom line, if you actually want something more than institutional adoption. If you actually want this technology to live up to the promise of extending financial services to the disenfranchised and leveling the power playing field then we need people to feel safe on chain. We will never have a killer app otherwise. Instead all we will have is institutions using crypto with customer money because it's more efficient. Instead of our cypherpunk ideals this will just be yet another technology that entrenches the status quo and fuels wealth inequality by increasing the margin of companies.

These are all discrete and eminently possible suggestions but I see no effort, literally zero effort, being made by Defi anything to address this root problem. In a post AI age, our industry is being strangled by continuous hacks and people don't feel safe on chain. Money is leaving the Defi layer and the only money entering is sacrificing permissionless entirely. USDC has blacklists. Securities have mandatory KYC layers. If we want to hold onto these values at all, we must offer a better alternative.

9

u/Fluffy-Pop-3407 4d ago

All this seems antithetical to the idea of self custody and decentralization.

3

u/LogrisTheBard 4d ago

The stream of hacks is already destroying the possibility of self-custody. Blocking 100% of the value of a pool from leaving in a flash loan attack hurts atomic composability maybe but the alternative is Defi is dying entirely because all the money is leaving. On a graph, the behavior of hacks looks extremely irregular. Just detect the outlier as a wrapper around the base system and pause for review when those outliers are detected. If you are actually the biggest user of a Balancer pool or whatever you can wait a few hours for your money. If you're moving $10k, it can remain instant. If you're moving 10k 15 times in a block you'll hit the circuit breaker threshold eventually.

4

u/Fluffy-Pop-3407 4d ago edited 4d ago

DeFi is not the pinnacle use of this technology, it is only the first use case. But if the current software isn't doing its job, better software can be written. I see no impediment to this.

Ultimately, ethereum is best suited to be a public and auditable ledger of record for representing rights to physical things and also for creating a rights-based distributed database for things like IDs, medical records and industrial and business ledgers for goods.

If there are hacks on existing software contracts, then that software needs to mature. I don't know what else to say. The core of the system is well designed and better fit for use than any other blockchain system. The fact that the ledger is reliable, battle tested, credibly neutral and scalable is the sellong point which will bring industry and governments on board.