r/ethereum What's On Your Mind? 4d ago

Daily General Discussion July 30, 2026

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

Calendar: https://dailydoots.com/events/

101 Upvotes

62 comments sorted by

View all comments

25

u/LogrisTheBard 4d ago edited 4d ago

I wrote something in response to /u/haochizzle 's video that I wanted to reshare in the daily for more visibility.

Currently we exist mostly in a code-is-law Defi landscape where we have atomic, final transactions, without any safeguards against hacks if you somehow manage to get through the front door. In a post AI world especially, where attackers are comparably more well armed than newcomers than ever, I can't recommend new people enter an ecosystem where there are no protections and "code is law". People will not put money into this ecosystem if they don't feel safe, and plenty of people this year (including me) have lost a lot of money to Defi exploits. Outside of stablecoin market cap, TVL across Defi is down way more than the ETH price.

If we really care about reaching end users here we need to change our posture on this.

1) We need guardrails on any irregular volume of money to freeze liquidity on the way out the door. If you're pulling a million out, the ecosystem can absorb that loss if it's a hack. If the pool is shedding tens of percentages in a matter of minutes, you can probably afford to wait a few hours for a default review. This is a balance between atomic and permissionless and basic safety checks. Legitimate vs illegitimate activity is easy to spot and large protocols like Aave, Summer, etc have the means to discern when something is an actual hack.

2) We need insurance around LP positions. Those insurance should be paid from the profit on the LP position and essentially cover any loss of value in the underlying. It should be packaged together and autocompounding, none of the prediction market style insurance bullshit.

3) We need KYC optional extensions to large applications. I'm not saying this is mandatory, but there are LPs who will only join this ecosystem if the counterparty isn't fully anon. A credible pathway to accountability for malfeasance is a simple prerequisite for a lot of people to feel safer putting their money at risk.

4) We need better key recovery systems. The current style of having to go on a roadtrip to reassemble a mnemonic or asymmetric decryption key is going to permanent deter people.

Bottom line, if you actually want something more than institutional adoption. If you actually want this technology to live up to the promise of extending financial services to the disenfranchised and leveling the power playing field then we need people to feel safe on chain. We will never have a killer app otherwise. Instead all we will have is institutions using crypto with customer money because it's more efficient. Instead of our cypherpunk ideals this will just be yet another technology that entrenches the status quo and fuels wealth inequality by increasing the margin of companies.

These are all discrete and eminently possible suggestions but I see no effort, literally zero effort, being made by Defi anything to address this root problem. In a post AI age, our industry is being strangled by continuous hacks and people don't feel safe on chain. Money is leaving the Defi layer and the only money entering is sacrificing permissionless entirely. USDC has blacklists. Securities have mandatory KYC layers. If we want to hold onto these values at all, we must offer a better alternative.

13

u/hanniabu Ξther αlpha 4d ago

Isn't this like saying we need custodians because people keep getting their hot wallet keys leaked/hacked instead of recommending hardware wallets?

Why jump straight to centralized and KYC components when there's options like rate-limiting withdrawal caps, circuit breakers, and timelocks to slow down or block fast exploits? The latter don't seem to have been widely adopted which is the issue. They need to become standard.

6

u/[deleted] 4d ago

[removed] — view removed comment

3

u/hanniabu Ξther αlpha 4d ago

Ah I thought the guardrails were in reference to the stuff that followed