Vitalik's updated roadmap, Sign in with Ethereum - The Daily Gwei Refuel #266 - Ethereum Updates
3 Dec 2021 · 31:24
Anthony Sassano argues that Ethereum’s proposed roadmap puts the merge and rollup scaling first, while warning that these novel upgrades may reach mainnet more slowly than users want. He outlines a five-part plan covering sharding, statelessness and historical-data pruning, then highlights a Sign in with Ethereum mockup. He closes with the reported Badger front-end attack, explaining how malicious approvals could drain wallets and advising users to inspect signatures and revoke stale permissions.
Speakers
Topics
Transcript
hello everyone and welcome to another episode of the daily gray refuel where recap the latest news in the ethereum ecosystem i'm your host anthony sosano and today is the third of september 2021 all right everyone let's get into it so just before i revealed the details or the minting details for the daily gray first anniversary nft now you guys saw this last week on the review i had the trailer that i played then so you're all well aware of what this is and what it looks like but you can see there's a proper kind of like still here on your screen of the actual nft which as i said is of this room um that i'm sitting in right now and it's very detailed i have a few preview images i'm going to go through uh but yeah the details are basically the minting will go live next
week december 6th at 2200 utc i believe that is early morning australian time at 9am australian time afternoon u.s time and late evening european time so i tried to do it at a time where it suits kind of like every time zone so everyone has a chance to get get their hands on one of these one of these things um but yeah speaking of that there's 365 editions for 365 days since it is a one-year anniversary nft the mint price is 0.078 each which i think at current price is just over 300 each um uh but i you know we kind of like settled on that price because we wanted to be able to kind of like send as much money as possible to ethereum core developers um and also not have the kind
of like price be be too cheap because there's only 365 we want to give the people that really want it a chance to kind of like uh buy into it so um and as i mentioned last week as well uh 80 of the proceeds are going to ethereum core devs uh while 20 goes to kite for his amazing work creating this nft i mean without him this would never have happened he has spent so much time on this it's actually been amazing to watch it come together um but yeah i mean as i said i've got a few preview images to show you from before this nft so let's go through them all so the first one is as you can see just a close-up of me holding an eighth kind of like little eath toy in my hand with the delegate logo on on my t-shirt there i really
like this character car of me i mean it's really funny the beard looks really cool and then you got like the the um pronounced kind of like um blushing going on and everything i think it looks really cool we actually added in the headphones because you know you notice i always wear headphones um we actually added in the headphones in the nft in the latest render you can actually see it in this picture here um but you can't see it here but yeah the final end of t will have the headphones in it uh then you can see uh we've got like a rug underneath my chair now with the ether logo on it so kind of like playing off the the the rug of um you know the rug meme in crypto and then the ether blogo because i'm a co-founder of ethub as
well the other educational stuff that i do some of you may listen to the podcast that eric connor and i do each week about ethereum as well uh next preview is basically kind of like just over the the right side of my desk so where i'm sitting kind of like on the right i have a basically another monitor that i use for kind of like the general web browsing and things like that and then i have the little ipad here which usually watches kind of um ultrasound.money it's been off because the website doesn't work on mobile for some reason i've been meaning to kind of try and fix that but usually it's watching um eth being burned and then i have my little to-do list here saying dance because for those of you who don't know the context back in january before 8th hit all-time high
i basically said if 8th hits all-time high this month this month being january i will do a a kind of like bull bubble dance and i never did that once eve did hit all time in january so people keep reminding me of me about it but i thought that was a little fun little easter egg to include there um this one shows basically uh you know the back of kind of like the nft kind of you have you have the solar power so solar panels there with a bunch of piping running through it then you have like the t-shirts there if you you guys will notice i wear kind of like the same kind of uh i guess like neutral colored shirts a lot of the time on the refuel just a bunch that i cycle through um you know the gray the blue the i guess like
the yellowish color that you know you'll have seen them today i'm wearing the i guess like light purple color um but they don't have their deli wear logos on them i need to get around to doing the daily grey merge which should be coming soon as well by the way uh next preview is of behind me you can see the nft frame that i've got there and also the other this pc here this is not my main pc this is the staking pc so my main pc sits to the left this is my staking pc where i have it's literally all it does is is handle my stake uh my stake sorry my validators and as you can see in there there's a picture of italic holding the lambo that's the meme um you've got like a little kind of a86 model car in there i just had that lying
around so i put it in there i thought it was cool and then the rest of the box there as well uh and then you can see actually in the bottom right hand corner there's the haiku book which is actually a book that kira worked on with another person crocodile uh i think his name's crocodile man or something on reddit and they they it's kind of a book that's full of kind of haikus uh so that sits in the corner here you can see it in the video right now uh and then you have uh this sits behind the nft this unfortunately i don't have this in real life this is just something we included in there but you can see here it's like a little container with 32 ethernet representing staked each so we thought that was just a little cool little thing to get to um kind of put there and
represent a kind of like a validator next up we have basically what i see in front of me you guys never see this but this is my my kind of like view here on the right on the left hand side of me is discord in front of me is where kind of like i have the um the the um the web browser that i go through when i'm doing the refuel and then obs sits next to it where i'm recording everything and then above me i have all the charts of various kind of um of various cryptos obviously 8 is on there you know i monitor a bunch of others too and then left here is my camera like right now i'm pointing to it that's my camera and then above it i have a light that kind of like illuminates myself there so that's the part you'll never see and
then the top left here actually that's got the block native gas estimator tool but that's actually the details about my validators um and then i have another monitor on the far left uh that that is actually my validator is running as well which is included in the nft 2 there uh a couple more images to get through these are the figurines we actually got to include the figurines in the nft because we there's this really cool app on ios called polycam where you can actually scan the uh you know an object and basically take like lots of photos of it took like over 100 photos of each one of these figurines and then it kind of like constructs it into a 3d object which kid had directly placed into the nft so it came out really really well and it looks really awesome on the nft
itself so you'll see it you know once the kind of like nft goes live you'll see it much much much closer up but i'm glad we could get them in there because they're a kind of integral part of the space right they're everywhere around me so i really liked getting that uh in there and then another easter egg me wearing uni socks uh here everyone knows uni socks right the socks token that's worth a lot of money i think it these days and you can redeem them for physical unisocks uh last couple of ones this is just like a kind of like a fuel pump with the daily grain on there obviously playing off the delight theme that is kind of meant to power the whole kind of like battle station now obviously i don't have that in real life it'd be really cool if i
did but that's just another easter egg we threw in there and then finally there's there's kid he's kind of like um character here which is obviously a cat uh that's sitting i guess like in the nft sitting behind this nft frame there so he always puts that in his nfts and i'm i'm i i i love that he did it with this one as well because as i said without him this would never have become a thing uh and it just came out so so well better than i ever dreamed and as i said last week this kind of like nft means a lot to me because it immortalizes this room for me because i'm moving out of this in like a few weeks like i'm not going to be very much longer and you can already see i've started kind of like packing up things
like this figurines have gone up there and then down here a few of them are gone and as i said last week this is going to get a lot more spare so sparse sorry um so yeah i'm really excited to kind of like for this to finally be live but anyway enough about the nft those are all the details about it i'll remind you guys again on next week's refill of course but definitely join the discord channel because i'm actually going to be sharing the minting link in the discord channel before i share it on twitter because i want to give people in the discord a chance to mint it before it's public so if you're an active discord participant you'll participate you'll see it in there as well anyway on to the news from the last 24 hours now so vitalik posted an a kind of like updated road map uh
kind of diagram now he's posted one of these before i think it was quite a while ago but he posted this kind of like updated one last night which is a much more simplified version of what he posted last time and i actually really really like this one so you can see i'm gonna i'm gonna actually go through and spend some time going through each of these parts here because i know that a lot of you would like me to do that so he split he split it up into basically five different sections uh about what's coming and two different sections about what's kind of like already behind us so on the consensus layer what's already behind us is we launched the beacon chain we did the warm-up fork which is altair and we have uh proof-of-stake like client friendliness now because of that and then at the execution layer we
did uh refunds mostly removed so that's what their gas refunds initial gas costs updates were done and erp-1559 was implemented now going uh through the kind of like five main future categories the first one is the merge right this is what we're working on right now this is basically uh what all the core devs and researchers are working on to be able to get it to to kind of like production and you can see here each one of these little boxes has as it has a kind of bunch of text in it but also a progress bar so for the full merge specification is done now we're in the uh the test network phase and then as kind of like a parallel thing to that we're doing the fork choice improvements which has got to do with that vulnerability that was found that i spoke about a few weeks ago
then that will lead to the merge and that's no more proof of work we're done merge is good and then after that will be a post-merged hard fork uh with that will enable withdrawals say the two to three months after our after that i think as well there and then you can see on this kind of like side here he's got longer term extras as part of the merge which is single secret leader election which is something got to do with proof of stake single slot confirmations and better signature signature aggregation now i guess the first thing is about halfway through the other two are still early stages but they're they are kind of like the extras that uh that is going to come as part of you know the merge work or work around the merge then next category is the surge which uh vitalik saying is
the massive scalability increase for roll-ups through sharding but also through this new eip that i spoke about yesterday 44.88 which you can see here has been has been specced out it's about three three quarters of the way down there um which would lead to short-term call data expansion which as i explained yesterday would lead to five times cheaper cost for roll-ups then you have a basic sharing which is a few shards going live probably i would have to say it's probably going to be early 2023 it's probably not going to be next year you know if they really push it maybe it can be next year but i doubt it it's probably going to be 2023 and this will just be a few of those kind of like data shards that we're waiting for to increase kind of like scalability for all ups even more uh and the base
sharding specification is about just over halfway done vitalik says here then uh you have a basic shouting with many shards so a few shots would probably be like four or five maybe i guess many shards would be tens of shards going out to that 64 that we want to get to um and then after that would be uh adding dis or data availability sampling to protect against bad committees basically an enhanced security for for sharing and then you can see the longer term extras on the right hand side which is still very very early improvements to shard block proposes um staggered block times and increased shard size and count so that's all on the roadmap but obviously early days there then the third category is the verge which is related to statelessness through vocal trait trees or tries and related
features so you can see this goes through three major phases with three major hard forks where you have basically a database and gas cost changes put through hard fork one you have introduction of vocal trees to replace merkel trees and then you have a removal of patricia trees as well and then on the right hand side as part of the longer term extras you have snack snack vertical proofs and even better uh tree star cat or star cash which is cryptography stuff i'm not even going to kind of like bother trying to explain that because i don't understand the details but as i've said before statelessness is another roadmap item that is uh kind of like being worked on in parallel then there is the purge which is the fourth category here which is eliminating historical data and
technical debt now this has got to do with an eip that's been proposed i think it's aip quadruple four or something like that about making it so that clients or kind of like full nodes don't have to store history more than one year years old now this is a bit contentious but it's actually very much needed to enable kind of like ethereum to to keep growing and to keep kind of being healthy and sustainable going forward and really in the realistic sense you don't actually need like you know super long-term history right to at least validate the security of the chain and everything like that um but in saying that you'll still want access to some of that data so there will be kind of like third-party services that give you access to that data and this kind of i guess um talk about like what those
third-party servers are going to look like like is it going to be services like the graph is it going to be p2p networks like torrenting other services like etherscan things like that which it will be but that's what the purge is all about and there's a lot in there i'm not going to go over it all here you can actually just google any of these things and it'll come up with research on it but the purge is kind of like um another major roadmap item there uh and then you have the last one which is called the the splurge which which is miscellaneous but important extras so these are all things that they you know the core devs and researchers want to get into the protocol but it is not necessary for the ethereum network to be you know to function and thrive but some of these
things include account abstraction mev mitigations uh more better censorship resistance under proof of stake mav smoothing and zk snarking everything and other stuff like that as i've as i've talked about before uh now you know i you can go look at this it'll be linked in the youtube description kind of like break it all down as i said you can go google any of this sort of stuff you'll come up with research on it um but i really like how vitalik has categorized each of these and the naming scheme is hilarious you know the merge the search the verge of the purge the splurge right it's just a trustworthy to come up with something like this but i think it just goes to show that ethereum is not kind of like sitting in place it is a constantly evolving protocol there is a lot happening everywhere but it's
going to take longer than people would like for it to come to mainnet because of the fact that these are bleeding edge kind of like upgrades these are things that have never been done before things that are going into a huge half a trillion dollar network and uh we need to kind of like do the scaling stuff first before we do the other stuff because the most important stuff right now is obviously scaling ethereum that is by far the most important thing out of any of this sort of stuff and the merge plays into that as well because without the merge we can't get sharding and obviously sharing plays into scaling but the merge and the surge are the first two kind of like things there because obviously the merge is critical for the you know all the reasons i've outlined and the surge bringing more
scalability to roll-ups is critical because we need roll-ups to be that user-on-boarding layer instead of layer one so so yeah definitely go check out this kind of tweet here and actually i just remember vitalik linked to a bunch of different things already in the twitter thread you can see here some links so you can definitely go check out all of them for further reading on this all right so brantley from the ens team has shared an figma kind of like uh mockup of signing with ethereum buttons that anyone can use with the eip4361 standard at login.xyz but pretty much a basic kind of like design here in black and white uh with for signing with ethereum that you can kind of put on your website and allow people to sign in with their ethereum wallet now i've
spoken about this a lot in the past i've covered login.xyz a lot i think this is super cool i think it's really cool that there's kind of um i guess like a standard signing with ethereum button now like you have a standard sign in with facebook or log in with facebook and you know log in with email or whatever whatever else there uh it's good to have this and i think you know making signing with ethereum ubiquitous across ubiquitous across the web is actually going to be a huge marketing vehicle for ethereum so i really really hope this kind of like catches on and i think it will because the logging.xyz team is doing a lot of really great uh work around this but great to see them making more progress on on this sort of stuff so tim bico uh published another cool all-core devs update this time covering
uh arrow glacier the kinsugi which is the merge effort and the recently proposed eip4488 you can check this out right here it's a blog post on mirror yet again there are links to all the relevant information and also a summary from tim baiko himself so if you want to learn all about uh i guess i mean staying up to date with kinsuki as i've been updating you guys you can kind of go here and you can learn about eip-4488 or call data cost reduction from timbico as well and there's also i think a thread yeah there's a bit there's a bit of thread here as well with links to more stuff so that'll be linked in the youtube description for you all to check out so i i think you guys would have seen this maybe a few days ago on twitter but um ross albrecht is raising money via
nfts uh for uh basically to donate it to i think wrongly imprisoned kind of like people and you can kind of see here that pleaser dao is actually launching the free roster which is an open community aimed at buying ross albrecht's nft collection and funding the mission to free ross and fight for prison reform so you can go to freerossdale.com to kind of like join this effort here now you for those of you who don't know pleaser dao has been around for a little while they basically started as a collective of people to bid on the first people pleaser nft and they've been kind of like snatching up a bunch of rare nfts over the past kind of like few months i guess you could say and now they're going after ross albrix which i think is really cool because uh there needs to you know we'd love to
there to be a bidding war on these nfts because the more money that's raised the more goes to prison reform which is a huge issue in the us for i mean the people who live in the us you would know how big of an issue kind of like um wrongful incarceration is in in the us and and not just wrongful incarceration but like the punishment not fitting the crime like in ross's case a lot of people argue that he's being um unjustly punished with like multiple life sentences for running the kind of like silk road now i'm not going to get into kind of like the whole arguments for and against there but that's what people believe right and but then there's a lot of kind of like cases like that in the u.s where a lot of people are have been imprisoned for a long time over a weed
possession which is is kind of like really silly because like weed is is legal in a lot of states in the us now so it's just this whole kind of mess right and it's not just just those related offenses but just like uh prisons in general like especially in the us they have for-profit prisons and stuff like that but you know if i go any further here i'm going to get a bit political but this is a political thing right this is not something that uh can be detached from politics because this is basically ross saying hey i i i want to raise money and donate it to prison reform because i believe that there's so many people hurting because of all this stuff so yeah if you're interested in getting involved you can go to freerossdao.com or you can check out this kind of twitter thread which i'll link
in the youtube description for you below so euler announced the launch of their long-awaited test net today so you can go to this blog post here uh check out all the information about their test net links to it how to get kind of like test net tokens it's on roxton and play around with it now for those of you who don't know euler is a money market protocol uh kind of like a new spin on it they are trying to basically have uh i guess like do it in kind of like an algorithmic way where you can basically have a permissionless uh listing of kind of um money money market pools and things like that uh and it's a really exciting platform i mean disclosure here i'm a series a investor in in this in this protocol but the people working on it absolutely amazing
team really really know their staff know what they're doing and uh you know the fact that the test nets are out to play with i played around with it today it's really really cool you can go to um you know the testnet itself which is that robston.euler.finance all the links are in this kind of blog post here and play around with it yourself i mean if i just load it up i don't know if i'll be able to kind of connect because i think i'm on mainnet right now um but you can kind of like see here uh basically please connect to ethereum robs then yeah yeah i'm not gonna i'm not gonna be able to see it here but but anyway uh you can go there get on robsten get some tokens and try out the test net for yourself all right uh another thing i wanted to
talk about today was that uh polygon is hosting a polygon zk day um uh very very soon and and there are going to be speakers there such as vitalik and paul brody and a bunch of others that i mentioned the other day yeah this is the kind of like thing that i mentioned the other day but they've now landed vitalik as a kind of speaker so you can register for this at polygonzk.ethglobal.com now i wanted to echo kind of like what mihaylo said he goes you know we are honored to have vitalik with us on this special day he understood our vision and intentions from the very beginning and has been supporting us in multiple ways and he has i mean you know you guys know that i've been supporting polygon for a very long time as an advisor but it's really awesome to see someone like vitalik kind of like
support them as well because i've you know polygon has copped a lot of kind of heat over i guess like the the course of this year because people were kind of like saying well you've only got the pls chain where are your l2s blah blah all this sort of stuff and now they have those things and people have kind of like shut up about it which is funny but i've always kind of like been saying to you guys the polygon ecosystem is so much more than the pos chain they're doing so much work behind the scenes that you guys don't know about but i don't like i see i know what they're doing i kind of like you know obviously pay very close attention to them they really really care about scaling ethereum and they've probably got one of the most powerful scaling kind of like
ecosystems right now and as i mentioned yesterday they're investing a lot of money into zk tech but they're also doing optimistic roll-ups still they're doing hybrids they're doing side chains and standalone chains they're doing everything and it's not just kind of like fluff or theory they have one of their zk stuff uh zk things live polygon hermes they have um knight four live which is their their their hybrid zk optimistic roll up they have the pos chain live which has an amazing amount of usage by the way this i know it's not a quote unquote true l2 but it's better than a side chain it's a commit chain i mean it's it's really cool and it's given a lot of users a lot of kind of like um value and then they have like the avail blockchain they're building the sdk which is live so much
stuff going on so very very i'm excited to see all that uh but definitely register your interest at polygonzk.ethglobal.com to kind of um i guess be part of polygons zk day which is coming up soon all right uh this was related actually to what i was talking about before with vitalik's ethereum roadmap uh the graph put out a protocol today talking about historical ethereum data access after eip 4444 which as i mentioned is the eip that he's got to do with the purge which is eliminating historical data and technical debt for the ethereum protocol now the graphs blog post here goes through how they can help to kind of like serve this data to users who need it you know once it's expired um and kind of like uh why that is important to
ethereums and things like that so definitely go read this blog post for more information on that i should have talked about it before but you know it's here now it'll be linked in the youtube description for you all right so an interesting tweet from kane here today where he said holy i've had like 20 calls with potential optimistic ethereum native projects this week and all i can say is i should drop my calendar link on twitter more often we're going to make it to the l2 promised land he is not the only one that's saying this guys like i talk to a lot of l2 people and a lot of l2 teams um they're all just like getting hit up like no tomorrow for these native deployments and i've said it before and i'll say it again it doesn't make sense for projects to natively deploy to l1
anymore uh unless they're kind of like targeting the whales because uh if you deployed to l1 the only users really at this point in time is going to be the whales the rest of the users are on l2 or kind of like on on other chains or kind of like on the polygon post chain and things like that and that's just going to keep it happening like we're not going to get new users to onboarding to l1 anymore they're going to go straight to l2 so it's really awesome to see that all these projects understand this and they're going to be natively launching on these on these l2 there's plenty of these right you know live and there's plenty of these coming as well um i've seen a few of them already out in the wild it's just it's really really humbling to see because as i've said i
think 2022 is going to be the actual year of l2 like l2 adoption because we actually have them live now especially the generalized evm platforms like um optimism optimistic ethereum and arbitrary one of course uh but also a lot of the zk stuff going live too you know stock nets live on on mainnet and alpha fashion polygon has hermes and also maidan are coming soon as well and they're working on zkbm stuff there zk sync coming as well with zk porter so much stuff like 2022 is going to be a big year for ethereum scaling and you know we have the merge coupled with that and we also have potentially that eip to increase scalability for roll-ups as well so i'm very much looking forward to 2022 as the year of layer two right like three twos
in there so that's pretty funny coincidence uh right there all right speaking of zk sync they announced today that they had now have fiat on ramps to zk sync enabled by a ramp network now you guys will know that you can use a zk sync to donate on git coin so essentially what you can do right now is you can on ramp via fear from with ramp network to zk sync and then donate on git coin no need to touch ethereum layer one at all how amazing is that this is what i'm talking about guys this is the way or the way as i should say um so and and and as ek address as they say here equals an ethereum address it's the same thing so if you're just like exclusively on zk sync it doesn't
matter because you can always withdraw to layer one ethereum it always gets created on layer one ethereum um and if you deposit 20 or more um uh that's the one-time account activation fee and gas p gas fees are paid in the rc20s are not just eth which is cool like eight is obviously paid at the base layer to secure zk sync's roll up but it is not required on the roll up itself because they abstract that away from the end user which i thought was really really cool so you can go to go.rampnetwo dot ramp dot network zk sync to get started onboarding here but uh that's really really really awesome and you know just in time for get coin grants ratcheting matching round 12 as well and speaking of zk sync as well kylin
here has put together a dashboard for zk sync deposits so besides some common statistics on deposits users and gas fees you can also find the amount of ether people deposited most which erc20 token accounts for the biggest parts and more so you can see here the deposits on zkc have been going up nicely and steadily on the chart you can see all-time deposits uh unique addresses about 167 000 right now which is which is quite amazing i think like already on kind of like this l2 here deposits by week you know the funny thing is is that i think there is a definitely a lot of people farming air drops of these sorts of things but i think that's fine because people want you know farming air drops just leads to more adoption and whatever works like i actually i actually love that people are farming air drops and
getting onto l2's because of that it's just amazing to me uh but you can see kind of like the breakdown here of deposits um between tokens so dye is leading then you have uh usdc as a second and usdt is third and you can see the breakdown of east deposits on uh over here so 0.18 or less is dominating at almost 80 percent then 0.1 to 0.58 deposits at about 18 and then you've got the long tail after that as well so you know it's definitely just benefiting the smaller users right which is exactly what layer 2's need to be doing like the whales i mean the whales don't really care that much about getting onto l2 right like unless they're farming something the whales are happy sitting at layer one the gas fees are negligible to them like if you're if you're stinging around like
six seven figures then uh you know a few hundred dollars in gas fees is not gonna not going to matter to you right whereas for most users we aren't doing that we aren't slinging around that much money all the time and regular kind of like users especially if you're not a trader or kind of like i'm doing arbitrage stuff so layer 2 is definitely where you're going to want to be and you know we're seeing that play out right now so cool little dashboard here which you can check out further be linked in the youtube description and finally i wanted to talk about the badger exploit that happened that yesterday or the day before i didn't talk about it on like yesterday's refill because i was waiting for it to kind of like all shake out um but for those of you who don't know
what ended up happening was over 100 million dollars got drained from the badger protocol badger finance protocol which is a popular kind of like uh bitcoin yield protocol and the way this worked was that it wasn't actually drained via kind of like a smart contract exploit it was drained it was drained by harvesting kind of like front end approval so what happened was that an attacker was able to kind of inject their own um kind of like code into the front end which made it so that users were approving uh tokens for a contract that belonged to the attacker and didn't belong to badger finance now this is i guess what you could consider a man and middle attack as i've warned about before i've told you guys about these banana middle attacks a lot um they don't just happen uh by injecting kind
of like a malicious metamask transaction they also happen by injecting themselves into the actual website that you're visiting and then throwing up a minimized transaction for you to sign so it's kind of like a bit more involved um but it worked wonders because this attacker now got away with over 100 million dollars worth of worth of crypto which sucks for a lot of the users right like i mean most of the users i think but but essentially what was happening was that people were approving token amounts for contracts or kind of like approving unlimited token amounts for contracts that they thought were badger finance but weren't and then the attacker used that approval to drain everyone's wallet because how an approval works is that if you do infinite approve so say you go to a smart contract you say okay i give you infinite approval permission for all the
wrapped ether in my ether account now if you have 10 wrapped e3 in your account uh that contract can if if it's kind of got a function to can and has a centralized operator can drain that tent wrapped eighth out of your wallet anytime it wants to it doesn't need you to sign a transaction because you've already signed the transaction giving it permission to spend an infinite amount of your wrapped eth scary right definitely very scary and this is why i've talked about before that either you should definitely go to um the different websites that allow you to revoke permissions from contracts and do that especially if you're not using the contracts anymore and just practice good hygiene as well with approvals and that that brings me to this thread from crypto cat um here where he says you know with the latest badger expert let's
talk about metamask approval hygiene and it's got about seven tweets here talking about how you can protect yourself against these kinds of attacks so i'm not gonna go through the whole thread it'll be linked in the usual description description for you to check out but essentially it comes down to just knowing what you're you know approving and signing like always i've talked i've spoken about this a lot guys and i i can't stress it enough i know it's easy just to kind of like automatically trust something especially something that you that you visit regularly but the badger finance front end was kind of exploited through i think what ended up happening was there was an api key on cloudflare that got compromised which allowed the attacker to inject this kind of like a malicious contract approval kind of like script into the front end and then it kind of
came out for users the badger finance team didn't know about it until it was too late unfortunately so the best way to protect yourself is knowing what you're approving knowing what you're signing um and also a few other tips in here from crypto cap which i'll let you read by reading the thread in the youtube description but i think on that note it's going to be it for today so thank you everyone for listening and watching be sure to subscribe to the channel if you haven't yet give that video a thumbs up subscribe to the newsletter join the discord channel and i'll catch you all next week thanks everyone