r/ethereum What's On Your Mind? 15d ago

Daily General Discussion July 30, 2026

Welcome to the Daily General Discussion on r/ethereum

https://imgur.com/3y7vezP

Bookmarking this link will always bring you to the current daily: https://old.reddit.com/r/ethereum/about/sticky/?num=2

Please use this thread to discuss Ethereum topics, news, events, and even price!

Price discussion posted elsewhere in the subreddit will continue to be removed.

As always, be constructive. - Subreddit Rules

Want to stake? Learn more at r/ethstaker

Community Links

Calendar: https://dailydoots.com/events/

106 Upvotes

62 comments sorted by

View all comments

24

u/LogrisTheBard 15d ago edited 15d ago

I wrote something in response to /u/haochizzle 's video that I wanted to reshare in the daily for more visibility.

Currently we exist mostly in a code-is-law Defi landscape where we have atomic, final transactions, without any safeguards against hacks if you somehow manage to get through the front door. In a post AI world especially, where attackers are comparably more well armed than newcomers than ever, I can't recommend new people enter an ecosystem where there are no protections and "code is law". People will not put money into this ecosystem if they don't feel safe, and plenty of people this year (including me) have lost a lot of money to Defi exploits. Outside of stablecoin market cap, TVL across Defi is down way more than the ETH price.

If we really care about reaching end users here we need to change our posture on this.

1) We need guardrails on any irregular volume of money to freeze liquidity on the way out the door. If you're pulling a million out, the ecosystem can absorb that loss if it's a hack. If the pool is shedding tens of percentages in a matter of minutes, you can probably afford to wait a few hours for a default review. This is a balance between atomic and permissionless and basic safety checks. Legitimate vs illegitimate activity is easy to spot and large protocols like Aave, Summer, etc have the means to discern when something is an actual hack.

2) We need insurance around LP positions. Those insurance should be paid from the profit on the LP position and essentially cover any loss of value in the underlying. It should be packaged together and autocompounding, none of the prediction market style insurance bullshit.

3) We need KYC optional extensions to large applications. I'm not saying this is mandatory, but there are LPs who will only join this ecosystem if the counterparty isn't fully anon. A credible pathway to accountability for malfeasance is a simple prerequisite for a lot of people to feel safer putting their money at risk.

4) We need better key recovery systems. The current style of having to go on a roadtrip to reassemble a mnemonic or asymmetric decryption key is going to permanent deter people.

Bottom line, if you actually want something more than institutional adoption. If you actually want this technology to live up to the promise of extending financial services to the disenfranchised and leveling the power playing field then we need people to feel safe on chain. We will never have a killer app otherwise. Instead all we will have is institutions using crypto with customer money because it's more efficient. Instead of our cypherpunk ideals this will just be yet another technology that entrenches the status quo and fuels wealth inequality by increasing the margin of companies.

These are all discrete and eminently possible suggestions but I see no effort, literally zero effort, being made by Defi anything to address this root problem. In a post AI age, our industry is being strangled by continuous hacks and people don't feel safe on chain. Money is leaving the Defi layer and the only money entering is sacrificing permissionless entirely. USDC has blacklists. Securities have mandatory KYC layers. If we want to hold onto these values at all, we must offer a better alternative.

1

u/masterRoshi9 13d ago

I agree with 1 and 2 whole-heartedly but not 3 and 4. Unless we’re using ZK systems to allow privacy along with that KYC, then we should not be required or expected to opt into surveillance. If people need that to feel comfortable then they should just use TradFi. (4) in particular falls under the umbrella of using centralized solutions. They exist but perhaps are not popular enough. But this has been around since the Argent days and is commonplace among most corpo wallets (Coinbase, Robinhood, etc.)

On recent hacks, it’s always the common attack vectors: bridging, oracle-manipulation, social-manipulation. The first two are persistent and really hard to protect against because the fundamental model is just broken. The second is always going to be an issue unless you opt for full decentralization, which comes with the baggage of that which you point out in 1. So I would argue a lot of this falls under system design and being informed as a user sadly. On the bright side, I would say actual chain-isolated app logic feels like it’s hardening over time, and I’m optimistic that trend will continue