Zach Kelling

🚨DeFi project Blend (Stellar blockchain) was exploited for $10.5M+ yesterday. Root cause - price manipulation of a virtually zero liqudity asset. Attacker inflated USTRY price 100x, price oracle reported collateral as 100x more valuable, so attacker borrowed >$10M and ran away.

7

Parametric token standard is challenging in a number of ways, to the degree it makes us reassess seemingly obvious things, like fungibility and protection. Neither is quite what we assumed. 1. Fungibility ≠ Indistinguishability The most common objection I hear: 'If tokens have different parameters, how can they be fungible?' Fungibility is often defined as pure identity: units must be completely indistinguishable. By that standard, parametric tokens would be non-fungible. But that definition collapses if we look at real-world examples. Consider thermal coal. Two stockpiles of the same rank with different calorific values are still fungible. They can be valued and mixed as the same product with 'specific properties'. Traders don't require identical properties – they require bulk tradeability. They adjust the price for quality differences and move tonnage. Heterogeneity is normal, not a dealbreaker. Thus we can use another definition: fungibility is bulkness – the ability to aggregate, divide, and transfer by quantity. Price discovery is the thing that makes the trick - converting heterogeneity into fungibility - and the market handles the rest. Parametric tokens are fungible precisely because they are treated as bulk. Different parameters, same liquidity, one pool. The market adjusts the price. 2. Protection is not just outbound anymore ERC-20 offers outbound controls: allowances limit how much a spender can take. That's one-way protection. ERC-8378 adds something else: permissions – inbound restrictions. Why would you restrict what you receive? Because every incoming transfer triggers parameter mutation. If you hold tokens with carefully maintained parameters (e.g., a reputation score, a specific mint time), an unwanted transfer can poison your aggregate state. The weighted average (or another mutation function) shifts. Your position degrades. Permissions let you set 'min/max' parameter values per sub-account. If incoming tokens don't meet the restriction, the transfer reverts. A soft flag exempts the owner from the check. This isn't just a technical detail. It's a foundational tool for agentic finance. Agents and platforms get full freedom to operate within precise constraints. You can configure safety setups, delegate tasks, and know that the token's parameter integrity stays intact with your strategy. The Parametric token standard is simple. Its implications are not. ERC-8378 attaches state to fungible tokens: this changes how we think about fungibility and how we protect economic value. ERC-8378 draft is here, happy to get a feedback: https://lnkd.in/dA6nuzQK #ParametricToken #ERC8378 #DeFi #AgenticFinance

4

1 Comment

Two major developments this week show how regulators on both sides of the Atlantic are tightening expectations around privacy, transparency, and digital governance: - California AG Fines Jam City $1.4M for Opt-Out Failures — The California Attorney General announced a settlement with mobile gaming company Jam City after discovering widespread CCPA violations. Twenty of the company’s 21 apps lacked any opt-out link; the only app with a toggle failed to clarify whether it stopped data sales or sharing, and the company collected and sold data from users aged 13 to 16 without the necessary consent. This is the sixth CCPA AG action, all of which have focused on opt-out or consent issues, highlighting that the state’s main enforcement focus isn’t on specific industries but on the functionality of user rights. - EU Introduces Digital Package to Modernize Data, AI, and Cyber Rules — The European Commission has unveiled its final Digital Package, a comprehensive legislative proposal designed to streamline and unify the EU’s digital regulations. This package suggests changes to the GDPR, Data Act, AI Act, cybersecurity incident reporting rules, and introduces new initiatives like the Data Union Strategy and European Business Wallets. Although still in the early legislative stages, these proposals indicate a broader move toward integrating the EU’s digital governance, combining data protection, AI regulation, and interoperability into a more cohesive framework. Together, these updates highlight a global trend toward more structured, enforceable, and user-centric privacy and data rules, with U.S. regulators doubling down on opt-out mechanics and European lawmakers pushing toward comprehensive digital harmonization. Full analysis: https://hubs.li/Q03VNFP60 #CCPA #CaliforniaPrivacy #DataCompliance #ChildrensPrivacy #GDPR #AIAct #DataAct #DigitalPackage #GlobalPrivacy

6

1 Comment

New Post: Stateless Zero‑Knowledge Optimistic Transfer Protocol for Fractional Art NFT Ownership - https://lnkd.in/gp8Nm-h8 **Abstract** Fractional ownership of artwork via non‑fungible tokens \(NFTs\) has become a prominent use‑case for blockchain technology, yet commercial deployments still suffer from high gas costs, limited throughput, and privacy concerns. In this paper we introduce *Stateless Zero‑Knowledge Optimistic Transfer* \(SZ‑OFT‑FAO\), a Layer‑2 protocol that combines optimistic rollup architecture with stateless zk‑SNARK proofs to \[…\]

1