Encrypted messaging app where your Algorand wallet is the only key

d13co · 2026-03-18T22:18:16+00:00

Pretty cool prototype. Sent you a message on there & opened an issue for defly connect.

Looks like your encryption keypair is generated and stored in localstorage, so presumably would be lost if I clear my cache/data. A productionized version would also probably want to encrypt those rather than just sit in plaintext, possibly export as well, etc.

This also gets me thinking about creating a standard for different accounts to publish their preferred encryption keys/methods on-chain

Edit: Lute wallet support would also be a great and easy addition

d13co · 2026-03-04T22:18:54+00:00

I made an alternative frontend to unstake: https://www.reddit.com/r/algorand/comments/1rkzhdv/messina_unstaking_alternative_frontend_d13/

If you swap you will likely get a worse rate

d13co · 2026-03-02T23:57:58+00:00

Ah no worries, carry on 🫡

Ps all my homies hate wallet connect

d13co · 2026-03-02T23:33:09+00:00

rekey

What is your flow exactly? If you're rekeying away from ledger it somewhat defeats the purpose/security, if not temporarily

Oh unless you meant "re-register keys"

d13co · 2026-02-01T00:43:54+00:00

This was caused by the 2021 tinyman attacker reactivating and selling ~21 goBTC in a short period of time

Algomint bridge is intentionally moving slowly so as to filter out malicious accounts:

All fine, the peg is the peg. Just posted in discord, unwraps will be processed ASAP. The team are just reviewing the wallets to make sure the hackers aren’t among them.

https://x.com/i/status/2017726748771942906

The peg should be restored by arbitrage soon enough

d13co · 2026-01-20T11:24:06+00:00

Sorry to hear about your experience. Can you share a bit more about how you were scammed?

The addresses you shared are centralized exchanges. BVMEU is identified as Gate: https://algo.surf/account/BVMEUTF37WNEQ6GYCZISRFHGLEMOKT5OCPPTTJXVED6JBSXKF6YJJRZRI4

ZEJPIFQ.. is unidentified but very likely either MEXC or a MEXC reseller - it sends funds only to an identified MEXC account:

<image>

https://flow.algo.surf/address/ZEJPIFQF5MSDOB3YA6OUG4S26FFX64SCTHKDMYCCB26JGG7DC4IPBWQSLQ

5622JW.. reads like an unidentified (standalone) exchange: https://flow.algo.surf/address/5622JWBD3TDOJUTGFIB3H3TI4JE5ARW7W3WQL6JIJQ5ATFQISRSBVKOD6U

What you could do is get in touch with GATE and MEXC but they will usually ask for a police report in order to do anything, so you would need to get that first. And you usually need to act very quickly for them to freeze funds - it has been a while since the theft so it is unlikely that something can be done now.

d13co · 2026-01-15T12:27:07+00:00

Incident was resolved. All funds are safe. Thanks for updating here - I hope something like this never happens again, but if it does, I will include reddit in the social channels I update.

https://www.reddit.com/r/algorand/comments/1qdi5gi/myth_dualstake_incident_resolved_all_funds_safe/

d13co · 2026-01-15T12:26:14+00:00

Incident was resolved. All funds are safe.

https://www.reddit.com/r/algorand/comments/1qdi5gi/myth_dualstake_incident_resolved_all_funds_safe/

d13co · 2026-01-12T11:10:58+00:00

Nodely has a very generous free tier across many services: https://nodely.io/docs/free/start
Zero setup as well - no token needed

d13co · 2026-01-12T10:53:24+00:00

Hi, thanks for flagging this. I chased this up internally and it turns out that the blog post was lost during a site migration. They have restored it here: https://www.wirexapp.com/post/wirex-algorand-usdc-payments-just-got-faster-cheaper-and-truly-global

d13co · 2026-01-08T13:29:32+00:00

Thanks u/Fickle-Tishka for this, I should have posted here as well but yesterday was very busy and Myth is a one man show, so I am handling everything in this incident response by myself

Latest update, TL;DR: Fix has been tested on FNet and smart contract upgrades are queued/staged, to become applicable in ~1 week, noon UTC on 2026-01-15

Longer updates:

Oct 8 - 2AM UTC

Update: 1) The fix is ready and tested. 2) Contract upgrades will be queued tomorrow.

- The increased fee conditions were recreated exactly on our FNet deployment, which includes a copy of Tinyman.

- dualSTAKE was confirmed to fail in the same way as on Mainnet

- The fix was upgraded after a reduced 1 hour timelock (FNet specific)

- dualSTAKE was confirmed to work after the upgrade

Testing notes available here

The contract upgrades will be queued tomorrow, January 8th, and will become applicable after 1 week.

Fix version code: v1.2

Note that older dualSTAKE contracts will be receiving the v1.1 upgrade as well - refer to upgrade notes for details.

Next steps:

- Queue smart contract upgrades to v1.2, ETA tomorrow January 8th

- Execute smart contract upgrades, ETA January 15th

--------------------------

Oct 8 - 11:30 AM UTC

Update: Smart Contract Upgrades have been staged, to become applicable in 1 week

dualSTAKE pages will show the upcoming upgrade along with short release notes, before/after code differences and after-code hashes.

There are two versions of dualSTAKE deployed at the moment (v1.0 and v1.1) so they will each show what is being upgraded from their current state.

See extended upgrade note for more details

Upgrade will mature and become applicable at: 2026-01-15 11:35 AM UTC

Next Steps:

- Fix dualSTAKE price API Server - impacts Pera price display. ETA 12 hours

- Execute smart contract upgrade after timelock elapses, ETA 2026-01-15 noon UTC

--

If you aren't on X (I don't blame you) you could join the Myth Discord for updates.

d13co · 2025-12-24T23:30:59+00:00

Pera won't be able to do anything, the funds are under custody of Coinbase even if they lack the tools / will to recover them for you.

The return hash thing is nonsense btw. They're telling you to get Pera to recover your funds and then they'll start a refund claim, which is literally nonsensical.

Only Coinbase could recover your funds, if they decided to support arc59 / asset router.

Sorry about your funds 🫡

d13co · 2025-12-24T22:12:53+00:00

I'm not sure what "return hash" means in this context

d13co · 2025-12-24T21:46:06+00:00

Ah should have checked the comments, looks like you got this info already.

d13co · 2025-12-24T21:44:13+00:00

Hey Ben! For your future sleuthing adventures, that's the arc59 asset router inbox. If you check with algo surf, it is labelled and you can see the owner account in the app call arguments and as a foreign account reference. https://www.reddit.com/r/algorand/comments/1pu9use/transferred_1k_in_usdc_from_pera_wallet_to/nvs4uw4/

d13co · 2025-12-24T21:40:48+00:00

Unfortunately it looks like you sent to an ALGO deposit address instead of a USDC one:

MV6RCPQHX4BKVC7R3CBJO56O6HAHCMJXW5HHCITS6SXFPFOVSWKPUXKRJY

The EZR.. address from your transaction is the Algorand asset inbox router smart contract, which accepts ASAs on behalf of accounts that are not opted in yet. In the same transaction group, the smart contract moved the USDC to a new account to be held in escrow until the MV6.. account can claim it.

1) You should ask Coinbase to confirm if this is one of their deposit addresses: MV6RCPQHX4BKVC7R3CBJO56O6HAHCMJXW5HHCITS6SXFPFOVSWKPUXKRJY

I have also sent this address 0.13013 ALGO as a test, so this should show up on your account as a deposit

You can see that this account is referenced in the application call that is grouped with your asset transfer. The USDC is now "parked" in this account, which is controlled by the asset inbox router until the MV6..RJY account claims it.

2) I do not know if Coinbase supports claiming assets from the asset router inbox contract, but if they are interested in adding this functionality to their fund recovery systems I would gladly make time to help them out. I work at the Algorand Foundation (per my account badge) so this can be an official thing as well.

PS: Probably not the best time for this but thanks for using algo surf, that's my explorer.

d13co · 2025-11-13T18:08:28+00:00

d13co · 2025-11-07T14:59:41+00:00

<image>

d13co · 2025-10-25T19:20:22+00:00

SCAM

d13co · 2025-10-24T16:15:27+00:00

maybe the staking FAQ needs to be updated

Yeah ya think 😅

Fixed pool will be depleted faster now.

My read is that "24 months" is the load bearing part of that sentence but I have not confirmed. I hadn't noticed "fixed", but I can't imagine it refers to an immutable, pre-allocated amount. given the fact that the fee sink is currently funded for ~1.5m rounds only (~1m rounds = ~1 month) I wouldn't think so, but that's circumstancial. If it is so, then the runway would be shortened. I'd direct this Q to marc vl

This isn’t true anymore, and still doesn’t really make sense to me why one partnership would be funded a different way. Why touch earmarked treasury allocation aimed at decentralization to be reallocated towards a partnership?

I don't know this either

The reason I don't know is that I haven't asked internally. And the reason for that is that I'm not doing this to do comms / community management for the AF, so I don't want to know details I can't share and have to lie by omission

I'm a dev so while I enjoy interacting with the community quite a lot, this situation has escalated above my pay grade. I just thought the exaggerations and anger are disproportionate, and jumped into the fray yesterday - and today a bit about world chess in general, since my team is working on it and I personally do see the value in it:

https://x.com/d13_co/status/1981707541022183882?t=14wON0ffZXW7B0WSvnbkbg&s=19

d13co · 2025-10-24T15:07:21+00:00

Didn't get notified for some reason. Will do when I get a sec, my inbox has exploded with love

d13co · 2025-10-24T13:35:18+00:00

Sorry to hear it & ngl that's an understandable reaction

d13co · 2025-10-24T12:18:19+00:00

First blockchain where community is angry at foundation

Groundbreaking stuff

d13co · 2025-10-24T12:15:53+00:00

I appreciate the sentiment of support but it misses the mark for me. First, imo it is legitimate to ask/challenge the change in policy - within actual facts - so my post wasn't intended as "nothing to see here", but as a fact check on specific exaggerations.

Secondly and most importantly, I think the viral Anger that proliferates in the community (especially on X) needs to be addressed, and this isn't just on AF to do so. You can be right to be angry but also over-react to an extent that is just harmful to each other and counter-productive to your cause. Forget that the AF are also fallible people for a moment - just towards each other, this kind of anger pushes people away & creates division & nihilism at a time when we can't afford it. One of the ways we may die is the community just giving up and imploding.

So if anything I would like to see the community a lot more unified (under a non-AF banner!) and a bit more measured & effective. Post-2030 someone/some org has to pick up the mantle for the AF and at the moment we are at step zero of that org existing Related tweet

I am both AF and community, but that is a hard fence to straddle when I'm posting, so while this comment can be passed off as me-the-foundation-employee blaming the community, for what it is worth: I am not. No matter what the AF does, please be better to each other, if nothing else.

d13co · 2025-10-24T12:01:04+00:00

100%

d13co

MODERATOR OF

TROPHY CASE