Bits + Bips

One side wins the OpenAI-Microsoft divorce, Ram calls a 19% earnings growth year 'bananas,' and Chris wants the US to hack back against DeFi exploiters. Here is the full rundown.

---

Heads up!

If you haven’t yet, be sure to subscribe to Bits + Bips, since the show will migrate there in a few weeks. Follow us on ⁠⁠Apple Podcasts⁠⁠, ⁠⁠YouTube⁠⁠, ⁠⁠Spotify⁠⁠, ⁠⁠X⁠⁠, ⁠⁠Unchained⁠⁠ and wherever you get your podcasts.

----

Chris Perkins and Ram Ahluwalia cover a lot of ground this week: Iran appears to be seeking a deal to end the Strait of Hormuz blockade as US economic pressure mounts, and the US government just worked with Tether to seize over $300 million in Iranian-linked stablecoins. 

Bottoms-up S&P earnings estimates are running at 19% year-over-year growth, tech earnings are about to hit, and both hosts think the setup for markets is unusually constructive. 

They also break down the new Microsoft-OpenAI agreement, the arrest of a special operations soldier for betting on the Maduro raid on Polymarket, and what the Kelp DAO hack means for DeFi's path to institutional adoption.

Hosts:


⁠⁠⁠⁠⁠⁠⁠⁠Ram Ahluwalia⁠⁠⁠⁠⁠⁠⁠⁠, Co-Host, CEO of Lumida


⁠⁠⁠⁠⁠⁠⁠⁠Chris Perkins⁠⁠⁠⁠⁠⁠⁠⁠, Co-Host, CEO of 250 Digital Asset Management

The Kelp hack exposed a flaw at the center of monolithic DeFi lending. What comes next for Aave, for looping traders caught underwater, and for users who never knew the risk.

A single compromised signature was enough. 

When an attacker exploited Layer Zero's DVN network to mint 116,000 unbacked rsETH on Ethereum mainnet, Aave's unified pool design did the rest: within minutes, a $193M loan was originated against fraudulent collateral, ETH borrow rates went to 100% utilization, and thousands of leveraged looping positions flipped from positive carry to deeply negative. 

Now Kelp faces a decision with no clean answer: socialize losses across all rsETH holders at a 17% haircut, or isolate the damage to the Layer 2 and blow through lenders on mainnet. Meanwhile, Aave's $250M umbrella module, designed precisely for moments like this, looks critically undercapitalized for a tail risk of this magnitude. 

Blockworks researchers Luke Leasure, Shaunda Devens, and Carlos Gonzalez Campo walk through the mechanics of the exploit, the design choices that amplified it, and what the resolution scenarios mean for DeFi's future.

Host:


⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Steven Ehrlich⁠⁠⁠⁠⁠⁠⁠, Head of Research, SharpLink

Guest:


⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Luke Leasure (@0xMether), Head of Research at Blockworks


Shaunda Devens (@shaundadevens), Research Analyst at Blockworks


Carlos Gonzalez Campo (@0xcarlosg),  Researcher at Blockworks

After Bybit, the CDS hack, and Kelp DAO, Austin Campbell argues that DeFi's foundational assumption — that incoming transactions should be treated as legitimate — may no longer hold. Ram Ahluwalia pushes back: change that assumption and you risk giving up immutability and finality. Austin draws the distinction: an immutable chain and a skeptical transaction queue aren't mutually exclusive.

 

Michael Bentley, who built the Euler lending protocol, explains why the problem runs deeper than resources or audits. AMMs like Uniswap are self-contained; they don't care about the outside world. Lending protocols are structurally dependent on external prices, liquidity conditions, and third-party oracles — making true immutability unreachable. The question isn't whether to add centralizing safeguards; it's how many, and which ones, and whether DeFi can survive the trade-offs.

 

This clip is from a longer conversation on DeFi security, the $290M Kelp DAO hack, and the future of yield-bearing stablecoins. Full episode here: ⁠https://youtube.com/live/tB5_2lUy4fs⁠ We go live every Monday at 4:30 PM ET — subscribe to catch it live.

Heads up!

If you haven’t yet, be sure to subscribe to Bits + Bips, since the show will migrate there in a few weeks. Follow us on ⁠Apple Podcasts⁠, ⁠YouTube⁠, ⁠Spotify⁠, ⁠X⁠, ⁠Unchained⁠ and wherever you get your podcasts.

North Korea's Lazarus Group drained $290 million from Kelp DAO by compromising two RPC nodes feeding Layer Zero's single DVN, swapping the binary for a malicious one, and DDoSing clean nodes to force a failover. In 46 minutes, Kelp DAO managed to stop the bleed — but not before $290M was gone and DeFi TVL dropped $13 billion in 48 hours. Now Layer Zero and Kelp DAO are fighting publicly, with third-party analysts largely blaming Layer Zero for a default setup that left 40% of protocols exposed to a one-of-one verifier configuration.

 

Austin Campbell, Ram Ahluwalia, and Chris Perkins sit down with Michael Bentley, builder of the Euler lending protocol, to work through who bears responsibility, what a whole-government response to Lazarus Group actually looks like, whether AI can close the security gap, and what it would take for DeFi to finally price and transfer its own risk.

 

This clip is from a longer conversation on DeFi security, the $290M Kelp DAO hack, and the future of yield-bearing stablecoins. Full episode here: https://youtube.com/live/tB5_2lUy4fs We go live every Monday at 4:30 PM ET — subscribe to catch it live.

Heads up!If you haven’t yet, be sure to subscribe to Bits + Bips, since the show will migrate there in a few weeks. Follow us on Apple Podcasts, YouTube, Spotify, X, Unchained and wherever you get your podcasts.

The $290 million Kelp DAO hack, attributed to North Korea's Lazarus Group, has DeFi TVL down $13 billion in 48 hours. Do DeFi's foundational assumptions need to change?

---

Heads up!

If you haven’t yet, be sure to subscribe to Bits + Bips, since the show will migrate there in a few weeks. Follow us on ⁠Apple Podcasts⁠, ⁠YouTube⁠, ⁠Spotify⁠, ⁠X⁠, ⁠Unchained⁠ and wherever you get your podcasts.

----

DeFi TVL fell from $99.5 to $86.3 billion in 48 hours after the $290 million Kelp DAO exploit — the latest nine-figure attack attributed to North Korea's Lazarus Group, this time via a compromised Layer Zero bridge. 

Meanwhile, a new class of yield-bearing instrument is staking a claim on capital fleeing private credit: Apyx's APY USD, backed by Strategy's STRC preferred stock, launched on Kraken this week with a 12% yield target and $180 million in supply after just seven weeks. Is STRC-backed yield a legitimate financial primitive, or a Bitcoin derivative with extra steps? 

And as DeFi absorbs yet another devastating security failure, is the industry's core assumption — that incoming transactions should be treated as legitimate — finally due for an overhaul? Austin Campbell, Ram Ahluwalia, and Chris Perkins dig in with Parker White of Apyx and Michael Bentley of Euler.

Hosts:


⁠⁠⁠⁠⁠⁠⁠Austin Campbell⁠⁠⁠⁠⁠⁠⁠, Host of Bits + Bips, Zero Knowledge Consulting


⁠⁠⁠⁠⁠⁠⁠Ram Ahluwalia⁠⁠⁠⁠⁠⁠⁠, Co-Host, CEO of Lumida


⁠⁠⁠⁠⁠⁠⁠Chris Perkins⁠⁠⁠⁠⁠⁠⁠, Co-Host, CEO of 250 Digital Asset Management

Hosts:


⁠⁠⁠⁠⁠⁠⁠⁠Parker White — @TheOtherParker_ — Founding Contributor, Apyx.


⁠⁠⁠⁠⁠⁠⁠⁠Michael Bentley — @euler_mab — Former CEO, Euler Labs