ECH Institute Podcast

The call covers discussions on Glamsterdam Devnet 5, including the status, updates, and integration with other Devnets. It also delves into EIP proposals, their implications, and the need for a breakout call to further explore the topics. The conversation covers a range of EIPs and proposals related to Ethereum, including discussions on code delegation, privacy pools, staking flows, and account abstraction. There are also considerations for potential attacks and the impact on client performance.TakeawaysGlamsterdam DevNet five status and updatesEIP proposals and implications Code delegation and account abstraction are key topics of discussion.Privacy pools and staking flows are being explored for Ethereum.Considerations for potential attacks and their impact on client performance are important aspects of EIPs and proposals.Chapters00:00 Discussion on EIP 7979 and 817353:08 Code Delegation and Account Abstraction59:03 Two-Phase Deposit and Withdrawal Credential01:13:12 EIPs for Account Abstraction01:28:15 Concerns and Considerations

In this episode of Ecosystem Project Demo 33 on the ECH Institute channel, we dive deep into the evolving landscape of Web3 security with Indranil Roy from CredShields. As AI continues to transform the tech industry, it also introduces new vulnerabilities and sophisticated "AI attacks" targeting smart contracts.Indranil shares expert insights on the proactive measures developers and organizations can take to secure their blockchain applications. We explore the intersection of artificial intelligence and cybersecurity, discussing how to leverage advanced tooling and rigorous auditing to safeguard assets in an increasingly complex digital environment.🎬 Related ContentPresentation: 🌐 Useful LinksCredShields: https://credshields.com/🎙️ FeaturingGuest Speaker: Indranil Roy: https://twitter.com/@itsmeroy2012👥 ECH Institute TeamHost: Pooja Ranjan – https://twitter.com/poojaranjan19Podcast Producer: Akash – https://twitter.com/lookupforskyCoordinator: Meenakshi Singh – https://twitter.com/Meenakshiy2k🕒 Chapters00:00 - Teaser: The structural edge of attackers and AI risks.01:13 - Introduction to EPD #33 and guest Indranil Roy.02:32 - Indranil’s journey: From bug bounties to co-founding CredShields.06:35 - The "Cat and Mouse" game: Why smart contract hacks still happen.09:02 - The Audit Process: From scoping to the final developer report.11:42 - CredShields Presentation: Analyzing the $27B lost in Web3.13:06 - What is Solidity Scan? Automated security for developers.15:48 - The Security Ecosystem: Automation, Manual Audit, and Bug Bounties.17:20 - Future of Security: Expanding into Web2, Cloud, and AI infrastructure.18:22 - AI vs. Human: Why human intervention is still critical in auditing.20:57 - Demo: How to use Solidity Scan for smart contract security.26:13 - Positioning: How CredShields differs from other review tools.29:22 - The 72-Hour Promise and Agentic AI Workflows.31:26 - New Attack Surfaces: Prompt injection and API key vulnerabilities.34:02 - Minimum Viable Security for small teams and DAOs.38:22 - Rapid Fire Round: Best audits, AI predictions, and weird vulnerabilities.44:18 - Closing remarks and where to find Indranil Roy.🌐 Official Websites• ECH Institute – https://echinstitute.org/💸 Support ECH InstituteDonate: https://www.echinstitute.org/donate📲 Follow ECH InstituteX/Twitter: https://twitter.com/ECHInstituteWarpcast: https://warpcast.com/ethcatherdersMedium: https://medium.com/ethereum-cat-herdersDiscord: https://discord.gg/H2eYpKCxxm#ai #web3security #CredShields #SolidityScan #echinstitute

The meeting covered updates on Glamsterdam DevNet 4, discussions on target gas limit PRs, and the introduction of a new tool called Disruptor. The conversation also delved into EIP 7684 and EIP 8148, addressing the custom sweep threshold for validators and the return deposits for distinct credentials. The conversation covers a range of EIPs and their potential impact on stakers, validators, and node operators. It also discusses the proposal to change the timing of the ACDC call to accommodate participants from different time zones.TakeawaysGlamsterdam DevNet 4 issues and investigationsDiscussion on target gas limit PRsIntroduction of Disruptor tool for reorgs and network forksEIP 7684 and EIP 8148 for validators and return deposits EIP 8148 is supported by solo stakers, small operators, and institutional stakers due to its predictable cash flow benefits.EIP 8148's configurable cap is seen as useful for institutional stakers to manage risk limits and for solo stakers to consolidate into zero X02 validators.EIP 8148's automatic sweep mechanism is preferred for seamless reward accounting and better user experience.EIP 8061's increase in exit and consolidation churn is already implemented and tested, making it a candidate for SFI.The proposal to change the timing of the ACDC call to accommodate participants from different time zones is being considered for the next ACDC call as a trial.The decision to change the timing of the ACDC call will be based on the turnout and engagement of participants in the next call.Chapters00:00 Glamsterdam DevNet 4 Update13:02 Discussion on Target Gas Limit PRs21:35 Introduction of Disruptor Tool38:10 EIP 7684 - Custom Sweep Threshold for Validators48:08 EIP 8148: Predictable Cash Flow and Configurable Cap53:24 EIP 8148: Automatic Sweep Mechanism59:14 EIP 8148: Support from Node Operators01:08:22 EIP 8080: Exits Using the Consolidation Queue01:15:28 EIP 7688: Forward Compatible Consensus Data Structures01:21:25 ACDC Call Timing Change Proposal

In this episode, Pooja Ranjan interviews Kevin Jones, a leader at Edge and Node and creator of 1Claw - an innovative infrastructure platform designed to secure AI agents and manage secrets. They explore the critical vulnerabilities in AI workflows, how 1Claw addresses these risks, and the future of AI security in decentralized ecosystems.🎬 Related ContentPresentation: https://docs.google.com/presentation/d/1ChCPYfQYuvA7OteUdo2MwgMaiNu7SGo2XW18ePB3tvs/edit?usp=drivesdk🌐 Useful Links1Claw: https://1claw.xyz/🎙️ FeaturingGuest Speaker: Kevin Jones: https://twitter.com/cryptomastery_👥 ECH Institute TeamHost: Pooja Ranjan – https://twitter.com/poojaranjan19Podcast Producer: Akash – https://twitter.com/lookupforskyCoordinator: Meenakshi Singh – https://twitter.com/Meenakshiy2k🕒 Chapters00:00 – The "8 Seconds" Problem: How AI accelerated malicious attacks01:17 – Intro: Pooja Ranjan welcomes Kevin Jones (Edge & Node / 1Claw)02:15 – Kevin’s Journey: From photography to Web2 infrastructure & Blockchain03:50 – The "Aha Moment": API keys leaking into AI chat history05:15 – Deep Dive: Why developers are accidentally exposing .env files06:50 – Technical Solution: Using HSMs and Trusted Execution Environments (TEE)09:55 – The LLM Proxy: Automated redaction and protecting against prompt injection11:20 – Signing transactions without holding keys: The Intents API13:42 – Developer Tooling: SDKs, CLIs, and open-source MCP tools15:00 – Ecosystem Integrations: Cursor, Claude, CrewAI, and NVIDIA Nemo17:12 – 1Claw Platform Demo: Registering an agent and creating secure vaults23:30 – Supported Blockchains: Ethereum, Bitcoin, Solana, and more27:25 – Human vs. Agent API keys: Managing access and audit logs30:50 – EIP-712 Security: Restricting contract interactions for AI agents35:05 – Real-World Use Cases: Secure Telegram Bots and BankerBots37:30 – OIDC Federation: Hooking up agents directly to Claude API42:02 – Rapid Fire Round: Biggest developer mistakes and Claude vs. GPT45:20 – Final Summary: How to secure your agentic future🌐 Official Websites• ECH Institute – https://echinstitute.org/💸 Support ECH InstituteDonate: https://www.echinstitute.org/donate📲 Follow ECH InstituteX/Twitter: https://twitter.com/ECHInstituteWarpcast: https://warpcast.com/ethcatherdersMedium: https://medium.com/ethereum-cat-herdersDiscord: https://discord.gg/H2eYpKCxxm#1Claw #Cybersecurity #ArtificialIntelligence #AI #Blockchain #Web3

The conversation covers updates on the Glam Amsterdam DevNet 4 launch, delegate inclusion on field calls, an update on EIP 7904, EAP 8188 discussing state tiering, and EAP 8182 proposing private transfers to Ethereum. The conversation covers innovative authentication methods, ZK proof and hardware wallets, credential proof separation, risk mitigation, synchronous composability, security and soundness mitigation, gas costs, supply side work, deactivation of self-destruct, and client feedback on execution API cases.TakeawaysGlam Amsterdam DevNet 4 launch updatesDelegate inclusion on field callsUpdate on EIP 7904EAP 8188: State tieringEAP 8182: Private transfers to Ethereum Innovative authentication methods allow users to bring their own authentication, ZK proofs enable hardware wallet authorization, and credential proof separation ensures synchronous composability.Deactivation of self-destruct functionality requires careful consideration of potential impact on existing contracts and use cases.Chapters00:00 Glam Amsterdam DevNet 4 Launch18:42 Update on 790437:30 EAP 8182: Private Transfers to Ethereum43:15 Credential Proof Separation57:17 Deactivation of Self-Destruct01:11:23 Client Feedback on Execution API Cases