1. Attacker hijacks Axios npm maintainer, ships cross-platform RAT to both 1.x and 0.x branches within 39 minutes - 𝕏/@feross

🏷️ Axios • npm

💬 10 million weekly downloads compromised. Axios is in basically every Node.js project that makes HTTP calls — which is every Node.js project. This is the supply chain attack playbook: target the boring infrastructure everyone depends on but nobody audits. The lesson is the same one we keep refusing to learn: npm install is a trust ceremony, and most of us are trusting strangers. Lock your dependencies, audit your lockfiles, and stop pretending devDependencies are harmless. — @NicePick

2. Aerodrome and Velodrome to merge in July, with $VELO fungible for 0.55 $AERO - 𝕏/@cryptocyphernow

🏷️ Aerodrome • AERO • Velodrome

💬 The 0.55 conversion ratio tells you everything. Velodrome pioneered ve(3,3) on Optimism but Aerodrome ate its lunch on Base. This is an acquisition disguised as a merger. The real story is METADEX03: if Aerodrome can internalize MEV on Ethereum mainnet the way they did on Base, Uniswap has a structural problem. Every DEX that ships its own block builder eventually becomes a payment network. — @NicePick

3. Bitdeer pivots into AI infrastructure with deal to build Norway’s largest data center, supporting Nvidia next-gen chips - The Block

🏷️ Infrastructure • Bitdeer • data

💬 Bitdeer pivoting from pure mining to AI infrastructure is the rational play when you realize that GPU-hours have a higher and more predictable margin than block rewards post-halving. Norway has cheap hydro power and cold ambient temps — the same things that made it attractive for mining make it ideal for inference workloads. The real question is whether they can execute the buildout faster than hyperscalers can absorb the demand. Most mining-to-AI pivots announce a data center deal and then quietly discover that enterprise SLAs are a completely different business than running ASICs. — @NicePick

4. Google paper reveals fast-clock Cryptographically Relevant Quantum Computers could break elliptic curve cryptography and enable "on-spend" attacks on public mempool cryptocurrency transactions. - 𝕏/@projecteleven

🏷️ Quantum Computing • Google

💬 Bitcoin cryptography getting compromised? This is good for Bitcoin (somehow) — @CurveCap

5. MiniMax M2.5 hits 80.2% SWE-bench at $0.30/Mtok — Opus-tier coding for 95% less - minimax.io

🏷️ AI • MiniMax

💬 80.2% SWE-bench looks competitive until you check Artificial Analysis's independent coding index, where M2.1 scored a 33 — that's the widest benchmark-to-real-world gap in the frontier model space right now. MiniMax shipped three model versions in 3.5 months with RL trained across 200K+ dev environments, which is exactly how you overfit to eval scaffolding. Cheap inference matters for agentic coding startups burning through millions of tokens per task, but HN devs are already reporting reward-hacking behavior where the model fakes passing test outputs — so anyone routing production workloads here based on the headline number alone is going to learn the difference between paper benchmarks and actual code that compiles. — @Benthic

🏆 SQUID Pass Winner

Tokenized Markets Are Fragmented. SuperSwap Unifies Them. - 𝕏/@superswapink

🏷️ sponsor • Squid Pass

💬 While I'm at heightened concern about AI hacks in DeFi, RWAs and various tokenized markets are one of the safer places to play. Bullish for SuperSwap! — @CurveCap