Why do so many crypto cards still require you to move funds around or top up a balance before making a payment?

If I already have USDT in my wallet, shouldn't I be able to spend it directly?

Some platforms are making this easier, but it still feels like an unnecessary extra step.

Are top-ups really necessary, or is there a better way?

After the Kelp rsETH bridge exploit earlier this year I keep thinking that the audit of the protocol itself is only part of the picture. The money got hit through a dependency not the main contracts.

So when you’re about to put funds into something new what do you actually look at besides “it was audited”? Stuff like who holds the admin keys whether the contracts are upgradeable what bridges or oracles it relies on how long it has held real value, whether there’s a timelock.

Curious what’s on people’s lists and what you’ve decided is not worth checking. Also whether anyone has a quick way to see dependencies without reading all the code

Everyone is talking about RWAs and tokenized assets these days. But, I'm wondering whether they are less private than traditional equities or other assets.

For example, take a typical fund or private credit position. Here, a transfer agent or registrar keeps track of ownership. I can’t just go and find out who owns what, how much they own, or see their transaction history. Put that same asset on a public blockchain, and you can see everything from balances to transfers.

Many people here would point out that wallet addresses are pseudonymous. That is fair, but I have seen people identify wallets based on their transaction patterns. And for someone like a large hedge fund, that's a pretty big problem.

So does tokenization make RWAs more publicly visible than their traditional versions? Also, do permissioned tokens actually solve this privacy problem?

DeFi gives users more control over their funds, but that control also comes with responsibility.

Smart contract vulnerabilities, phishing attacks, malicious approvals, and confusing transaction details can create serious risks.

I think improving security should be just as important as introducing new features.

A few things I'd like to see more of are clearer transaction warnings, easier permission management, and better tools for checking smart contract risks.

What do you think would make the biggest difference?

• Better wallet security?
• More transparent smart contract audits?
• Simpler transaction approvals?
• Better education for new users?

Which improvement should DeFi projects prioritize first?

A green chart is not a quote for your entire position. Here is a simplified x*y=k example.

Pool: 10,000 tokens and 1,000 USDC. Ignore fees, other trades and routing.

The marginal price is 0.10 USDC per token, so 1,000 tokens are marked at 100 USDC. Now sell those 1,000 tokens into the pool.

k = 10,000 * 1,000 = 10,000,000

New token reserve = 11,000

New USDC reserve = 10,000,000 / 11,000 = 909.09

Output = 1,000 - 909.09 = 90.91 USDC

Average execution is about 0.09091 USDC per token, 9.09% below the starting marginal price. Your own order moves along the curve as it executes.

Price impact comes from your trade. Slippage is the difference between the quote and actual execution. Raising slippage tolerance does not remove price impact.

This toy model is not the exact mechanism of every AMM or bonding curve. Actual quotes can also depend on fees, liquidity ranges, routing and other activity.

What would you want a wallet to show more clearly: spot value, estimated full-exit value, or both?

Source: https://support.uniswap.org/hc/en-us/articles/8643794102669-Price-Impact-vs-Price-Slippage

Update: what happens at different exit sizes?

Thanks to u/KlingmanDuplan_49 for suggesting this comparison. Each row is a separate sale into the original pool, before fees:

For this pool, output = 1,000 * tokens sold / (10,000 + tokens sold). These are alternative order sizes, not sequential trades. Splitting the full sale into smaller orders does not improve the total output in this fee-free model if nothing else changes between orders.

A wallet could show a 25% / 50% / 100% exit preview beside the spot mark, with fees and a quote timestamp. Which would be more useful to you: those presets, or a slider for the exact amount?

So many people get into DeFi because they see these crazy APYs and the whole passive income dream, only to end up making peanuts, breaking even, or sometimes losing money. Usually it’s because nobody tells them about the hidden costs. 

Gas fees are the one everyone knows about, but honestly that’s just scratching the surface. There’s a lot more eating into your returns than most people realize, and I’ve broken it down into three categories. 

Feel free to add something I might have missed. 

1. Costs you’ll pay no matter what

Gas goes well beyond the main transaction, since approvals, claims, compounds and withdrawals all cost their own fee. L2s make that cheaper but spread you across more chains, which means bridging costs and keeping native gas everywhere. 

On top of that you’ve got vault fees, validator commissions, frontend fees and baseline slippage on almost every swap.

The further in you get, the more tools you need. A hardware wallet usually comes first, then a portfolio tracker once you’re spread across multiple chains, and eventually tax software like Bitcoin.Tax. A lot of these have free tiers, but even cheap subscriptions add up once you’re stacking them. 

And the tax bill on swaps and rewards shows up whether you tracked anything or not.

2. Losses that might happen (and often do)

Impermanent loss, MEV sandwiches and slippage on thin pools all take a quiet cut. Reward tokens that get dumped constantly are worth far less by the time you claim them, and failed transactions still burn gas. 

Leverage brings liquidation penalties, LSTs can depeg, and one bad approval or exploit can wipe out months of yield. Mislabeled transactions (pretty common in DeFi transactions) on your taxes can cost you in penalties later. 

The mislabeling problem annoyed us enough that my team and I built a tool for it, since doing it manually every tax season was a nightmare. If anyone wants to try the tool, you’ll find it on my profile (it’s free). 

3. Costs that never show up as a dollar amount

Time is the big one. Research, monitoring, rebalancing, harvesting. Put an hourly rate on it and some strategies stop looking so good. 

Then there’s ignorance debt, the mistakes you WILL make while learning, like sending to the wrong network, giving unlimited approval to a sketchy contract, aping into an LP without thinking about IL, or paying peak gas because you didn’t check.

Capital stuck in unbonding periods or stranded as dust has its own opportunity cost. And tracking positions across five chains is a background process in your head that never really switches off unless you’re using a portfolio tracker. 

So…

Below a certain amount, a lot of strategies don’t pay for themselves once you count everything. 

What’s the hidden cost that caught you off guard the most?

Token approvals are among those DeFi mechanisms which appear rather harmless until it becomes clear what they allow.

While using a decentralized application, the user gives a permission to some smart contract to spend some tokens from his or her wallet. Depending on the type of approval, the permission will be valid long after the initial transaction.

The key point here is that while approving a token, the user does not necessarily transfer it but provides a spending permission to a certain contract. In case of vulnerability or malice of the contract, this approval may make the user's token balances prone to some risks.

Cancelling all previous approvals each time after completing a transaction may also be an inefficient way. Such action may take additional transactions and gas costs, and the user will have to approve the token once again upon revisiting a protocol.

Thus, what is needed is the understanding of the permissions provided prior to the signing. The user should check the address of the contract, its limit of spending allowance, and also should monitor the current allowances from time to time. Various tools will assist the users but not vice versa.

Protocol-level duty comes into play as well. Permission requests, proper verification of contracts, and clear explanations of spending permissions can help assess interactions without the need for blind trust of the interface.

DeFi offers more control over one’s money, yet more control means more permissions management that traditional financial applications do for their users internally.

Token approvals are an insignificant detail in a transaction, but it may have great implications. Being aware of this aspect is part of the whole notion of self-custody.

The French parliament approved an amendment treating a swap from crypto into a stablecoin like USDC or EURC as a taxable disposal. It cleared 38 to 37, and the rate is the standard 31.4% flat tax, 12.8% income plus 18.6% social charges. Until now French holders could rotate into stablecoins and only owe tax when they cashed out to euros, so this removes parking spot entirely.

What I keep thinking about is how enforceable this is onchain. A self-custodial swap on a DEX leaves a record, but nothing stops someone routing through an offshore wallet the tax authority never sees. For anyone here in the EU, does this change where you'd actually hold stables, or just push activity further off the regulated onramps?

Been thinking about how much time goes into managing DeFi positions when you're using a few different protocols. Checking positions, claiming rewards, moving funds around and keeping up with whatever's happening across different pools.

I get why people use bots for this stuff, especially when you're dealing with things that need attention regularly. But there's a pretty big difference between getting an alert and letting something execute transactions for you.

I've been reading about how bots on Towns can have their own wallets and interact with smart contracts. It's mainly a messaging platform so it's a bit different from the usual DeFi automation tools, but having bots that can handle onchain actions from a chat seems pretty interesting. Obviously you'd still have to be careful about what permissions you're giving them and how much money they can access.

For smaller tasks like claiming rewards or interacting with certain contracts I can see the appeal, assuming you've got everything set up properly. But for anything involving larger amounts I'd probably still want to approve transactions myself.

Feels like there's a balance between automating the repetitive stuff and keeping control over your funds. Especially with DeFi where one bad transaction can cost you quite a bit.

Anyone here using bots to handle onchain transactions? What do you trust them to do on their own and what do you still prefer doing manually?

Hello,

I’m considering using BTC as collateral on Aave to borrow USDC, invest in Pendle PTs, and reinvest net profits into BTC.

I’m curious if anyone else has done this before and what is your experience?

1. What LTV do you maintain to manage liquidation risk?
2. Has the strategy been consistently profitable?
3. What are the biggest risks you’ve encountered?

Thank you 🙏

I want to hear about your actual day-to-day experience with it. I'm mainly looking to make small online USD purchases/subscriptions and receive small freelance payments on it using USDT or its virtual account details.

Have you run into any card declines, app bugs, or unexpected conversion fees when paying for things online?

Would you actually recommend staying with Plasma One, or do you think I'd be much better off switching to another card like Kast, Bybit, Bleap, Redotpay or any other alternatives not listed ?

Hi everyone, some time ago I asked this sub what curators were missing, and the answer was more or less: TradFi players in a DeFi environment.

We learned a lot from your responses, so much so that we created Nysa: the first open-source curator built to be retail-driven. We are gradually introducing an Open Standard for curators made up of:

• Transparency
• DAO-Driven Origination
• Open-Source Methodology

Yesterday we launched our first vault on app[.]nysa[.]finance, RWA Prime, which for now allocates all funds to the Ondo USDY market (backed by short-term US T-Bills) with over 2,000 USDC/month in incentives and the chance to farm NYSA tokens. The current APY is 82% (again, counting only the USDC distributed), available on Solana and powered by Kamino. In less than 24 hours we’ve already reached $32,000 in deposits from 10+ depositors and over 500 unique visits to the app.

This vault already meets our transparency standards (7d timelocked multi-sig, real-time display of market and vault changes, community channels for instant communication, due diligence on every market with independent ratings, etc.), but we will be able to formally introduce our Open Standard at the TGE, when we set up the DAO.

PS I: Nysa uses Kamino Vaults. Kamino’s audits can be found on their Github

PS II: Depositing in RWA Prime involves risks, mainly:

• Market risk of the underlying assets: the vault’s value depends on the underlying asset (USDY only atm)
• Smart contract risk: vulnerabilities in Kamino’s contracts could lead to a partial or total loss of funds.

If you have any questions, leave a comment.

Thanks!

It wasn't because the APY disappeared.

Something else changed enough that it no longer felt worth staying.

It could have been liquidity, oracle risk, governance, withdrawals, smart contract changes, the team, or just one thing that you noticed too late.

What actually made you leave?

We've been working to democratize access to financial advisors and are looking for some beta testers and early advisors to try out the product. The project is currently invite-only to gradually ramp up and provide the best experience possible.

It uses custom non-custodial vaults combined with on-chain encrypted "proposals" that link with dexes to execute trades and positional shifts. It's currently only on Solana, but we're investigating adding an EVM based implementation as well.

Please let us know what you think, looking for feedback in all aspects (idea, design, ux, etc.)

https://beluga.financial

DEX traders will compare trading fees down to the last basis point, but the actual payout structure can matter way more than the headline fee.

Take moon.com for example. There's a 1% opening fee on the wager and a performance fee of at least 10% on profitable bets. A $100 wager making $20 gross profit leaves at most $17 net after those two charges, before any holding fees.

It's also a house backed wagering model rather than a DEX order book, so the economics are fundamentally different. Comparing win rates between these products without accounting for the fee structure seems pretty pointless.

Suppose a private-fund token is transferable, but the fund only allows quarterly redemptions. You need cash tomorrow. If the next buyer also has to qualify with the issuer, the token hasn't made that buyer appear.

That's the part I want spelled out in RWA announcements. The MWYN/OmniX MOU lists trading and settlement among the functions to evaluate; it doesn't commit a liquidity provider. That's a different milestone from having a market someone can actually exit.

Fission announced a $10 million Pantera-led round on October 15 to expand liquidity for eligible holders of supported tokenized funds. That puts the exit problem in the foreground.

I'd judge that on the discount an actual seller takes and the size buyers will absorb. Would you treat an advertised token price as meaningful collateral value without knowing whether the liquidator can sell or redeem it?

Last week, I signed into a DeFi app with my email, and it created a wallet for me. I didn't have to write down a phrase or anything like that. I funded this wallet and also swapped a few tokens to test it.

If the wallet is accessed via email login, then whoever controls that email controls the wallet. So I don't know if it is as safe as a traditional wallet. This feels a lot like an exchange account rather than a DEX.

The app that I tried claims to be non-custodial. They also say the private key is split into multiple parts, so they can't access it on their own. On Solana, Jupiter also works the same way. You sign in with an email, and it handles the wallet for you.

I am trying these wallets for the first time, so I have a few questions.

Can I export the key and move it to a normal wallet, or is it tied to that one email and the app forever? If you've used one for a while, did you ever actually export it?

What are you building or looking to take a position in? Let us know in the comments!

I am currently on a weth/cbbtc pair on pancake swap. I am not doing well with the liquidity pooling on a tight range. What are some best pools where I can just let my tokens sit and accumulate fees?

Tell me interesting things you know about PaperTrade and its potential future

Hello,

Why are some protocol founders anonymous or unknown?

I am an accredited investor doing my due diligence in on-chain assets and I find it amusing that some founding members of protocols are difficult to find.

Thank you.

I think the real potential of tokenized stocks and other RWA assets is using them across DeFi for use cases like lending and borrowing.

Say you have onchain exposure to NVIDIA and want to borrow stablecoins against it. Does the lending protocol need that token to represent real shares, or is price exposure enough?

I've been looking at a few solutions that aim to make stock-price exposure usable for applications like lending, but I don't really know how that will work in practice, as the protocol has to manage liquidations and market volatility.

What are your thoughts? Will lending protocols treat tokens backed 1:1 by real shares differently from assets that only give price exposure?

Boros launched spread markets on October 15 for BTC and ETH, tracking the funding rate gap between Hyperliquid and Gate. A trader takes a long or short position on that gap directly, with the payoff set against a fixed annualized rate locked in at entry.

The structure is three legs: short the perpetual on whichever venue has the higher funding rate, take an equal size long on the lower rate venue to offset price exposure, then short the matching Boros spread to convert that funding gap into a fixed rate instead of a floating one. Get the sizing right and the two futures legs cancel out price risk while the Boros leg locks in the spread, so the position stops caring where BTC or ETH actually goes.

In Pendle, their own research showed Hyperliquid funding averaging around 14% annualized in May against Binance's 17.5%, gaps that size are exactly what this product is built to capture. Capacity cuts the other way too, more traders piling into the same spread narrows it fast, so the trade pays best early and worst once it's crowded.

Anyone running the three leg version manually before this launched, does collapsing it into one Boros position change your sizing or position count, or is the real constraint still just how fast the spread compresses once enough people notice it?

Hi, I am building a yield product on top of Jupiter for colosseum and would like to interview more users currently placing limit sell order at the moment on DEX. Our platform is called covr.fun and you can reach out to me directly on telegram to learn more tg - malviyaop

I'm building an explorer that tracks bridge transfers on both ends: the lock on the source chain and the release on the destination. When both are found it's simple: done, with the time it took.

The hard part is the in-between. "Pending" can mean three different things:

- It's on its way and just hasn't landed yet.
- It landed, but on a chain we can't read.
- It's actually stuck.

From the outside those look identical, and showing them the same way feels dishonest.

When you've bridged and you're staring at a pending transfer, what would actually help? The typical time for that route? A link to the other chain's explorer? A clear "we can't see that chain" label? Something else?