Orion @BasedOrion_

eng @SquadsLabs | building blocks @ParagonStaking | passkeys @getbunkr Joined August 2014

Tweets

5K
Followers

2K
Following

944
Likes

68K

Orion @BasedOrion_

2 days ago

@tobeycodes That’s why there’s “extra thinking” mode

0 0 2 18 0

View Details

Orion @BasedOrion_

2 weeks ago

@JakesVision Vacheron bracelet goes hard

1 0 1 41 0

View Details

@jords Interesting that jup/titan didnt seem to handle regular token accounts. Looks like on swapping they attempt to all only derive the associated token account address (hence the failures) That TA you had was created like 4y ago via Raydium

0 0 0 84 0

View Details

Orion @BasedOrion_

2 weeks ago

@Tristan0x Sent you a DM wrt one of our ex-engineers looking for a new spot 🫡

0 0 1 40 0

View Details

Orion @BasedOrion_

a month ago

@cavemanloverboy @toly Baller shit

0 0 1 139 0

View Details

Orion @BasedOrion_

a month ago

@watchking69 Valid questions if you don’t have history/relationship with that dealer Honest business is great and all, but far from guaranteed

0 0 1 113 0

View Details

Orion @BasedOrion_

2 months ago

@0x_febo Lfg 🙌🤝

0 0 0 89 0

View Details

Squads @multisig

3 months ago

Announcing Solana Multisig Tools Three new open-source tools for Squads Protocol v4. All three are small, self-hostable, and built with minimal dependencies. We're actively engaging with STRIDE to help strengthen multisig management practices on Solana. This is the first step towards multiple independent frontends and access points to v4. multisig-cli A focused Rust CLI for reviewing, simulating, signing, and executing multisig proposals. It parses multisig accounts and instructions directly instead of pulling in a large dependency tree. The result is a binary that's easy to audit and well suited for high-trust operational workflows. If you're using an older CLI, we recommend switching to this multisig-cli which has minimal dependencies. multisig-verifier A static, zero-backend browser UI. Reads multisigs state directly from Solana RPCs, decodes proposals, tracks approvals, and lets members approve or reject from their own wallet. No secrets leave the browser. Strict CSP rules by default. multisig-monitor Real-time visibility into multisig activity. Watches configured multisigs, decodes actions, and emits notifications when members create, vote on, execute, or modify configuration. Treasury and governance events surface as they happen. The pattern across all three: inspect before signing, verify before approving, monitor after execution. Smaller dependency surfaces reduce supply-chain risk. Direct decoding reduces blind signing. Open implementations are reviewable end-to-end. Monitoring closes the loop. We strongly encourage every team to verify what they're signing through more than one interface. Don't rely solely on any single frontend. Cross-check with a CLI, an independent verifier, or a second client before approving anything that matters. We're working with a number of security teams who will host their own versions of the multisig-verifier. You can self-host today. Soon teams will also be able to access independently operated instances run by parties with no affiliation to Squads. Link to the repo in the post below.

26 46 309 92K 60

View Details

Orion @BasedOrion_

3 months ago

@L0STE_

0 0 1 118 0

View Details

Orion @BasedOrion_

3 months ago

@jnwng @solanaFndn @solana Absolutely generational run 🙏🫶

0 0 0 100 0

View Details

Stepan | squads.xyz @SimkinStepan

3 months ago

An update on what we're focusing on with @multisig in light of the Drift incident last week. What we're building now: 1. A proxy program for v4 that lets you opt in to killing durable nonces for a specific signer. This removes the ability for pre-signed transactions to sit indefinitely waiting to be executed. 2. A dedicated protocol management multisig program with configurable template policies and a UI you can run locally. Built for teams that need tighter governance controls over admin operations. 3. Exploring clear signing with intents so signers can verify exactly what a transaction does before approving it (cc @Redacted_Noah). What's already available on v4 and can be set up by your team today: – Timelocks. You can set these up in Settings. They create a mandatory delay between proposal approval and execution. – Signer permissions. You can assign Propose, Vote, and Execute rights separately, so not every signer has the same level of access. – Multisig nesting. You can set up configurations where eg two separate multisigs are signers on a third. Adding a layer of operational separation. -Minimal UI. An interface on top of v4 that you can run locally (github.com/Squads-Protoco…). If you're unsure about your current setup or want guidance on how to configure any of this, DM us.

Squads @multisig

3 months ago

Our investigation into the @DriftProtocol incident remains ongoing. Early evidence points to two compromised signers on Drift's admin multisig, which were used to execute a transaction modifying Drift's program configuration. Squads programs were not compromised. We have also

49 76 474 87K 174

18 35 213 34K 44

View Details

Orion @BasedOrion_

3 months ago

@redacted_noah @ansel_sol @SimkinStepan

0 0 1 29 0

View Details

Orion @BasedOrion_

3 months ago

@ansel_sol @redacted_noah @SimkinStepan Just saw the parent post, seems this might be outdated?

1 0 1 23 0

View Details

Orion @BasedOrion_

3 months ago

In essence I thinks its rooted in the right idea, but under all the current wallet standards/offerings, the clear intent signing advantage would only apply to CLI + "hot" wallet signing. Ledgers etc still rely on showing you hashes rather than the actually "clear" tx or message underneath. So at least for mission critical actions people take with custodians & ledgers etc, jobs not finished 🥲

1 0 1 28 0

View Details

Orion @BasedOrion_

3 months ago

Super cool to see this kind of stuff being spun up 🙌 Kudos @gumsays 🫶

0 0 1 196 0

View Details

Orion @BasedOrion_

3 months ago

@gumsays If you ever need help parsing or anything of the sort, DM 🫡

0 0 3 279 0

View Details

Orion @BasedOrion_

3 months ago

@trentdotsol @L0STE_ say less

1 0 2 68 0

View Details

Orion @BasedOrion_

3 months ago

@toly @TheSoftwareJedi @trentdotsol @SimkinStepan Yeah we’re currently thinking through options on how to block & constrain behavior specifically around durable nonces