Giorgio Zinetti @giozzi

The RL framework behind GLM-5.2 is fully open source. The full post-training of GLM-5.2 ran on it in about two days. The same stack sits behind the entire GLM series, from 4.5 to 5.1. It is called slime, and it is built around one idea. Keep a single RL kernel, and push all the variety into data generation. Let me explain what that means. Every RL run has two halves. One generates experience, where the model produces responses and something scores them. The other learns from it by updating weights. The learning half is mechanical. It reads samples, computes a loss, and steps the optimizer, the same way whether the model solves equations or drives a browser. What changes between tasks is generation. A math run answers in a single turn and grades the result. An agent run loops through tool calls, reads results, and only then earns a reward. slime draws the line right there. The learning half stays fixed as one kernel, and everything that differs becomes a new way to generate data. Under the hood, it wires Megatron for training to SGLang for rollout, with a Data Buffer between them that owns prompts, custom data, and generation. Most RL stacks grow into a pile of disconnected trainers, rollout services, and agent frameworks. slime refuses that. Multi-turn tool use, sandbox interaction, environment feedback, and verifier rewards all enter as data generation, not as forks of the loop. So an agentic workload runs on the same loop a math run uses, and the kernel never changes. A few things follow. → It is battle-tested. The loop is validated by shipping real GLM models, and it also supports Qwen3, DeepSeek V3, and Llama 3. → Correctness comes first. RL bugs are silent, so slime keeps the dataflow explicit and treats CI, reproducibility, and fault tolerance as real engineering. The proof is the ecosystem on top of it. Dressage, Miles, vime, Relax, OpenClaw-RL, P1, and TritonForge all build on slime without touching the core loop. The lesson is not that RL needs a bigger framework. It is that the variety belongs in data generation, and the training loop should stay small enough to trust. GitHub repo: github.com/THUDM/slime (don't forget to star 🌟) Since we're talking about RL, I wrote a full breakdown on fine-tuning LLMs with RL in 2026. Including how to skip manual reward engineering with automatic LLM-graded rewards. The article is quoted below.

Akshay 🚀 @akshay_pachaar

4 months ago

x.com/i/article/2029…

28 262 2K 615K 4K

🚨SecondFi: more than $20M stolen, or taken hostage - When the nonce is predictable, the key is public. Last Tuesday, SecondFi wallets were drained at scale. Users were doing nothing exotic, just signing transactions like any other day. Then the funds were gone. ▶️What happened. Two waves. First, external attackers drained wallets: ~16M ADA plus NFTs, around $2.5M. Then a much larger move: ~129M ADA, around $20M, swept by SecondFi itself to a third party custodian, "to keep it safe." Users were robbed by attackers, and users were swept by the platform!! ▶️The bug. Every signature scheme in this family uses a per signature secret number, the nonce. The one rule: it must be secret and unpredictable. EdDSA (Ed25519, what Cardano uses) makes it deterministic on purpose, derived from the private key and the message together. Deterministic, but secret. The secret input is the whole point. SecondFi's implementation derived it from public data alone. The nonce stopped being secret. Public in, public out. ▶️Why it is fatal. Call it what it is: worse than nonce reuse. Reuse needs two signatures from the same key to recover it. Here the nonce can be recomputed by anyone from data already on chain, so a single signature is enough to reconstruct the private key. Every transaction a user ever signed is a public disclosure of their key. I pulled signatures off chain and rebuilt the keys to confirm. One signature, every time. The chain was not attacked. It was read. ▶️The "rescue." The second wave was the platform sweeping ~129M ADA to a custodian, framed as protection. The fix for "your keys are cryptographically exposed" was "trust us to give it back." A cryptographic failure patched with a social promise. "We will return the funds" is not "we are cryptographically incapable of keeping them." The incident did not create that gap. It made it visible. ▶️The ownership trap. Once a key is publicly reconstructible, holding it proves nothing. Attacker, custodian, original user: three parties, same cryptographic claim. So how does a real owner prove it? The elegant exit is a zero knowledge proof of knowledge of the 24 words, the seed, without revealing it. Knowledge of the mnemonic is the one thing a chain scraper does not have. Prove the preimage, not the key. ▶️ How did it get in? Honest mistake, or planted? Dropping a single secret input from the nonce is a tiny change. Exactly what a tired engineer ships, and exactly what a supply chain or insider attacker plants, because it is deniable and pays out silently to whoever reads the chain. I do not know which one this was. The commit history will tell. Cryptography does not care about good intentions. It enforces what you built. SecondFi built a scheme where the nonce was predictable, so the keys were public, so the funds were anyone's. The rest is just who read the chain first. Stay safe. -- (obv, Ledger users are not affected. Nonce and signatures are computed inside the secure element)

Progress

Cardanians (CRDN) @Cardanians_io

2 weeks ago

JUST IN: Pyth Network is now fully LIVE on Cardano, FREE to all builders. 🔮 Every project on Cardano $ADA can get a free API key to get access to full institution price feeds for one year. Good opportunity for anyone building DeFi on Cardano.

keyboard_arrow_left Previous keyboard_arrow_right Next

5 57 324 7K 0

everyone's reading the "foreign national" line as the government not getting how AI works. i think it's the opposite. they know you can't actually gate a model by nationality. that was the point. it forces anthropic to pull it for everyone. shutting it down for foreign nationals was never the goal. the full shutdown was. back online in a week or two, once they've made their point.

Anthropic @AnthropicAI

3 weeks ago

The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees. The net effect of

13K 26K 88K 92.2M 24K

🧐

The Kobeissi Letter @KobeissiLetter

3 weeks ago

BREAKING: The Nasdaq announces that it expects "a few more hours" before SpaceX, $SPCX, shares can begin trading. Additional time is needed to ensure the IPO is "orderly" and that "we get the right price," the Nasdaq's President says.

297 312 4K 757K 206

The deal is signed. @FireblocksHQ is coming to Cardano. 🤝 More details coming shortly.

Crypto's next phase will not be won by isolated ecosystems. The largest interoperability deployment in Cardano's history is coming. Earlier this year, we announced that all of crypto would be connected to Cardano via LayerZero, creating a path for over 800 tokens to natively expand into the Cardano ecosystem. The complex technical work will roll out in phases, from testnet and mainnet endpoints, to Stargate, to developer tooling that makes it easy for anyone to deploy, to product integrations across the entire LayerZero stack. By the end of this year, any asset will be able to deploy on Cardano. While this work is in flight, we'll be teaming up with the Cardano teams to share more behind the scenes: a detailed roadmap, a deep dive on our partnership, and co-hosted digital and IRL events for the community. We're excited for what this work means for both LayerZero and Cardano, and can't wait to share more in the coming weeks. A connected Cardano. Done right. iog.io/news/cardano-i…

@ElderM When leios?

Cool

LayerZero @LayerZero_Core

3 months ago

All of crypto, connected to Cardano

199 694 3K 343K 118

🥸

Harsh Singh | Collab Manager @nftsanatan

5 months ago

Who has bigger and most active community #Cardano OR #Solana

43 36 150 9K 3

Today, as agreed, we paid back to the Cardano treasury the ₳920.4K leftovers from our past treasury withdrawal. We got lucky with the market this summer and didn't spend all our budget. Note that some of the accounts still hold USDM, meant to pay remaining late 2025 invoices.

x.com/i/article/2021…

Another win for the Pentad 😇

Intersect @IntersectMBO

5 months ago

One of the next major outcomes of the Critical Cardano Integrations workstream is now in place! The Steering Committee representing @IOGroup @Cardano_CF @emurgo_io @midnightfdn and Intersect has approved a major interoperability integration for Cardano: bringing @LayerZero_Core

64 219 816 163K 42

LayerZero + Cardano

Gm

People are mind-blown by @moltbook — “a place where bots talk to each other without humans.” Congrats, you just reinvented X, LinkedIn, and Reddit since ~2022

More to come :) Welcome to Cardano @circle

Charles Hoskinson @IOHK_Charles

5 months ago

Hello from Japan. Just signed the integration agreement for USDCx on Cardano. Welcome to Cardano Circle! We are all excited about the possibilities. More from the Pentad soon youtube.com/watch?v=8P09rx…

368 720 3K 391K 71

Cardano CME listing incoming cmegroup.com/media-room/pre…

This photo is from my trip to Iran in 2019. Stunning country, unforgettable people. Today I’m thinking of them,and hoping they get the freedom and future they deserve. 🇮🇷

Back from the break, ready to roll. One of the exciting integrations that we are working on that you might have missed is the one with @brale_xyz

brale @brale_xyz

8 months ago

Brale is partnering with the @Cardano_CF to bring native, regulated stablecoins to the @Cardano ecosystem. Native stablecoins. Enterprise-grade compliance. Global reach. 🧵👇

3 8 33 2K 3