25-06-A: Dive into LLM

Good Finds

• 🤖 LLM
• Simon Willison’s WeblogThe last six months in LLMs, illustrated by pelicans on bicycles
  

  The last six months in LLMs, illustrated by pelicans on bicycles

  I presented an invited keynote at the AI Engineer World’s Fair in San Francisco this week. This is my third time speaking at the event—here are my talks from October …

  Simon Willison’s Weblog

• 🧑🏻‍💻 Cursor
• Claude-4-Sonnet Thinking 模式
• 该模式能实现更高的代码质量。使用 auto 模式面向某一需求反复修改了十几版都不行，在切换到 C4S-T 后，一步到位，并直接通过了 vite build 的检查。
• 但是相比较于 auto 模式，C4S-T 偏向于给出超过 Prompt 提示的内容，这会导致平白增加很多代码。可以尝试在交互时，提示「尽可能少地改动代码」进行约束。

• 🎧 Podcast
• Apple Podcasts#347 给人生留一些无所事事的时间：关于留白、探索与成长的讨论
  

  #347 给人生留一些无所事事的时间：关于留白、探索与成长的讨论

  Podcast Episode · 声东击西 · 06/05/2025 · 58m

  Apple Podcasts
• Apple Podcasts224.对谈黄灯：普通二本学生的出路在哪里？
  

  224.对谈黄灯：普通二本学生的出路在哪里？

  Podcast Episode · 乱翻书 · 06/11/2025 · 55m

  Apple Podcasts
• Apple Podcasts225.今年618新变化：餐饮扩容、货架回归、告别最低价
  

  225.今年618新变化：餐饮扩容、货架回归、告别最低价

  Podcast Episode · 乱翻书 · 06/17/2025 · 1h 11m

  Apple Podcasts

Research Notes

• Meta PoolMeta Pool security incident on mpETH contract on Ethereum
  

  Meta Pool security incident on mpETH contract on Ethereum

  Introduction

  Meta Pool
• Date: 25.06.17; Loss: ~45.7 ETH
• Root Cause: 项目方在复写 OpenZeppelin ERC-4626 库的函数 deposit() 和 _deposit() 时，将 _deposit() 的存款逻辑提至 deposit()，而未考虑 mint() 函数同样会调用_deposit() 逻辑，导致攻击者通过 mint() 无偿获利。
• Lesson: 在改写或复写（override）标准库的时候，需考虑清楚其牵涉的调用链逻辑，防止在进行功能迁移时，导致其他入口的逻辑缺失。【这次 metapool 的漏洞是升级后引入的，很少有过 fixed contract 比 buggy contract 更老的情况哈哈】

Misc

New York is three hours ahead of California, but that doesn’t make California slow. Someone graduated at the age of twenty two, but waited five years before securing a good job. Somebody became a CEO at twenty five, and died at fifty, while another became CEO at fifty and lived to ninety years. Someone is still single, while someone else got married. Obama retired at fifty five, and Trump started at seventy. Everyone in this world works based on their time zone. People around you might seem ahead of you, and some might seem to be behind you. But everyone is running their own race, in their own time. Do not envy them and do not mock them. They are in their time zone, and you are in yours. Life is about waiting for the right moment to act. So relax. You’re not late. You’re not early. You are very much on time.