惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

IT之家
IT之家
Project Zero
Project Zero
博客园 - 聂微东
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
云风的 BLOG
云风的 BLOG
Microsoft Azure Blog
Microsoft Azure Blog
F
Fortinet All Blogs
Martin Fowler
Martin Fowler
Jina AI
Jina AI
C
Check Point Blog
博客园_首页
The GitHub Blog
The GitHub Blog
The Hacker News
The Hacker News
T
The Blog of Author Tim Ferriss
V
Vulnerabilities – Threatpost
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
C
Cisco Blogs
人人都是产品经理
人人都是产品经理
V
Visual Studio Blog
A
Arctic Wolf
博客园 - 三生石上(FineUI控件)
P
Privacy International News Feed
Application and Cybersecurity Blog
Application and Cybersecurity Blog
C
Cybersecurity and Infrastructure Security Agency CISA
Forbes - Security
Forbes - Security
阮一峰的网络日志
阮一峰的网络日志
Engineering at Meta
Engineering at Meta
T
Troy Hunt's Blog
Microsoft Security Blog
Microsoft Security Blog
Spread Privacy
Spread Privacy
Schneier on Security
Schneier on Security
K
Kaspersky official blog
宝玉的分享
宝玉的分享
Google DeepMind News
Google DeepMind News
V2EX - 技术
V2EX - 技术
Google DeepMind News
Google DeepMind News
AWS News Blog
AWS News Blog
Know Your Adversary
Know Your Adversary
www.infosecurity-magazine.com
www.infosecurity-magazine.com
Y
Y Combinator Blog
大猫的无限游戏
大猫的无限游戏
S
Security Affairs
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
博客园 - Franky
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
The Register - Security
The Register - Security
P
Proofpoint News Feed
小众软件
小众软件
S
Securelist
T
Tor Project blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
I Built a Vault Before Anyone Finished the Lock
Tushar Pamnani · 2026-06-24 · via DEV Community

Over the last few weeks, I've been building Obscura, a token launchpad for Midnight.

There's just one problem.

Obscura's entire pitch is that your position disappears. Right now, on Midnight mainnet, nothing disappears.

Here's the actual situation: tokens already exist, the base account-based standard is live, and that's what Obscura mints against. What isn't live yet is the piece that lets those tokens vanish into Midnight's UTXO model, which is the actual mechanism the privacy pitch runs on. It's defined in MIP-0004, still sitting in Draft status, already proven out on preprod, but not deployed to mainnet.

So: a vault, built before anyone finished the lock.

Because I wasn't building for today's Midnight. I was building for the Midnight that exists six months from now.

The Idea Started With a Different Problem

Over the last six months, I've spent most of my time building on Midnight.

I joined Allit Fellowship and Build Club Cohort 1. Built DeFi protocols. Shipped mn-scaffold and midnight-wallet-kit. Ran prediction markets, lending protocols, identity systems, voting systems, escrow, most of the primitives an ecosystem eventually needs.

Somewhere in there, I also wrote the Compact Book. When I started on Midnight, there wasn't a complete resource that explained Compact end-to-end easily, so I wrote one. Twenty-five chapters later, it became one of the most widely referenced learning resources. Not bragging, just context: it's the reason I've come to trust "build the thing the ecosystem hasn't gotten around to yet" as a strategy, not just an excuse.

I also founded Midnight Skills and took it everywhere I could get a screen share - Midnight's own Fireside Dev Hangout, my own Twitter livestream, and MLH's hackathon for Midnight. That alone brought roughly 250 developers into the ecosystem.

The more time I spent building, the more I noticed a pattern.

Every ecosystem eventually reaches the same inflection point. Developers stop asking "can I build here?" and start asking "what can I launch here?"

That transition changes everything. Ethereum had it. Solana had it. Base had it. Each time, a creator economy formed around tokens, and launchpads became the infrastructure layer that made experimentation cheap.

The question was never whether Midnight would need this. The question was what a launchpad looks like when the underlying chain is privacy-first instead of fully transparent.

The Traditional Launchpad Model

Most launchpads converge on the same flow: a creator launches a token, early buyers transact against a bonding curve, price rises as supply is bought up, and once the curve hits a liquidity threshold, the token "graduates" to open trading.

Pump(.)fun popularized it. Moonshot and a dozen EVM clones refined it. The mechanics are solved.

But that whole model assumes total transparency - every buy, every wallet, every position is public the instant it happens. That's the point on Solana and Ethereum. It's also the reason every bonding-curve launch turns into a sniping contest: bots watch the chain, front-run obvious buys, and the loudest wallets win before retail even sees the chart move.

Midnight doesn't replicate that. It's built to bring privacy to programmable assets. So the real design question wasn't "how do I copy pump.fun"; it was "what does a bonding curve look like when participant positions aren't broadcast to every bot watching the chain?"

Enter Obscura

The name took three tries. It started as Nox, became Veil once I realized Nox was already in use elsewhere in the ecosystem, and finally settled as Obscura; after the camera obscura, the original device that lets you observe an image without the subject knowing it's being observed. That's the actual thesis: a market you can see clearly without every other participant seeing you.

The pitch, stripped down: fair market infrastructure, a token launch and bonding-curve market where information asymmetry isn't just discouraged, it's structurally impossible, because the chain underneath doesn't leak positions the way Solana or Ethereum do.

Mechanically, the flow looks familiar; creators deploy a token, early buyers transact against an automated curve, price discovery happens on-chain, the token eventually graduates to broader liquidity. What's different is what's hidden along the way: balances and position sizes stay shielded, so the usual whale-signals-the-move-and-everyone-front-runs-it dynamic doesn't have anywhere to attach itself.

Visually, the brand follows the metaphor all the way through; near-black background, a single copper accent, IBM Plex Mono for anything functional, Cormorant Garamond for display type, and a three-ring aperture that breathes open and closed like a shutter. Small detail, but it's the kind of thing that makes a product feel designed rather than assembled.

Simple in theory. Much harder in practice.

The First Reality Check

The first real challenge wasn't launch mechanics or tokenomics. It was infrastructure that didn't exist yet.

Earlier this year I redesigned a lending protocol twice after running into Midnight's block limits. Building Obscura felt familiar. Once again, the hard problems weren't in the whiteboard design. They appeared when the design met the actual constraints of the chain.

The piece that's missing isn't the token standard itself; it's the extension to it. MIP-0004 adds four circuits; shield, toUtxo, unshield, fromUtxo, that let a token built on the existing account-based standard convert into shielded or unshielded UTXOs and back. That conversion is what makes the shielded-position story real: without it, a token can mint and transfer, but it can't disappear into Zswap the way Obscura's pitch depends on.

It's further along than "still being debated" makes it sound; there's a working reference implementation, deployed and exercised on preprod with real transactions across the full round trip, including atomic swaps between two tokens in both shielded and unshielded form. What it doesn't have yet is Draft status promoted to Active, or a mainnet deployment. So the actual decision wasn't "wait for a standard to exist or build my own", it was whether to launch the bonding-curve mechanics now on the standard that's already live, and bring in the shielding layer once MIP-0004 clears mainnet, or hold the whole product until a still-Draft extension is fully rolled out.

I chose to ship. Obscura's v1 launches on the existing account-based standard; the curve, the mechanics, the launch flow all work today. The deeper privacy guarantees that MIP-0004 unlocks; full shielded position-hiding through UTXO conversion, are the v2 layer, adopted once the extension is stable and live on mainnet rather than sitting on preprod. That's not a shortcut I'm hiding; it's the actual trade-off. Waiting on a Draft proposal to formally graduate means losing the only thing an early mover actually has: time.

That's the real lesson buried in this project, and it had nothing to do with code: a working product and a launchable product are not the same thing. Obscura works. Whether it's launchable at full strength depends on pieces outside the application entirely; token standards, liquidity rails, the parts of the ecosystem that aren't mine to control.

Why Build It Anyway

Because ecosystems don't produce infrastructure on their own. Someone has to build it first, before it's obviously needed.

I've already run this play once. The Compact Book shipped before the Foundation's own technical DevRel team finished a comparable resource. It became the canonical reference anyway, not because it was the most polished thing that could've existed, but because it existed when nothing else did.

Every mature ecosystem has a graveyard of things built too early. It also has a handful of things that became foundational because they were early. I don't know which pile Obscura ends up in. That's not really the point.

The point is that building before the rails exist teaches you things documentation can't. You find the bottlenecks nobody's written about. You find the missing standards. You find which of your assumptions don't survive contact with a chain that's still being built under you.

The Biggest Lesson

Before building Obscura, I thought launchpads were a token problem, get the contract and the curve right, and the rest follows.

After building Obscura, I think launchpads are a distribution problem. The contracts matter. The curve matters. The standard matters. None of it matters if nobody launches, and nobody launches without distribution, liquidity, builders, and a reason to show up on day one.

Technology creates the possibility. A community creates the adoption. The best launchpad in the world is just an interesting demo without an ecosystem willing to use it.

Building Ahead of the Ecosystem

"Build for where the ecosystem is going, not where it is today" is the kind of line that sounds like a poster until you're actually doing it, and then it's just a description of your Tuesday.

Obscura isn't a bet on current activity; there isn't much yet. It's a bet that Midnight's token economy shows up eventually, that creators will want launch infrastructure when it does, and that privacy-preserving assets open up mechanics that don't exist on fully transparent chains at all. Shielded position sizes aren't just a privacy feature, they remove an entire category of extractive behavior that every transparent-chain launchpad has had to design around after the fact.

Maybe the bet is right. Maybe it isn't. The only way to find out is to build it before it's obvious.

What's Next

Obscura is still an early look at what token launches on Midnight could be; not a finished product, and not pretending to be one. The waitlist is open now at obscura.sevryn.xyz, and as MIP-0004 clears Draft status and lands on mainnet, a lot of what's true about this version will change. That's expected. Building early was never about getting everything right on the first pass, it's about learning faster than everyone else gets the chance to.

Maybe Obscura launches six months too early. Maybe it becomes one of the first launchpads people use when Midnight's token economy arrives. I genuinely don't know.

What I do know is that by the time everyone starts asking how to launch a token on Midnight, I won't be asking the question anymore. I'll already know the answer.


If you want the deeper technical context on how Compact and Midnight's ZK model work under the hood, I wrote the Compact Book, it's the resource I wish existed when I started.