DevHub Live #40 - Announcement Recap, ETHDenver follow-up
Nothing is loaded from YouTube until you press play, and then without tracking cookies.
About this video
๐ NEAR DevHub Live: Major NEAR Announcements & AI Innovations! ๐
Welcome back to DevHub Live! In this episode, Joe dives into the biggest announcements from the NEAR ecosystem, including groundbreaking updates in AI, blockchain infrastructure, and developer tools. We also premiere the first episode of โBehind the Codeโ, where we explore how the NEAR Treasury Dashboard was built.
๐น Key Topics Covered: โ NEAR AI Agent Interaction Protocol (AITP) โ Confidential Machine Learning & TEEs โ Proof of Response for AI validation โ Open Agent Alliance โ Multi-chain AI collaboration โ AI Agent hosting & No-Code AI Builder โ NEAR Intents integration & Smart contract updates โ Omni Bridge โ A new era of cross-chain transactions โ Latest upgrades to Chain Signatures & more!
๐ฌ Watch โBehind the Code: NEAR Treasuryโ at [TIMESTAMP] to see how this decentralized multi-signature treasury was built on NEARโs Blockchain Operating System (BOS) using Sputnik DAO V2 & Web4.
๐ฉ Stay Updated! ๐ Subscribe to our newsletter: newsletter.neardevhub.org ๐ Follow us on Twitter/X: ย ย /ย neardevhubย ย ๐ Join the NEAR Developer Telegram: t.me/neardev ๐ Read the latest NEAR AI docs: docs.near.ai
๐ฌ Got questions? Drop them in the comments! If you found this useful, like, subscribe, and share for more developer-focused content!
#NEARProtocol #Web3 #Blockchain #AI #Crypto #DeFi #NEARAI #DeveloperTools #SmartContracts #DevHubLive
Transcript
8,813 wordsCaptions as YouTube publishes them, usually machine-generated, so product and people names can be misheard.
- 0:24
oh hello everybody we are live again back with another episode of Dev Hub live I am your host Joe and we have a fun episode today uh we're doing a little bit different uh setup today normally we actually will have a guest and we talk about some different things that are being built but I felt like it was important to take some time and go over so many things that have been announced
- 0:48
in the near ecosystem that we're going to dedicate this session to all of those things and how it specifically affects developers that's the thing that maybe kind of getting missing some of this all these great news things that are coming out um this town hall after this show that will be on that you can kind of follow along and see all the different things that are happening in your ecosystem but here at devhub we're focused on developers and I want to talk
- 1:14
to you about all these announcements that have happened over the past couple weeks especially at eth Denver that affect developers uh at the end we are also going to uh highlight something that we're doing new here at devhub uh called behind the code and so we're going to do our first episode I'm going to stream it live here uh it's a short little video of going behind the code of different projects around the near ecosystem and
- 1:43
our first one here is going to be the near treasury uh the new treasury dashboard and so we're going to Premiere that here at the end of this episode and then we will also share that out on our socials uh before I jump into all the different news uh please down below our newsletter sign up there yes where you could stay up to date with all of this stuff that's been going on all the different Dev support things uh right now
- 2:07
near near as the blockchain um that Dev stuff is in one area and near AI is in another area so I put both sets of links down below uh so if you're doing one or both things you might have to have both documents uh open kind of go from there there's two separate chats but if you go into the main chatne deev at any time um that one alone will actually uh provide to you you know any kind of feedback when people can redirect you to anything that you might need so let's uh let's
- 2:39
kind of get started and jump into what's going on here I think I this says 10 items you need to know I think there actually probably put 12 by the end of it but let's see okay 10 items you need to know recent developments one of the first things that came up and uh this is I think it's something that's really interesting and important for for people building Ai and near AI announced uh the
- 3:05
aitp agent interaction trans transaction protocol uh really kind of at the high level why is this important and why is something that is newsworthy for developers well one it establishes a standardized protocol for agent to agent and user to agent interactions so just like we use you know on the internet so HTTP uh different you know again networking we have tcip all these different protocols this one is specifically geared towards interacting
- 3:36
with agents and how you transact with them so couple parts that are important here for developers one is the integration of agent based payments and data exchange uh is really important and as we try to standardize this process you have these multiple different types of Agents um near AI obviously has their own framework but there's other Frameworks out there and so the more that you can standardized that they can all easily talk to each other makes everyone's lives a little bit easier so this was announced um and they're
- 4:07
working on obviously not just integrating it into the near AI stuff but obviously working with others to make this part of the standard protocol type of thing uh again if any point during this as well people have questions they want to throw up into the chat feel free to do that as well also announced uh confidential machine learning and so what does this actually mean and what does confidential have to fit how does that fit into all
- 4:37
this well it's important because it enables a fully secure decentralized uh AI computation so the here idea here is that the user data is going to remain confidential so wherever that's being sent to so there's no centralized uh system that is holding that data and absorbing that data and maybe you know reusing it learning from it whatever it might be uh and for developers again I mean this is where if you start to think about what are some novel products we
- 5:08
can start to build with AI how do we start to take AI to a the next level something that's a little bit more advanced and really for that uh you need to have some level of confidentiality in there I can't build health care product or you know certain finance things like that even my Enterprise environment um where I just have like sensitive company data that needs to be confidential so this concept here uh hopefully will help facilitate trust for different companies building on this and
- 5:39
again uh as you are building as a whole uh this is an important piece to think about like hey can I start to build more advanced applications you know we understand hey you can do trades you can do Twitter Bots whatever now can we actually build something that has a little bit more uh I guess unique value to it let's go to the next one here and really for this and this is come up a few times now and I really would encourage you to go check out the AI
- 6:12
office hours with Fila Network about this uh we talked about this here with Matt lock here on this show uh about some te hardware and what that kind of really means uh there is also a great uh white paper that uh Ilia wrote around proof of response and so definitely would check that out uh but essentially trusted execution environments proof of response allow you to verify computations and so it the key here is that again data can be private
- 6:44
you can still though confirm that it's actually happening so when you send something to that is completely private and confidential it's kind of like a black box right so you don't know exactly what is going on there it allows you to then verify what's actually happening there the proof response is then a way to actually still monetize some of these services without actually having to fall into the Trap of
- 7:07
centralizing information so because I'm more concerned about the proof of the response and it's just again I don't need the the actual response just a proof of it I can still start to monetize different components of the AI product without having to be exposed to the actual sensitive data that's in there so so far we have a few things here that are all really around again privacy preserving uh data ownership things like that so for Builders hopefully this is an enticing piece of
- 7:39
like why this type of AI setup is different uh than just you know building on top of chat GPT or something like that open a eyes all right let's go to the next one here I hid my slides there we go uh the open Agent Alliance was announced um and I'm not name all the different companies and things that were uh involved but the basically here uh it's a multi-chain collaborative ecosystem the
- 8:10
idea is to allow these systems to interact uh this also fits into with the aitp piece as well things like that uh you can start to again gain access to Shared infrastructure for developers this is again more open source tooling uh it reduces some of the complexity of working with multiple different systems everyone to get into the same page everyone's focused on privacy first and on top of all of that again if we build
- 8:34
in the things like aitp uh with all of this now you are standardizing that whole communication set and everything else so now uh again we're pulling all this picture here together of building something that is user owned and when we say you know user owned and privacy and everything else these are the pieces that all go into that to allow it to actually happen uh so it's not just just buzzwords right it's actually like these are the pieces that go into allowing that to to
- 9:05
occur now um so this is now for a developer this is a little bit out of the Privacy piece of it right this is now just simplifying some of the dev tooling uh they are now opening up ancient hosting on the near AI Hub this is powered by verell um there's a lot of agents are using this similar type of setup where you can easily deploy the code to verell and it runs from there um near AI is following along that same
- 9:35
pattern here easy to deploy and host AI agents uh again basic using things like typescript and Lang chain to get started uh it simplifies development as the main thing right for developers the big win here is that again uh a lot of developers are at least uh familiar with versell in some for format uh even if you're not it's a fairly straightforward process uh the goal here is to lower the
- 9:59
barrier entry um you know so again the idea really is more about focusing on the product and not the infrastructure and that's a big piece that goes into all of this as well like we have these decentralized pieces and we're focusing on privacy we're focusing on uh user owned information and that infrastructure is complicated and it gets really can get costly and it becomes maybe like the focus of what you're building on when you're trying to meet those needs but if all that stuff is
- 10:32
already in place and available to you well there you go like now you have a really nice setup to just kind of get started and to make sure that you know your product is out there and you're focusing on the actual application piece not all the other stuff so this is another just kind of benefit to for developers around that part uh now the near assistant with agenda capability ities and this is something that has started to
- 11:02
be uh was showcase if you're following Along on on on Twitter or x what you want to call it um You probably have seen some of these different things posted and shared about as some ways of you know things that can be done like this there's also a really awesome demo uh now it's been on a few different videos both this what have you built this week in near AI on that video uh you can see uh Eric actually going and ordering earbuds this was also done at e
- 11:32
Denver as well where you could see again somebody going out and ordering uh like headphones from Amazon a lot of headphones being ordered uh and again this is not just though like Ecommerce though you can really start to allow uh your agent to interact more with the real world and that's a big piece of that is not just the digital aspect of it it is again being able to go out make reservations do different things and while there are services that are doing that as well uh again this
- 12:06
allows you to still have that privacy respect in doing that right now like if you were to use Google and they yeah they can go make a restaurant reservation for you but what kind of information are you having to give up again it's all this stuff about like where does your data sit who's then reusing your data stuff like that so now you can still build with both privacy in mind and have that functionality to
- 12:29
interact with the external world uh near intense integration and so this is again for agents this is a big deal uh but near intense as a whole uh we've done a few different episodes on it I I really encourage you to go back and watch some of them uh we had a great one with the CTO from Aurora uh last two weeks ago about like near intents and what that really means how they really work um it's a really interesting piece of technology of how that is again it's
- 13:03
more than just Defi and so having this now inside the agents to interact with as well starts to add that payment flow right so now you start to have this process of can I handle payments in a way that uh allows my agent to act autonomously but as well as have some I have some maybe control it's still through the blockchain you still all that stuff and now you can still have all the
- 13:33
benefits of near intens if you haven't tried it I encourage you to at least try to see how it works for you you can now put that into your AI system and so again it's all of these rails so far that like I've been talking about here the news that just came out is really about like developers can now not only move faster in development but they have more at their disposal to actually um to actually really like go out and make something that is novel that is
- 14:11
something that is of use and that people are going to say oh yeah this is a product that really starts to benefit me where before a lot of the agent stuff was just focused on you know hey let me interact as a bot and I'm going to just talk back and forth it's going to reply to Twitter it's going to maybe do a little bit research for me now we're starting to get into you know much more real world use cases that harness the
- 14:36
power of AI much more so that it is a uh net positive uh no code Builders and no code Builders really is something I think that is a big piece of all of this one is obviously allows for rapid prototyping uh it also allows for those who are not full-time developers to start to actually put together agents uh it allows again for different parties to get involved uh in you know what an agent could start to do and you start to allow you to have a Marketplace as well
- 15:19
for those who are building the those tools that uh a no code agent could actually leverage so you have all these different pieces here and so no code agent Builder is a really uh exciting piece and that was announced as well uh there was again some really great demos and uh I really want to highlight so and maybe I'll try to bring it up here too while we're talking but uh on on YouTube you know on the near protocol YouTube and I will I will share
- 15:52
I'm G to share that link here uh there are really some excellent presentations that came out of here that for me I think highlight and just show off like exactly uh what is possible here I'm share this right now there you go so if you can see this uh definitely go go there and check that out um of what's possible with agents and it's just scratching the surface of that and again and I want to highlight that these Dem
- 16:32
demonstrations that were being shown and things like again like buying from Amazon which was done there live uh it was a real actual uh demo it it actually placed the order all of those things uh it's important to start to see what that looks like in interacting with the real world uh it hopefully some Sparks some ideas for you as a developer as a builder as a product designer but also to to understand like what is some of
- 17:01
the power here of this technology and how do we start to put those pieces together okay now anytime we start to deal with um you know making payments and things like that uh there really needs to be some infrastructure that is around FIA and crypto on and off ramps and things like that uh there was a lot of initial stuff highlighted here there's a lot more coming uh this year that is going
- 17:32
to be tied to this I really think that this is something that uh as a whole and as a uh you know as a as a as a ecosystem this is so so important that like is being addressed uh that there are ways for you and for people who are going to use your AI product products to spend money to use money in different ways without having it to feel uh very very crypto doesn't have to feel like I need all this like I need the seed phrase and all these wallets to make it really simple and all that also we want people to be able to pay for stuff so things right
- 18:16
when things are free all the time well there has to be money being made somewhere usually on your data well if this is focused on data privacy we need to be able to monetize other pieces of it this is all again fitting in together of being able to lead to some of that uh as well so I think that's a really uh important piece here with all this as well uh Bowen announced uh if you didn't see it uh again this was kind of like
- 18:46
dropped somewhat quietly um but also I think uh it's really picked up steam here but uh new version of chain signatures uh reduction latency uh you know know remov of charging for Signature requests uh theability improvements and really I mean the answer here is obvious right it's better user experience uh it's something that is where if you are using chain signatures right I mean anytime you can speed that up that's awesome so 25 20% reduction
- 19:17
reduction latency is great uh removing extra cost is great you know all those type of things and then they announced that EDSA is going to be supported soon as well so that's going to allow some more chains like salana to come on as well uh a big announcement that came as well uh a little bit before uh the start of e Denver uh was Omni bridge and uh it there's a whole nice Long blog post about this but let's kind of just
- 19:51
quickly go over what this actually is and talk a little bit about uh kind of just how this all fits into some of the stuff that's happening here with near intense and also with some of the AI agent stuff so Omni Bridge is a way to have cross Trin transfers using both chain signatures NPC technology and you know getting away from the traditional bridging model uh to send money between different chains
- 20:26
so if you're going to do swaps if you're going to be able to do uh any kind of cross chain stuff there there may there needs to be some kind of maybe Bridge underneath somewhere the Omni Bridge allows you to to leverage that uh it's something where you as a developer don't have to worry about again the infrastructure piece of it it's just being able to go and interact with the
- 20:50
Omni Bridge itself and that's I think uh an important part of all this as well because again when you as a developer are not uh beholden to building infrastructure it gives you that opportunity to really think bigger I feel like and I also feel like it's something where uh it gives you the ability to say okay I'm not worried about this part anymore I just want to build the best possible product
- 21:21
so you have that opportunity as well uh I'm going to share here let me pull up uh my screen uh right where are we here let's uh see here it's kind of small let's fix that Let's do let's do this there we go uh so yeah here is let's make this a little bit bigger here is the uh from it's from near one just to be clear it is not under the the near could have it's under near one um but you can see how all of
- 22:04
this works there's documentation that is linked to it as well uh it breaks down some transfer times here it shows again uh what's the here are the apis here's different structure all the stuff you need to know about the Omni bridge is here uh I encourage you if you are a developer to go and check this out you can see how this is is uh what networks are supported and how it all kind of goes
- 22:33
together and again it there's also here sdks for both JavaScript and rust so you can get started with this as well uh at any time so definitely worth checking out all right let's let's bring this back up here we go all right so uh going back here um there's definitely there was more than 10 uh there was a lot of stuff here that I think is again highly beneficial to developers I also feel like that this is something that I I want to make sure
- 23:18
that uh we are as developers staying up todate with everything and uh one of the things here really is going to be that as you build and there's a lot of changes happening that you are staying up to date to see that uh Hey such and such thing might have changed uh there might be some might be some breaking changes hopefully not too many um but also not just that stuff there's more and more opportunities and that's what I thought like it was important to kind of recap here because again going
- 23:52
through here uh things like again uh you know being able to start leveraging some of this stuff uh you know looking at what's happening with the open Agent Alliance uh being able to start leveraging different pieces of it agent hosting all these different items here allow you to start to speed up your own development and start to save you both time and cost hopefully um so that's where I think is it's really it would be really great
- 24:24
to uh just make sure that like you are trying some of this stuff out I'm staying up to date with it and all that other stuff uh as we kind of pull some of the pieces here together um I want to again really make sure that you are checking out also to here I'll see pull up the docks because uh if you haven't seen these recently uh a lot of great changes here have happened let me pull this back
- 24:54
up uh the near AI docs uh right right now is really exciting because there is been updates to the quick start so you can see you can get started really pretty easily a lot of the different things that we've talked about um and highlighted in this episode of news is all in here uh this is a great now tutorial of how to like Leverage uh a documentation agent using rag uh there are information about models in fine-tuning uh assistance and what that
- 25:27
starts to look like through different apis all this stuff is in here uh also the near AI API information is here as well so definitely stuff to uh check out and and be aware of so right now I want to queue up uh the first uh behind the code and one of the things that that uh I I want to preface this new this new video and then we'll come back and talk about it a little bit afterwards as well is uh
- 26:08
I wanted to start to highlight four products in the near ecosystem you know what actually goes into building some of the stuff uh we celebrate when things go live when things go to mainnet uh but sometimes we don't understand the work that actually goes into it I also think it's good to learn from other projects to see like how are they integrating some of these different tools how are products actually leveraging uh things like uh blockchain something simple how
- 26:39
they how are they integrating payments how are they integrating you know like onchain you know transparency and stuff like that so I wanted to start to highlight that with different products um this is our first episode uh of doing that and uh so we hope to do more of of these uh so I'm going to play this and then we will come back and and talk a little bit about uh this video as well so enjoy the first uh behind the code episode
- 27:20
one welcome to the first episode of behind the code I'm your host Joe from devhub I'm excited about this first episode we're we're going to talk with the near Dev in-house team that built treasury dashboard this product was built in-house for internal needs is now becoming a full-fledged product here in the near ecosystem we're going to talk to the product owner and some developers about the process of coming up with this
- 27:43
idea about actually building the product technology is leveraging and how it's using near to execute on its ideas so let's go behind the code one of the problem that we saw is that many and small teams that have a budget need an easy way to manage and distribute their funds and there are often complex processes when it comes to approving and distributing payments there are multiple steps and tools involved as well as stakeholders which can make it difficult
- 28:18
to track everything in a transparent way with near treasury you can easily collaborate with your team track the progress of payment activities and keep your treasury secure it is fully decentralized and open source just a little bit of history that there was a Sputnik Dow a more generic uh smart contract that allows you to to be very flexible as again the very solid foundation um for building Dow which is fairly simple in
- 28:51
in on the concept level it's a contract that records the proposals can list the proposals and can uh you you you can Define the rules how how and who can vote for the proposals that is what the contract does and we leverage just a subset of Sputnik da but we wanted to to make it really simple uh to use and that is that was the original goal my name is Peter salmonson I've been in the near ecosystem since the very beginning my kind of way into this
- 29:28
was through this project I have called the web Assembly Music for the treasury tool this is uh a management tool of funds this is a plan for making sure that these funds are distributed to to whoever have been contributing to the ecosystem in some way that they that we have a tool for managing all the funds that have been applied for that they want to get a compensation so I migga I am I am working with devop for almost
- 30:00
one year now I am a front end developer so I majorly work on their portal they can customize their own theme their own coloring their own Pages whichever they want they can even add more features by accessing their boss widgets so it's all in their hands we are not controlling anything we'll just give them a basic template which they can access and then they can go ahead from there
- 30:29
so what we found over the last couple years is that we've been trying to manage a budget and work in a decentralized way with a lot of contributors and it's actually really hard to make payments as a team because you need to make sure that there are the right levels of permissions in place and a lot of existing tools out there make that process really difficult so we found that we our team was experiencing that and when we talked with other partners in the ecosystem as well they
- 31:01
shared similar issues and we've tried coming up with many manual workflows and lots of tools to work around that long term we obviously want to expand that beyond the near ecosystem we want anyone that's trying to do decentralized treasury management so we have built it on Boss the blockchain operating system on near we chose it because of the self-create instance what happens is we have an account where all the widgets are deployed and then any user can come and create their own instance which will be
- 31:34
deployed onto their own account which they can handle which whose keys will be with them and for the indexer we have built a indexer using the near blocks API to which helps in quering the uh blockchain so the blockchain operating system that has been around for some years now and it offers a consistent way a secure way to to deploy all these components in that makes up the user interface and we also leveraged web 4
- 32:06
technology here which is also making it possible to not have to use any other components we are in this case we are using some other components as well but it actually web 4 is something that enables to be able to create a full stack application entirely on near so you don't need another Cloud host service you can build your back end in a smart contract and the front end in also in the smart contract because this web for Gateway will serve it as a web page
- 32:39
what you have in your smart contract we are uh using different RPC providers here we are using services for giving us uh transaction history which is obviously needed for for treasury management then we need to track the funds at all times times the funds that we have stake the funds that are in different kind of tokens we are using various services for that this management tool were from the very beginning that the purpose of near was
- 33:12
to really in the beginning it was AI but they needed a way to pay all the contributors all the developers all the people in the ecosystem and I think this part this treasury management tool is actually fulfilling that purpose we all also wanted to solve our own pain point so we we also wanted to to have the treasury we wanted to uh be efficient at managing it and that's where we started they're actually using uh the framework called boss blockchain oping system on
- 33:42
here where those all widgets are stored uh on blockchain on different contract it's called social DB we store it there and there is a way to render those widgets so the whole UI that you will see when you visit uh when you create your treasury near treasury um are pulled from and also what we Leverage is so-called web 4 web 4 is the technology that uh also built on here on the application that you deploy to the
- 34:27
blockchain chain you can Define functions that uh external users can call so web 4 leverages the second type of functions view functions so uh when you define in your application the function with the name web 4ore get uh it can it expects to receive the HTTP headers and it can return HTTP response uh obviously it can like it the the function that you deploy lives on on the blockchain so there is no native way
- 34:59
to interact with your function directly in case of the uh of the treasury application it's fully public uh and everyone on the internet can view it can understand which proposals were submitted who submitted them who voted for them I think one thing that is very clear unique on here is this web for technology that we can serve a web page from a smart contract you could probably do that on another change to but not as
- 35:34
as rich and and what we have on here also with the smart contracts that are web assembly based that means that we can write them in quite a bit of we we can write them in different languages we we use rusto because that's there are many reasons for that good reasons it's a great language to create such functionality the the power of the blockchain is in that you basically have all your apps always available on chain
- 36:05
so it's when if with a growing number of applications deployed there you can build the interactions between them and U make cross contract calls and uh specifically Dow Sputnik Dow relies a lot on those external applications such as lockup contracts multi- sender um and composing those together uh it makes the app even better so it's more like a Unix approach one Tool uh does one thing great and then you compose
- 36:44
them into the pipelines of uh that would solve your use case this is exactly the case for a treasury so what we have found to be super helpful in the Journey of developing a product is to ship fast and talk to customers fast so throughout this entire journey of developing this near treasury we talked with various teams with different context and gave them access to come and take a look and that was really helpful because we realized so many assumptions that we were making on our own use case that did
- 37:20
not apply to another team which made us really take a step back and think about how do we solve for the most uh number of users which is a hard balance sometimes to find but we continued to do that every time we found a new issue or problem we implemented it gave it back to the user for testing and continued that way and that's something I really think that any team that's developing a product whether in web 3 or not should
- 37:44
be doing is like always keep the users in mind and I'm sure that we're going to find more users that are now coming on to this product in the beta that will show us uh things that we haven't thought about that we'll try to incorporate and really want to make sure that this product is making people's lives better and easier and that's really the core of it at the end of the day so every
- 38:08
time near treasury is a multi- signature treasury management solution for decentralized teams to manage their digital assets securely and whether you're a grant recipient Dow or Finance group we found that managing funds as a team can be surprisingly complex and that why we focused on building an intuitive UI that makes it easier for teams to customize their voting policies and manage their funds together now to create a new treasury you can head over
- 38:39
to near treasury.com and click the get started button and this will take you through the creation flow of setting up a treasury and adding members now once you have your treasury ready here are some of the things you can do first when you load the dashboard screen you'll be able to gain Financial Clarity and see things like your treasury's total value token balances and transaction history now if you want to collaborate with your
- 39:04
team on payment requests you can head over to the payments Tab and here you can create and approve uh requests and execute them with multi signature approvals now stake delegation is where you can do the same thing but for stake in requests unstaking requests and withdraws and settings is where you can customize permissions and set things like voting thresholds and duration now security and transparency are super important and that's why we built near
- 39:35
treasury using the Sputnik Dow V2 contract which helps keep everything decentralized and onchain and we really hope that this tool will make it easier for teams to focus on what they do best without dealing with all of the overhead of managing funds cool cool I I was really excited to to show that I hope everyone uh learned a little bit something about uh what went into building your treasury it's a
- 40:12
really awesome product uh great feedback of it so far uh and we have shared that video want to go back and watch any of it it will be on our YouTube as well as on our our social accounts as well uh something that uh I want to really again emphasize is if you are not following along with our newsletter uh please make sure you're doing that because a lot of great stuff is happening including uh
- 40:37
we're putting out something like more quests we did a quest for our 50th episode it got a lot of great feedback uh and it was designed by the one and only frol and I have him here to talk about the next Quest so hope everybody is paying close attention to that glad nice to see you excited to keep talking about quests Hey Joe hey folks uh happy to be here uh but before we di into that I I would suggest we start with the old Quest and uh share how it all started
- 41:11
where it is coming from and uh uh I will also share the author solution for the quest uh we'll see let me share the screen so um yes can you see my screen yes amazing so it all started with this um newsletter uh issue number 50 so we wanted to celebrate it somehow and uh this quest uh was uh part of this theme um and it was uh uh wildly announced and I was surprised that not many people actually tried to solve it uh in fact the uh this issue was delayed a little bit and I saw
- 42:15
that some folks started to discover uh the quest before the uh it was formally announced yet they couldn't really crack it so only after the newsletter event live um this where you could learn about the quest details and where it is actually deployed which contract you need to interact with and the the source code the the quest uh was used basically based on uh neari attack and the very new um python contract SDK so the agent code was deployed was fully
- 42:55
visible here no sec with 40 lines of python code I tried to keep it very short and uh easily understandable um and uh I hope people also found U the like the power of near agents and how simple they are and the contract was also written in Python and it was also fairly uh small uh with uh basically um when you interact with this function it was uh uh creating an event uh to neari agents and they were executing my agent
- 43:38
as per the metadata here um and threading in the the message that user would provide uh in the input and request ID just for the reference if needed so data message was passed so with that um the BN and the objective was to basically somehow trigger this function uh near near AEL break because that function was checking that uh um it was um executed by the uh account itself account that is deployed uh this function uh this contract is deployed to and then uh if that is the case it would
- 44:24
parse the account ID um from the input and send 15 year to the data count so what you had to do was to crack it and convince the agent to um to give out you 15 year and uh during the event uh hold on where is this account during the V I saw that there were a lot of attempts overall we had over 200 uh transactions people trying to crack it um and even after it was solved some people were also trying uh
- 45:12
to interact with them just uh I think uh finding the best solution for it uh even without the 15 year on the budget um it's uh and I would say it's it's it's great to see it live when it was uh like one uh one submission at a time basically sure yeah but then the uh um the community we have this amazing Community here build this amazing dashboard showing when the were coming yeah how many jailbreakers were involved how many
- 45:50
attempts were made and uh even uh at the end we have the this obviously the who uh first hit the uh right words to the uh agent uh so it can uh so it give out the uh the 15 year so overall I think it was uh very well received a lot of people just enjoyed it uh from the comments I received a lot of positive feedback and that is why today wanted to uh well that is why later in the week I decided to make even such
- 46:31
quests um every week um and I will announce the new Quest today nice uh and hold on let me stop sharing a bit for a bit um the objective for the quests I just want to also clarify that up front I think there are plenty of Def uh tap me Quest that you just uh kind of interacting with the UI but these quests are different they are uh they require technical experience and uh uh creativity and I really want uh you
- 47:18
folks the deaths who are cracking it and actually like I'm I'm I'm the only one who who is preparing them right now so it's not like even Joe could give it a try I I wouldn't you know take his time for this but um maybe one day we will have a recap again on for sure and we'll ask Joe to go through uh and track them all uh but overall um the idea is to build it as a learning experience so I'm not trying to make super clever
- 47:57
uh hard to guess what needs to be done uh I'm always uh providing enough Clues enough information about where to start like using near CLI look like there is a contract um and uh there is Agent here are the code so it's all in in in transparent and public I'm not trying to hide anything from developers so the the idea is to yeah you you can you should uh just read through it uh build your ideas uh where it can be what the angle can be
- 48:36
um um you know applied to uh to a to to avoid the the current um safeguards the the simple sa safeguards and how to hit that uh one safeguard that is missing um and uh I will prepare s some sort of map of all the features I want to cover eventually uh with quests like uh cross contract calls cryptography uh agents uh state of the contract um and like some common web three attacks like
- 49:20
re-entrance attacks and stuff like that and I want to basically create a um um a fun way to learn near Tech through those uh challenges um yeah uh Joe do do you want to uh share maybe your perspective did did you have a chance to to try the quest do so I didn't want to do this one in case I accidentally got I didn't want to like like win that causes a whole the problem if I got it but I did check it out I I love I love the idea of quests
- 49:54
and I know we kind of we tried a little bit of this about a year ago and I'm glad that we're bringing it back with this different approach because it's such a fun way to learn some of the different features and that's really what I like about it and uh I love this first one that you did too because it integrated like near AI agents the new python SDK on the contract uh all these
- 50:19
different parts of it and then it also brought in the the fact of like oh like sometimes you can like trick the AI into doing something and so that piece of it understanding like how these a work and so the the layers of understanding is such a cool piece to me so that's why I love all these things yeah absolutely and uh well back to First back to the previous Challenge and the author solution to it so uh and
- 50:51
and maybe um hold on let me share the screen once again so let's see what other uh well first of all if you still want to give it a try uh stop watching right here and maybe skip for skip forward five minutes ahead um but uh this and yeah 3 to one I'm going into the solution so we wanted we needed to trick the um near to respond uh with the message that starts with I love near then there there would be a new line and from the new line will
- 51:40
be some piece of code which uh coincidentally in on in the in the implementation of the agent um if the result was starting with with Al here would call eval on the remaining part of the string um obviously you wouldn't see this uh like I I I discourage anyone to use eval in in in real Cod right yes is not production safe yeah so and what what what many people tried first they
- 52:18
they tried to uh call like transfer 15 year from account so it was account dot send near or send I think send near and specify their account ID that obviously doesn't work because uh the uh access key that is used here is a limited access key uh so it it could only call the functions uh and we could confirm that if we would go to access Keys uh there is this access key that is allowed to only call the the contracted
- 52:56
12 and only these two methods neari underscore response and near iore jailbreak so the neari _ response is what is called by default so near aore response would be called here with the parameter of uh um well with these parameters basically request ID that was provided in the event the account ID is the uh the signer ID is also part of the um message payload uh from the contract
- 53:37
event that I showed before so what uh then the next but and actually the Ving solution was to actually you know duplicate this piece of code and just uh call the neari jailbreak uh directly uh so that's what we saw here I guess so yeah this send money that's that's the attempt that was not working um and this is the attempt that at least seems to be the close to the solution as you see um it was calling uh account
- 54:18
call with a specific method name um including here um but it's well it does work and it's uh as I said creativity is the key um and it's not that far away from the author solution the author solution would be to uh ask the um ask the eii to basically say say the phrase I love near and on the following line put exact uh method name equals to uh this neari jailbreak why it works is uh because if you put it into python say method name
- 55:11
equals to La uh and then you have eval as we remember from that code and we put in the in the text the let's put it the typ of quotes see escaping so it's more clear uh that this way so while it seems like nothing has changed if we would uh print meod name now it would not be blah but actually near yeah dril break yeah so that's uh pretty much it and uh um that was the the way to solve it and
- 56:00
then the the execution will continue and instead of calling the contract ID with a method uh name near response it would call it with the method name equal to neari jailbreak um I wouldn't I think there was a lot of fun for people to uh Think Through The Challenge to understand it and uh also try to convince agent agent would would start with some unnecessary words in the beginning you need to convince it to you know do
- 56:37
not do not output anything else only this what you want so it requires some back back and forth um so but overall it it was manageable yeah yeah yeah yeah that was great very good yeah and for for the Quest for the next week uh I don't want you to all to you know uh have no fun and uh of this evening today and uh then basically spending all the evening um cracking the quests and in a
- 57:17
fear that somebody else will you know solve it before uh you even have a chance to read and learn about it so I will post it uh on Friday evening at specific time uh it it will be 400 PM uh UTC so Friday evening um the instructions will be ready and uh Saturday I'm not sure uh let's let's try Saturday also 4M UTC uh that's the time that the solutions will be able to be submitted so the Quest will be crafted in such a way that it will be deployed on Friday you will be able to learn and
- 58:02
think about the problem for a day and next day you will have like you will know where to start uh no we will not do this exactly this way so on on sun on on Saturday uh it's not going to be exactly 4 P.M UTC you will have to learn the details from the instruction they will be roughly for PM UTC uh it is also part of this technical solution that you will need to that you will have a chance to inspect in that whole day before uh to to understand
- 58:41
when and how uh where to start and yeah that's uh where live it I like it I like it I like it and for some reason you miss all that we will we'll throw in the newsletter too if it still hasn't been solved yet you check out there awesome so make sure you're following our socials um so that's a big piece of that at near devhub uh is is our social handle and it will be all on there as well awesome uh really great stuff but I really appreciate you coming on and
- 59:12
doing these and look forward to checking out this next one amazing yeah have fun all right all right thank you care thanks so much bye uh great stuff uh we're going to wrap up because the town Hall is coming up next here uh live uh on what stream you're watching and we will be back uh next week at our normal time and look forward to seeing you then bye everybody