Key Takeaways
- Polymarket was compromised through a swapped third-party speed-test script, letting attackers drain funds via its own withdrawal system without passwords or seed phrases.
- Founders describe a sharp shift in SaaS acquisition: Google organic traffic is fading, AI visibility is not the same as visits, and creator-led brand demand is gaining weight.
- Factory released Droid 1.0, an engine it says drives its agent with better accuracy, efficiency, and speed for complex and everyday development work.
- Tony Dinh launched the Vietnamese keyboard app Vikey, claiming automatic English/Vietnamese switching at 99.73% accuracy while acknowledging unsupported cases.
- Tw93 reflected on nearly 12 years of blogging and said he still writes every post himself rather than letting AI think and write for him.
- Jon Yongfook said he blocks people who post AI-generated replies under others' posts and predicted the "make AI chatbots notice you" category will saturate within 12 months.
1. Security and Platform Risk
- Polymarket was breached after a speed-test script loaded from @DebugBear was replaced with a wallet-draining program, according to a cited post. The attacker relied on browser trust in same-domain scripts and the user's logged-in session to check balances and sell positions, then moved funds through Polymarket's own withdrawal system without needing a password or seed phrase 1. Arvid Kahl called the API withdrawal path without 2FA or a confirmation step "pretty crazy" 2. Separately, Jack Ellis wrote about the incident and said Fathom's biggest weakness is that he is a "single point of failure," though the company has operated that way for eight years without an incident; he also said his analytics script is stored on S3 and distributed via CDN, and that he has not seen competitors do more on script-file security 3 4.
2. SaaS Acquisition and AI-Era Discovery
- Tibo argued that SaaS customer acquisition has shifted sharply: Google organic traffic is trending toward zero, but SEO still matters for being mentioned by AI, while UGC and influencer marketing are more important, product tolerance for error is near zero, and brand stance matters more. He recommended Reddit, X articles, and blog lists 1. A cited thread offered observations behind that view: traffic at several software companies peaked around April 2025 and then declined, with some down about 50%; VEED saw search clicks fall while revenue from that channel stayed stable; companies dependent on generic search weakened while those with brand and direct traffic held up better, though the author called this still an unverified hypothesis 2. The thread also said brand search comes from creators, influencers, and Meta ads, that paid creator programs work like a portfolio where one hit can cover several failures, and that word of mouth from product experience remains one of the strongest acquisition mechanisms, citing Linear and Notion as examples 3. It warned that AI Overviews make mentions unequal to visits and visits unequal to customers, that ranking first can be like ranking eighth when ads and AI overviews fill the first screen, and that Google must balance its ads business against its Gemini search transition 4. Tibo also promoted Outrank Marketplace, where idle domains can be connected for free to earn revenue automatically, saying he has earned over $26,000, though domains with DR below 30 may be rejected 5. He said he saw a user switch from a competitor to Bazzly and be satisfied, which he said shows the importance of Reddit operations 6.
3. Developer Tools and Product Launches
- Factory released Droid 1.0, describing it as the new engine driving its agent, aimed at complex projects and everyday development, and said to be more accurate, more efficient, and faster than before 1. Tony Dinh launched Vikey, a Vietnamese keyboard app he said is better than all existing keyboard apps because it automatically switches between English and Vietnamese while typing, removing manual switching, with 99.73% accuracy; he acknowledged some cases it cannot handle and said monolingual users may not appreciate switching input methods about 300 times a day between laptop and phone 2. He also said a new free iOS keyboard app "beats Grammarly" but gave no features or comparison basis in that post 3. He described a related project as a "Token director" rather than a "Meat proxy" and encouraged using tokens for useful problems; he said the project has 67 stars and 7 PRs and welcomed AI-generated code PRs 4 5 6.
4. Founder Practice and AI Content Culture
- Tw93 said he has blogged for nearly 12 years, starting in late 2014, and has kept using Ruby's Jekyll with almost no version changes; he began blogging after two years of PHP and while learning JS as he moved toward frontend work 1. He recalled publishing a beginner comparison of Vue, Angular, and Avalon after one evening of reading official docs and writing a few demos, and said that move had a large effect on what followed 2. He said he read most of the well-known computer fundamentals, web development, and programming-thought books in his university library over two years and moved his notes into blog posts, which made later work feel less difficult and left more time to learn new things 3. In 2022 he open-sourced Miaoyan, a Markdown notes app he taught himself Swift to build, and registered on Twitter to post its changelog; he later posted changelogs and development updates there and met users and friends through it 4. He said he has used Twitter for more than four years with about 2,400 substantive posts, and because Twitter search and sorting are poor, he had Grok Bot download all his posts and sync a copy to his blog under a column called "片语," updated daily 5. He said he insists on not letting AI think and write for him and that all content is handwritten; he called this unfashionable in the AI era but said he likes this output and that his blog is just a Markdown rendering container 6. He also announced Kami 1.20, positioned as "AI writes the text, Kami provides good paper," with recent versions adding charts generated from data and validated before delivery, product sites using the product's own colors, and Chinese and Korean pages that read well on iPhone 7. Jon Yongfook said he immediately blocks anyone he sees posting AI-generated replies under someone else's post, saying such content is ruining X, and that he also blocks founders of apps for "growing your X account with AI" 8. He predicted that the "make AI chatbots notice you" category will saturate in the indie developer circle within 12 months, much like social media scheduling apps did 9.
5. Infrastructure and Market Views
- SF Compute CEO Evan Conrad argued that GPU clouds should sell all compute to the largest labs on long-term contracts, which he said could earn about $50 billion, and that other approaches are secondary; but SF Compute does not plan to be a GPU cloud and instead wants to build a compute marketplace, saying "the people competing with us are stupid" 1. Ben Tossell also listed companies he considers culturally healthy in the current AI industry: hiring slowly, not doing tokenmaxxing, maintaining work-life balance, and embracing AI without fanaticism, naming Granola, turbopuffer, Pierre, Linear, and SF Compute 2. Jack Ellis cited software job posting data showing software development roles up nearly 25% year over year, which he said puts the sector on pace to recover to pre-pandemic levels in about a year, and said the claim that "software engineering is dead" does not hold 3.
