Doing experiments
- Chainlink Functions runs your JavaScript independently on every DON node inside an isolated Deno sandbox. No file system, no env vars, only HTTP through one controlled helper. The DON reaches consensus on the result before your contract ever sees it.
- Rate limits in CCIP aren't a throughput feature. They're a blast radius control. Every token pool maintains independent inbound and outbound capacity buckets per lane, so a compromised pool can only lose what the bucket allows before it's drained dry.
- The Meebits NFT exploit: an attacker reversed the randomness formula, simulated outcomes before committing, and rerolled mints until hitting a rare token. Walked away with ~200 ETH. The fix already existed. It's called VRF.
- x402 is now the first official AI payments partner for Chainlink's Runtime Environment. AI agents can pay in USDC on Base and trigger a CRE workflow in the same request, no long lived API keys.