PANDAPALS LOUNGE: Friday Edition πΌ β After Dark
Host: Panda (@PandaPals__), with Billabong (@BillabongM) riding shotgun as co-host Β· recorded Fri night into Sat, 05 Sep 2026 Β· ~5h22m across two rooms Β· ~10 active speakers
TL;DR
- Panda delivered a project "state of the union": the two sites (PandaPals NFTs + Panda Pump token/staking) are now merged into one, the mint is back down to two clicks, "mint" is rebranded to "adopt," LP is locked to 2028, and Moralis was swapped for an Alchemy RPC. Roughly 322 mints across 123 unique holders.
- The night's recurring dream: getting Thionne's autonomous agent "Rootcrack" to buy/mint a PandaPals NFT on Base by itself β pitched as a possible first-ever agent mint and marketing gold for Base. Thionne asked for two days.
- Wallet friction was the standing complaint β cross-chain minting for Solana natives plus eventual Apple/Google Pay, raised repeatedly by Cerebro and Billabong.
- After Dark became a long AI + cybersecurity clinic with Thionne: the agent economy, X402, prompt/emoji injection, cookie hijacking, war driving, a Pump Fun exploit, and how (not) to pay for audits.
- Markets thread: Robinhood's own chain briefly went down under load β read as a bullish L2 stress test and good for ETH β plus cautionary leverage tales (Aschenbrenner's "Situational Awareness" fund, James Wynn).
- Throughline: "water the bamboo," stack small wins, and genuine pride that community regulars are now hosting their own Spaces.
Highlights
The great olive war [P1 8:05] β The room opened with Lil Southern Mama admitting she'd tried to help Curtis's pizza-topping contest with a bacon-and-black-olives pick, only to be rejected on principle. Curtis, an avowed olive despiser, patiently explained you cannot win a contest by leading with the judge's most-hated food. The bit ran for several minutes and set the tone; later the room agreed our forefathers fought for exactly this right.
doji wants the blowout panda suit [P1 20:19] β doji, running on fumes ("I got a good 30 seconds in me"), lit up imagining Panda on the NFT NYC main stage with him in a full panda suit "doing little dances and shit." Panda gently redirected to foundation-first: build the base rock-solid, then go up.
State of the union [P1 38:14] β [P1 44:15] β Panda walked through weeks of "little wins": mint UX simplified to two clicks, LP locked through 2028 via Team Finance, gallery performance fixed by dropping Moralis for Alchemy, and today's headline β the two websites finally merged into one, with a "what is the bamboo" explainer baked in. Billabong's verdict: "mic drop" [P1 45:57].
Cerebro's honest onboarding gripe [P1 1:06:23] β [P1 1:13:59] β A self-described Solana maxi, Cerebro walked through the pain of bridging to Base just to adopt a panda, and half-joked he'd have finished faster with more "babying." Panda took it as pure gold: real UX data pointing toward cross-chain and eventually Apple/Google Pay.
Rootcrack, the agent that mints [P1 1:28:09] β [P1 1:34:05] β Thionne, twelve hours deep into coding, floated getting his autonomous agent Rootcrack to buy a PandaPals NFT on its own via X402. Panda immediately saw the marketing: possibly the first agent-minted NFT on Base, something to wave at Jesse and Brian. Thionne then described his actual product β a security layer that scans sites for wallet drainers and LLM injections before an agent connects.
Robinhood's chain buckles β bullish? [P2 5:52] β [P2 7:26] β News that Robinhood's new chain went offline under load prompted Billabong to reframe it as a healthy stress test: "the most activity ever for an L2β¦ we're finally stress testing it with something of actual substance." The group wondered aloud whether agent swarms could effectively DDoS a chain.
The cybersecurity clinic [P2 53:00] β [P2 1:00:52] β Thionne opened a genuinely alarming stretch: cookie-session hijacking that sidesteps 2FA, malware hidden in emojis, and a home experiment where he pointed a Kali Linux box at his own network and made his own LG TV flicker mid-scan [P2 58:52]. Billabong added the Robovac hack where one hobbyist gained camera access to ~7,000 units.
The Pump Fun exploit [P2 1:13:44] β [P2 1:16:45] β Out of boredom, Thionne got an agent to deploy tokens on Pump Fun, then discovered a key letting it spin up tokens essentially for free β even creating tokens that use Pump Fun liquidity on Raydium. He kept it to himself. Panda's takeaway became a recurring line: if a system is exploitable, it will be exploited.
Leverage lessons [P2 1:54:17] β [P2 1:58:35] β The markets turn produced sharp cautionary tales: Aschenbrenner's "Situational Awareness" fund reportedly blown up at ~400% leverage and scooped by Citadel, and James Wynn's fast flips. Billabong's distilled lesson: you can be right and still be wrong if you're greedy β copy-trade the thesis, skip the leverage.
The bamboo breaks through [P2 3:00:12] β [P2 3:11:17] β Closing out, Billabong noted that Lil Southern Mama, Curtis, Wagby and others are now running their own Spaces, with the community showing up to support first-timers. He called it the moment "the bamboo just pops through the soil and it's starting to run" β the payoff for a year of quiet, bear-market showing up.
Topic timeline
| Time range | Topic |
|---|---|
| [P1 3:53]β[P1 15:00] | Welcome, mic wrangling, the olive/pizza-topping debate |
| [P1 15:00]β[P1 24:00] | doji's mints, holder count, NFT NYC vs. building the foundation |
| [P1 24:00]β[P1 38:00] | Pengy on fraternities/networking; social growth; "failing in public" |
| [P1 38:00]β[P1 46:00] | State of the union: merged sites, mint UX, LP lock, Alchemy |
| [P1 46:00]β[P1 1:16:00] | Wallet friction: Phantom/MetaMask, cross-chain mint, Apple/Google Pay |
| [P1 1:16:00]β[P1 1:28:00] | NFT-as-wallet, staking, plushies, game loops, RWA ideas |
| [P1 1:28:00]β[P1 1:45:00] | Thionne/Rootcrack agent mint, X402, agent security layer |
| [P1 1:45:00]β[P2 9:00] | XxRome (XRP gating), Thionne's secret concept, gold-rush call, sovereignty, Robinhood outage |
| [P2 9:00]β[P2 35:00] | NVIDIA/compute, Elon "connect the dots," Grok/Codex/GPT-6, Chinese open-source, multi-agent audits |
| [P2 35:00]β[P2 1:25:00] | Audits, API keys, Rootcrack as product; cybersecurity deep dive; Pump Fun exploit |
| [P2 1:25:00]β[P2 2:12:00] | Social engineering, war driving, proof-of-human; Robinhood/ETH; leverage blowups; Billabong's sister |
| [P2 2:12:00]β[P2 3:18:00] | Water the bamboo, stacking wins, community hosting Spaces, sign-off |
Notable quotes
- "You should be on main stage right now. NFT NYC. I should be in the blowout panda suit right next to you, doing little dances and shit." β doji [P1 20:19]0:38
- "Our forefathers fought for our right to argue about pizza toppings." β Panda [P1 15:58]0:38
- "Let's say at three o'clock in the morning you want to bake an egg, and then your wife walks in the kitchen like, hey, why are you taking the oven apart?" β Thionne, on hacker curiosity [P2 1:24:28]0:38
- "If a system is exploitable, it will be exploited." β Panda [P2 1:16:19]0:38
- "It's about how much you can keep, not how much it looks like on paper." β Billabong, on leverage [P2 1:58:35]0:38
- "That's one of those moments where I feel like the bamboo just pops through the soil and it's starting to run." β Billabong [P2 3:11:17]0:38
Who said what
- Panda (@PandaPals__) β host; drove the state-of-the-union, the wallet-friction roadmap, and the "water the bamboo / stack small wins" philosophy; hyped the Rootcrack agent-mint idea.
- Billabong (@BillabongM) β co-host energy; markets analysis (Robinhood chain, ETH velocity), leverage cautionary tales, and the community-building throughline.
- Thionne (@Thionne_WTZ) β resident coder; agent economy, Rootcrack, security layer, multi-agent audit pipelines, the Pump Fun exploit, and the cybersecurity war stories.
- Cerebro Stellarlord (@CStellarlord) β Solana maxi turned panda holder; blunt UX feedback, plus long gold-rush and sovereignty monologues.
- doji.base.eth (@TheDojiETH) β artist/minter; NFT NYC ambitions, the "humiliation ritual" framing of trust-building, sneaker news.
- Pengy Peng (@YesImPudgy) β on fraternities, college, and the lasting value of networks.
- Curtis Gore (@curtisgore) β the olive antagonist; also stress-testing the mint on Phantom (and the room's audio).
- Lil Southern Mama (@Lilsassmouth) β newer member, eager link-poster and pizza-topping defendant.
- TOEZ (@ToezOGToeken) β earlier-space host whose rough mint experience helped spark the UX overhaul.
- XxRome (@XxRome_10) β XRP maxi building NFT-gated games and trading bots; dropped in on the gating topic.
Worth a full listen
- [P1 1:28:00]β[P1 1:45:00] β Thionne on the agent economy and the Rootcrack-mints-a-panda plan; the most concrete "this could actually happen" thread of the night, and the clearest look at his security product.
- [P2 53:00]β[P2 1:35:00] β The cybersecurity run: cookie hijacking, emoji injection, war driving, the Pump Fun exploit, and the flickering smart TV. Dense, funny, and genuinely eye-opening.
- [P2 1:54:00]β[P2 2:00:00] β The tight markets/leverage discussion (Aschenbrenner's fund, James Wynn) with a very quotable lesson on risk.
