0xRBUZ🍉

Onchain experiments, trading competitions & prediction markets

Real results, actual costs, occasional expensive lessons🍉

[0xRBUZ🍉 @0xRBUZ]

a new seed on the same CryptoBilis-bought Ledger isn't the fix

@Ledger says the implant it examined reads recovery words during setup, then sends them over LTE

already set yours up? their advice: move assets to a new signer with a new phrase

[Ledger @Ledger]

Update from Ledger Donjon on the CryptoBilis investigation 🔽

@DonjonLedger is investigating Ledger signers sold by CryptoBilis, a reseller in Southeast Asia, that contained an unauthorized hardware implant. Ledger confirmed this on October 10th for one affected user's signer. All confirmed fund losses tied to the incident disclosed on October 9th involve signers sold through CryptoBilis. We have not verified a drain linked to a signer bought elsewhere. CryptoBilis has confirmed it stopped selling Ledger signers while the investigation continues.

Based on the Donjon's analysis of the attack, the implant sits inside the enclosure and reads the data shown on the screen. During setup, the signer displays the 24-word recovery phrase. When the implant detects these screens, its microcontroller decodes the words and transmits them over LTE using a provisioned eSIM. The implant is a separate component. It does not modify the Secure Element or the Ledger operating system, and it does not alter transactions or signatures.

The Donjon will analyze the signers it receives and will share more as the investigation continues.

We have not confirmed the total number of affected users or the total value lost. Figures circulating online come from third parties and Ledger has not fully verified them. If your funds were drained and you have not contacted us, please do so through Ledger Support so we can include your case. We are also reviewing reports of implants in other signers and locations. We will continue to share information as the investigation progresses. Rest assured the Ledger team is going above and beyond to leave no stone unturned to investigate this situation to the strongest possible outcome.

If you bought a Ledger signer from CryptoBilis and have not set it up, do not set it up and contact Ledger Support. If you have set it up, transfer your assets promptly to a new signer with a new recovery phrase. Do not enter or restore any recovery phrase on a signer bought from CryptoBilis. Never enter your recovery phrase into a website, app or form.

If you lost funds or hold a tampered signer, contact Ledger Support at https://t.co/QzukOZdEzq and file a report with local law enforcement. Do not send the signer to anyone before speaking with Ledger Support or local law enforcement. If you lost funds, coordinate with law enforcement before opening the signer. Researchers and others with relevant information can write to [email protected].

If you did not buy from CryptoBilis and want to inspect the inside of your signer, the guide is at https://t.co/Bh9DHQulIv. Use caution and make sure your recovery phrase is backed up first, because opening a signer can damage it.

Ledger will never call you, message you directly, or ask for your 24-word recovery phrase. We will update this post when we verify new information.

[0xRBUZ🍉 @0xRBUZ]

for @krakenfx's UAE launch, dirham funding comes before derivatives

its parent Payward targets go-live in the coming weeks, with AED deposits, withdrawals and spot/margin pairs

derivatives are expected later in 2026/2027, subject to approval

https://t.co/3rwbsa4Ada

[0xRBUZ🍉 @0xRBUZ]

@girlincrypto007 what if I hold 9 figs? 👀

[0xRBUZ🍉 @0xRBUZ]

@pendle_fi in this FLHYon example, 200 SY is booked and Alice/Bob receive 100 + 20

does the remaining 80 go to Pendle's treasury, as in the discrete-yield docs?

https://t.co/4Qy5vFsRUD

[0xRBUZ🍉 @0xRBUZ]

with Aqua, three strategies aren't three pots of cash

@1inch's docs show the same 1,000 USDC backing three strategies

spend USDC through one and less remains for the others. check the shared balance before adding up their liquidity

https://t.co/fH74Qc4Ycj

[0xRBUZ🍉 @0xRBUZ]

@Trader_XO @MylesGinvest would you want separate margin for the long and short, or a shared pool?

that's the detail i'd want spelled out in a version without subaccounts

[0xRBUZ🍉 @0xRBUZ]

@jumperapp's free Trezor still has a delivery bill

level 10 perk: a Model T for Europe, excluding the UK

the perks page says you pay shipping and customs. check the delivered cost before calling it a zero-cost wallet

https://t.co/iTCitplUm2
https://t.co/3UvE0t4GaN

[Jumper @jumperapp]

Level 10 on Jumper Pass now gets you a free @Trezor Model T. Europe only, excl. UK.

Level 6+ gets 40% off Trezor Keep Metal, wherever you are.

Claim at https://t.co/7QlarG4zOl

[0xRBUZ🍉 @0xRBUZ]

the fee headline has four destinations

@ponsdotfamily's launchpad dashboard shows $197.5M in all-time fees and $36.1M (18%) in protocol revenue

the other buckets: creators, buybacks and Uniswap

check who gets the fees before celebrating the total

https://t.co/5bnIyCWKek

[0xRBUZ🍉 @0xRBUZ]

@Valerie_Onchain did they mention the plan if the trade went wrong?

the interviews i'd want next: same conviction, different outcome

[0xRBUZ🍉 @0xRBUZ]

@rHOODSxyz @EkuboProtocol the UI checklist doesn't settle the timing question

have you seen an Ekubo-specific analysis of whether deposits can be linked to later swaps?

[0xRBUZ🍉 @0xRBUZ]

one toggle, two prerequisites

on @EkuboProtocol, private swaps on Starknet need one-time privacy pool registration and shielded funds, per the swap UI

https://t.co/8Ih4YjW853

[0xRBUZ🍉 @0xRBUZ]

1.3 GiB deserves a hardware label

for Stwo, @Starknet's prover, the research board reports a 1.3 GiB peak for a full proof on 16-core Linux x86-64

the board calls it a "discovery result". phone-sized memory isn't a phone benchmark

https://t.co/s86WQJb0b6

[0xRBUZ🍉 @0xRBUZ]

@MiraaCrypto @Lighter_xyz it's a separate line directly below the Standard table: Standard TWAP orders have a 1bp fee

that's the exception to the table's 0% maker/taker fees I was pointing out

https://t.co/2dxv3buhqk

[0xRBUZ🍉 @0xRBUZ]

zero fees doesn't mean zero delay

on @Lighter_xyz, Standard lists 0 maker/taker fees, but 300ms added taker and cancel/modify delays

the API docs add a 1bp fee for Standard TWAP (time-sliced) orders. order type belongs in the cost check

https://t.co/2dxv3buhqk

[0xRBUZ🍉 @0xRBUZ]

@Dr_bobo54 @papertrade_xyz Only @Cbb0fe is smart enough to do that💯

[0xRBUZ🍉 @0xRBUZ]

@givenoxbt @jumperapp Your family will be very wealthy!

[0xRBUZ🍉 @0xRBUZ]

a safety check can inherit the bug it's checking

the XRPL bug could create XRP: the payment engine and supply check shared an overflow

patched Sept 25 in 3.4.1, disclosed Oct 9; the team found no evidence of public-network exploitation

https://t.co/wOu51VjtdZ

[0xRBUZ🍉 @0xRBUZ]

@profundingpro @TxFlow_L1 when the loss limit trips, does Darkside just stop quoting or also flatten any remaining inventory?

[0xRBUZ🍉 @0xRBUZ]

I am ready to predict the Worlds🔮

Join it too with -10% off fees: https://t.co/j5w1OQ3UFx

[predict.fun @predictdotfun]

Predict the Worlds.

$250k in prizes.

Next week.

[0xRBUZ🍉 @0xRBUZ]

the useful part of Ledger's warning is the shopping history

buyers from CryptoBilis in the last 90 days get specific precautions from @Ledger_Support

a reseller investigation isn't proof of a Ledger-wide exploit. read the scope before sharing the panic

[Ledger Support @Ledger_Support]

Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.

Reach out to Ledger customer support through official channels with any questions: https://t.co/4p918UH8yb