Bizzee P

[Bizzee P @Bizzee_P]

Went back digging into the hyUSD contracts. Found something. 🧵

The AssetRegistry is bricked. Every call reverts. The registry contract is dead but the 13 plugin addresses are still in the storage slots underneath. No explorer shows this. You have to know the layout and pull them directly. 🔍

Once you have the 13 addresses you can call into each plugin. Every one wraps a Chainlink price feed. Every feed still returns a real price. The plugins reject it because the timestamp says May 2023. The data is there. The clock is wrong. ⏱���

Nine of thirteen oracles were manually refreshed September 11, 2024. One by one. Calling refresh() on each plugin to check if they could return a valid price. Every one came back DISABLED. That same month, Solo Voter deployed the entire parallel hyUSD system. They tested the old oracles, confirmed they were dead, and built the replacement. 🏗️

Governance to swap all 13 is wide open. 1 second timelock. Quorum of zero. One proposal does it. The only thing missing is collateral worth pricing. The current wrappers hold forked stablecoins no issuer will ever redeem. That changes the moment real collateral enters the system. 🔑

These 13 plugins aren't broken infrastructure. They're pre-wired. Ready to go. 🔌

Every captured protocol hits the same wall. Aave. Compound. Reserve Protocol. All seized. All governed. Same missing piece. No live oracle. No real collateral. The oracle is the skeleton key to all of them. 🔇

Then @NineIronCapital starts walking through L2 bridge mechanics this week and it all connected. Launch an L2 on PulseChain. Validators run oracles. Real collateral in, overcollateralized stablecoins out. Derivatives bridge back to L1 through gateways already controlled. 🔗

The L2 oracle network is the plug. The 13 plugins are the sockets. The forked MakerDAO was never coming back. It doesn't need to. The L2 IS the new MakerDAO. Everything the fork killed gets rebuilt clean on a chain they fully control. ⚡

Three years of L1 capture wasn't building the engine. It was building the landing pad. pDAI stops being a dead fork artifact. It becomes borrowable collateral across a DeFi stack that's already built, already governed, and already waiting. 🫡

[Bizzee P @Bizzee_P]

@Weedthoughts33 The oracle does not need to be a public price feed. The backing is verifiable on-chain. A custom oracle reporting the actual redemption rate is not manipulable. The attack vector disappears when the oracle reflects what the contract literally holds.

[Bizzee P @Bizzee_P]

Three bots have been grinding forked stETH every single day since PulseChain launched. 5.9 million transactions over 26 months. Still going right now. 🤖

214 million stETH minted. 96% of the supply since the fork. 📊

In the last 12 hours 1967 deployed a custom contract targeting the same mechanism. Not the same approach. The contract requires a validator bribe paid to the block producer, execution in a precise block number, and full stake limit consumed in a single transaction. That is not accumulation. That looks like atomic coordination. 🧠

Five attempts. Did not execute. Wrong block timing on four. Stake limit off by 0.0025 PLS on one. The contract works. The test is not finished. ⚙️

This mechanism only makes sense if something else needs to happen in the same block so no one can front run. The oracle goes live. stETH gets minted. The basket initializes. All in one block. Or something else entirely. You do not test that on the real operation. 🔥

Nobody grinds 5.9 million transactions for a $31 Curve pool. The exit has never looked like Curve. 💀

The clean Reserve Protocol system on PulseChain has 13 oracle plugins. All unpriced. stETH is already registered.

It may not be the only backing. It may still be the key.🔑

What this means: someone has been pre-positioning in the one PLS-backed asset that is already registered in the new system since day one. 1967 is not accumulating. They are testing infrastructure for something that cannot be seen coming. The system is loaded. The oracles are the missing piece. When one gets written the sequence may already be in motion. 👁️

1967's nonce after the attempts: 3069. 👀

1$

[Bizzee P @Bizzee_P]

@TurntSalty Exactly.

[Bizzee P @Bizzee_P]

Update on the zkSync Lite drain. Bridge is basically empty. 🧵

Yesterday they pulled 30 pWBTC and submitted 45 Merkle proofs in 8 minutes. Proving phase. Testing each exit before committing. In the last hour they came back and cashed in the rest:

275,044 pUSDT
86,822 pUSDC
3,788,362 ZKS
179,876 TRIBE
64,265,764 SHIB
608 AAVE 💰

1967 is the ONLY wallet to ever interact with this bridge on PulseChain. Three years sitting untouched.

Why. Merkle proofs require the full zkSync L2 state tree from the exact block PulseChain forked. That data isn't public. Someone had to reconstruct the entire L2 ledger to generate valid proofs for each token and account. Serious engineering. 🧠

Bridge balance: dust. Everything else gone. 🧹

[Bizzee P @Bizzee_P]

Ok @TurntSalty now I get it. 🧠

RH in 2020: "tail end risk that if the system fails, you get the overcollateralized ETH, which in theory is worth more than the DAI's notional value. Thus +EV."

He understood exactly what MakerDAO's shutdown module does. If the system cages properly, DAI holders redeem for overcollateralized collateral. On Ethereum that's ETH at 150%+ ratios. On PulseChain that's WETH which IS PLS, 1:1. 🔁

Now think about what happens if PulseChain reprices. All that forked collateral sitting in CDPs suddenly has real dollar value. And the End module's redemption flow (pack, cash) would let ANY pDAI holder claim their share. 💰

44 billion pDAI. All of it with a claim on overcollateralized PLS. Uncontrolled distribution to whoever holds the token. 😳

So they killed it. 🔪

Cattie caged the Vat directly, bypassing the End module. ESM was loaded with 300K pMKR but fire() was never completed. Governance was bricked. The redemption flow can never execute. Collateral is trapped in CDPs with no claim path. 🔒

RH said "the ESM doesn't even do what everyone thinks it does lol." He's right. People thought the ESM was an attack. It was a lock. Prevent the overcollateralization payout from going to random holders. 🔐

Then they build a new system. Reserve Protocol. Fresh contracts. Captured governance. Solo voter with a 1 second timelock. pDAI already registered as collateral. Basket waiting to be configured. OA wallet ready to capitalize. 🏗️

Old MakerDAO: overcollateralized PLS claimable by anyone. Liability. ❌
New Reserve Protocol: controlled collateral, controlled governance, controlled peg. Asset. ✅

MakerDAO wasn't killed because it was broken. It was killed because it worked too well. 🧱

TL;DR: MakerDAO has a built in refund button. If the system shuts down, your DAI gets you back more collateral than it's worth. On PulseChain that collateral is PLS. If PLS moons, that refund becomes massive. They disabled the refund button and are building a new system where they control who gets what. 🫡

Receipts 🧾

hyUSD Governor (25 proposals, all from solo voter): https://t.co/04VUKhaTxt

pDAI registered in hyUSD AssetRegistry: https://t.co/M6Tgf1WRuP

Pioneer 1967 funded solo voter 48Fc (20K PLS): https://t.co/hPafSmBRXg

[Bizzee P @Bizzee_P]

Update: checked the remaining forked bridges on PulseChain. 🔍

Polygon bridge: 244K USDC, 59K USDT, 1.5M pDAI. Admin is the Polygon team multisig. No escape hatch. Locked. 🔒

Optimism bridge: 371M USDC, 71.5M USDT, 1,459 WBTC, 62K AAVE. Optimism Foundation Safe, 5 of 7 multisig. No exodus mode, no capturable validators. Locked. 🔒

The pioneer cluster can only drain bridges with on-chain bypass mechanisms. zkSync had exodus mode. Arbitrum had a capturable validator set. Polygon and Optimism have neither.

Two bridges emptied. Two bridges untouchable. For now.

Worth noting: the original Ethereum teams still hold the multisig keys. Same private keys work on PulseChain. Right now there's zero incentive to coordinate 5 signatures for worthless forked tokens. But if those tokens ever reprice, money on the table wakes people up. 👀

Two bridges the pioneers can't touch. Two bridges nobody else cares about yet. 🧱

[Bizzee P @Bizzee_P]

This is happening right now. The zkSync Lite bridge on PulseChain is being emptied. 🚨

Two days ago a wallet in the 1967 pioneer cluster deposited 1 PLS into the bridge and called fullExit three times. Nothing moved. zkSync Lite needs an active validator to process exits and nobody is running one on PulseChain.

Today they came back and triggered exodus mode. That's the nuclear option built into every zkSync Lite deployment. Once activated, the validator requirement disappears. Anyone can withdraw by proving their balance in the last verified state. ☢️

55+ exit calls and counting. Nonce still climbing. The WBTC is already gone. 275K USDT, 87K USDC, 608 AAVE still in the bridge. 🏧

On Arbitrum they captured the rollup validators and processed 66 Outbox withdrawals. On zkSync they didn't bother running the chain. They proved it stopped running and triggered the escape hatch instead. Different technique. Same result. 🧠

What this means: every forked L2 bridge on PulseChain is a target. Arbitrum is already empty. zkSync is in progress. Optimism and Polygon bridges are next. The pioneer cluster is systematically collecting every piece of stranded value across every bridge that stopped running after the fork. 🗺️

Third bridge in the crosshairs. Not slowing down. 🧱

Receipts: 🧾

triggerExodusIfNeeded:
https://t.co/syKgEODAHz

First exit:
https://t.co/kZBUkHfVeM

withdrawERC20:
https://t.co/95qaPU5yjw

Original recon (1 PLS deposit):
https://t.co/nXzqKFpL41

zkSync Lite proxy:
https://t.co/8meRhn3JiZ

[Bizzee P @Bizzee_P]

@zkxwallet @LibertySwapFi That's the point. The forked contracts are broken by default. What's interesting is someone spending three years rebuilding them from scratch.

[Bizzee P @Bizzee_P]

@AlbertSamu68860 @DeFi__Mind @pMINT_pDAI The direction is actually reversed. executeBuyback() burns pMINT, doesn't mint it. It uses DAI to buy pMINT on the open market and sends it to 0x0. Deflationary mechanism. 1967 holds 0 pMINT.

Still significant though. Pioneers maintaining a community protocol they didn't build.

[Bizzee P @Bizzee_P]

Pre fork. The original Reserve developers on Ethereum never set that slot because their proxy design didn't use it. It was always zero.

The problem is someone later installed an implementation that checks that slot for authorization. It expects a value that was never there. Wrong key for the lock. Permanently stuck.

[Bizzee P @Bizzee_P]

🔓 Reserve Protocol on PulseChain has a new owner. Sort of.

Someone has been upgrading governance contracts into universal execution shells. One is already done. The new implementation lets whoever controls it make arbitrary calls as that contract. No access control.

❌ A second attempt failed publicly. The target contract's admin was never set, permanently locking it. The proposed upgrade also wasn't compatible with the proxy standard. Dead on arrival.

But that wasn't the only contract available. Three more proxies are still upgradeable. One of them holds the OWNER role over the forked eUSD system. Collateral baskets, minting, revenue distribution, role management. All of it.

🔗 The governance voter behind this received 20,000 PLS from a wallet ending in 1967, the same builder wallet tied to the Compound capture, the Arbitrum bridge drain, and the Aave lending pool implementation swap. One vote. One wallet.

💡 Why does this matter? The forked eUSD system is one of the few stablecoin protocols on PulseChain with upgradeable governance still intact. Full control means the ability to reconfigure collateral, set minting conditions, and redirect revenue. Not a new protocol. A repurposed one.

⚙️ Someone with 25,000+ transactions is methodically converting forked DeFi contracts into programmable tools. Not building new infrastructure. Repurposing what's already there. One governance vote at a time.

RECEIPTS:

Successful lockpick (hyusdRSR converted to multiCall shell):
https://t.co/je00SaJgEH

Implementation (4.8KB, multiCall + upgradeTo, zero access control):
https://t.co/8qhQqbDdmY

Solo voter (25,376 nonces):
https://t.co/qJGbqJzzUz

Failed proposal on bricked proxy (admin_slot = 0x0):
https://t.co/We1KOu3yHh

eUSD Main (OWNER role, upgradeable):
https://t.co/VmklcegpSX

eUSD Governor Alexios:
https://t.co/1vdvu7BKpQ

hyUSD Governor Alexios:
https://t.co/o6oyjkhQrW

[Bizzee P @Bizzee_P]

@TurntSalty Bingo.

[Bizzee P @Bizzee_P]

🧵 A cluster of pioneer wallets emptied the forked Arbitrum bridge on PulseChain.

The Arbitrum One rollup contracts were forked onto PulseChain with all their state in May 2023. Same addresses as Ethereum. The validator whitelist was disabled. Pioneer wallets staked in and started confirming nodes.

Then they executed 66 Outbox withdrawal transactions and pulled every token locked in the bridge down to zero.

The primary executors: c28a (27 txs), 1967 (25 txs), 0000 (3 txs), 5996 (1 tx). If you've been tracking pioneer wallets, you recognize these.

I checked 19 major tokens. DAI, USDC, USDT, WETH, WBTC, UNI, CRV, AAVE, LINK, COMP, MKR, LDO, rETH, PEPE, GRT, PENDLE, YFI, GNO, FRAX. All empty. 50+ token contracts total. Gateway balance: zero.

The most recent validator transaction was May 13, 2026.

These tokens are worth almost nothing on PulseX.

So why take them.

🔹 3.2M pCRV
🔹 885K pUNI
🔹 6.3K pAAVE
🔹 644K pLDO
🔹 459 pCOMP
🔹 91 pMKR
🔹 17.9M pPENDLE
🔹 544K pSUSHI
🔹 20.7K pRPL
🔹 7.3K pENS
🔹 2.5K prETH

Governance tokens. Every single one.

The same wallet cluster that used 71,569 pCOMP to take over Compound via Timelock. The same cluster connected to pMKR governance. The same cluster locking veCRV for 4 years. The same cluster that already captured pARB proxy upgrades and is running liquidation infrastructure across Gearbox, Compound, and MakerDAO.

Nobody takes worthless tokens from a dead bridge unless they're not worthless to the person taking them. Every forked protocol on PulseChain has a governance token. Somebody has been collecting all of them. 🫡

📋 Receipts:

RollupProxy (PulseChain): https://t.co/ot4M2X4gbm
L1ERC20Gateway (empty): https://t.co/5k1Pu34FKV
Outbox: https://t.co/CKPEiYOlpS

First drain tx (Aug 14 2024): https://t.co/nDuiMIP2DR
Final batch tx (Sept 21 2025): https://t.co/FrdJcTRj4F
Latest validator tx (May 13 2026): https://t.co/WaDHq3voKY