ChimpersPanda

Co-founder of @bayctaiwan
BAYC#7475
CCIE#11440

[CoinGecko @coingecko]

We've got a little treat for you this Halloween...

See you on October 26 🎃

(Not a token, btw.)

[CoinGecko @coingecko]

Do you have more Candies collected than our intern? 🍬

[GaryPalmerJr.eth @garypalmerjr]

@beijingdou @BoredApeYC Yes. Say $Ape. Still here.

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: Trend Micro posted several unpatched Linux kernel flaws to public mailing lists.

Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code.

Linux maintainer Greg told them to "fix your submission process."

[Mark Gadala-Maria @markgadala]

🚨 BREAKING: LINUX IS NOW FACING TWO CRITICAL SECURITY VULNERABILITIES, AND THERE ARE NO OFFICIAL KERNEL FIXES YET.

Both rated 9.0/10 in severity.

One could allow hackers to take control of vulnerable servers WITHOUT EVEN LOGGING IN.

And the most alarming part? The flaws were made PUBLIC before patches were ready.

Here's what's happening:

→ TWO CRITICAL RCE FLAWS: Both affect KSMBD, Linux's built-in SMB file server.

→ NO PASSWORD REQUIRED: One vulnerability could allow unauthenticated attackers to execute malicious code on vulnerable servers.

→ KERNEL-LEVEL ACCESS: Successful exploitation could potentially give attackers control within the Linux kernel itself.

→ NO MAINLINE PATCH YET: Both vulnerabilities were publicly disclosed before official kernel fixes were available.

→ DISCOVERED BY AI: Trend Micro's AI-powered security scanner identified the flaws.

→ SERVERS AT RISK: Linux systems running the vulnerable KSMBD service need immediate attention, especially if port 445 is exposed.

First PHP. Then Node.js. Then GitLab. Then Python.

NOW LINUX.

And this time, the vulnerabilities are PUBLIC before the fixes are ready.

If you manage Linux servers, CHECK YOUR EXPOSURE NOW.

[stark0xbt @stark0xbt]

Ron Baron has been investing for 56 years. He just said he has never seen a company like SpaceX. Not one.

He made his clients 15 billion dollars on it. He gave up 3 billion of his own profit to keep his shares. His frame: I do not want Elon to think about us as someone he gave stock to who sold the first chance they got.

The numbers Baron threw out are the ones nobody is modeling.

SpaceX sold capacity to Anthropic at $1.25 billion a month for 18 months straight. $15 billion a year. Then Google came in asking for compute. Elon said here is what I have left. $900 million a month.

That is 25 billion a year on just the compute slice.

And then: "The economy doubles every 10 years. Elon thinks instead of doubling we're about to grow 10 times every 10 years."

56 years. Never seen one like this.

[HKEPC @hkepcmedia]

【DLLM 🤬】媽的 !! 這是故意的吧。Linux 核心社群剛剛發生重大資安意外，台灣趨勢科技（Trend Micro）旗下的漏洞懸賞計劃「Zero Day Initiative（ZDI）」疑似因作業疏失，將多份尚未於正式主線（Mainline）完成修補的 Linux 核心高危漏洞報告，直接發送至公開的 Linux 核心郵件清單（LKML），而非內部專用的私密安全通報信箱。外洩漏洞的危險程度最高達到 CVSS 9.0，目前已經全世界通天了。

事件發生後，Linux 核心維護者、關鍵負責人 Greg Kroah-Hartman 隨即對 ZDI 提出質疑，要求對方釐清為何將尚未完全修補的零日漏洞資訊直接公諸於世。

根據外洩的通報內容，本次意外曝光的漏洞涉及網絡傳輸、儲存子系統及顯示卡驅動程式等多個核心模組，其中不乏可導致遠端攻擊的重大威脅：

◾ZDI-CAN-33549（CVSS 評分 9.0）： 存在於 SMB Direct 模組中的整數下溢（Integer Underflow）漏洞，遠端攻擊者可藉此觸發遠端程式碼執行（RCE）。該漏洞的修正補丁原定排入未來版本的分支進行測試與最佳化，因通報外洩，核心社群預計將加速其合併至主線的進程。

https://t.co/dTpEId180n

◾ZDI-CAN-33774（CVSS 評分 9.0）： 位於核心 SMB 伺服器模組 KSMBD 中的競爭危害（Race Condition）漏洞，同樣可遭遠端利用並執行任意程式碼。

◾ZDI-CAN-33367： 涉及網絡通訊協定代碼中的 skbuff（skb_zerocopy）漏洞，可能引發本機權限提升（Local Privilege Escalation）。事實上，核心團隊上週已自其他途徑收到相同問題的回報，相關修正程式碼預計近期正式釋出。

◾ZDI-CAN-34068： VMware 顯示驅動程式 VMWGFX 的越界寫入（Out-of-bounds Write）缺陷，可被攻擊者利用以取得本機更高權限。

◾ZDI-CAN-34076： NVMET（NVMe-oF 目標端）代碼中存在資源未初始化問題，可能造成系統機密資訊洩漏。

◾ZDI-CAN-32005： 前一日亦被公開至郵件列表的漏洞，源於搜尋網域 TCP 查詢時引發的堆疊緩衝區溢位（Stack Buffer Overflow），可導致本機權限提升。

目前，這些嚴重漏洞的補丁尚僅在測試階段，尚未全面部署更新，但由於此次疏失迫使 Linux 維護團隊緊急調度資源，加快測試與驗證程序，預期相關修補程式將在未來數小時內發布，提醒各大管理員 Standby，隨時準備打「丁」。

[Phoronix @phoronix]

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

As high as CVSS 9.0. Whoops.

https://t.co/opCRSE80Vq

[Melvin @MelvinInvests]

$SPCX just reported ABSOLUTELY INSANE earnings, and I don't think people realize how quickly Elon Musk is scaling this company.

SpaceX generated a staggering $14.6 BILLION in quarterly revenue, representing 161% year over year growth, while earnings per share surged 197% to $0.35. That's a 12% revenue beat and a 119% EPS beat against the estimates shown.

And the numbers get even CRAZIER. SpaceX reportedly generated $4.4B in net income and $8.8B in adjusted EBITDA, with EBITDA growing an incredible 306% year over year.

We're talking about a company that's not only more than doubling its revenue but potentially expanding its profitability at an even faster pace.

[Now Media @nowmedia]

NEWS: @InvsbleFriends has been acquired by @coinbilly, who led the NFT brand’s original 2022 launch

Plans include a return to animation, physical collectibles, new collabs and holder benefits, alongside a contract migration with enforced royalties

Terms were not disclosed

[Teslaconomics @Teslaconomics]

Wow… SpaceX absolutely crushed it in Q3 2026. 🚀

THE BIG NUMBERS
• Revenue: $14.6B, up 161% YoY (Q3 25: $5.6B)
• Net income: $4.4B vs a $1.05B loss a year ago, a +$5.5B swing
• Operating income: $2.8B vs a $273M loss in Q3 2025 (and a $143M loss last quarter)
• Adj. EBITDA: $8.8B, up 306% YoY (~60% margin)
• EPS: $0.35 vs $0.15 expected
• Cash + securities: $89.9B

STARLINK
• 13.6M consumer subscribers, up from 7.2M a year ago (+89%)
• Added 1.6M subs in ONE quarter
• Connectivity revenue: $5.2B, up 69% YoY
• 11.1K satellites in orbit, 174 countries
• 3,800+ aircrafts with Starlink
• Bought 800 MHz spectrum for Starlink Mobile

SUPER INTELLIGENCE (xAI, 𝕏, Cursor)
• Revenue: $7.6B, up +830% YoY
• Now SpaceX's biggest segment, it’s over half of all revenue
• 1.7 GW of compute, almost 3x a year ago
• Cursor closed Aug 14 at a $60B value
• Launched Grok Bot

SPACE
• Starship Flight 14 was first orbital flight AND first revenue mission, 26 Starlink V3 sats, ~10x the capacity of a Falcon 9 launch
• 113 launches YTD, 1,517 tons to orbit
• Starbase Louisiana is going to be built for thousands of Starship flights a year
• Signed a Starship lunar delivery, 18 national security missions, 3 more NASA crew missions

I’m pretty sure right now is the cheapest SpaceX will ever be…

[CGC Cards @CGCCards]

@boredApeYC just entered a new era of collecting

[won kim @wonk1m]

Gabe and Sophia from @CGCCards were such amazing support. Grateful for the partnership!

[DJ 🐉 @bubblegum_dee]

🚨 YUGA LABS EXPANDS TO SOLANA WITH MUDWATER TCG - BAYC ENTERS THE TRADING CARD GAME ARENA! 🦍🃏

Yuga Labs is taking its iconic BAYC universe beyond NFTs and into the world of physical and digital trading cards with Mudwater TCG - an exciting new step in the evolution of Web3 gaming and collectibles! 🔥

The company behind the legendary Bored Ape Yacht Club is bringing BAYC artwork into a new collectible experience that combines rarity, card trading, competitive gameplay, and the potential for on-chain ownership.

Here's a detailed breakdown of what you need to know. 👇

🃏 1. 120 BAYC ARTWORKS, FOUR CARD TIERS

Mudwater TCG features 120 Bored Ape Yacht Club artworks across four distinct card categories:

🔹 Standard
✨ Foil
🔢 Serialized
❄️ Cracked-Ice

Different tiers bring different collectible characteristics, giving collectors another way to engage with the BAYC universe beyond traditional NFTs.

📦 2. A LIMITED SUPPLY OF 10,000 BOXES

The initial supply is structured as follows:

• 1 pack = 10 cards
• 1 box = 24 packs
• 1 case = 10 boxes
• Total supply = 10,000 boxes

That means 240,000 packs and potentially 2.4 million physical cards across the full supply, assuming every box contains the stated 24 packs.

Physical-to-digital conversion is also planned, potentially connecting physical collectibles with their digital counterparts.

🎁 3. BAYC & MAYC HOLDERS: CLAIM YOUR ALLOCATION

Eligible holders can claim Mudwater packs through the official claim portal:

🔗 https://t.co/AvlSqNqMeC

The announced allocation is:

🦍 BAYC holders: 10 packs per Bored Ape
🧪 MAYC holders: 2 packs per Mutant Ape

Claims are verified through Ethereum ERC-6551 Totems, with the stated claim deadline of January 19, 2027, at 00:00 UTC.

If you're eligible, check the official portal for your allocation and the latest claim requirements.

♻️ 4. SECONDARY MARKET TRADING IS LIVE

Collectors can also explore the secondary market on OpenSea.

As with any collectible market, actual prices will depend on demand, rarity, supply, and collector interest. Don't confuse a limited supply with guaranteed value.

⚔️ 5. ANTE MODE: COLLECT, STAKE & COMPETE

Mudwater TCG isn't just about collecting cards - it introduces a competitive gameplay element.

In Ante Mode:

• Each player stakes 3 cards.
• Players compete against each other.
• The winner randomly claims one card from the opponent's staked cards.

A live demo is available in Otherside, while on-chain cards are expected to launch soon.

This adds a fascinating dimension to the experience: your collection can become part of the gameplay rather than simply sitting in your wallet or on a shelf.

🌐 6. WHY THIS MATTERS FOR WEB3

Mudwater TCG represents an interesting evolution for one of Web3's most recognizable intellectual properties.

We're seeing the BAYC universe expand into a format that bridges:

✅ Physical collectibles
✅ Digital trading cards
✅ Competitive gaming
✅ NFT-holder benefits
✅ Secondary-market trading
✅ Future on-chain gameplay

With Ethereum-based holder verification, an Otherside gameplay demo, and a Solana expansion in the picture, Mudwater could become an interesting case study in how major Web3 IPs connect different ecosystems. @BoredApeYC

The real opportunity is in building something people want to collect, trade, and play - not simply another NFT drop.

🔥 FROM BORED APES TO TRADING CARDS - YUGA LABS IS BUILDING BEYOND THE PROFILE PICTURE.

I'm especially interested in seeing how the physical-to-digital connection develops and what the upcoming on-chain cards bring to the table.

Will Mudwater TCG become a major crossover between traditional card collecting and Web3 gaming? 👀

BAYC holders, are you claiming your packs? And would you actually play Mudwater TCG, or are you here purely for the collectibles? 🦍🃏

[The Bored Ape Gazette🍌 @BoredApeGazette]

“BAYC FOR LIFE" » @BoredApeYC Member @AdamWeitsman Acquires Two Premier Primates From @machibigbrother During ApeFest 2026!

Find out more:

[ApeCoin @apecoin]

ApeChain communities are getting allocations of Mudwater packs following launch, for their own communities.

Mudwater is the new BAYC collectible card game from Yuga Labs, physical and digital, on Solana.

More info this coming week.

[ChimpersPanda @ChimpersPanda]

I just claimed 14 Mudwater packs!
That's 140 cards waiting to be revealed. Let's see what I pull. @BoredApeYC

[Alpha Insiders @AlphaInsiders]

Farcaster users: Lens OG Badge is live

Lens is a decentralized social protocol, and it looks like it’s opening the door for Farcaster users to claim an OG badge.

How to claim:
. Visit https://t.co/ugUBHdADHw
. Connect your Farcaster account.
. Link an EVM wallet associated with your account.
. Claim your badge if eligible.

[Elon Musk @elonmusk]

Next year, I will give one of my SpaceX shares to every kid in America.

This will be the first of many.