Tecumseh

Dollar maximalist, shitposter, father, and scoundrel.

[Tecumseh @CryptoGeneral]

@CollinRugg I think chinese military already tried that. They cloned the most elite dogs in the force only to find out that their clones didn’t inherit the same characteristics.

[Tecumseh @CryptoGeneral]

@BullMooseMemes Den Atlanta Falken. Sonst alles richtig gemacht.

[Tecumseh @CryptoGeneral]

@PiusSprenger We are ahead of the rest.

[Tecumseh @CryptoGeneral]

@Julian_BO4 Einrammen ist schon schwer zu ertragen.

[Tecumseh @CryptoGeneral]

@alistairmilne At some people will find that they don’t have to swap because their wealth is already on the correct and final ledger.

[Username McUserface ( ͠° ͟ʖ ͡°) @miyaspokeofthis]

Ledger is known for going above and beyond to protect customers. You certainly went above and beyond on basic corporate security by not revoking former employee access and not enforcing 2FA (connect kit exploit). You also went above and beyond in protecting user data from leaks.

[Tecumseh @CryptoGeneral]

@RNR_0 It’s the worst crime to commit in the west. Take a close look. Courts usually punish tax evasion way harder than they do other crimes.

[Tecumseh @CryptoGeneral]

@0xSero What is the advantage over paying per token?

[Johannes (4, 4) @0xJohannes_]

UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.

I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).

The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).

My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.

Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.

I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!

[YFarmX 🗞️ @YFarmX]

Ledger theft, day two. Since yesterday the thief has pushed ether through Tornado Cash three times, and each time on into Zcash's shielded pool. We followed every lot out the far side. Here is how, step by step.

1. THE SAME BUILD, THREE TIMES
An ether wallet pays a fresh splitter. The splitter pays four fresh wallets. The four drop it into Tornado Cash's 100, 10 and 1 ETH pools. Minutes, every time.

Run 1, yesterday 15:17: 1,254 ETH. Run 2, today 09:42: 1,291 ETH. Run 3, today 11:56: 450 ETH from 0xfa4EaBB840A33C156E600311433AE261CBfCb0e2, in the pools by 12:15.

2. OUT OF TORNADO CASH
The mixer breaks the link between a deposit and a withdrawal. We do not need the link. Our tooling fingerprints the withdrawal transactions themselves: how each one is constructed, who constructs it, and when.

Yesterday's 65 withdrawals (1,084 ETH) and today's 96 (1,726 ETH) all carry the same signature. The six other withdrawals from those pools in today's windows do not. Run 3 came out from 12:18 into 0x0d697aa182801566d87adc86e68e95fd3b2f5f82 (213 ETH) and 0x676b16cc18542f37d202a1a79ac05463395496a4 (122 ETH), and 195 ETH of it was inside a cross-chain swap service by 12:38. Forty-two minutes, end to end.

3. INTO ZCASH, AND OUT AGAIN
The swap service turns the ether into shielded ZEC, where sender, amount and recipient vanish. But the service's own shielding of each lot is public, and from it we derive a value signature for that lot's exit, then scan every transparent exit from the pool. 108 of 108 exits across both days match their lot to the zatoshi. Not one other exit from the pool does.

First lot today: in at 10:18:18, out at 11:06:16 in block 3512847 (8d26a9b095d4d28373527f7a6eb81a3be7f906d1e2190960c0512ff64f369418 and 738c6d1261e79766e4dd16bdbd38dced91b8e3a86ce41dcda83eda1f19208fbf), straight into a ZEC to USDC order.

Today so far: 20 lots ordered (2,379 ZEC, $2.9m), 14 out, 5 inside the pool, 1 still settling. Every exit feeds a ZEC to USDC order paying two wallets born at 11:11, 22 of the 28 paid by 12:43:
0x816D5Ee17DB1495d1409F135b98FF3edc5F3cDf8: 940,561 USDC
0xBA736A4b616e79867B6d586293966b552883f3F3: 852,258 USDC
1.79m USDC, unspent. @Circle can freeze it.

(1/2) 🧵⤵️

[DelCrxpto @DelCrxpto]

Protect Yourself At All Times.

[Wentrre @wentrre]

@Ledger Is there a problem with my Stax equipment?

[灯篭.hiroba @TourouJPN]

販売していたハードウェアウォレットが物理ハックされてたことで今話題沸騰中のCryptobilisに来ました。

店舗は閉まっており、現在販売を一時的に停止してることや、Ledger社と調査中である旨などが書かれた張り紙があります。
Cryptobilisはマレーシアのハードウェアウォレット販売代理店でフィリピンやインドネシアにも店舗があるようです。

ショーケースを見る限り、Ledgerのハードウェアウォレット以外にもTrezor、Onekey、SafePalなどさまざまな製品を販売していたようです。

店舗はクアラルンプール中心地にあるBerajaya Times Squareという大型のショッピングモールに入っています。同モール内は格安アパレルショップなどが入っており、偽物のブランド商品や著作権を無視した商品、アクセサリーなどが数ドルから10ドル程度で販売されているのが多数目に入ります。
バンコクで言うとMBKのような雰囲気です。

[Mark Karpelès @MagicalTux]

Opening and closing a Ledger Nano X

[Tecumseh @CryptoGeneral]

This

[Bundesanwaltschaft @GBA_b_BGH]

Festnahmen wegen mutmaßlicher landesverräterischer Ausspähung, Auskundschaften von staatsgeheimnissen, versuchten Landesverrats und Spionage, Pressemitteilung der #Bundesanwaltschaft vom 06.10.2026
https://t.co/IFieUwbrVJ
https://t.co/J9tZj8WLcw

[Tecumseh @CryptoGeneral]

@PhilippMattheis Und ich mache dann mein eigenes Casino auf. Mit Blackjack und Nutten.

[Tecumseh @CryptoGeneral]

@theog__ You lost weight. How did you do that in a Burger King?

[Tecumseh @CryptoGeneral]

@50cent What was his crime? Battery low or charged?

[Tecumseh @CryptoGeneral]

@f_schaeffler @Madame_Bitcoin Jede Zahlung ist bereits heute ein Steuerfall. Es muss immer Zu- und Abfluss dokumentiert werden. Unabhängig davon, ob es zu versteuern ist. Protip:
https://t.co/GmZnRbe8Lu