First white-hat exploit on Ethereum: I unlocked 1,003.62
Ξ ($2,000,000) trapped in a 2016 ICO smart contract
for 9 years.
The 48 original investors can now claim their funds.
linking process which will reveal my card details). Is that the support team's SOP?
Please better fix up. I'm strongly considering alternatives like @greyfinance (based on recommendations from friends).
If your cards cannot be fixed, I'm done with Cleva 💯
Hey @clevabanking you guys have the most obtuse customer support.
My USD card can't be linked to the Play store or Apple Store. I complained through the in-app support channel and your customer support (Emem) asked for me to share a screen record of the process (showing the...
MACHI BIG BROTHER: HYPERLIQUIDATED
Machi Big Brother was liquidated for the majority of his trading account. He's down $545K in the past 24 hours alone.
Machi has now lost $77.32 MILLION in under a year on perps. Is it over for him this time?
The hardest pill for women to swallow is that average men love us far more unconditionally than we love them. A regular guy making a standard wage will gladly date a woman with zero income, pay for her meals, and support her dreams without ever making her feel inadequate. But the exact second an average-earning man loses his job or hits a financial rough patch, a massive percentage of women instantly lose respect and look for an exit. We demand unconditional loyalty, but only offer conditional love.
He spent 6 months earning someone's trust. Then took everything in one click.
A crypto streamer lost $2.5 million from a single transaction he signed himself.
Here's how it happened:
For six months, a mysterious account kept donating. Big money, consistent, no strings attached.
$230,000 in donations total.
The streamer noticed
Then one day, the donor finally explained himself:
"All those tips I sent you? That's profit from a Solana sniper bot I built myself. Been running it six months. I give you 20% of every fat trade. Want to test it live on stream?"
$230,000 in gifts, six months of trust
The streamer said yes
The panel looked real, it read his wallet, showed available SOL.
Ran a demo trade, he'd seen a dozen tools like this
He connected his Phantom wallet, signed one transaction to "authorize" access
That's all it took
Every dollar was gone before the stream tab finished loading
The "bot panel" was a drain contract, the donations were the investment
$230K spent
$2.5M made
ROI: 986%
This wasn't a scam. It was a business plan.
⚠️ALERT: ANOTHER MAJOR HACK STRIKES CRYPTO; $76M EXPLOIT HITS MONAD
Echo Protocol on Monad was reportedly exploited after an attacker minted 1,000 eBTC worth roughly $76.6M, as per Lookonchain.
The hacker allegedly used part of the funds as collateral on Curvance to borrow WBTC, bridged assets to Ethereum, swapped them into ETH, and routed roughly 385 ETH through Tornado Cash.
The attacker still reportedly controls around 955 eBTC worth over $73M.
This now marks the THIRD major crypto exploit in just 4 days!
1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders.
Dritan flexes luxury cars, watches, private jets, & clubs all over social media.
Recently he was recorded on a call showing off a wallet with stolen funds.
🇰🇵 DPRK loves it when you:
- Save your seed phrase in a password manager.
- Use hot wallets instead of hardware wallets.
- Don't use antivirus, EDR or Lockdown mode in your devices.
- Download pirated stuff, install shady apps and play games in your work device.
- Accept calls from people without verifying them first.
- Use SMS for 2FA.
- Sync your passwords, google authenticator and passkeys to your Gmail account
- Install lots of browser extensions
- Don't update your Operating system and apps.
- Repeat passwords.
- Don't use a device exclusively for work
- Don't verify what you are signing
- Run npm install on a "coding challenge" from a recruiter you met on LinkedIn.
- Blindly add npm/PyPI packages without checking the publisher, download counts, or recent version history.
- Pin your dependencies to "latest" and hope for the best.
- Trust any GitHub repo with a slick README and a few stars.
- Reuse the same email for crypto, banking, and signing up to random newsletters.
- Click "Remind me later" on security updates for weeks.
- Disable Windows Defender because it "slows things down."
- Plug in random USB drives you found at conferences.
- Give every app full disk access without reading the prompt.
- Brag about your portfolio size on Twitter under your real name.
- Share your screen on Zoom with your main user logged in
- Connect your wallet to every airdrop site that promises free tokens.
- Approve unlimited token spending so you "don't have to do it again."
- Keep your recovery codes in a screenshot in your camera roll.
- Trust a Telegram admin who DMs you first.
- Run unsigned binaries because "the SHA matches the website.
Let's grow up as an industry and start treating security seriously.
STAY SAFE
🇰🇵 DPRK loves it when you:
- Save your seed phrase in a password manager.
- Use hot wallets instead of hardware wallets.
- Don't use antivirus, EDR or Lockdown mode in your devices.
- Download pirated stuff, install shady apps and play games in your work device.
- Accept calls from people without verifying them first.
- Use SMS for 2FA.
- Sync your passwords, google authenticator and passkeys to your Gmail account
- Install lots of browser extensions
- Don't update your Operating system and apps.
- Repeat passwords.
- Don't use a device exclusively for work
- Don't verify what you are signing
- Run npm install on a "coding challenge" from a recruiter you met on LinkedIn.
- Blindly add npm/PyPI packages without checking the publisher, download counts, or recent version history.
- Pin your dependencies to "latest" and hope for the best.
- Trust any GitHub repo with a slick README and a few stars.
- Reuse the same email for crypto, banking, and signing up to random newsletters.
- Click "Remind me later" on security updates for weeks.
- Disable Windows Defender because it "slows things down."
- Plug in random USB drives you found at conferences.
- Give every app full disk access without reading the prompt.
- Brag about your portfolio size on Twitter under your real name.
- Share your screen on Zoom with your main user logged in
- Connect your wallet to every airdrop site that promises free tokens.
- Approve unlimited token spending so you "don't have to do it again."
- Keep your recovery codes in a screenshot in your camera roll.
- Trust a Telegram admin who DMs you first.
- Run unsigned binaries because "the SHA matches the website.
Let's grow up as an industry and start treating security seriously.
STAY SAFE
The latest @freebeat_AI rollout is all about freedom 🧘♀️🦅
WhatsApp integration: Connect your freebeat account to your WhatsApp to generate videos instantly via DMs.
Smart Recharge: Our new auto-recharge and quick-select amounts mean you never run out of credits mid-creation.