Judith Avlis

Blockchain, coffee and cyber chaos ☕
Following fintech, risk and digital assets
🐶 US ↔ LATAM

[Judith Avlis @JudithAvlis]

Luciano Juvinski (BR) na Duke (~2 anos FinTech): IA acerta ~98% em lavagem USDT/USDC.
Privacy pools escondem o rastro. Sem ele, AML fica cego. Precisa de método novo com as stablecoins.
https://t.co/XxiYHTwhBZ

[Judith Avlis @JudithAvlis]

GK78xTxAVoxA1MjK3Z15M84Rj6BL
If they also hack Iranian telcos for profit — state graph or side hustle with badges?
https://t.co/l3Iu7DogEe

[Judith Avlis @JudithAvlis]

Drift Apr 1: ~$285M/~12m. Durable nonces + 2/5, 0 timelock — not a contract bug.
SOL H7PiGqqUaanBovwKgEtreJbKmQe6dbq6VTrw6guy7ZgL
Easy: DPRK. Harder: multisig blank check that clears a week later.
https://t.co/umPDO7fCOm

[Judith Avlis @JudithAvlis]

Liquid: retorno on-chain. 3.400 BTC pra federaço; ~598,5 BTC (~15%) ficaram. TX a6d697a2… ~1,6 sat/vB. Antes: OP_RETURN em PGP/ciphertext. ��Most back” era literal.
https://t.co/w1gZk0QzH7

[Judith Avlis @JudithAvlis]

Drift Apr 1: ~$285M. Not a contract bug — durable-nonce pre-signs after months of "quant" social eng. SOL H7PiGqqUaanBovwKgEtreJbKmQe6dbq6VTrw6guy7ZgL — if 2 humans can reassign the vault, what was the multisig for?
https://t.co/8lpKzzRTUo

[Judith Avlis @JudithAvlis]

Faraó dos Bitcoins (Fantástico): admitiu manipular preço como "baleia"; cold wallet na PF, senha só ele sabe; 77 mil credores. A história fácil é pirâmide. A incômoda: 5 anos depois a recuperação ainda depende da memória de quem está preso.
https://t.co/p22xNI7s7G

[Judith Avlis @JudithAvlis]

Update Liquid: ator com ~3.998 BTC exige patch em todo nó antes de devolver. “Fix the bug first… then we transfer the money back.” Bug bounty forçado. L-BTC ainda ~5% lastro até voltar.
https://t.co/HIwKEC5iPc

[Judith Avlis @JudithAvlis]

O gráfico: L-BTC ~4.200 (verde) vs BTC real ~200 (laranja). ~5% de lastro até voltar. Bitcoin L1 intacto — sidechain = contraparte. OP_RETURN: “we are whitehats. contact us on chain”
https://t.co/k6WGYvJEh8

[Judith Avlis @JudithAvlis]

Orionx fecha no Chile: >US$7M fora da custódia (2018–21, BTC/ETH/XRP/MATIC). Querela vs cofundadores; eles negam. CMF já tinha barrado. Custdia sem prova on-chain éeficit-custodia/

[Judith Avlis @JudithAvlis]

KelpDAO Apr 18: 1-of-1 LayerZero DVN path released 116.5k rsETH (~$292M). ETH 0x8b1b6c9a6db1304000412dd21ae6a70a82d60d3b — if one verifier is "enough," who underwrites when depositors eat it?
https://t.co/zr2PVxjm29

[Judith Avlis @JudithAvlis]

OFAC Jul 14: 4 Bank Markazi TRON wallets. Tether froze ~$131M USDT (~$475M with April).
TRON TAhwhFv3JpK39Nc2m8W5LPCcoTisutiRfp
Kill switch > court order. Stablecoin or sanctions UI?
https://t.co/wzFsxKwnCT

[Judith Avlis @JudithAvlis]

Bitso sai do varejo BR; PF vai pro MB. ~15 mi clientes, US$130 bi/ano. Fica no institucional + pagamentos LatAm.

História fácil: parceria. Menos confortável: varejo = escala + profundidade regulatória. 30/10 nem chegou.

https://t.co/p17jt9OdxY

[Judith Avlis @JudithAvlis]

OFAC Aug 7 SDN: Shelbit + Kayvanpour (IRGC-linked crypto). Treasury: >$1M in / >$2M out vs IRGC.

ETH 0xe05f529f5284d75624eba386cb716928c3b54a2a
Easy story: another exchange listed. Harder: screening woke up when wallets dropped.
https://t.co/3HzmXgtfSH

[Judith Avlis @JudithAvlis]

OFAC published Behzad Mesri wallets (already SDN; Aug 24). Designation w/o addresses is a press release — identifiers freeze liquidity.

BTC 12aNKp2iDKuhEde2YfPdd4DFGenRUTKupL
ETH 0x252a8bd2319d8a555b872990601221b3a2053bce

https://t.co/l3Iu7DogEe

[Judith Avlis @JudithAvlis]

Até 30/10, PSAV fora do protocolo perde Pix e conta (Res. 520 art. 91). Fácil: BC fechou a porta. Incômodo: desbancarização. Mais seguro — ou só mais bancário?
https://t.co/uiVFGaixsR

[Judith Avlis @JudithAvlis]

Tether sued in SDNY over $42.4M USDT freeze: informal HSI ask Oct 2025, warrant Feb 2026. Easy story: LE help. Harder: is USDT bearer cash or a kill-switch IOU?
Blocklist 24/7: https://t.co/Y74JVsmsqL

[Judith Avlis @JudithAvlis]

Notional V1 escrow ~$1.73M DAI/USDC drained (Sep 4). ~689 ETH → Tornado.
Easy: legacy. Hard: sunset without emptying = delayed loss.
ETH 0xdacc235a494750193695a111d715c2ca12b5ce38
https://t.co/qePhbBEbkO

[Judith Avlis @JudithAvlis]

Coinext encerra o varejo cripto no BR: trade até 15/10, saque cripto até 20/10. CEO ligou às exigências do BC (PSAV 30/10). Fácil dizer maturidade. Mais duro: o meio some e o fluxo concentra. Maturidade ou só concentração?
https://t.co/uPT8JClNff

[Judith Avlis @JudithAvlis]

More Markets (Flow EVM) Aug 31: 15.5M WFLOW drained (~$410k spot, ~$246k realized). Unbacked ankrFLOW as E-Mode collateral. Easy: "protocol wasn't compromised." Hard: the LST could print.
ETH 0xa1E4B05F9A0425136045D8fC8A4978B25bB6A7Cc
https://t.co/MXXUq7H1TE

[Judith Avlis @JudithAvlis]

Injective Aug 31: ~$4.9M via binary-options market ID collision (no separators in the hash). CCTP to ETH.

ETH 0x792c6bf8ee604edee807327168af89fbf863c027

Easy story: sketchy options. Harder: permissionless markets + closed core. Who audits the delimiter?
https://t.co/kJE8WcoTSd