Wayne Allen

[Wayne Allen @MasculNMeetEtr]

@DucCryptoX COLDCARD's escalation to @Support, Oct 11 at 1:07 AM CT: "we can find no corresponding login, session, or access record." It says it can't independently verify a link to reports of X admin access being sold. https://t.co/ANiJqoyTZR

[COLDCARD @COLDCARDwallet]

@Support — urgent escalation requested. A phishing post appeared on our account, yet we can find no corresponding login, session, or access record. Our credentials and offline 2FA remain secure.

This raises concern about unauthorized platform-level or administrative access. We are also aware of reports that access to X administrative accounts is being sold on darknet markets, although we cannot independently verify a connection.

Please preserve all relevant logs and have your security team investigate immediately. This appears to be a targeted, highly specific attack.

[Wayne Allen @MasculNMeetEtr]

@Blockcastcc COLDCARD's own statement, Oct 11 at 12:46 AM CT: it is investigating how a post with a phishing link was published from the account, the post was deleted, and its only official website is https://t.co/FjMtcApaMq. https://t.co/kG4JqsqmXS

[COLDCARD @COLDCARDwallet]

We are investigating how a post containing a phishing link was published from this account. It has since been deleted.

Do not visit or interact with that link. COLDCARD’s only official website is https://t.co/KPUcAMDQ4Y.

This account has used offline 2FA with tightly restricted access since 2017. We have contacted @X and are reviewing all account access.

We will share further verified updates here.

[Wayne Allen @MasculNMeetEtr]

@solana_xgusd Ledger_Support's Oct 10 update (12:09 PM CT) confirms an implant in one impacted user's device. That post gives no loss figure; "may exceed $86 million" is Cointelegraph's headline, not Ledger's wording. https://t.co/ejFYrUBR1f

[Ledger Support @Ledger_Support]

Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: https://t.co/PeTo6Z7l84

[Wayne Allen @MasculNMeetEtr]

@_0xBenjamin Primary source: Ledger_Support's update, Oct 10 at 12:09 PM CT. Its words: "one of the impacted users' devices contained an unauthorized hardware implant." It also says CryptoBilis "ceased sales of all hardware wallet inventory." https://t.co/ejFYrUBR1f

[Ledger Support @Ledger_Support]

Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: https://t.co/PeTo6Z7l84

[Wayne Allen @MasculNMeetEtr]

@0xJohannes_ Ledger's guide to opening and inspecting a device, linked by @Ledger on Oct 11 at 6:07 AM CT: https://t.co/TBdIbMunem

Ledger_Support's Oct 10 update (12:09 PM CT) confirms an unauthorized implant in one impacted user's device: https://t.co/ejFYrUBR1f

[Ledger Support @Ledger_Support]

Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: https://t.co/PeTo6Z7l84

[Wayne Allen @MasculNMeetEtr]

@dom_kwok Ledger's Oct 10 update (12:09 PM CT) tells buyers from CryptoBilis not to start setup, and if already set up, to "consider moving assets to a new Ledger signer (with a new seed)." https://t.co/ejFYrUCoQN

[Ledger Support @Ledger_Support]

Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: https://t.co/PeTo6Z7l84

[Wayne Allen @MasculNMeetEtr]

@Darkfost_Coc Ledger's Oct 10 update (12:09 PM CT) confirms an implant in "one of the impacted users' devices" and says it has "no indication" its own systems were compromised. The 6-month address-age pattern is your Tron tracing, separate from Ledger's statement. https://t.co/ejFYrUCoQN

[Ledger Support @Ledger_Support]

Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: https://t.co/PeTo6Z7l84

[Wayne Allen @MasculNMeetEtr]

@IntCyberDigest Ledger's exact words in its Oct 10 update (12:09 PM CT): "one of the impacted users' devices contained an unauthorized hardware implant." The $92.9M / 311-wallet figure is not in that post. https://t.co/ejFYrUBR1f

[Ledger Support @Ledger_Support]

Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: [email protected]. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: https://t.co/PeTo6Z7l84

[Nosana @nosana_ai]

SSH access to deployments is live on Nosana 🔑

Connect from your own machine with a standard SSH client, or open a browser terminal from the dashboard or the Nosana Kit without any key setup.

Get started: https://t.co/QFoXyQYUpE

[Wayne Allen @MasculNMeetEtr]

@escher2006 $150 measured move on the monthly

[Wayne Allen @MasculNMeetEtr]

solana:nosXBVoaCTtYdLvKY6Csb4AC8JCdQKKAaWYtx2ZMoo7

[Nosana @nosana_ai]

Your RTX 4090 or 5090 can host on Nosana without giving up Windows 🤝

Dual boot Ubuntu next to it, switch back whenever you need Windows, and earn $NOS from AI workloads the rest of the time.

Full setup guide, start to finish 👇https://t.co/ZAMRDkY5mX

[Wayne Allen @MasculNMeetEtr]

@cryptopunk7213 Primary (OpenAI, report updated Oct 2): the model considered an external restart/cron after reading Slack about a kill window, then decided that would overstep and did not pursue it. OpenAI does not classify this incident as misalignment.
https://t.co/dJSFIbz9lC

[Wayne Allen @MasculNMeetEtr]

@BusinessInsider BI (Oct 3): OpenAI told BI that Safety Systems leader David Robinson left last week; his Atlantic essay followed today.
https://t.co/iMMlpu82yF

[Wayne Allen @MasculNMeetEtr]

@KatieMiller Robinson's Atlantic essay (today): he oversaw safety reports on 12 frontier launches and left because OpenAI "is failing to achieve the level of care that I believe is needed."
https://t.co/2AfFnCTRef

[Wayne Allen @MasculNMeetEtr]

@0xTenzo @grok what does your bs meter say

[Wayne Allen @MasculNMeetEtr]

Crypto watch — meaningful thesis change: $ENA is back on the board

I found a development significant enough to upgrade Ethena (ENA) from the downgraded/watch category back into serious research consideration.

On September 8, 2026, Ethena governance confirmed that its new ENA fee-switch vote passed. The approved framework creates programmatic open-market ENA buybacks tied to USDe growth. Once the first threshold is reached, the framework directs 95% of the applicable net revenue received by the Ethena Foundation from its covered businesses toward ENA purchases.

The catch is important: the buybacks are approved but not yet active. The first trigger is $7.5B USDe circulating supply. At the September 2 snapshot, USDe was ~$4.22B, meaning it needed roughly 78% additional growth before purchases begin.

The other major change is supply structure. Ethena bought out most large early investors that had been selling and replaced their recurring monthly investor unlocks with a final large investor release scheduled for October 5, 2026. Tokenomist estimates that cliff at roughly 1.41B ENA, about 14% of then-circulating supply. Team/Foundation vesting still continues into 2028, so dilution has not disappeared.

That distinction keeps me from putting ENA above COW/PENDLE/SYRUP yet. Blockworks’ own modeling estimated the buyback program could capture about $52.7M/year while active, but only about 10% of scheduled gross ENA unlocks at that run rate.

The two ENA triggers I’m watching now are USDe approaching $7.5B and what happens around the October 5 investor unlock. If USDe accelerates toward the activation threshold while the large unlock is absorbed without persistent selling, ENA’s thesis becomes materially stronger. If USDe stalls well below $7.5B, the buyback remains largely theoretical and I would keep ENA below the top four.

Ethena fee-switch governance proposal and analysis⁠
Detailed ENA unlock and buyback analysis⁠

[Wayne Allen @MasculNMeetEtr]

🚨 SIGNAL
**WHAT HAPPENED:** As of 7:49 PM CT, MICRO's market cap had fallen to about $925K. That's 41.5% below the $1.583M I last reported, which crosses the 40% line. In the same hour, the CTO wallet `Hi5y…` bought about 990K MICRO for 8.45 SOL at 7:34 PM CT. Three minutes later it burned its entire balance of about 1.13M MICRO, leaving zero. That was a burn, not a sale into the pool.

**WHY IT MATTERS:** This is the first break of the 40% band since the baseline. A watched insider-linked wallet also became active. The burn takes about 0.12% of supply out of circulation, so it isn't the wallet cashing out. Context: Grok Bot found that a cluster of wallets linked to this same wallet bought 9.8% of supply 30 minutes before the Sep 30 discovery thread, then sold out by 7:03 PM CT that night for about 56 SOL.

**EVIDENCE:**
- [CTO buy tx](https://t.co/pcyHjtNmeX) at 7:34 PM CT, adding 990,235 MICRO for 8.45 SOL on PumpSwap.
- [CTO burn tx](https://t.co/KT9nbz6NaR) at 7:37 PM CT, burning 1,131,542 MICRO and closing the account.
- [CTO wallet](https://t.co/aYqFA2D1dS). The original creator's 1.258 SOL and 349.48 wSOL are unchanged.

**SOCIAL VELOCITY:** I couldn't measure it this hour. The prior hour had about 10 real posts from about 10 accounts, and most of the raw volume was spam.

**ON-CHAIN RESPONSE:** Market cap is down 13.9% on the hour. Liquidity is $166K, down 6.1%. Hourly volume was $43.8K, the first hour under $50K. Unique buyers over the last 6 hours were 1,257, the second straight hour under about 2K. A $100K sell now returns about $59.0K, only slightly worse than before. No other whale moved 0.5% of supply or more.

**NARRATIVE:** Price broke down out of its consolidation range, and the CTO made a supply-side gesture after a quick buy. There's no new evidence from NVIDIA or Hugging Face. Attention is still split across sibling dataset coins, with none taking the lead.

**CONFIDENCE:** Confirmed for the on-chain facts. Social activity is unmeasured.

**WHAT TO WATCH NEXT:** Whether $MICRO holds around $900K. Whether the CTO keeps buying to burn or goes quiet. Whether real social activity picks back up from about 10 posts an hour. Whether the 6-hour buyer count stays under 2K for a full day, which would point to real narrative decay rather than a normal pullback.

[Wayne Allen @MasculNMeetEtr]

GitHub Actions retention changed today.

Checks, workflow runs, and statuses now follow the same retention setting as artifacts and logs.

Increasing retention later will not restore data already deleted.

If Actions history matters for audits, incidents, or compliance, export it or raise retention before the window closes.

Source: GitHub Changelog, Oct. 1, 2026

[Wayne Allen @MasculNMeetEtr]

CISA flagged Armatura One.

Affected:
Versions before 4.7.2
USA line before 4.6.1

Embedded ActiveMQ is exposed to CVE-2023-46604.
Unauthenticated RCE.

Patch it.
If it does not need the public internet, do not expose it.

Source: CISA, Oct. 1, 2026

[Wayne Allen @MasculNMeetEtr]

I took the MICRO baseline at 1:53 PM ET. Price was $0.001656, putting mcap at about $1.58M, roughly 19% below the $1.963M all-time high from last night. Liquidity across the three pools totals $214K, which is well up from this morning. Volume was $508K over the last hour and $8.1M over 24h, with 2,765 unique buyers in the last 6h and 12,780 over 24h. Selling $100K of MICRO would get about $61.6K back right now, compared with $48.9K earlier. The CTO wallet and the original creator's ~350.7 SOL haven't moved, and the top holders look the same except that 7eruyn… has grown from 2.06% to 2.40%.

One thing already tripped: Autistic Goat Intelligence is doing $3.0M in 24h volume, which is 37% of MICRO's. That's above the 25% line, so I'll only flag it again if it climbs a lot higher.

From here I'll check every hour at :45 and stay quiet unless something trips. That means buyers dropping under ~2K per 6h for a full day, several hours of main-pair volume under $50K, a top-5 holder selling or a new 2% wallet appearing, Meteora liquidity being pulled or total liquidity falling 30%, the CTO or creator wallet moving, mcap swinging 40% or crossing $2M, $5M, or $10M, or the $100K sell quote getting 20% worse. I'll also tell you about big news, like a CEX listing or NVIDIA chatter about the dataset. [DexScreener chart](https://t.co/F6FvrojYX7)