NanoJS

Blockchain Forensic Investigator. DeFi exploit investigator. On-chain fund tracing. Published by @RektHQ Chain of Evidence.

[NanoJS @NanoJS10]

Grateful to @RektHQ for publishing my Zunami Protocol investigation as the first in their new Case File series. Deployer-to-attacker contact, a 143-day staging chain through KYC exchanges, and fund flow to Coinbase and ByBit, all on-chain and verifiable.

[Rekt News @RektHQ]

Four exploits, $2.97M gone, and a deployer wallet that shouldn't have known the attacker existed. Three years later, a forensic investigator pulled the thread on @ZunamiProtocol. Five exchanges, an FBI filing, and wallets still moving in 2026.

https://t.co/LczNJTY4z8

[NanoJS @NanoJS10]

@usithetalk Based on my previous investigations into project exploits, where I traced some of the stolen funds to @MEXC, MEXC was the only exchange that responded promptly and took immediate action.

[NanoJS @NanoJS10]

@zachxbt @usithetalk The crypto market is increasingly becoming driven by political ideologies. Every day, there's a new policy, while the real culprits remain protected. What a pity.

[NanoJS @NanoJS10]

@NoxosIntel @Eveningtraders I will like to test your tools across all my past investigations and see the outcome.

[NanoJS @NanoJS10]

@Travelgirlvl @NoxosIntel Not all time

[NanoJS @NanoJS10]

@NoxosIntel What is the attribution based on, is't timing analyst, Gas spent, or the denomination value?

[NanoJS @NanoJS10]

@chainalysis I don't think DPRK is involved in the exploit but the end will justify the means

[NanoJS @NanoJS10]

@zachxbt @0xfortizo The name of @ZachXBT is always on the TL when there is an issue but the name get rekt when there is a warning about a project or contribution. We all know what we are doing 😉

[NanoJS @NanoJS10]

@RektHQ @SingularityNET 🤔

[NanoJS @NanoJS10]

@zachxbt @aaakasei People tend to be honest when they have issues but immediately there issues get solved they are nowhere to be found. It is so sad that Bad actors are more beneficial than the white hat actors. One thing I know for sure ,the good deed also pay but it frustrating at times.

[NanoJS @NanoJS10]

@zachxbt @bestnftseen It exhausting for how most project/organisation in the space overlook the effort of investigators/security developers. They don't care if everything is moving fine with them but once there's an attacks they all remember there is an existing investigators somewhere 💔

[NanoJS @NanoJS10]

Welcome back everyone.
It was a long break for me, more updates Will be coming in on the Bonzo finance exploit investigation. Stay turn

[NanoJS @NanoJS10]

@Cointelegraph Another man down

[NanoJS @NanoJS10]

What if the real story behind the $8.2M Visor Finance exploit wasn’t the exploit itself?
I traced the money.
From pre-funding → exploit → Tornado Cash → collector wallets → Binance
@GammaStrategies @CertiK
@FBIDirectorKash @pcaversaccio Here’s the on-chain trail. 🧵

[NanoJS @NanoJS10]

@zachxbt @sentosumosaba @iTrustCapital DeFi projects do this a lot. Let’s wait and see what the two projects have to say. Am 100% sure they will denie the claim

[NanoJS @NanoJS10]

@SpecterAnalyst @evilcos Imagine an attacker first emailed or DM’d the project, warning them about the vulnerability as a white-hat disclosure, but they ignored it. Some projects even insist everything is fine until the exploit happens.
At least, cases like this should serve as a lesson to other projects

[NanoJS @NanoJS10]

@Cointelegraph The patterns we’ve relied on for years are changing, and the next generation of blockchain investigations may look very different.

[NanoJS @NanoJS10]

The trace is changing.
See you on the other side 😎

[NanoJS @NanoJS10]

EIP-4337 changed how USDC transfers can look on-chain.
The wallet paying gas isn’t always the user. If you’re still tracing transactions with the old “tx sender = actor” mindset, you may be missing the real flow. Bundlers. Paymasters. UserOperations. EntryPoint.

[NanoJS @NanoJS10]

EIP-4337 changed how USDC transfers can look on-chain.
The wallet paying gas isn’t always the user. If you’re still tracing transactions with the old “tx sender = actor” mindset, you may be missing the real flow. Bundlers. Paymasters. UserOperations. EntryPoint.

[NanoJS @NanoJS10]

Where are we heading? Every day, it feels harder to imagine a future without exploits. The world is evolving so fast, but many projects aren't keeping up with security standards.
Technology is moving forward, but security needs to move with it.

[NanoJS @NanoJS10]

@sprunky_eth @RektHQ @KiiChainio @MANTRA_Chain @TacBuild This is interesting. Are you investigating the case at the moment? I will like to take the case to find where the trails end