Spreek

[roinevirta.eth🔴🟢 @roinevirta]

Keystone customer data leakage - contains your name, contact details, shipping address, and order information, including the items purchased and their prices.

[Spreek @spreekaway]

@uttam_singhk most likely people exiting their unbacked bridged coins into the native asset but yea

[Spreek @spreekaway]

Initia chain hacked and a bunch of tokens infiniminted.

Hacker has cashed out $2.6m thus far with more in flight

[Spreek @spreekaway]

@lukecannon727 they infinited the bridgeable tokens and bridged it back themselves draining the bridge contract, no need to sell anything.

effectively means the AUSD and similar is unbacked on initia right now.

[Spreek @spreekaway]

@maxbphi market always moves slow in response to hacks

[High Yield Harry @HighyieldHarry]

We’re here today to discuss why you clicked on the Knicks championship ring phishing email

[Spreek @spreekaway]

https://t.co/EUtu4m4E8M attacker address

[Spreek @spreekaway]

https://t.co/LJypEoP9JJ

sample fake mint

[Spreek @spreekaway]

@0x_Osprey

[Spreek @spreekaway]

@Scholars_Stage https://t.co/8OZIwEvz5y

don't know that any of the ideas are super great but they aren't gibberish

[RE:Skob @re_skob]

Interesting idea. Had tokens to burn so I got Opus to put it to the test

[Spreek @spreekaway]

@0x_widehat correct, seems they've done so

[Spreek @spreekaway]

Admin keys for Swell DAO's swETH and rswETH appear to be compromised (railway related?)

* Attackers are raising NAV by max 1% (unbacked) each hour

* Four malicious upgrade contracts have been deployed (although not queued yet through multisig) that could steal approx 2500 ETH

[Swell @swellnetworkio]

We are aware of reports of suspicious activity on the swETH and rswETH contracts.

Our team is investigating now with our security partners and taking all necessary precautions.

No ETH has left the swETH or rswETH withdrawal or deposit contracts.

No action is required.

[Spreek @spreekaway]

@tayvano_ Just timing, it's pure conjecture on my part, lemme know if you find anything more concrete

[Spreek @spreekaway]

https://t.co/jpRX7kKtYQ

(Claude written report, I have not verified everything so take with a grain of salt, but I believe the top line information is correct)

[Tay 💖 @tayvano_]

They did drain crypto keys that were in Railway.

Seems like an okay sweeper script (read: not something homegrown for this one op)

Attacker:
0xd9773325282874d18cb83f1fe50f14c39750b2ee

~$371,000
Oct 21 19:36 UTC
500+ txns
200+ distict addresses
19+ EVM chains

[Varunram Ganesh @varunram]

Railway is compromised, rotate all API keys as soon as possible

Deployments are down so don’t wait to redeploy

Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack

Stay safe friends

[Spreek @spreekaway]

@GwartyGwart a lot of their advertising is really aimed at the intelligensia i feel - probably to keep the regulatory capture route available.

also average bettors are probably fairly price insensitive but many do probably have the intuition that they are getting ripped off by the house.

[Joel Grus 🤠 @joelgrus]

she's a 10 but that was supposed to be a random 384-bit number

[Farside Insights @FarsideInsights]

--- BEGIN PRIVATE KEY ---