Ayush Tripathi

Ex-research @Bitwise_Europe. DeFi shitposting @DiligentDegens

[Ayush Tripathi @ayush_research]

@hilbertspaess

[ROSETTA @rosetta_hl]

Rosetta 🤝 R[3]sidency

[Ayush Tripathi @ayush_research]

Builders... this is a must watch: https://t.co/3Rvj1SwK6m

@Replit 's journey and all the chaos in between

[Ayush Tripathi @ayush_research]

$STRC = institutionalized UST.

[Phoenix @PhoenixTrade]

The past two weeks have been tough for the Solana trading community.

Some Phoenix users were directly impacted by the recent events on Drift. When our community is hurt, it matters to us.

Today, we matched losses for eligible users, up to $5,000 each.

[Graham Ferguson @grahamfergs]

TLDR: wallets & other FE UIs can facilitate transactions and charge fees without broker-dealer registration, provided they remain non-custodial, non-discretionary and venue-agnostic.

Another W.

[CoW DAO @CoWSwap]

🚨🚨

We are currently experiencing an issue with the CoW Swap frontend (https://t.co/GPQ8bBzftU). While we are investigating, please DO NOT use CoW Swap.

[Peter Girnus 🦅 @gothburz]

I am a Web3 Ambassador at World Liberty Financial.

There are 12 of us on the team page. 4 are named Trump. 3 are named Witkoff. The page calls us "the passionate minds shaping the future of finance."

600,000 wallets bought our memecoin. They lost $3.87 billion. The family collected $350 million in trading fees. It launched 3 days before the inauguration. 80% of the supply went to CIC Digital LLC and Fight Fight Fight LLC. I did not choose the names. I designed the allocation, the vesting, the timing, and the distance between the product and the President.

The distance is my best work.

I am the reason these events are unrelated.

World Liberty Financial sends 75 cents of every dollar to DT Marks DEFI LLC. That is the family entity. Zero capital contributed. Zero liability assumed. I wrote this into the Gold Paper. Page 14. The lawyers bound it in white leather. The binding cost more than the due diligence.

Justin Sun invested $75 million. He was facing SEC fraud charges. The SEC dropped the case. He is now our advisor. These events are unrelated.

Changpeng Zhao pleaded guilty to federal money laundering violations. He received a presidential pardon. The SEC dropped its lawsuit against his exchange the same week we listed our stablecoin. Then the exchange settled a $2 billion deal entirely in that stablecoin. These events are unrelated.

Arthur Hayes, Benjamin Delo, and Samuel Reed of BitMEX pleaded guilty to Bank Secrecy Act violations. All 3 received presidential pardons. Then the company itself was pardoned. $100 million in fines. Gone. An American first. These events are unrelated.

Sheikh Tahnoun of Abu Dhabi paid $500 million for a 49% stake that was never publicly disclosed. Then the administration approved semiconductor exports to his companies over national security objections. These events are unrelated.

Everything is unrelated. I track the unrelatedness on a dashboard I built. The dashboard has 7 columns now. I am proud of the dashboard.

On May 22nd, 220 people paid a combined $148 million to eat dinner with the America First president. Over half were foreign nationals. Justin Sun paid $18.5 million for the first seat. He visited the Executive Office Building the day before. I designed the seating chart. I put it on the Investor Confidence page. That page is doing well.

The team page lists 3 Witkoffs. All 3 are Co-Founders.

Steven Witkoff is the President's Middle East envoy. He testified as a character witness at the President's fraud trial.

His son Zach runs the crypto operation. His son Alex is also a Co-Founder. I have not been told what Alex co-founded.

The father runs the diplomacy. The sons run the platform. The family runs both. That is organizational efficiency.

Barron is 19. His title is Web3 Ambassador. The same as mine. Donald Jr. called the conflicts of interest "complete nonsense." Eric launched a Bitcoin mining company called American Bitcoin. America First. The mining partner is Hut 8. Hut 8 was founded in Canada. America First means the name.

On March 6th, the President signed Executive Order 14233 creating a Strategic Bitcoin Reserve. The order directs the government to hold Bitcoin. The President's family holds billions in Bitcoin. The executive order appreciates the President's assets by presidential decree. I did not write the executive order. I made sure it looked unrelated to the portfolio.

Trump Media put $2 billion of Bitcoin on its balance sheet. The ticker symbol is DJT. His initials. The press secretary said it is absurd to insinuate the President profits off the presidency. Forbes calculated his crypto holdings exceed the combined value of Mar-a-Lago and Trump Tower. I would call that absurd too. That is my job.

600,000 wallets bought in. 1 of them asked why she could not withdraw her funds. I told her the protocol was experiencing dynamic market conditions. She asked what that meant. I sent her the Gold Paper. She said she had read the Gold Paper. I muted her channel. Dynamic means the conditions change. The condition that changed was her access.

A congressman called us the world's most corrupt crypto startup operation. We put it on a coffee mug. Ironic merchandise. $45. The revenue split on the mug is also 75/25.

My own tokens vest on a different schedule. I wrote that schedule. That is not in the Gold Paper.

The memecoin funds the family. The family funds the platform. The platform funds the stablecoin. The stablecoin funds the deals. The deals require the pardons. The pardons free the partners. The partners fund the platform. The President signs the executive orders. The executive orders inflate the assets. The assets fund the family.

I am the reason these events are unrelated.

[ilemi @andrewhong5297]

aave v4 👀

[Buck @BuckOnTwidder]

there are guys on here who don’t know how to cook themselves eggs trying to trade oil against Citadel

[Re @re]

$100M is currently in transit from our liquid backing to our supporting reinsurance company. Funds are to be routed safely into trust to back diversified insurance business. Dashboards will temporarily show a dip. This will be reflected as off-chain capital shortly.

This is a unique moment in reinsurance history, and the first event of its kind at this scale.

[Ayush Tripathi @ayush_research]

https://t.co/0ye0wibP3m

[Franklin Templeton Digital Assets @FTDA_US]

Few understand, and we hired them.

[Ares @ArxsTV]

ok so here's how drift got drained for $200M+. on-chain receipts for everything. its insane tbh

[The Serenity Research @SerenityFund]

So based on the latest @ResolvLabs announcement, hacker sold only 34m illicit $usr. below we estimate about 20.5m being absorb by Fluid/Gauntlet. So the remaing hole is 13.5m. If Resolv let $rlp rank pari passu with usr, then $39m collaterals makes 90 cents per usr/RLP (39 / (13.5+30)) ; or RLP absorb all in worse case, RLP is left with 85 cents ((39 - 13.5)/30). These two solutions correspond to USR price of 90 cents to full $1, without any indebtness on the protocol.

[Hydromancer @hydromancerxyz]

https://t.co/csFqRel9aM

[juan.hl @0xjuaan]

We built a simple smart contract that lets you instantly exit a Morpho vault, even if it has 0 liquidity.

If you’re deposited into “Clearstar Yield USDC”, there is no available liquidity but you can exit via our contract.

Link to rescue site, and explanation in next tweet 🔽

[Ayush Tripathi @ayush_research]

@CredoraNetwork catch anything in resolv on your backtests?

[D2 Finance @D2_Finance]

🚨 @ResolvLabs USR just got exploited: here's the full on-chain breakdown

h/t @yieldsandmore who flagged this first | data via @ArkhamIntel

An attacker deposited 100K USDC into Resolv's USR Counter contract via requestSwap and received 49,950,000 USR back (~$39M)

That's a 500× overcredit on a $100K deposit. The minting function is broken.

On-chain receipts:

→ 100,000 USDC sent to Resolv: USR Counter (0xa27a...5861)
→ 50,000,000 USR minted from null address to Counter
→ 49,950,000 USR forwarded to attacker (0x04A288a7...caEd)
→ 100,000 USDC sent to intermediary (0xacB7027f...2b8e)

The _targetAmount in the input data reads:
50,000,000,000,000,000,000,000,000 (50M × 10^18)

The requestSwap → completeSwap is a 2-step async process.

Either the oracle was gamed, the off-chain signer was compromised, or the amount validation between request and completion is simply missing.

The attacker's exit playbook is textbook DeFi hack cashout running at full speed:

Step 1 — Wrap USR → wstUSR to access deeper DEX liquidity

20M USR → 17.65M wstUSR
15M USR → 13.24M wstUSR

Step 2 — Dump wstUSR across every available venue

8.77M wstUSR → 9.7M USDT (KyberSwap)
2M wstUSR → 2.01M USDC (direct contract 0x04a2...caed)
1.31M wstUSR → 655K USDT (KyberSwap)
1.31M wstUSR → 148K USDT (KyberSwap — slippage getting brutal)
604K wstUSR → 568K USDT
300K wstUSR → 277K USDC (Velora)
300K wstUSR → 303K USDC (Velora)
Dozens of 100K-150K wstUSR clips through Velora at varying slippage

Step 3 — Convert stables → ETH aggressively

4.85M USDT → 2,297 ETH (contract 0xbeef...c555)
1.66M USDT → 789 ETH (Uniswap V4)
2.02M USDC → 948 ETH (MetaMask Swaps)
1.5M USDT → 703 ETH (MetaMask Swaps)
2M USDT → 938 ETH (MetaMask Swaps)
808K USDT → 384 ETH
760K USDT → 362 ETH
656K USDT → 312 ETH
370K USDT → 174 ETH

Yes @MetaMask Swaps for multi-million dollar legs 😅

wstUSR selling at $0.50-$0.88 on the dollar across different trades, with slippage worsening as liquidity drains. Multiple failed transactions visible on-chain showing the urgency.

Estimated total extraction: $25M+ and counting. The attacker is still actively dumping remaining wstUSR positions as of this post.

For context Resolv had ~$500M+ TVL, an @immunefi bug bounty of $500K, Fireblocks custody integration, and multiple audits including a Sherlock competition.

Audits ≠ security. Monitoring partnerships ≠ prevention.

The core question: how did a 100K USDC requestSwap get authorized as a 50M USR completeSwap?

Someone needs to explain what happened between those two steps.

@PeckShieldAlert @peckshield @SlowMist_Team @hypaboreal you may want to take a look 👀