Also shipped (& shipping):
• DeFi / stablecoin yields live in-wallet now
• More staking opportunities coming
• Talisman Terminal (AI agent trading dashboard) in active dev
• Mobile app undergoing performance optimization
More coming soon. 🛠️
24-Hour Incident Update
Following our earlier communication, we want to share key, substantive findings from the first 24 hours of investigation. This is an on-going investigation. A full post-mortem will follow when these workstreams are complete. The findings below are what we can responsibly share now.
Tangentially, we are aware of rumors and FUD spreading and intend to address those directly with the evidence we present in our findings. First, this is not an inside job nor is there any team involvement; implications that the team is secretly selling tokens or anything of that nature is entirely false and can be proven empirically. Second and related, we have never engaged with Web3Port. Both ongoing rumors are entirely fabricated.
✅ The Details That Are Confirmed
1️⃣ The attack was not address poisoning of our transaction-construction workflow. Our earlier assessment that address poisoning was unlikely has been confirmed by direct forensic evidence. The team member who proposed the multisig transaction (Signer 1) signed the correct recipient address 0x70ae7D3DECfB4C3aE996fb1c07092566F73D5c15 at 03:17 UTC on May 27, during the internal verification call. The signed payload is preserved verbatim in the local device logs, with the correct address and correct amount.
2️⃣ The attack was a compromise of that signer's private key. A separate valid signature — for a different transaction with the attacker's address 0x70AE678b457C5E1b3fD7AD9537F234dFc1795C15 as recipient — was submitted to the Safe Transaction Service at 04:00 UTC, 43 minutes later. That second signature is cryptographically valid for the same wallet but does not appear in the Signer 1’s local device logs. The mechanism that explains this is that the attacker had independent possession of the private key and signed the substituted transaction from outside Signer 1’s infrastructure.
The remaining signers reviewed the queued transaction in the Safe interface. The attacker's address was specifically constructed to share the same first four and last four hex characters as the correct recipient — both begin with 0x70AE and end with 5C15. This vanity pattern is used to appear as the correct address in the Safe UI preview. Specifically generating these fake vanity addresses takes time and resources and implies premeditation and planning on the attacker’s end (more mention of this in point 4). Following confirmation the preview, the remaining signers signed the transaction. The on-chain execution followed at 17:59:24 UTC.
3️⃣ Funds are fully traced and currently parked on Ethereum. Within ~4 hours of execution, the attacker liquidated the stolen GUA on PancakeSwap, swept proceeds to an operational hub wallet 0xb292a7016c0008e786edca46459ccee063673afb, bridged the value to Ethereum via cross-chain protocols, and consolidated approximately 2,783.99 ETH into three cold-storage wallets that currently hold the funds with zero outflows:
- 0x111b78A86C16dBD4261FCb5C7D3A9dAF25E2b589
- 0x7b8f28Ff2E1D4DF2D8ddD1daBaFf8c3E58FE841C
- 0xfa4cb6add9da4a4b714541b98fd4b2e3da86b7c8
- A separate ~170,121 USDT was bridged out.
4️⃣ The attacker is using substantial, reusable infrastructure. The operational hub address and the three Ethereum cold-storage addresses are each surrounded by brute-forced lookalike "vanity twin" addresses that the attacker is seeding with fake transfer events using Unicode-spoofed token symbols (ETH, EṬH, ĖTḨ). The same vanity-address construction technique produced the address used against our project. The scale and pre-staging of this infrastructure indicates an industrialized operation rather than an opportunistic one-off attack.
We will continue to publish substantive updates as the investigation progresses, while protecting information that could compromise active workstreams. We continue to work closely with authorities, white hats, and tracing services. We thank the community for its patience.
We are investigating a security incident that occurred for the token, $GUA, through a suspected address poisoning attack on May 27, 2026, which has caused significant volatility on the token.
Initial findings indicate an address manipulation through a multisig transaction intended to release additional unlocked tokens into the airdrop claim contract, which allows users to claim unlocked airdrops.
The intended address for this is 0x70ae7D3DECfB4C3aE996fb1c07092566F73D5c15 (the intended address) but the resulting address the executed transaction sent to was 0x70AE678b457C5E1b3fD7AD9537F234dFc1795C15 (the hacker address).
The hacker address never had any interaction with any addresses associated with SUPERFORTUNE previously, so address poisoning as an attack vector is unlikely. Furthermore, internal operating procedures account for address poisoning attempts by matching addresses through several checks.
We are continuing to investigate the hack and will provide the community on an ongoing basis. We have contacted authorities and incident response teams to assist.
$MANTA is about to send to $0.18🎯
After that expecting a correction & sideways before the next impulse to the upside!
Bull targets (with time): $1 / $2.5 / $6
Not financial advice! #MANTA
🔐 Durov just made decentralization cool again
So we checked who's actually leading
Here are the most decentralized blockchains by Nakamoto Coefficient on Chainspect
The higher the score, the harder it is to take control → https://t.co/qKUxLAS82r
Polkadot bounties history.
Bounties have been one of the main mechanisms in Polkadot OpenGov for coordinating treasury spending and supporting ecosystem growth.
OpenShore lets you explore the historical activity of major Polkadot bounties through visualized treasury data.
@MantaNetwork This project is winding down so take profits if it pumps, a lot of @cz_binance are being delisted from @HyperliquidX $SCR @Scroll_ZKP is being delisted so exit and take profits on anything @binance alpha or launched on binance
Its all propped up by leverage
$MANTA
Did you know @Polkadot is the most decentralized blockchain in Web3?
With a Nakamoto Coefficient of 178, Polkadot ranks #1 across all networks
Transparency and user control only work when decentralization is built into the network itself
📊 https://t.co/qKUxLAS82r
.@Polkadot will end up proving a lot of people wrong in the long run.
While most chains focused heavily on hype cycles and speculation, Polkadot quietly leaned into infrastructure.
A lot of the recent activity isn’t just coming from meme coin trading or short-term excitement.
It’s coming from real systems operating behind the scenes DePIN, AI coordination, confidential compute, machine networks, and cross-chain communication.
Projects like @Acurast and @peaq are showing that machines and AI agents don’t care about narratives the way humans do.
They care about efficiency:
i. low fees,
ii. stable execution,
iii. interoperability, and
iv. decentralized coordination.
And that could end up being one of Polkadot’s biggest advantages over time.
$DOT | @Polkadot hits a new Staking ATH with ZERO marketing
While others spend millions on hype, $DOT secures its future through pure conviction.
The Data:
🔹 892M+ DOT Staked: ~53% of the current circulating supply is now locked.
🔹 Hard Cap: Supply is now capped at 2.1B tokens (No more infinite inflation).
🔹 Supply Shock: With over half the supply bonded, sell pressure is at an all-time low.
My Interpretation:
🔹 Real trust doesn't need ads; the network’s security is its own marketing.
🔹 The shift to a fixed supply makes DOT a scarce, high-utility asset.
🔹 Holders are choosing long-term rewards over short-term exits.
This is a massive signal of fundamental strength 💎
Write in the comments: How do you interpret this new staking ATH? 👇
#Web3
Most DOT stakers don't realize they're leaving yield on the table.
DeFi is where full of arbitrage opportunities and Bifrost's vDOT minting UX makes that visible.
Mint 10,000 DOT → 6,096.216 vDOT
Swap 10,000 DOT → 6,163.550 vDOT
Difference: +67.334 vDOT.
Since vDOT remains redeemable for the underlying DOT after the standard 28-day unbonding period, that swap route could be redeemed for around 10,100 DOT.
Annualized on a 10,000 DOT position, that spread represents ~13% APR captured purely through better routing.
This is the beauty of DeFi.
14 сезон Junk Fun уже стартовал ! 🦝🚀
Кошелёк забит «мертвыми» NFT и токенами, которые буквально ничего не стоят?
С Junk Fun ты можешь:
🔥 Сжечь мусор, который невозможно продать
💰 Вернуть SOL-ренту, заблокированную в них
🏆 Получать награды просто за очистку кошелька
Начните уборку: https://t.co/OLdB1A29Wz 🗑️✨
Polkadot's reserved coretime cap just went from its previous limit up to 50 cores.
Not a policy change. A capacity change. Demand was trending toward the ceiling, so the ceiling moved before it became a problem.
$DOT #Polkadot#Coretime
Объявление о завершении программы Manta Staking 🌇
Мы прекращаем программу Manta Staking и хотим прозрачно объяснить причины.
Инфляционные награды за стейкинг — доход, генерируемый за счёт выпуска новых токенов — со временем размывают долю каждого держателя $MANTA. Поскольку мы консолидируем ресурсы Manta Network вокруг одного чёткого направления, мы пришли к выводу, что это не является правильным долгосрочным механизмом для токена. Сворачивание программы — это правильное решение.
В то же время мы берём на себя полную независимую ответственность за инфраструктуру второго уровня Manta Pacific. Вместо того чтобы полагаться на сторонних операторов для выполнения ключевых функций сети, мы переходим к самостоятельному управлению секвенсером и базовым стеком. Это часть более широкой стратегии по развитию Manta Pacific как более компактной и автономной сети в будущем.
Как было объявлено ранее, вывод из эксплуатации Manta Atlantic уже начался. Сроки и процесс перехода были опубликованы и находятся в стадии реализации.
📌 Ключевые сроки для Manta Staking:
Награды за стейкинг официально прекратятся через две недели — 20 апреля 2026 года (начиная с сегодняшнего дня)
Операторы могут выйти из программы в любое время, начиная с текущего момента
После установленного срока новые сетевые награды больше начисляться не будут
Для делегаторов:
Ваши средства остаются полностью в безопасности и под вашим контролем
Вы можете вывести средства из стейкинга в любое время через дашборд
Ограничений на вывод нет
Мы рекомендуем всем участникам управлять своими позициями до истечения двухнедельного срока.
Спасибо всем операторам, делегаторам и участникам сообщества, которые поддерживали Manta Staking на протяжении всей программы.
— Команда Manta
Important metric showing #Polkadot on-chain activity heating up thru the month of April 🔥🚀 $DOT 🌐
Shout out to #Moonbeam as well making some nice gains ✅ $GLMR✨