Noodles

Geopolitical and macro cycle analyst. Founder @NoodlesResearch. I connect the dots others miss. -The Research Terminal-

[Noodles @criptopaul]

On January 9th, we wrote that Greenland was theater. That the real target was Iran. And that oil would cross $100.

Brent was trading below $70. Nobody was talking about Tehran.

Five months later: the largest air campaign in Middle East history, the Strait of Hormuz closed since February 28th, Brent averaging $107 in May.

And today, Trump announced the next step on Truth Social: “We will be taking Kharg Island, and other oil infrastructure points, and assume total control of their Oil and Gas Markets.”

Now read what we published in The Iran Playbook, days before his announcement:

“Phase 3: The ‘Limited’ Operation. Seizure of Qeshm Island. Possibly Kharg Island. Framed as a maritime security operation. ‘Protecting critical energy infrastructure.’ Never called an invasion.”

Word for word. The island. The framing. The vocabulary.

This is not luck. It is pattern recognition. Every American war follows the same script: a provocation, a “defensive” response, a “limited” operation that becomes permanent. Vietnam started with advisors. Iraq started with liberation. Iran is starting with an island.

An occupation that cannot be defended without escalating, and cannot be abandoned without humiliation.

This is the moment the world change. The socio-economic shockwaves of a permanent war in the Gulf will hit every economy on the planet: energy, food, shipping, inflation, debt.

America is dragging itself into a vortex with no exit. And it is dragging everyone else down with it.

[NoodlesResearch @NoodlesResearch]

Jobless Claims drop in 6 hours. Last print was 199K, consensus sits at 200K, and the forward 90 day projection points to 266K.

The chart shows claims parked in the 1st percentile of history, deep in the tight labor zone. If the number prints near 200K, the Fed stays patient. If it starts drifting toward that 266K projection, rate cut odds explode and risk assets front run it.

Watch the trend, not the single print.

[Noodles @criptopaul]

TAKE CARE!

https://t.co/W8c7d8XNgV

[Onchain Lens @OnchainLens]

RAILWAY BREACH: $369K+ IN SUSPECTED WALLET DRAINS

Following Railway's security breach, a suspected attacker wallet has moved at least $369.3K to HitBTC and other addresses.

The wallet also received funds from an address linked to the CryptoBillis Ledger Drainer. Its connection to the Railway breach remains unconfirmed.

Found suspicious wallets or transactions? DM us the addresses or txn hash to help track the activity.

[Noodles @criptopaul]

Half the internet went offline yesterday, and almost nobody is explaining what this actually means for normal users and retail.

In less than 24 hours, 4 core pieces of the web got hit at the exact same time:

PHP (1.5 million sites vulnerable without even logging in): exploit details leaked before the patch was even out. Governments, ports, and even Wikipedia had to pull the plug on their own sites just to stay safe. Any unpatched site (e-commerce, portals, forums, backends) can now have its entire user database (emails, passwords, personal data) dumped automatically.

GitLab (a 10/10 severity bug hiding in the code since 2014): anyone self-hosting GitLab to store their app or company code is at risk of having their source code and deployment keys stolen.

LiteLLM (hacked for the second time this year): this is the "bridge" almost every AI app, AI agent, and bot uses to talk to ChatGPT or Claude. Yesterday’s update shipped with a built-in trojan that stole all saved passwords and keys the moment it was installed.
Railway paused every deployment globally: attackers breached the system storing customers' secret environment variables (.env). And here is the real nightmare for retail: a massive amount of web apps, AI agents, Telegram trading bots, crypto dashboards, and startups run on Railway and store their database passwords, API keys, and bot wallet private keys right in there.

What should you actually do today?

Empty your Telegram bot and AI Agent wallets
If you use sniper bots, Telegram trading bots, smaller web terminals, or AI agents where you deposited funds, move your money back to your personal wallet (Rabby, Phantom, or ideally a Ledger) right now. Tons of these tools run on Railway or use LiteLLM, if their databases or secret files were read yesterday, any custodial wallet generated by those bots is compromised.

Delete your Exchange API Keys (Binance, Bybit, Hyperliquid, etc.)
Have you ever connected your exchange account or Hyperliquid (via API keys or Agent Wallets) to an external copy-trading platform, trading journal, AI bot, or alert tool? Go to your exchange and revoke/regenerate those keys immediately. If that service's backend was on Railway or used LiteLLM, your API keys might already be in the attackers' hands.

Clean up permissions on @RevokeCash and be careful what you sign
If a crypto project got its GitLab or Railway breached, attackers can silently push malicious updates to the official website (frontend hijack) or abuse exposed admin keys. Avoid signing transactions on smaller dApps today unless strictly necessary, and clear out old approvals on @RevokeCash.

Fix your email and password hygiene (for real this time) With 1.5 million PHP sites exposed, massive database dumps of emails and passwords from thousands of regular websites, online stores, and old forums are going to leak over the next few days. If you still reuse the same password across multiple sites, they will get into everything:

use unique passwords for every site
delete old accounts from sites and forums you no longer use (or use a data-removal tool)
most importantly: never use the same email you use to sign up for random websites/forums for your exchanges or financial accounts. Keep a separate, locked-down email (with Passkeys or app-based 2FA, never SMS) strictly for your money.

[Noodles @criptopaul]

Uh , it's going to be a long red day... https://t.co/QQ2vooPhmD

[Noodles @criptopaul]

Quick update for everyone who signed up over the last few days:

We had a temporary issue with our confirmation emails and several verification links never reached your inbox.

This is now fixed:
• Every recent account has been unlocked — check your inbox or sign in directly with your password.
• New registrations now open the Terminal immediately with zero email wait.

https://t.co/NefSUEYaOA

[Noodles @criptopaul]

Nobody has this in real time :

https://t.co/VjnuHzBNk8

[Noodles @criptopaul]

@albanianeagle2k @IntCyberDigest @elonmusk They are both bad

[Noodles @criptopaul]

The next crisis will not be financial or on Wall Street, but social and in the streets and socials. A social breakdown born from hatred and spreading through the world’s major cities will cause chaos.

[Noodles @criptopaul]

And let me say this right away, before any comment, don't come lecturing me about immigration as an American, when America was born on immigration and is built 100% on it. Period.

[Noodles @criptopaul]

If violence is attributed entirely to a minority perceived as foreign, society is not forced to question its own educational, academic, and social failures.
It is far more reassuring to imagine an external threat ("just deport them" or calls for "remigration") than to admit that those young people are the product of our own cities and suburbs….

[Noodles @criptopaul]

Cities will have problems with food, supplies, and energy. Banks are extremely overleveraged.

[Noodles @criptopaul]

Move away from cities, live in areas close to sources of food and water, and do not keep money in a bank, hold USDT instead.

[Noodles @criptopaul]

or this..

[Noodles @criptopaul]

Nobody has this in real time :

https://t.co/VjnuHzBNk8

[Noodles @criptopaul]

It cannot stop now.

[Noodles @criptopaul]

Civil war and social tension is coming in every country. Inflation, driven by a broken economic system, has made it impossible for people to pay rent or make ends meet, even with a decent job.

[Noodles @criptopaul]

Someone has been exit liquidity for STRK unlock right?

How come, as previously mentioned, Ansem, Mp, and others were suddenly pushing STRK in particular? 🤷‍♂️

[Noodles @criptopaul]

Irony of the week. This is really so funny.

Until last Sunday Starknet was the "dead chain" meme. Down 97 to 98% from the 2024 highs, revenue in free fall, thin TVL, a 127 million STRK unlock every single month, the airdrop drama, the outages. One exchange delisted spot and perps on October 5.

Then October 8. The quantum topic explodes, Eli Ben-Sasson floats the idea of leaving Ethereum to become an L1, "the first fully quantum-resistant network, 2027 target". $STRK goes from under $0.06 to above $0.11 in days and leads the whole market for a while.
Now read it again. "Actively considering". Not a decision, not a date, not a line of code shipped. TVL, revenue and supply are exactly what they were last Sunday.
On October 15 another 127 million STRK unlock to investors and early contributors. Five more of those follow, one every month until March 2027.

[Noodles @criptopaul]

Apparently, yesterday's spike was triggered by an intercepted missile over Yanbu, Aramco's strategic hub.
Yanbu is the terminal of the East-West pipeline, the world's only bypass around the Strait of Hormuz….

Threatening global oil's actual and only "Plan B" is why OIL and the VIX instantly exploded.

[Noodles @criptopaul]

Vix 22% up and Oil up , something is happening we dont know.

[Noodles @criptopaul]

Vix 22% up and Oil up , something is happening we dont know.

[Noodles @criptopaul]

That's it.

[Mario Nawfal @MarioNawfal]

🇦🇱🇪🇺 WTF is going on with students in Europe?!

I guess setting sh*t on fire when you’re angry with the government is seen as an appropriate reaction now.

Good luck with that!!

Writer: Jamie

[Noodles @criptopaul]

The next major terrorist threat will be of a cyber nature: we could witness a total shutdown of air traffic or a temporary collapse of the financial networks.