Everyone who could censor, did.
Circle and Tether froze ~$340K.
NEAR Intents froze $503K. ⚡
Total recovered by every freeze power in crypto: about $840K.
0.2% of $387.5M.
The attacker still controls roughly $342M. 88.3%. 🚨
Here's why it failed.
Every stolen stablecoin was swapped into native tokens within 41 minutes. A freeze needs an asset with a blacklist function and a target holding still. The attacker gave them neither.
NEAR's SHIELD flagged $50M in attempts. It stopped $503K. Another $166K went through anyway. The rest simply rerouted to other providers.
So that's the actual trade on offer:
Permanent discretionary freeze power.
For 0.2%.
And their own disclosure never names who can authorize release, or how someone wrongly flagged gets their money back. 🔑
THORChain said no. Again.
It said no in May, when its OWN pools were drained for $10.7M. Trading halted network-wide. Attacker addresses never blacklisted.
It said no through Bybit, when $1.2B moved across. The admin key had been retired 11 days earlier.
That key wasn't quietly shelved. Admin Mimir was stripped out of the code in v3.2.0 on Feb 10, 2025. Only a node quorum can move parameters now.
And it cost something real. The lead developer walked that same month, after a vote to block Lazarus transactions was canceled. 🩸
That's what a principle looks like when you actually hold it. It has a price, and someone pays it.
Meanwhile Bitget's own backend signed those transfers. Forged withdrawal commands, written straight into their wallet system. No private key was ever stolen.
Their $464M protection fund covers users. Good. It should.
But that failure happened inside a company with a payroll, an admin key and a pause button — and the proposed fix is for a permissionless network to grow all three. ⚡
THORChain's technical co-founder @CBarraford offered to join the debate publicly.
Still waiting.
Cover the side you're describing. 🎙️
$RUNE
$CRV CRV has one of the most compelling bull cases in DeFi right now.
People sometimes dismiss CRV as a dino coin simply because Curve has been around for years.
But there is a huge difference between an old coin and an irrelevant coin.
Curve is still highly relevant today.
It is established DeFi infrastructure with over $1B in TVL, real protocol revenue, crvUSD, lending, deep liquidity, and one of the strongest token locking models in crypto.
This is not a project surviving on nostalgia.
It is still being used.
It is still generating economic activity.
It is still developing new products.
And CRV still sits at the centre of that ecosystem.
Around 850 million CRV is currently locked.
That is equal to roughly 55 percent of the size of the approximately 1.55 billion CRV circulating supply.
That matters because locked CRV is not immediately available for sale, which can significantly affect the amount of supply actually available to meet new demand.
We already saw how aggressively CRV can reprice.
In late 2024, CRV moved from roughly $0.20 to $1.33 in a matter of weeks.
We do not know precisely how much net buying was responsible for that move.
What we do know is that CRV demonstrated that when demand increases, its price can move very quickly.
Now imagine that dynamic during a proper DeFi rotation.
Curve usage expands.
crvUSD grows.
Lending grows.
Protocol revenues increase.
Hundreds of millions of CRV remain locked.
Demand for CRV and veCRV grows.
And CRV is starting from a market cap of only a few hundred million dollars.
I believe CRV belongs in the top 20 cryptocurrencies.
Calling it a dino coin misses the point.
Curve has history, but it also has relevance, usage, revenue, liquidity, products, and an ecosystem that is still very much alive.
For me, the combination of a relatively small valuation, substantial token locking, real protocol activity, and the potential for renewed DeFi demand creates a very compelling setup.
At around $0.27 today, even $3 to $4 CRV would simply represent the market valuing Curve much closer to the major piece of DeFi infrastructure that it already is.
Gabriel Attal s'est bien vu offrir un diplôme sur mesure par SciencesPo, après avoir redoublé son master d'affaires publiques, ce qui n'arrive quasiment jamais.
Je suis obligé d'en produire les preuves, puisqu'on a tenté de mentir et manipuler à ce sujet.
Entré en 2007 à SciencesPo, il redouble sa deuxième année de master, après un stage d'un an pistonné à la Villa Médicis - sa seule expérience professionnelle à ce jour.
Il n'a pas réussi à faire ce que 95% des étudiants de SciencesPo font, à savoir valider son cursus, pourtant composé d'un stage et de seulement six mois de cours.
Il est cependant recruté dans la foulée par la mère de sa meilleure amie, Alexandra Reveyrand de Menthon, comme conseiller parlementaire de la ministre de la santé et des affaires sociales.
Il a 22 ans, il a accès à un restaurant privé, a deux secrétaires et un chauffeur, et rentre immédiatement dans le 5% des personnes les mieux payées du pays.
Fort de ce recrutement - dont le caractère népotique est caché à l'administration - il demande à SciencesPo un "arrangement".
Celui-ci va lui permettre d'obtenir un diplôme en chocolat.
Au lieu de devoir suivre 24 heures de cours magistraux et travaux dirigés en droit public approfondi, de rendre des travaux, de passer des galops d'essai et de valider un examen final de cinq heures, on se contente de lui demander un mémoire.
A lui qui n'a pas réussi à valider ce module l'année précédente.
Aucune vérification quant au fait qu'il l'ait lui-même rédigé, alors qu'il a un des postes les plus exigeants de la république, ne sera mis en oeuvre.
Au lieu de devoir suivre 24 heures de cours magistraux et travaux dirigés en économie, de rendre des travaux, de passer des galops d'essai et de valider un examen final de cinq heures, on se contente de lui demander de suivre un module de e-learning.
Sans vérification de ce qu'il a véritablement suivi les cours.
Au lieu de suivre des cours d'anglais, qu'il n'a pas réussi non plus à valider (un point commun avec son conjoint, pourtant propulsé à la commission européenne en charge de l'économie), on lui demande de passer une certification.
A cela s'ajoute que, contrairement à ce qu'il laissait entendre, M. ATTAL n'a jamais été diplomé de Panthéon Assas, comme l'a confirmé l'institution.
Aucun diplôme, aucune expérience professionnelle, mais un PACS avec le conseiller politique du président de la République, qui lui offrira circonscription, poste de rapporteur de commission à l'assemblée, secrétariat d'État, accès aux réseaux people de Mimi Marchand, enfin, propulsion ministérielle alors qu'il n'a rencontré qu'une fois Emmanuel Macron et que les deux seules réformes dans lesquelles il a été impliqué, Parcoursup en tant que rapporteur et le SNU en tant que secrétaire d'État, sont une catastrophe.
Et qui se verra en retour récompensé d'une nomination comme ministre des affaires étrangères par son conjoint, en pleine prise illégale d'intérêt.
Je n'accepte pas de voir la justice de mon pays, et des institutions comme le @canardenchaine et @BabonneauMarine, salir l'honneur d'un homme dans le seul but de complaire au politicien de passage.
Ce politiciens aux dents de lait et à l'expérience du pays proche du néant s'était déjà fait servir la soupe, dans un 7 à 8 historique, devant des millions de Français, en instrumentalisant la cause si sensible et délicate du harcèlement, mentant à ce sujet avec une totale absence de décence.
En France, l'impunité a atteint de tels niveaux que les ministres peuvent mentir, fabriquer, accuser et détruire dans l'indifférence et avec la complicité des institutions chargées de les contrôler.
De puissants murs médiatiques sont ainsi érigés pour tenter de masquer la réalité, qui, de l'invention de traumatismes familiaux à la mise en scène de relations amoureuses en passant par la fabrication de parcours en carton-pâte, permettent au système de subsister.
Il nous appartient d'y résister.
Une procédure en diffamation a été intentée.
@jpthor@raynalytics Please don't vibe code a DKLS implementation to Thorchain.
Hire a doxxed and recognized expert to do the implementation, then get AI to review it, then have it audited and re-open your bug bounty program with the scope of this code. 🙏
shipping a testnet this fast while the whole timeline is dunking on you takes serious grit. $10m is a brutal tax for tech debt, but this is exactly how unbreakable infra is forged. I am not a $RUNE maxi, but sincerely rooting for TC to survive this as a builder.
Its wild to me how divisive @THORChain seems to be.
This protocol solved a "holy grail" problem the industry desperately needed to be solved and achieved "the impossible". Any coiner should be in appreciation for achieving something that we all use & take for granted today
it’s the ultimate catch-22. if thorchain blacklists the exploiter, they prove they can censor txs and nuke their permissionless narrative. if they don't, they literally act as the mixer for their own stolen funds. checkmate.
true decentralization is brutal. if TC swallows their pride and lets the hacker wash $10m through their own XMR pools, they eat the short-term humiliation but win the long game. it proves the network is actually unstoppable. zero admin keys.
calling it right now: if this exact scenario plays out, TC lets the swap go through.
There's a good reason THORChain's being smeared online after the recent exploit: symbolism.
The protocol has become the symbol of permissionless finance.
When it dared to try to resist censorship, it painted a massive target on its back. Now, people who champion permissioned protocols are piling on, because permissionlessness is a threat to them.
And yes, even architects of other permissionless protocols are joining in out of pure envy.
THORChain is technology filled with innovation and genius, flaws and mistakes. But, like it or not, in this moment it represents much more than just itself.
Stand with the THORChads, not because you like them, but because right now, they're at the front lines of the war for freedom.
Asgard calls for aid.
Before stealing $9.8M from #THORChain, likely attacker-connected wallets spent weeks moving its own funds through Monero, Hyperliquid, and THORChain. On-chain activity ties them to the wallet that would later receive millions of stolen funds.
It started with Monero.
1/5
@zacodil All the inventory held by MM on NEAR Intents are in a closed source multi-sig. Really poor taste to use exploits to champion your own less-secure, less-decentralized product. Also, your AI slop summary of the root cause is patently false (it’s not attention logic-related).
This past week, the degenerate gamblers in the crypto space exposed themselves: they don't think this is useful, or critical, financial infrastructure.
If they did, they wouldn't be advocating for decentralized systems to be shut down because the wrong people are using them.
No, I won't pull the fire alarm because you lost money at the casino.