iRodders | $XBG

[Pocket Universe 🟣 @PocketUniverseZ]

A long-time Pocket Universe user lost $17,000 after signing a malicious transaction

We covered every cent through our up to 30,000 USDC coverage

Here's exactly how it unfolded 👇

[Kerberus @Kerberus]

📝 Kerberus 2025 Recap

Acquisitions, expansions, and the stat we're most proud of:

0 losses for our users now in 3+ years 🔥

Here's how the year unfolded 🧵

[Pocket Universe 🟣 @PocketUniverseZ]

Pocket Universe Major Update

Our biggest expansion ever

All your transactions are now enhanced with Kerberus technology:
- 99.9% detection rate (0 losses for users for 3+ years)
- 50+ chains (previously only 12)
- Most wallets!

🧵

[Kerberus @Kerberus]

Happy New Year from all of us at Kerberus! 🎉🛡️

[DeFiConnect 🦫 @Defi_connect_]

⚡ Most crypto losses don’t come from broken code, they come from human error.

@metrokatz and @An7i21 from @Kerberus show why mismanaged keys, phishing, and malware dominate exploits, and why fully automated, real-time protection beats user warnings.

Watch how they’re tackling the weakest link:
https://t.co/yJ2WRmvd0I

[Kerberus @Kerberus]

Kerberus Web3 Security Weekly Recap 📝

$7M stolen from Trust Wallet users,
Flow blockchain halted for 30 minutes,
Aave's $10M revenue dispute exploded, and much more

Here's what you need to know 👇

1️⃣ Trust Wallet Chrome Extension Hack

Someone obtained a leaked Chrome Web Store API key and pushed version 2.68, disguised as a normal update. Hidden within what appeared to be analytics code was a seed phrase stealer that activated when you unlocked or imported a wallet. Only the Chrome extension got hit. Mobile and hardware wallet users were completely safe.
https://t.co/5gcwV6n5Tc

They patched it to v2.69, took down the attacker's server, and CZ immediately said they'd cover everything. “Funds SAFU.” They've identified 2,596 actual victims, but over 5,000 people are filing claims.
https://t.co/SUJFPuuHbd

The crypto community DDoS'd the hacker's data-collection site, slowing the attack. If you used Trust Wallet's Chrome extension between Dec 24-26, check if you're on the affected list. Real victims are getting 100% reimbursed.
https://t.co/UsWBGhqQJE

2️⃣ Flow Blockchain Exploit

On Dec 27, Flow Blockchain got hit with an execution-layer exploit. The attacker exploited a bug to mint fake tokens and bridged approximately $3.9M off-chain, eventually laundering it to BTC. Important to note: no actual user funds were stolen. Real balances stayed completely safe throughout.

The team shut down the network within 30 minutes to limit damage, but $FLOW still tanked amid fear. They initially planned a rollback, but dropped it after bridge operators pushed back.
https://t.co/wnKut0z3jO

Instead, they went with a surgical fix: burn the fake tokens and temporarily freeze the tiny fraction of accounts (under 0.1%) that received them.
https://t.co/7nmShxA2HV

Phase 1 restart went live on Dec 29. The Cadence side is now fully operational, covering 99.9% of activity, including most apps and NFTs. The EVM side remains read-only during final checks, and bridges are coming back gradually.
https://t.co/ADnehNWEaC

3️⃣ Aave Governance/Revenue Drama

Aave Labs quietly integrated CoW Swap as the default on their frontend on Dec 4. A week later, a delegate discovered that fees estimated at $200K/week were being sent to Labs wallets rather than the DAO treasury. Previously, Labs had voluntarily contributed ~$1.1M in 2025.
https://t.co/77zDSQiOYg

The community erupted over "stealth privatization" after Labs built the frontend using DAO's brand and liquidity without a governance vote. Labs argued they self-funded the frontend, and that protocol revenue ($140M annually to the DAO) remained untouched. A rushed proposal to transfer IP/brand to DAO failed spectacularly during the holidays.
Price chart showing the damage: https://t.co/2TBzQyUIM8

Founder Stani bought $15M of AAVE personally and committed to clearer alignment going forward. Drama is cooling off now with both sides talking. No user funds or security were affected.
https://t.co/E7W58X0ofm

4️⃣ Gnosis Chain Hard Fork Recovery

Gnosis Chain recovered $9.4M from the Balancer hack through a hard fork, freezing hacker addresses and moving funds to a safe wallet for victims. Smooth execution, but raises questions about immutability vs protection.
https://t.co/vmBg6wY2ob

5️⃣ Stealka Malware Warning

The new "Stealka" malware is spreading via fake game cheats and cracks, targeting 80+ crypto wallets, including MetaMask and Phantom. Stay away from sketchy downloads.
https://t.co/4ljxnsAdek

6️⃣ Private Key Leak Drain

Two wallets were drained of $2.3M in USDT after private keys were leaked; the attacker swapped to 757 ETH and ran it through Tornado Cash. This is why you need hardware wallets and should never store your seed phrases digitally.
https://t.co/53IBe38Nvv

7️⃣ Lido DAO adopts SEAL agreement

Lido DAO has adopted the SEAL Whitehat Safe Harbor Agreement, allowing ethical hackers to recover funds during live exploits without fear of lawsuits. Unanimous vote protects $26B in staked ETH and joins 20+ protocols covering $45B+.
https://t.co/rpwj3cKmPZ

8️⃣ CertiK 2025 Skynet Hack3d Report

Web3 lost $3.35B in 2025 across 700+ incidents according to CertiK's new security report. Private key compromises and social engineering attacks were the primary culprits, while supply-chain attacks caused the most damage.
https://t.co/zYqwC1jOSu

That's all for this week's recap 🔚
Thank you for reading!

About us: Kerberus is the market-leading Web3 security solution for detecting scams, phishing, and hacks in real time. 0 user losses for 3+ years and up to $30,000 in transaction coverage.

See you next week 🫡
Stay protected, stay informed, and remember as always:

You make the profits, we keep them yours 🛡️

[CCN - Crypto Citizens Network @CCNCitizens]

🛡️ @Kerberus CTO, Danor Cohen (@An7i21) joins CCN to discuss Web3 scams, phishing attacks, privacy trade-offs, and why users alone cannot stay safe on-chain.

Watch the full interview with @LorenaNessi ⬇️ 📺
#Web3Security #Crypto #Blockchain #Cybersecurity

[Kerberus @Kerberus]

“Security isn’t something users should have to think about; it should just work”

Our cofounder @metrokatz shares Kerberus’s mission, big news, and commitment to real-time protection at @SolanaConf and beyond

🎥 Full video below

[Kerberus @Kerberus]

«Kerberus is pushing toward a “secure by default” future for crypto.» - @CCNDotComNews

Check out the full interview with @metrokatz from @SolanaConf: https://t.co/ao2rsgQcfW

[Kerberus @Kerberus]

🚨 The State of Wallet Safety on Solana in 2025 🚨

Our findings show why users need guardians more than ever 🧵👇

[Kerberus @Kerberus]

Meet Kerberus

The face of Web3 security 🛡️

[Kerberus @Kerberus]

Two co-founders. One mission.

Danor Cohen and Alex Katz take you behind the scenes at Devconnect 🇦🇷. Why they came to Argentina, what drives Kerberus, and where real-time protection is heading next.

[Kerberus @Kerberus]

Last week was one for the books!

@EFDevcon 🇦🇷
@summit_defi 🔒
De.Fiesta w/ @Ledger @1inch @certora 🕺
Web3 Security Sundown w/ @ChainPatrol @cantinaxyz @dltlaw_ 🌇
@partyactionppl 🔗

The gatekeepers of Web3 showed up on-chain, on-site, everywhere 🛡️

Here’s how it went 👇🧵

[Pocket Universe 🟣 @PocketUniverseZ]

After non-stop user requests...

We are now protecting you from scams on SOL! 🟣

Pocket Universe will now keep you safe on all of your Solana transactions when you use Phantom

[Kerberus @Kerberus]

Next stop tonight: DeFiesta 🕺

We’re here with some of the coolest names in the space – 1inch, Ledger, CertoraInc – talking real-time protection, human behavior, and the future of DeFi and cybersecurity

Kerberus is on the scene 🛡️

[DeFiConnect 🦫 @Defi_connect_]

“You make the profits. We keep them yours.” Kerberus

@Kerberus joins DeFiConnect as a Platinum Sponsor! Meet the team at Ciudad Cultural Konex in Buenos Aires.

🎟️ https://t.co/qEdBYwiPZG

[Kerberus @Kerberus]

Kerberus joins the speakers' lineup for Privacy & Compliance Summit at DeFiConnect

Meet us at Ciudad Cultural Konex in Buenos Aires during DeFiConnect on 19 November

Link to tickets in 🧵

[Ofir 📍🇸🇬 @OfirEliasi]

Most teams treat security like an afterthought.

At @Kerberus, we build it into the flow.

Our protocol monitors cross-ecosystem transactions in real time, detecting risks before they become losses.

No retroactive fixes, no endless audits - just live, verifiable security logic that keeps protocols and users safe.

Because security isn’t about stopping you.

It’s about making sure you can keep shipping.

[Kerberus @Kerberus]

We're sorry.

[Ofir 📍🇸🇬 @OfirEliasi]

https://t.co/VEllJOdJ4E