miksan 👊

life is the best ⚙️

[Polymarket @Polymarket]

BREAKING: Russia's emergency alert app has now been hacked to warn of an incoming nuclear strike, hours after Ukrainians received similar fake alerts.

[Coin Bureau @coinbureau]

⚠️ ALERT: BloomTrading Bot users report nearly $1 MILLION in wallet drains, with 9,408 SOL traced to a suspected attacker wallet.

Reports identify roughly 49 victims, with the largest individual loss reaching 1,636 SOL, worth about $166,000.

Total losses could be higher as more affected wallets emerge.

Victims report losses from wallets whose private keys were imported into the trading bot, while USDC reportedly remained untouched in several cases.

BloomTrading’s team is reportedly investigating and has paused some services.

Users are being urged to move remaining assets to fresh wallets, disconnecting alone won’t protect funds if a private key has been compromised.

[Julien ⚡ CryptoBoost @realcryptoboost]

Un Ledger peut passer tous les tests d'authenticité… et envoyer tes 24 mots à un inconnu par réseau mobile.

❌ Pour moi, c'est terminé. Je raccroche les hardware wallets.

Et ça me fait mal de l'écrire. Pendant des années, c'était LE conseil. "Not your keys, not your coins." Achète un Ledger, range ta seed, dors tranquille. Je l'ai répété moi-même.

Ce qu'on a trouvé dans des Nano X vendus neufs, sous blister intact :
1️⃣ Une deuxième carte cachée derrière l'écran, à la place du coussinet
2️⃣ Une batterie remplacée par une plus petite pour faire de la place
3️⃣ Une puce, une antenne, une eSIM et un modem 4G

L'implant ne touche pas la puce sécurisée. Il lit l'écran au moment où ta phrase de récupération s'affiche, puis il l'envoie. Le "Genuine Check" reste au vert.

Ledger a confirmé un implant dans l'appareil d'une victime. Plus de 70 millions de dollars auraient été vidés chez des clients d'un revendeur officiel en Asie du Sud-Est.

🚨 Et ça ne resterait pas en Asie. Un acheteur affirme avoir trouvé des câbles en trop dans un Ledger acheté en magasin, chez un revendeur officiel européen. Selon Mark Karpelès (ex-patron de Mt. Gox), l'antenne porterait une étiquette "version eurasienne". Il pourrait donc y en avoir d'autres en circulation.

📍 Et le plus beau : la réponse officielle. Leurs systèmes ne sont pas compromis et il faut acheter chez le fabricant ou chez un revendeur agréé.
Et devinez quoi ? Le revendeur était agréé.

⚫ Rien ne prouve que tous les Ledger soient piégés. Mais c'est justement le problème : tu ne peux plus le prouver toi-même. Tout le trajet entre l'usine et ton salon est une boîte noire.

Le hardware wallet n'avait qu'une seule promesse : ne faire confiance à personne. Aujourd'hui, il faut faire confiance à l'usine, au transporteur, au revendeur, au magasin… et à un tournevis.

🚩Je pense que cette industrie n'a plus d'avenir. Pas parce que la puce est mauvaise. Parce que la confiance ne se répare pas avec un firmware.

[Ledger Support @Ledger_Support]

Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.

Reach out to Ledger customer support through official channels with any questions: https://t.co/4p918UH8yb

[Coin Academy @coinacademy_fr]

🚨 Un plan de plusieurs mois a mené au vol de près de 100 M$ depuis des wallets Ledger modifiés ?

Pendant que des dizaines de millions de dollars étaient drainés sur des Ledger achetés chez CryptoBilis, on découvre que la société avait changé de mains dès mars 2026.

Des analyses montrent des appareils physiquement modifiés avec composants LTE, antenne et eSIM dissimulés derrière l’écran pour intercepter les seed phrases.

Nouveau propriétaire chinois, anciens dirigeants sous contrat de confidentialité jusqu’au 19 octobre : le timing est plus que louche.

[miksan 👊 @mikcripto]

@playcambria https://t.co/kkkdIIuPYs

[miksan 👊 @mikcripto]

I just joined the Brave Rewards Card waitlist! If you sign up earlier, you can get more benefits once it's live. Sign up now. Takes only a few seconds: https://t.co/AmouvARt19 @brave @AttentionToken

[yuko. @imyuk0]

Hanno i vostri dati

ATTENZIONE AL POST

mi chiama un operatore da SafePal con sede a Milano

la scusante è che con le nuove normative si sono dovuti adeguare e bla bla bla

Avevano i miei dati di spedizione e telefono in questo caso

ve la vendono come "hardware di un lotto con chip difettosi"

Ovviamente sono cazzate

Volevano sapere se avessi interagito con altri exchange o altre dapp

che dovevo creare un wallet nuovo

inviandomi una mail (mirroring) che identificava l'operatore con un codice specifico..

-

insomma non sto a dilungarmi troppo volevo avvertirvi che se avete dispositivo Safepal e vi contattano telefonicamente stanno cercando di truffarvi

-

Ora mi chiedo Safepal come farà fronte a questa problematica? che se devo fare a pugni è per colpa loro

(ingenuo io che non ho messo un centro posta di ritiro obv)

[Liquid Network 🌊 @Liquid_BTC]

We are aware of a security incident on @Liquid_BTC. Purported white-hat hackers have withdrawn ~4,000 BTC (~$320 million) from the Liquid Federation wallet. The @Blockstream team is working on contacting them on-chain with a signed message.

What we know so far is that the funds were withdrawn via the SideSwap PAK (Peg-out Authorization Key), but that key was not compromised, nor were any others.

Exchanges have been notified and have already paused (or will pause) LBTC deposits and withdrawals. Other Liquid assets such as USDT, DePix, and RWAs are unaffected by this security incident.

Bridge nodes have been temporarily disabled, so no new transactions can be submitted to the network. Effectively, the Liquid sidechain is paused until this issue is resolved.

Liquid wallets will be impacted, and we're sorry for any inconvenience. Federation members are actively working on resolving this so we can restore normal network activity.

You can monitor the situation via @mempool's https://t.co/M46Zhn8nlY site below:

https://t.co/B8j9u4j6i4

[Crypto Banter @crypto_banter]

🚨XRP HEALTHCARE WALLET HACK EMPTIES 4,011 ACCOUNTS!

Attackers drained about 267,664 ripple:native from @XRPHealthcare’s mobile wallet on Sept. 3, plus millions of $XRPH.

The sweep hit 4,011 app wallets in about three hours. The haul was then bridged through NEAR Intents and swapped into 445,198 DAI that is still sitting on Ethereum.

The project says staking may have exposed seeds. It has flagged the trail with exchanges and police.

[Crypto Banter @crypto_banter]

🚨HARMONY PLANS TO SHUT DOWN ITS CHAIN AFTER 7 YEARS!

@harmonyprotocol proposed killing the 2019 mainnet and moving $ONE to Ethereum after a final-block snapshot and airdrop.

The team cited threats from state actors and AI agents, and said it will pivot into an AI video remix business.

Users were told to exit contracts by Sept. 10. Multisigs, pools, and apps will not migrate.

[Coin Bureau @coinbureau]

⚠️ALERT: Crypto neobank Avici is being drained in an apparent ongoing attack.

More than $1 MILLION has left card collateral accounts on the Solana-based platform, per on-chain data, with the attacker's wallet funded through the deBridge cross-chain bridge.

Avici says it is "aware of an issue affecting card balance withdrawals" but has not confirmed a loss or called it an exploit.

The solana:BANKJmvhT8tiJRsBSS1n2HryMBPvT5Ze4HU95DUAmeta token has crashed 49% to a record low, while fake Avici phishing sites have reportedly stolen another $600,000 from users.

[Btcandres 285⚡ 9🌊 🔦🔑🦡🥩🐇🕳️☣️6.15🛰️🆖🆙🌋 @BtcAndres]

Cada Ledger 🤮 corriéndola app de Ethereum 🤢 es vulnerable a sustitución de firma.

“Haces clic en "Enviar 0.01 ETH a Alice" en una dApp.

Ledger muestra: Enviar 0.01 ETH a Alice. ✓

Le das click en Aprobar.

Firma devuelta: approve(attacker, MAX_UINT256) en tu DAI 🚨.

Nada en el dispositivo parecía incorrecto. Nada lo estaba.” 👇🏽

[Coin Bureau @coinbureau]

🔥SHOCKING: Tokenized Pokémon cards have OUTPERFORMED Bitcoin in 2026, emerging as one of crypto’s strongest RWA trades.

The physical market peaked with a $16.5 million Pikachu Illustrator sale to one buyer.

Onchain, Collector Crypt’s $2,500 Pokémon pack generated $82.9 million in three weeks from thousands of buyers, about 40% of its June volume.

MemeStrategy has also wrapped a single card variant into a licensed investment vehicle, while major crypto platforms race to bring collectibles onchain.

[Gabriel Santos @DehumanoaDeus]

🚨 ÚLTIMAS NOTÍCIAS! O engenheiro que criou o Claude Code do zero acabou de publicar um vídeo de 28 minutos que é ouro puro :

como escrever prompts que realmente entregam resultados absurdamente bons.

Já vi cursos de US$ 300 que nem chegam perto do que ele explica nos primeiros 10 minutos.

Arquivos CLAUDE. md, atalhos de memória, sessões paralelas e padrões de prompting que quase ninguém usa…

Tudo em um único vídeo. Totalmente gratuito. Sem enrolação.

Não importa se você é desenvolvedor, está começando agora ou já usa o Claude há meses : isso muda o jogo para você a partir de hoje.

Salve. Assista. Compartilhe.

[BSCN @BSCNews]

Ledger Fixes Vulnerability In Ethereum App Signing Flows

Ledger CTO Charles Guillemet (@P3b7_) says a vulnerability affected certain clear signing flows in its Ethereum app.

Ledger Donjon discovered the issue, which was fixed about two weeks ago.

Guillemet said users who keep their Ledger firmware and apps updated are protected. He also criticized a security firm for disclosing the issue after the fix.

[Coin Bureau @coinbureau]

🚨SHOCKING: AliExpress was secretly tracking users through their computer's audio system without consent.

A developer only discovered it because his Bluetooth headphones stopped switching between devices while browsing the site.

He found hidden scripts playing an inaudible sound and measuring how each device processed it differently, creating a fingerprint that cannot be cleared like a cookie.

The scripts also collected screen data, device memory, mouse behavior, and network signals, all sent back to Alibaba's servers.

Muting the tab does not stop it. Firefox and Brave block it by default. Chrome does not.

[yuko. @imyuk0]

Oggi giornata bella carica

1800 eth drainati

Il problema sempre tramite morpho comunque

[miksan 👊 @mikcripto]

@imyuk0 @playcambria Io mi son trovato meglio con la pesca che con il dangeon.. ad ognuno il suo..

[BSCN @BSCNews]

Coldcard losses pass $70M as Coinkite expands warning to newer devices

The Coldcard (@COLDCARDwallet) exploit has grown far beyond first estimates, with over 1,080 bitcoin:native worth more than $70M drained from nearly 1,200 wallets, per Galaxy Research and engineers at Block.

@Coinkite confirmed the cause: a 2021 firmware bug that swapped the hardware random number generator for a weak software fallback, leaving seeds open to brute force. Affected: Mk3 on 4.0.1–4.1.9, Mk4/Mk5 below 5.6.0, and Q below 1.5.0Q, unless generated with 50+ dice rolls.

Patches are live, including Mk3 4.2.0 released Friday, but updating alone fixes nothing. Users must generate a new seed and migrate funds. Drains are reportedly still ongoing.