1/ Since a lot of people are waking up to see their perps positions closed and wondering what the hell “Auto-Deleveraging” means, here’s a quick and dirty primer.
What is ADL? How does it work? And why does it exist?
Last 10 days were really difficult for me as one of my main wallets got drained.
It was quite sophisticated and almost felt like a targeted attack.
I was following my regular routine, nothing special, just casual chart analysis on TV, Dexscreener and my dev work on windsurf.
Suddenly, a mac pop up appeared asking for my system password for an update and ofcourse I didn’t put any password in the pop-up as it looked phishy to me.
I instantly checked my wallet which was connected to the browser and all my funds were there, so I thought I’m good as I've not put my password in the pop up.
And without wasting a single second I started checking all the system processes but everything seemed normal and all running processes were default @Apple system processes.
I dig a bit deeper and found an oascript running, I grep’d its pid and killed it which instantly closed the update pop up. I thought I’m safe now but later I found out that a LaunchAgent was constantly running an another script again and again in the back under an official apple process name, which was then sending all the data to a hosted server in Amsterdam, Netherlands (could be a VM so doesn't matter)
I started to check logs as fast as I could and found out this script with name “lovemrtrump”, it was a long multi page script and at this moment I was almost certain that its a malware attack to steal my data.
I quickly opened my uniswap wallet to send my funds to a safe wallet but it was already too late.
I saw all my hard earned money being sent to an another wallet. I just froze in disbelief.
It wasn’t just about the money, but also all my sleepless nights, sacrifices, and the sense of security slipping away right before my eyes.
I was shaking and tried to look for the remaining funds but it was all gone. They knew everything where I have kept and staked my funds, and instantly unstaked and sent it all to a fresh wallet.
I found out what happened, but couldn't find out how they entered my system. It was not a local network attack.
All my accounts are 2FA / 3FA secured.
I didn't download any Unauthorised app.
I don't click random links or ads.
I don't open emails from unknown sources or click links attached in the emails.
And it was a brand new just 2 months old mac (bought from Apple store)
I thoroughly checked every single link I visited in the days before the hack and there was nothing unusual.
I call it targeted because the hacker(s) did quite some research before taking control of my wallet as they knew where are my funds staked/kept. Plus, I could not find the source of injection.
The only possibilities I can think of are either a by-pass malware download or a new type of CAPTCHA scam, where users solve a normal CAPTCHA and malware is downloaded onto their system.
Or it could be because of a vulnerability which was recently found in the chrome browser on @apple devices. But I am not sure of exactly how they entered my mac and got system level access.
Hackers removed most of the traces so I couldn't do much.
Plus I needed to move on, so I saved all the logs in a drive and did a factory reset of my mac. I tried for a week straight with no sleep but I could not find the source of injection, which is actually the worst part.
Approximate fund loss across @Base, @ethereum and @HyperliquidX :
5200 USDC
1.26 ETH
$400 worth of $TURBO
$400 worth of $Andy on ETH
~500k TRUST
~1k $VIRTUAL
Vader, AiXBT, and other Virtual Agents worth ~1k USD
~670k ROOM
As you know I am a trader and I use funds frequently, so I kept them in my hot wallet. I could have done better tho, I should have transferred my stables and ETH to my Hardware wallet and tbh, I was about to.
I should have used a separate device for crypto with VPN.
I should have connected a hardware wallet with my browser wallet.
I am not rinsed but its a significant loss for me.
This was the reason for me not being active for all these days, thanks for all the people who stood by me in my hard times.
In the end, all we can do is, move on, keep working harder and learn from our mistakes.
Take it as a reminder, and take all the security steps right now on an immediate basis.
Compromised Wallet:
0xe7096dAf78c15bF0889230a328e3482930F3c936
Hacker's Wallet:
0xA7247BD94d87C138806A98806F3BF6f8A1e8c593
I traced back and found out that all the tokens were swapped for ETH, bridged to ETH mainnet and then distributed among 3 wallets:
0xE2cfcC4dBB937dc4439d174fB3093aFE25eE64c5
0xeb437b3791D4A34f39A263AF6D826820721150f9
0xF6893e5d2Ad5d4bDcEfaafe8d5ce17fFf593B54E
10 pieces of crypto advice I wish I followed earlier
1) Start small
The goal when starting out is to practice, gather data, and improve over time. The issue is that most people greed and size more after a few wins. Sizing smaller allows you to flip flop less, have more conviction in trades, and lets you learn without blowing a hole in your wallet.
2) Never settle for less
Don't settle for something with zero bids because its cheap. You want to bid what's in demand not what people want to dump on a second's notice. Runners are built on momentum. If you always fade it you might as well put your money in equities and gold instead.
3) Have a risk on & risk off criteria
There are ways to play when you are bullish and a way to play if you are bearish. Have a defined criteria to look for when you have a bullish bias and vice versa. The habits that made you money in a bull market are the same ones that will ruin you in a bear market.
4) Probabilistic Thinking
Instead of asking yourself if BTC will go to $200k, ask yourself how to position in case it does and how to position in case it doesn't. This goes similarly with risk reward. It's not about being right. It's about how much you stand to gain if you are right and how much you stand to lose if you aren't.
5) Don't be a bag holder
Never hold something forever. Other than BTC which you may be able to make the case for the only thing to hold onto is profits. It doesn't matter how much someone tries to convice you this coin is set to go to the moon. There is no profit unless you take and keep it. Don't let anyone shame you for selling.
6) Embrace Risk
There is no risk free set up. If you want profit you need to embrace the risk that comes with it. Too many people set arbitrary stops, second guess themselves, chop themselves up, cut trades too early or late, etc. Embrace the risk and keep it manageable. If you can't take the loss you have too much size.
7) Too patient on bottoms and too impatient on tops
On bottoms, it's easy to be more conservative or only bid BTC to be safe compared to bidding risk on alts. Alternatively, on tops everyone is risk on and trying to get as much ROI on alts as they can. There is no way to avoid risk completely but when the market is down bad and you see signs of momentum why not bid when the market is quieter vs when the market is up and the risk reward becomes worse?
8) Be consistent
The people who succeed over time are likely the ones who show up everyday to put in the work. The same concept applies to trading. The ones who make it are the people who continue watching markets at the depth of the bear market. The ones who continue practicing when everyone else has lost interest. The ones who keep putting in the work when there is seemingly no reward.
9) Don't just watch and actually try
The perpetual observer will never make money. If you have an idea just try it out with a small amount of capital you are willing to lose. There is no replacement for putting your money where your mouth is. Sometimes you just need to eat the bullet so you can gather more data. I fear the man who has failed a thousand times over the man who sounds smart but has never tried.
10) Be an optimist
Optimism is one of the most +EV attitudes you can have. See the silver lining in the market when everyone is pessimistic. Look for the potential in a trade. See the good in others. Optimism attracts others.
I apologize for those who'll follow me from this point forward as I'd be helping in raids or in grinding for whitelists. Feel free to unfollow as it means doing multiple retweets and screaming LFG WAGMI on project posts