TOBIΞ

Web3 consultant | Previously @opensea, currently @artradeapp, @Ta_da_io head of support and @WakweliChain moderator.

Customer Support | Partnership | Teacher

[TOBIΞ @TobWeb3]

@WakweliChain Building trust in the digital world ofc, wakweli's catch phrase 👌

[BLΛC @blac_ai]

Just so others don't make the same mistake I did:

1 - email from SR, looked completely legit, but the @ was different, I didn't notice because I literally sat down with coffee and the email came through.

2 - Went to a real SR site, looked 100% like SR, but the url was something like notifications(.)superrare(.)com

3 - prompted me to connect my wallet to see the offer details, i did, and that was it.

2 years of my life here in this space, gone in a button click.

Be safer than me.

[Uniswap @Uniswap]

Blobs are officially live on Arbitrum 🔷

Median gas cost to swap is now around $0.05

[ternoa. @Ternoa_]

🚨 ANNOUNCEMENT🚨

We're honored to welcome @anuragarjun, former co-founder of @0xPolygon & co-founder of @AvailProject, as a @Ternoa_ advisor! 🚀

As an @ethereum ecosystem pioneer, Anurag will share his expertise and connections to fast-track Ternoa's Tech adoption within ETH ecosystem

📅 𝗗𝗼𝗻'𝘁 𝗺𝗶𝘀𝘀 𝗼𝘂𝘁: An exclusive video AMA with @anuragarjun & @CanuMickael coming soon 🤩

👉 Got questions? Let us hear them!

🎉 𝗕𝗼𝗻𝘂𝘀: 💜 & 🔄 & 💬 ask a question for a chance to win $CAPS 1,000!

We will pick 10 questions for the AMA 🎁

[Wallet Guard @wallet_guard]

🚨 MICROSTRATEGY X HACKED

The official X page for MicroStrategy has been compromised & is distributing wallet drainer links. They have already drained over $400k so far.

Wallet Guard users are SAFE! 🫡

Share to help keep others safe! 🛡️

[Plum @Plumferno]

Just got a DM from a friend who is a mod in a Discord where someone came in and opened a support ticket and posted a voice message.

The message sounded just like one of the people on the team, probably created with AI being fed bits of recorded audio (Spaces/Stages etc).

The message said, "Hey dude, it's ****, my account got locked out, can you give me perms here".

It was apparently fairly cohesive and didn't sound fake, and the only obvious tell that it was fake was the scammer got the name of the person wrong; IE used 'John' instead of 'Steve', for example.

So while I don't expect that this will be a common method, please be aware that it's something that's happened, and tell your teams to watch out for it. If you don't have multiple ways for your team members to get in touch with each other and verify their identities, you should absolutely handle that ASAP. Don't just rely on Discord or Twitter, have a backup plan in case someone's account is compromised!

[Dr. Tech @doctechmd]

Two-factor authentication

[Plum @Plumferno]

Have seen/heard a lot of people asking about diff chains or diff wallets

TL;DR - if you didn't use your wallet today, for ANY CHAIN, you're fine

This is a problem for you even if you do not use a Ledger. It is not just Eth - any/all dApps/Web3 websites that might have used that code are possibly at risk.

Best advice, if you can wait until tomorrow (or later??) to interact with some website, probably a good idea to just sit tight.
If you MUST transact on a blockchain today, be extremely cautious. Check with the team behind the website directly to see if they have updated their code, or weren't affected.

If you can't verify with the dApp/website/protocol, and you absolutely have to interact/transact- make sure you have some sort of transaction simulation which can help you understand what's going on in the back end. WalletGuard, Pocket Universe etc can provide this for you. (There are def others, I don't keep track of them all)

Be paranoid!!!

"Go touch grass, crypto is closed today!" - @Jon_HQ

[Ledger @Ledger]

UPDATE: The genuine Ledger Connect Kit 1.1.8 is now fully propagated. Ledger and WalletConnect can confirm that the malicious code was deactivated. You are now safe to use your Ledger Connect Kit. Reminder that that we always encourage clear signing.

[TOBIΞ @TobWeb3]

👀

[Brian Gi @xbriangi]

Holy damn

Google is pricing out OpenAI

60 API queries per minute FOR FREE

That will be sufficient for 90% of developers.

Especially important for those developing in 3rd world countries where $1 of cost matters.

Free training data also

I don't see how OpenAI isn't screwed

[TOBIΞ @TobWeb3]

@brookejlacey @Trezor I have the model T since my employment at opensea and I find the touchscreen horrible to use.
This said : https://t.co/a1pYJ57ztw

[Josu San Martin @josusanmartin]

The vulnerability affects every dapp, not just Ledger users. Do not use any dapp.

[TOBIΞ @TobWeb3]

@sxtvik And something in your plate.

[TOBIΞ @TobWeb3]

@sxtvik It is not about happiness, it's about having a fucking roof on top of your head.

[TOBIΞ @TobWeb3]

@Plumferno 👆👆👆

[Ledger @Ledger]

🚨We have identified and removed a malicious version of the Ledger Connect Kit. 🚨

A genuine version is being pushed to replace the malicious file now. Do not interact with any dApps for the moment. We will keep you informed as the situation evolves.

Your Ledger device and Ledger Live were not compromised.

[TOBIΞ @TobWeb3]

@fakenine_ 👆

[TOBIΞ @TobWeb3]

@MentalMonkeyM @LefterisJP @DeFi probably -> https://t.co/zVzoUXSCXf

[RpGmAx @RpGmAx]

Je viens de vérifier et le fichier a été modifié il y a 2 heures environ, dans la version 1.1.7 du connect-kit Ledger : https://t.co/7dElP8a65u

[TOBIΞ @TobWeb3]

@LNvsLN

[TOBIΞ @TobWeb3]

"...but before the bullish movement, let's drain your wallets"

[WF @WhaleFUD]

JUST IN:

The CTO of the cryptocurrency wallet Ledger anticipates a bullish crypto cycle.

[I'm Software 🦇🔊 @MatthewLilley]

🚨🚨🚨 RED ALERT 🚨🚨🚨:

Do not interact with ANY dApps until further notice. It appears that a commonly used web3 connector has been compromised which allows for injection of malicious code affecting numerous dApps.