It started at $38M. Then $70M. Then $88.6M. Galaxy Research now confirms 1,596 BTC stolen from ~7,300 addresses - and with the suspected fourth wave, the real number is closer to 2,055 BTC (~$130M).
Would you still trust a hardware wallet after this?
Please open Telegram to view this post
VIEW IN TELEGRAM
POV:
> You’re 55 yo
> Worked your whole life
> Built a decent portfolio at 40
> Kept it growing
> Made the right moves and investments in crypto
> have a beautiful family now
> son is almost ready to go college
>calm saturday evening u receive a call from coinbase support
>the support guy said all the right things
>you now believe your account is secure
> calm sunday morning
> you sip coffee and open your phone to check your portfolio
> your lifetime worth of investments and your son’s college fund is gone
>it’s now in the hands of a 19 y.o. Gamer who hasn’t left his chair in 3 days.
> You’re 55 yo
> Worked your whole life
> Built a decent portfolio at 40
> Kept it growing
> Made the right moves and investments in crypto
> have a beautiful family now
> son is almost ready to go college
>calm saturday evening u receive a call from coinbase support
>the support guy said all the right things
>you now believe your account is secure
> calm sunday morning
> you sip coffee and open your phone to check your portfolio
> your lifetime worth of investments and your son’s college fund is gone
>it’s now in the hands of a 19 y.o. Gamer who hasn’t left his chair in 3 days.
5
⚠️ THE TRUTH ABOUT “NO-KYC” CRYPTO CARDS
“No KYC” doesn’t necessarily mean no data collection.
Even if you don’t submit ID to the platform, your issuer, payment processor, card network, merchants—and your on-chain activity—can still leave a trail.
Many no-KYC cards also come with trade-offs: lower spending limits, higher fees, limited support, and fewer protections if something goes wrong.
They’re interesting to experiment with—but don’t mistake “no KYC” for complete privacy.
📱 Join @Although
“No KYC” doesn’t necessarily mean no data collection.
Even if you don’t submit ID to the platform, your issuer, payment processor, card network, merchants—and your on-chain activity—can still leave a trail.
Many no-KYC cards also come with trade-offs: lower spending limits, higher fees, limited support, and fewer protections if something goes wrong.
They’re interesting to experiment with—but don’t mistake “no KYC” for complete privacy.
Please open Telegram to view this post
VIEW IN TELEGRAM
2
After draining a victim’s wallet for $500K, the attacker swapped the stolen funds using maximum slippage and accidentally paid over $370K in fees, receiving just 67 ETH ($130K).
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🚨 JUST IN: A new exploit has surfaced that can cause iOS devices to crash in any chat where the payload is sent.
⚠️ Attention all group owners: We highly recommend adding the exploit to your blacklisted words or enabling your anti-spam/anti-exploit filters as soon as possible to help protect your members.
For updates and more information:
📢 @although / @larplounge
⚠️ Attention all group owners: We highly recommend adding the exploit to your blacklisted words or enabling your anti-spam/anti-exploit filters as soon as possible to help protect your members.
For updates and more information:
📢 @although / @larplounge
A Trezor user says they lost their life savings after clicking what they claim was a sponsored Google result impersonating Trezor.
The fake page was allegedly hosted on Google Sites and tricked victims into entering their wallet recovery seed.
Trezor says it’s escalating the report and working to have the phishing site removed, while reminding users to NEVER enter a recovery seed into any website or online form.
The reported Bitcoin address (bc1qrz33mr7tx8wrpcs2pxrvv83hqwpm907s9shkz4) has received 24 BTC in the last 48 hours.
Google-sponsored phishing ads remain a major attack vector for crypto users.
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
He was found naked on the street after the fall, and his apartment was completely ransacked, indicating this was an IRL hit.
It is unclear what was stolen.
Please open Telegram to view this post
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
What happens: due to the ~0.5ms server latency. They send and delete emojis within 0.1ms, preventing them from fully reaching the server, and repeat this until they get the desired result.
@although
Please open Telegram to view this post
VIEW IN TELEGRAM
Harmony hit by massive $3B+ ONE exploit
A flaw in Harmony’s cross-shard verification allowed attackers to mint around 3T $ONE tokens without authorization.
The tokens were quickly moved to exchanges, sending ONE down up to 50%. Harmony paused the bridge, deployed a patch, and is working on a possible rollback.
A flaw in Harmony’s cross-shard verification allowed attackers to mint around 3T $ONE tokens without authorization.
The tokens were quickly moved to exchanges, sending ONE down up to 50%. Harmony paused the bridge, deployed a patch, and is working on a possible rollback.
2