Crypto
12 subscribers
24 photos
195 links
Download Telegram
🐋 Tom Lee's Bitmine just swallowed another fat stack of ETH

Bitmine Immersion Technologies dropped roughly $47 million on 17,362 more Ether last week at a press-release price tag near $2,700 a coin. That pushes chairman Tom Lee's treasury past 6 million coins held outright, and once you fold in the staking positions it's about 4.9% of everything circulating on Ethereum today.

▪️ 17,362 ETH bought last week — roughly $47 million at the ~$2,700 headline price
▪️ Treasury now past 6 million ETH held outright
▪️ Stack the staking book on top of that and you land at ~4.9% of circulating ETH supply
▪️ The number arrived in a press release, not a fill report. Nobody showed you the actual executions — and nobody ever does
▪️ Same playbook as always: announce the buy, let the headline do the marketing, let retail chase the candle

@xstable
🐋 Binance bled 20,000 BTC in four days — fattest exit since 2023

On Sept. 22 more than 13,800 BTC walked out of Binance in a single day — about $1.15 billion at current prices, and the exchange's biggest one-day net withdrawal since 2023. Over four days its reserves slid from roughly 705,000 to 685,000 BTC, while Bitcoin just sat there above $83K like nothing was happening. Coins don't walk out on their own, so somebody decided they'd rather not park them on Binance. The only question that matters: who, and what do they know that you don't.

▪️ Sept. 22 was the punchline: a net outflow north of 13,800 coins in one session. Not a trickle — a queue at the door.
▪️ The slow bleed is the bigger number — roughly $1.66 billion worth of bitcoin gone from the books across those four days. A one-day headline is nice, but the drip is what actually thins the book.
▪️ Binance is estimated to hold around 30% of all bitcoin sitting on investor-accessible exchanges. That's not a venue, that's the float.
▪️ The popular read, courtesy of Cryptoquant data, is self-custody and long-term storage — good little hodlers pulling coins off the exchange.
▪️ Price context matters here: BTC is chopping between $83K and $84K after pulling back from its rally. No panic, no euphoria. Just sideways and quiet.
▪️ Hold that shelf and keep bleeding coins, and the road to $90K reopens. Lose it, and this whole setup flips into deeper correction territory. Two doors, one chart.

📊 Single-day net outflow: 13,800+ BTC
📊 Four-day reserve drop: ~20,000 BTC
📊 Value withdrawn Sept. 22: $1.15B
📊 Binance share of exchange-held BTC: ~30%

Fewer coins parked on an exchange means a thinner sell-side book — if spot demand shows up while supply keeps shrinking, it tightens right into a test of higher prices. That's the trade on the table: shrinking float plus any real bid and this thing goes vertical fast. Or the bid never shows, and the supply-shock thesis dies in the chat like it has a hundred times before.


💬 «When outflows become dominant» — Darkfrost

🔮 Could be accumulation by diamond hands — or just Binance rotating wallets and calling it news.

@xstable
🧊 Bitget claws out of a $388M hole while whales drain Binance

BTC sat frozen near $83,208 (-0.18%) overnight and ETH barely moved to $2,666 (+0.46%) — flat tape on top of some very unfunny plumbing. Bitget is switching withdrawals back on after a $388 million hack that North Korea-linked wallets are still washing through Discord and Telegram chats like it's laundry day. Binance quietly watched over 13,800 BTC walk out in a single day. Top gainers were NMR +34%, MARSCOIN +32% and HBAR +25%, mostly on thin books worth ignoring unless you enjoy getting dumped on.

▪️ NMR led gainers +34% on only USD24m volume, while MARSCOIN jumped thirty-two percent keeping gains strictly low liquidity
▪️ HBAR pumped nearly twenty-five percent backed by real USD214m turnover worth respecting unlike thin alt noise nearby

Whale withdrawals from Binance plus Bitget resuming after that nine-figure loss means liquidity shuffles before someone gets liquidated later


🔮 Everybody's greedy till the first red candle. Then everybody's a genius.

@xstable
🔙 Zano slammed ctrl+z on its own chain

Zano rewound its own blockchain by about thirty days — anything you confirmed after the Aug. 26 checkpoint simply stopped existing on-chain — after unauthorized ZANO and Freedom Dollar oozed into circulation through a flaw in the Gateway Address. Fun part: nobody asked the holders first.

▪️ The emergency release on Sept. 27 restarted the whole thing from block 3,833,000 — every transaction mined after that point got erased. Not "under review." Erased.
▪️ The hole was the Gateway Address: it let the attacker shove unauthorized ZANO and fUSD into supply without spending a single one of anyone's wallet keys. Free money, printed straight into the float.
▪️ Core team swears the spend keys and regular transaction privacy were untouched — funny how "untouched" never once covers the money that already walked out the door.
▪️ Fucking hell.

@xstable
🔥 Ari Paul says Coinbase buried hacks after 'losing' his firm millions — and he's not buying the oops story

Ari Paul ain't buying the 'oops we misplaced it' version anymore. On September twenty ninth the BlockTower Capital founder publicly accused Coinbase of losing twenty five million dollars belonging toward his fund years back and covering up massive repeated hacks hitting other shops afterward.

▪️ Ari says he dug into it himself after being told the funds were simply lost. The trail ran past his own shop and pointed toward a wider pattern.
▪️ The whole mess blew open first when a user called Kuno posted September twenty sixth saying the exchange stole one point two million from them a year prior.
▪️ Coinbase product head Jordan Fish, better known as Cobie, jumped into the same thread and shot back that no account matching the description exists anywhere.
▪️ But real receipts exist regardless. A May twenty twenty five disclosure admitted attackers bribed customer support staff, got internal access, and ran an operation from December twenty twenty four…
▪️ That leak exposed identities, contact details, balances and transaction histories across tens of thousands of victims. The exchange refused to pay the extortion demand to delete the stolen data.
▪️ Separately zachxbt accused tiffany milanovich in August of involvement in thefts totaling at least five million dollars, including a half million drain from a single coin base account — a pattern of…

📊 Users caught in the May breach: 69,400
📊 Ransom demanded by hacker: $20 million
📊 Alleged cover-up scope: $1 billion+

If you're holding funds on Coinbase, this hits close to home. Support impersonation scams are a proven vector. They already drained real accounts. The documented cases show the playbook works again and again. Meanwhile Paul's allegations are still allegations tied to active litigation — nothing proven in court yet. But the disclosure history shows breaches happened before. When they promise to investigate right now, that means watch what shows up in the next filings. Silence speaks volumes. Retail always gets the truth last. And yeah, if you're the exit liquidity, act accordingly.


💬 «We traced this to at least a dozen other affected firms and over one billion covered up.» — Ari Paul

🔮 Coinbase sliding into DMs promising to look into it while lawyers bill hourly. Who eats first when subpoenas drop?

@xstable
🚨 Fake Coinbase texts drained a family trust's bitcoin — because he replied

So this Massachusetts family trust beneficiary is emailing actual Coinbase about opening a separate trust account. June 1–2, 2023, two texts roll in pretending to be Coinbase too. He gives up his login anyway. That’s the whole ballgame.

▪️ He shared username, password and other details, handing scammers the keys to both wallets sitting inside his single Coinbase account.
▪️ When the messages hit, the personal wallet plus Victim Trust wallet held 33.7 bitcoin combined — roughly $900,000 at then-prices.
▪️ Investigators followed 11.2 of those coins into a Binance account via transactions made between June 5 and June 15, 2023.
▪️ The deposited bitcoin got swapped fast into monero to hide the trail, while roughly three quarters of that monero walked back out before withdrawal attempts on the rest got blocked.
▪️ Binance froze the account on FBI request, holding 758.55 monero according to court filings.
▪️ DOJ filed civil forfeiture September 28 targeting 110,270 tether Binance moved into government hands August 3, 2026, replacing…

Your phone is the weakest link in your stack, not the hardware wallet you whisper sweet nothings to at night. Login codes, passwords, SMS confirmations — that’s what actually gets robbed. Zero sophistication required. Just patience, timing, and knowing you’re mid-conversation expecting a ping from exchange support. Team impersonation remains king because humans eventually click reply no matter how many warnings are plastered everywhere saying staff never ask for passwords or codes. Ever. Period. Redundant, obvious, yet it still works perfectly. Apparently forever. Apparently indefinitely. Apparently inexplicably resilient. Unstoppable.


💬 «At the time,the wallets combined contained thirty-three point seven bitcoin valued then approximately nine hundred thousand dollars US Of that amount,the Victim Trust coinbase wallet had twenty-eight point five bitcoin.» — FBI Special Agent Connor Jorde

🔮 Two-factor everything still loses to one convincing text sent at exactly the right moment. Classic.

@xstable
☕ Tape's deader than your group chat, and the alts are the ones doing all the running

BTC just sits there at $83,334 (-0.), ETH at ... stop. Majors flat, tape dead, spreads wide, and yet the alts are the only things actually moving. Funny how that always works out — the boring chart is the one they want your eyes glued to while the real action happens somewhere you're not looking. Dead tape isn't a quiet market, it's a setup: somebody's accumulating while you're refreshing a flat candle and calling it a day.

@xstable
📊 Greed 74, MOVR +84%, and Fundsz fraudsters finally get a bill

BTC parked at $84,270 (+1.28%), ETH at $2,714 (+1.74%) — a grind, not a breakout. The real action was in the alt corners: MOVR ripped +84.3% on $71M volume while the majors took a nap.

▪️ MOVR +84.3% on just $71M volume — thin book, easy squeeze. That's not adoption, that's one guy with a bag and a plan.
▪️ NEAR +11.5% on $237M and ENA +11.0% on $103M are the moves with real liquidity behind them. Those two deserve your eyeballs.
▪️ FET +8.6% on $25M and WLD +7.7% on $85M — AI names catching a bid, but that volume smells like retail, not smart money.
▪️ The losers barely lost: AVAX -1.2%, CRCLB -1.0%, ASTER -0.4%. Stables USD1 and USDC flat, with USDC still turning $3.12B.
▪️ A Florida judge ordered Fundsz promoters to pay over $30 million in a crypto fraud case. The cash is long gone — this is a headline, not a recovery.

Fear & Greed reads 74, up from 71 yesterday. Greed climbing while BTC grinds sideways is exactly the setup where alts get squeezed and late longs get flushed. If you're buying MOVR after +84%, congrats — you are the exit liquidity. Watch whether NEAR and ENA hold their volume into the US session — if it fades, the whole morning was one wick.


🔮 Greed at 74 and a judge handing out a $30M bill. Only one of those touches your PnL today.

@xstable
🚨 MetaMask got popped internally, yanking the affected staking validators out

MetaMask fessed up to an undisclosed security incident that hit part of its infrastructure and is pulling affected Ethereum validators out of its staking op as a precaution. The company's line: no immediate threat found to user wallets, and client funds were never touchable anyway since it doesn't hold their withdrawal keys. Cool story — noted.

▪️ What actually got hit stays vague as hell: 'part' of MetaMask's infrastructure broke loose on someone else's watchdog clock — outside security advisers were brought in to contain and patch it.
▪️ 'No immediate threat' to user wallets, per the company — which conveniently also means nobody has officially explained what data or systems sat next to whatever got compromised.
▪️ The evacuation targets non-custodial staking ops — Ethereum validators run inside Lido — because bailing early beats getting slashed if the attackers are still lurking inside.
▪️ Lido separately confirmed the same infra compromise and pulled its own operated Ethereum validators out too — eating foregone rewards plus possible downtime penalties if those machines go dark soon.
▪️ Exits already started rolling — the final affected ones are expected exited (not fully withdrawn) by end of October 7th during restructure mania — meanwhile a wallet tied to Ethereum co-founder…
▪️ Culprits' denial index running high today.

@xstable
💀Bitget hot wallets got drained and Q3 crypto losses just blew past a billion

Bitget got drained for roughly $388M after attackers lifted internal credentials through a busted third-party security tool and forged withdrawal commands straight out its hot wallets. Another day, another exchange learning the hard way that hot wallets are basically a piñata. You keep your coins there while you trade, they keep them there while they get rekt. Everybody wins except you. And the best part? This is just one line item in a quarter that's already past a billion in losses.

▪️ The exchange spotted unauthorized transfers on Sept 24 and slammed withdrawals shut — by then the cash was already gone. Great reflexes, wrong timing.
▪️ Slowmist traced the crew's activity back to an Aug 31 zero-day — three weeks of nobody noticing anything. Three weeks. Not three hours. Three weeks.
▪️ That single hit ate about 31% of everything stolen across crypto last quarter. One exchange, a third of the quarter's loot.
▪️ September alone bled roughly $769M over 99 separate incidents. Ninety-nine. That's not a bad month, that's a season pass to the rekt buffet. And you thought your portfolio was having a rough time.
▪️ Exploits did almost all the damage that month — $734M across 58 jobs, 96% of September's pain. The other 4%? Don't ask. It's always something dumb. The classics never die.
▪️ Only $273M got frozen or handed back; adjusted September damage still sits at $495.3M. So the rest is out there, probably being laundered through some shitcoin as we speak.

Every dollar here came out of somebody's account while they slept — hot wallets are exactly where your coins sit when you're actively trading an exchange. Read that again. If it's on an exchange, it's not your wallet. It's their hot wallet, and you're just exit liquidity with a login. The house doesn't get hacked; the house gets drained, and then the house pauses withdrawals and tells you to stay calm. Meanwhile the attackers already moved on. So next time you see we're aware of an incident, just know that's corporate for your money is gone and we're lawyering up. The lesson? If you're trading, you're exposed. If you're holding, you're exposed. The only difference is whether you find out from a tweet or a withdrawal error.


@xstable
🚨 Zcash bleeds off its peak as ETF cash walks and North Korea shows up

So much for privacy coin season. That lasted about as long as a free trial.

▪️ ZEC ran to a peak, the timeline declared privacy coin season officially open, and now it's bleeding off the top. Classic sequence.
▪️ Meanwhile the ETF cash is walking. Not panicking, not posting, not explaining itself — just walking. That's how the big money exits: no announcement, no goodbye tweet, just a chart that quietly stops…
▪️ And North Korea shows up in the story. Of course it does. Every time a privacy coin needs a fresh narrative, the sanctioned-state boogeyman appears right on cue, fully costumed.
▪️ Notice the order of operations here. First the peak, then the ETF money leaves, then the scary story lands.
▪️ You don't get wrecked by a headline. You get wrecked by a headline plus your own conviction that this time it's different. The headline is just the delivery mechanism.
▪️ If you're still holding because 'privacy is a real use case' — fine, that's a thesis. Just don't confuse a thesis with a trade.

@xstable
🟢 Green tape while an exchange eats a $388 million hole

BTC is parked at $86,591, painting green candles like nothing's wrong. Meanwhile some exchange is quietly chewing through a $388 million hole. You've seen this rerun — the tape looks tasty right up until the exit door gets welded shut and the chat goes quiet.

▪️ 🟢 Green candles: the market's way of telling you to ape in while the smart money quietly finds the door
▪️ 💰 $388M hole: that's not a rounding error, that's somebody's exit liquidity getting repriced in real time
▪️ 📈 Chart's up, so everyone's a genius again — right up until the first liquidation cascade turns the timeline into a graveyard
▪️ 📉 The dump never announces itself; it just shows up when your stop is too tight and your conviction is too loud
▪️ 🔒 Exchanges don't eat nine-figure holes quietly unless they're praying you won't notice before you deposit
▪️ 🕵️ Ask who's on the other side of your buy right now — probably the guy who already knows about the hole

@xstable
🚨 Ex-NCA cop swiped 50 seized BTC — now he owes $2.38M because bitcoin mooned

Paul Chowles, 44, out of Bristol, was the guy the UK's National Crime Agency trusted to pull crypto off seized devices. In 2017 he quietly walked 50 bitcoin out of a confiscated Silk Road 2.0 wallet — that bag was worth about $79,250 back then. Now he's been ordered to hand back £1.8 million, roughly $2.38 million, because bitcoin's price did the heavy lifting for the prosecutors. He took the coins; the market took him.

▪️ Chowles was on the Silk Road 2.0 investigation with clearance to analyse and extract cryptocurrency from seized devices. That clearance was the entire exploit — nothing else was needed.
▪️ He pleaded guilty to theft, transferring criminal property and concealing criminal property. July 2025: five and a half years inside.
▪️ He tried to bury the trail in a complex chain of crypto transactions. Merseyside Police and the North West Regional Asset Recovery Team still traced the assets.
▪️ Cops recovered 30 of the 50 stolen bitcoin from him. The rest of the tab isn't the coins, it's the price: 50 BTC was pocket change in 2017 and a seven-figure clawback in 2025.
▪️ The NCA formally dismissed him on July 11, 2025. A compensation order routes the money squeezed out of him to the victim in the original Silk Road 2.0 case.

📊 Confiscation order: £1.8M ($2.38M)
📊 Bitcoin stolen: 50 BTC
📊 Value at time of theft, 2017: ~$79,250
📊 Recovered by investigators: 30 BTC

Two lessons here, and neither one is comforting. First: a seized cold wallet is exactly as safe as the human holding the keys — and this one was a cop. Second: if you're planning to lift coins, the bill gets marked to market at the price on the day they catch you, not the day you took them. 20 of those 50 bitcoin were never found, and he's still on the hook for the full £1.8 million. The CPS Proceeds of Crime Division says it has pulled over $700 million through confiscation orders in five years and handed $135 million+ back to victims — so this is a machine, not a one-off press release. Cops don't chase the coins, they chase the bag at today's price.


💬 «Paul Chowles exploited a position of trust for personal gain, stealing assets that had already been recovered through law enforcement action.» — Luke Clements, specialist prosecutor, CPS Proceeds of Crime Division

🔮 Nick $80k of bitcoin, get billed $2.38M. That's not justice, that's a leveraged short you took against yourself.

@xstable
🔥 Bitcoin fakeouts both ways on a dogshit jobs report — half a billion plus liquidated

Bitcoin tagged $87,000 today — first time it's sniffed that level since Sept 23 — then got absolutely bodied right back under $84,000 within hours. Both sides got farmed, and the house collected.

▪️ That $87,000 pump came straight off the macro data. Nothing about crypto changed — just a headline the algos could chew on.
▪️ $86,000-$87,200 spike landed instantly on the release. No hesitation, no pullback, just a vertical candle built for the bots.
▪️ $85,500 was the first crack — the spot where the bid quietly stopped showing up.
▪️ $84,000 broke minutes later, and everyone who chased the headline long was the exit liquidity.
▪️ $570-$600 million liquidated across crypto. Both directions, obviously — that's how these prints are designed to work.
▪️ $186 million of it hit inside one hour alone. One hour. That's not a market, that's a vacuum cleaner.

@xstable
🔪 They held a knife over a pregnant woman to drain one crypto wallet — and the mastermind was on FaceTime

December, Solihull, southeast of Birmingham. Four masked robbers kicked their way into a house and took hundreds of thousands of pounds in crypto from a couple — after threatening to stab his pregnant wife in the stomach and kill their unborn child. One of them wasn't even in the house: he ran the whole raid down a FaceTime call.

▪️ The husband — called James by the BBC — says he saw gloves and balaclavas come through the door first. He tried to fight them off and was beaten with hammers. Brave, but hammers beat hands every time.
▪️ His wife was pinned to the sofa while one attacker put a pillow over her face and suffocated her as she screamed that she couldn't breathe. Read that again: they weren't there for a debate.
▪️ James didn't get it until they demanded his phone — a fourth man on FaceTime was guiding them app by app: 'Show me everything on his phone.
▪️ They found a wallet with funds loaded on it and went straight to the threat: send it now or we stab your wife and kill your baby. No negotiation, no bluff, just the oldest 2FA in the book.
▪️ He sent hundreds of thousands of pounds' worth. Then he heard the man on the phone tell the crew inside they'd only be taking ten grand for themselves. The muscle gets crumbs; the brain gets the bag.
▪️ This is now an industry trend: Binance France president David Prinçay and Ledger co-founder David Balland have both been targeted this way. If you're publicly crypto-rich, you're publicly a target.

📊 Taken from James: $100K+
📊 Cut for the muscle inside: $10K
📊 BTC sought in Mexico raid: $1.5M

Last month Jonathan Meléndez from Mexican band Camilo Séptimo and his pregnant wife were killed by people hunting a hardware wallet supposedly holding $1.5 million in bitcoin — acquaintances who knew about it. The pattern is boringly consistent: whoever knows you hold coins becomes your biggest liability long before any hacker does. A bull market means more headlines about fresh money printing new millionaires means more crews reading those headlines too. Your seed phrase isn't the weak point. Your mouth is.


💬 «The door gets pushed open, I can see gloves coming in, balaclavas.» — James

🔮 "Hundreds of thousands" but not one figure disclosed? Fine — but somebody already knew exactly how much was sitting on that phone. They always do.

@xstable
📉 BTC bled under $84K while SAND ripped +79% — someone's morning is cooked

Bitcoin tagged $87,000 on a weak US jobs report — first time since Sept 23 — then got slapped straight back through $84K and dragged roughly $600 million of liquidations down with it. ETH slid to $2,674.65. And SAND is up 78.9% on $86M of volume. Because of course it is.

▪️ SAND +78.9% on $86M, NIGHT +24.9% on $22M, ENJ +16.5% on $24M — thin floats pump hardest right before they hand you the bag
▪️ Losers board: MOVR -26.1%, MARSCOIN -17.4%, PENGU -10.2%, FET -9.2%, PUMP -8.7% on $55M — that exit liquidity is already gone
▪️ Ex-UK National Crime Agency officer Paul Chowles ordered to repay ~$2.38M for stealing 50 BTC seized in the Silk Road 2.0 probe, plus laundering — the guy hunting the crooks was one of them
▪️ Masked crew forced into a UK home in December, put a knife to a pregnant woman and her unborn child, walked off with hundreds of thousands in crypto.
▪️ Majors down less than the alt board — so this was leverage getting cleaned out, not money rotating anywhere

@xstable
☕ BTC is comatose, small caps are on meth — morning digest

BTC parked at $84,834 (+0.31%), ETH at $2,693.44 (+0.68%) — majors are dead flat, and the news wire has zero major stories from the last 24 hours. So the whole tape today is small caps and thin order books, which is exactly where retail gets chopped to mincemeat.

▪️ STRK +23.3% on just $20M of volume. That’s not conviction, that’s two guys with a market order and a dream.
▪️ PUMP +18.0% ($36M) and ZRO +15.8% ($35M) tagging along, ONE +14.6% on $20M. Same movie: no real size behind any of it.
▪️ QNT +7.2% is the only green name with actual money in it — $65M, more than the rest of the green board combined.
▪️ Losers are a snooze: SAND -4.9% ($44M), UNI -1.4% ($40M), DOGE -0.4% ($26M). No capitulation, no liquidation cascade.
▪️ USDC printed $1.165B of volume while moving 0.0%. That’s rotation, not buying — somebody’s shuffling chairs, not adding risk.
▪️ No major stories in the last 24h. Nothing on the news wire explains these pumps, and that should worry you more than the pumps do.

📊 Fear & Greed: 65 (Greed)
📊 Yesterday: 67

Greed is cooling — the gauge slipped a notch from yesterday, so the crowd is still long but conviction is leaking. Majors flat, small caps vertical, zero news to justify it: classic setup where retail buys the top from whoever loaded the bags last week. Watch QNT’s volume for the only signal with money in it, and treat the rest of the green board as exit liquidity you might end up being.


🔮 +23% on $20M and zero news. You’re not early, you’re the exit.

@xstable
💸 Andrew Tate just cashed out part of his near-20x hype bet

A wallet tied to Andrew Tate moved 20,950 hype tokens worth about .87 million onto Binance on Oct. Not a dust test, not a screenshot flex — a straight deposit to an exchange with exactly one obvious use: selling. The guy who built an entire audience on telling you to hold is quietly taking the other side of the trade.

▪️ Hype opened trading Nov. Which means he was already sitting on a near-20x before most of you even had the chart open.
▪️ The wallet flipped most of its hype into staked positions almost immediately. Stake it, farm it, look committed — while the rest parks on an exchange, ready to hit the bid.
▪️ It still shows about .
▪️ He kept trading anyway through this year. Every pump, every narrative, every 'this is the one' — and the bags kept moving.
▪️ That is literally every token he ever pushed. All of it on-chain, all of it pointing the same damn direction.
▪️ The exception was hype itself. Funny how the one coin he didn't torch is the one with his name stapled to the pump.

@xstable
💀 $6M walked out of a Base vault — and suddenly nobody owns the thing

On Oct. 4 somebody strolled out of a vault on Base with over $6 million, and here's the punchline: no team, no protocol, no owner has come forward to say the vault was theirs. Blockaid clocked the drain at 09:21 UTC with $2.02M already gone — 40 minutes later the losses blew past $6M. Security firms traced about 1,783 wstETH out of a 3-of-7 Safe whose seven signers still don't have faces.

▪️ Some freshly created contract got whitelisted into the vault. That's the whole trick — no chain hack, no Aave core bug, just a door somebody was allowed to open.
▪️ Through that whitelist the attacker borrowed 1,783.067 aBaswstETH — Aave receipt tokens for wstETH deposited on Base — and shunted them into a contract he controlled.
▪️ Then he redeemed them through Aave on Base for roughly 1,783 wstETH. Exvul counted six separate outflows; Peckshield and Certik landed on the same tally.
▪️ Base itself wasn't hacked and Aave's core contracts aren't taking the blame. The drained vault is an Openzeppelin transparent proxy, and its owner is a Safe created about 324 days ago.
▪️ Vault 0xD1895f2019c2152FC2b9022D57f19198c4CFCABC, owner Safe 0x6b27512a5943Ed327f6cb6C3EC1f0398229f42C4 — a Safeproxy out of Safe Proxy Factory 1.4.1, per Basescan and Arkham.
▪️ Stolen keys, a whitehat, garbage permissions, some unknown weakness — nobody has confirmed which. Upgrade authority sits on a separate layer above that Safe, so the chain of control is longer than it…

📊 Already gone at 09:21 UTC: $2.02M
📊 Traced out of the vault: 1,783 wstETH
📊 Signatures required: 3 of 7
📊 Safe age: 324 days

Here's what actually matters for you: a 3-of-7 Safe with anonymous signers isn't a multisig, it's a promise — and permission layers plus whitelists plus proxy owners are precisely the shape of the risk you're wearing if you're farming Base while parked on receipt-token collateral. Offloading 1,783 wstETH is enough size to lean on the peg, so watch for a wstETH discount the moment that stack starts moving. Nothing has been patched and nothing has been explained, because nobody has even confirmed what broke. The trace is sitting out there in the open — the humans behind it aren't.


🔮 Seven addresses in plain sight, zero humans attached. Whoever owns this will surface the second the trace gets warm.

@xstable
💀 Drift hack victims get their money back — 1 cent on the dollar, take it or cope

Six months after a North Korea-linked crew gutted Drift, the Solana perps DEX opened claims on Oct. 1 for DFX. The recovery pool started at $3.11 million against nearly $295.4 million in verified losses — redeem today and a verified $1,000 loss pays about $10.40. So take the penny, dump the token on the next guy, or sit tight and pray the big money actually shows up. Your call, but the math already made it for you.

▪️ Your claim is DFX: one token per verified USDT lost, supply capped forever at 299,500,810.998, redeemable at launch for 0.0104 USDT each.
▪️ Redemptions are final — no takebacks. You can also dump DFX on Raydium or hold it; the first Friday saw 216,480 DFX burned for about 2,250 USDT.
▪️ Tether pledged up to 127.5M USDT, partners another 20M, and Velocity (Drift, rebuilt) sweeps in daily net revenue. Its first sweep: 31 USDT. Thirty-one. Mark it.
▪️ The setup: a North Korea-linked crew spent months posing as a quant trading firm, then got Drift's Security Council to pre-sign transactions.
▪️ At ~16:05 UTC April 1 those signatures handed over admin control. They posted 500M of a junk token, CVT, priced near $1, and walked out with the real stuff.
▪️ Chainalysis: ~$285M gone — $159.3M JLP, $71.4M USDC — bridged to Ethereum in minutes. 130,259 ETH across four wallets, 23,094 ETH through Tornado Cash.

What's left to claw back is roughly $9.2M frozen elsewhere plus whatever Bybit's bounty drags in — it pays 10% of assets actually recovered, so the hunters get fed before you do. Unclaimed DFX gets burned after Jan 1, 2028, and if 10% of supply redeems out, the survivors split future deposits roughly 11% fatter. The mechanics reward whoever can wait the longest. Just don't confuse Velocity revenue and Tether's pledge with cash in the pool — Drift's own docs don't.


💬 «These figures illustrate the mechanics. They are not a projection or a promise.» — Drift claim portal documentation

🔮 Pool only grows, supply only shrinks, they swear. Ask anyone who ever queued for a recovery token how that movie usually ends.

@xstable
😐 BTC does fuck-all, GTC rips +60%, and other people's money burns

Twenty-four hours of nothing on the majors: BTC +0.80%, ETH +0.22%. Every dollar that actually moved today moved in thin alt books — and in other people's wreckage.

▪️ GTC +59.9% on a majestic $25M of volume — that's a thin book getting shoved, not demand. MUBARAK +16.1%, FET +15.3% ($45M), STRK +10.7%, ADA +9.8% on $77M.
▪️ Red: SAND -5.8%, QNT -4.3% ($47M), WLD -3.7%, TAO -2.9%, AVAX -1.6%. No capitulation, just the alts quietly bleeding out.
▪️ Tate-linked wallet sent 20,950 HYPE ($1.87M) to Binance — a $550K bag from Nov 2024 that ran ~20x. Lost $727K on leverage, made ~$7M just holding — Lookonchain.
▪️ $6M drained from a Base vault on Oct. 4: 1,783 wstETH out, behind a 7-signer Safe nobody can name. Base wasn't hacked and Aave's core isn't catching blame.
▪️ Drift hack victims finally got paid six months after April's exploit: $295.4M in verified losses, a recovery pool of $3.11M — roughly 1 cent on the dollar.

📊 BTC: $85,506.59
📊 ETH: $2,699.95

Fear & Greed prints 70 (Greed), up from 65 yesterday — the exact zone where retail chases a thin pump and calls it a trend. Nothing's forced yet: flat majors mean no cascade, no liquidations. When something finally breaks, you get cents back and a six-month wait.


🔮 Two of today's three top stories are people cashing out, the third is a 1-cent payout. Guess which side of that trade you're on.

@xstable