Update on 369 Guard: BullBearSwap.
Compares other swap routers, then settles on theirs.
@BullBearSwap
369guard.com/share/bullbears…
Factual (official, and it matches earlier reports):
Schueler and his wife were detained on 14 Oct in Beşiktaş.
The text says detained (gözaltı), not arrested.
Istanbul police Intelligence and Financial Crimes branches carried out the operation, coordinated by the
Istanbul Chief Public Prosecutor and supported by MİT, Turkey's national intelligence service.
3 more people described as his bodyguards were detained.
This confirms the unofficial İHA report.
Raids hit 15 addresses in Beşiktaş, Üsküdar and Sarıyer.
The official seizure list: $7.15M and 160,000 TL, 6 cold wallets, 300 bags, 100 pairs of shoes, 136 pairs of glasses, 28 watches, 97 pieces of jewelry, 29 phones, 12 laptops, 11 PC cases, 19 SSDs or external drives, 46 USB sticks, 19 graphics cards, 4 rifles, 3 unlicensed pistols and 1,400 rounds.
Digital materials are still being examined.
It calls him a US citizen, which settles the Turkish-citizenship theories on X. It says the Red Notice is from Interpol, but it doesn't say which country requested it.
It settles earlier conflicts:
The watch count is 28, so the 64 watches and "53 Rolex + 11 Patek" claims from Sözcü, Sabah and Bitcoin .com are not official.
The ministry's inventory has no "$4M" line, so that headline figure isn't official either. The $7.15M is the whole-operation figure.
The 1,400 rounds is right, and Akşam's 400 was wrong.
Fluffed or misleading:
The headline and lead.
They call him the suspect in a "$1 billion crypto fraud", "wanted in the US and Finland". But Interpol's record, as far as we can see, is Finnish aggravated tax fraud. The US case was a civil SEC suit dismissed in 2025, and we have no US arrest warrant. The $1B is the SEC's old allegation, and it's worded as an allegation ("iddiasıyla").
Rhetoric. The "Turkey will not be a safe haven" lines are political messaging, not facts about the case.
What's left out. It names no Turkish charge, no court outcome, no formal arrest, no extradition request, and no Finnish role. It doesn't say where he is held or what happens next.
Our earlier note. The "judicial proceedings continuing" line we passed on from the minister's X post isn't on this page. Only the digital-review line is.
The seizure list. The long list of bags, shoes and glasses pads out the inventory. It's official, but it isn't evidence of any crime.
Update day 3: still only reported as detained; little newly verified
369guard.com/news/richard-he…
I found nothing new and confirmed on Richard Heart since my last report. He is still reported as detained, with no formal arrest, judicial control, release or extradition step reported anywhere I checked, including Turkish-language outlets.
Official pages, fetched now:
Nothing relevant on the Istanbul prosecutor and courthouse page, Istanbul Police, the Interior Ministry, the Justice Ministry, Presidency communications, Anadolu's search pages, Finland's Prosecutor General, or Finland's Foreign Ministry.
Interpol's general page loaded, but its public notices search returned an error, so I couldn't view the individual notice.
The Interpol mirror at OpenSanctions still shows only "aggravated tax fraud". Its last change was Feb 2026, so it says nothing about custody.
Europol's EU Most Wanted has no Schueler entry in its search results. I can't tell whether he was removed.
Blocked, so not checked: Finnish police (poliisi.fi), the Finnish Justice Ministry, and CourtListener (the US court-record site). The Helsinki District Court has no usable news page.
Social posts:
Richard Heart's newest post is still before the raid.
No lawyer has commented on the Istanbul case.
A fan account says there's still no court decision. That's unverified, but it matches everything else.
Don't pay attention to HaberGo. Its "Tutuklandı" story claims a US Marshals arrest in Helsinki on a US court order. That contradicts every other source and looks false or AI-generated.
Other "arrested" headlines use the word loosely, since their own text says detained.
I found no dated warning about fake bail-fund or claim pages tied to this detention yet.
Still unknown:
Any court outcome.
Where he and his wife are held.
Whether Finland has asked for extradition.
Any on-record statement from Turkish or Finnish authorities.
The real seizure list.
FOMO users: fake CAPTCHA bookmark steals logged-in sessions
08 Oct 2026:
SlowMist and Cos warned of phishing pages that pose as a human check and talk users into saving a bookmark that is really code. Clicking it while logged in to FOMO hands the session to the attacker, who can then move assets.
Cos ties the technique to Privy-style embedded-wallet logins and says people have already been hit; SlowMist says a fuller disclosure is coming. No loss total published.
Off-chain browser/session theft, not a PulseChain protocol bug. Research snapshot from SlowMist / Cos X and Lookonchain.
Why it matters: Embedded-wallet apps move the secret from the seed to the session. Never add a bookmark or paste a command from a fake verification page. Prefer short-lived sessions and check FOMO login state after travel wifi.
New on 369 Guard News:
MetaMask: infrastructure incident; staking validators exiting Lido
30 Sep 2026: MetaMask said it is responding to a security incident affecting part of its infrastructure. The company stated it has identified no immediate threat to MetaMask wallets.
As a precaution it is exiting affected validators in its non-custodial staking operations. Lido said MetaMask Staking began exiting those Ethereum validators the same day, with the last affected exits expected by the end of 7 Oct; the full exit, withdrawal, and re-entry cycle may take about 45 days.
MetaMask has not published root cause, which systems were reached, or how many validators are in scope. Pulse users who keep MetaMask for PulseChain should treat unsolicited “update MetaMask” emails and DMs as phishing.
Research snapshot from MetaMask’s update, Lido ops notes, and Cointelegraph.
Why it matters: This is a wallet-vendor infrastructure story with staking exits in motion, not a confirmed browser-wallet drain.
MetaMask’s line is no immediate wallet threat; cause and blast radius are still open.
Pulse lesson: ignore “mandatory MetaMask update” links; prefer store updates you start yourself; keep long-hold bags on keys MetaMask never holds. Watch for phishing that rides this headline.
369guard.com/news/metamask-i…
Ethereum, Solana, Don't open up your metamask for a while, and if it's open, close it. Their infra got hacked. Which means the chances of someone pushing an evil update are probably higher.
I tell everyone how to do things better, but they don't listen, lol. Auto-updates are a huge security risk.
This is why the software at PulseChain, PulseX, HEX, is software you can download and not worry about it autoupdating on you.
Hopefully metamask gets it all sorted, but even if they do, autoupdate will still always be a threat to you.
Just looking out for you all out there.
New on 369 Guard News: MEXC leftover API key.
Attacker key survived freeze restore; ~$340k out.
369guard.com/share/news/mexc…
Update on 369 Guard: PAI-MKR.
Maker-style CDP / PAI stable.
369guard.com/share/pai-mkr?c…






