At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives.
It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit.
I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation.
Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well.
All in all, we rescued 23,155 NFTs worth north of $5.7M USD.
We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected.
Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery.
All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals.
Addresses to revoke below.
Just had 12 @the_mories transferred out of my wallet without signing anything.
I haven’t even looked at crypto in months.
Looks like it was a bulk transaction and some were taken from other wallets too.
Anyone have any idea what this is?
etherscan.io/tx/0x3fb5a53898…
At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives.
It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit.
I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation.
Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well.
All in all, we rescued 23,155 NFTs worth north of $5.7M USD.
We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected.
Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery.
All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals.
Addresses to revoke below.
4lmnc retweeted
releasing zkpassport.gwei subdomains gated by @ZKPassport. the zkp doesn't reveal anything about you (no name, no nationality, no eyeball). one passport can mint one name only. i will use this as an anti-sybil mechanism for two new apps im building :)
gwei.domains
4lmnc retweeted
On this street, a local family paid £225,000 for their house. The one next door was given away for free.
Same bricks. Same street. One family saved for years. The other handed over for nothing. This isn't really about immigration at all, and the proof is in the public record.
So who actually did this? Who gave the order? Not the council. Not the local MP. Not one person who lives there.
It was the Home Office. People we never voted for and can't remove. They decided. The council was simply told.
Don't take my word for it. Take theirs.
Serco, the contractor, put it plainly. They work under the direction of the Home Office, who decide where people go and instruct them.
The council leader said the same. It isn't the council's job. The Home Office decides, not them. The council is only told after.
The council objected. The MP asked for a judicial review. The whole village said no. It happened anyway.
That's the part worth sitting with. This was never really the government. They're just the face. The bit underneath, the bit we can't vote out, that's what's quietly turning our borders into a billionaire's payday. And we pay for it.
21 brand new houses in a quiet Shropshire village. Up to 121 migrants moving in and a man most people have never heard of just got richer off it.
Those houses weren't empty. Pull the sold records and you'll see families buying on this exact street for over £200,000, right up to this year. Life savings, sunk in.
Then the ones next door were handed to the Home Office for nothing and this is with 1.3 million people stuck on the social housing waiting list, the longest queue in over a decade. All passed straight over.
121 people into 21 homes and there's a reason they pack them in. The council gets paid. Twelve hundred pounds a year per person, another hundred a month per extra bed. Six to a house pays better than a family of four. That's the arithmetic underneath all of it.
A rural village too. Nearest bus stop a 30 minute walk. Right beside where local children play.
Now follow the money up. The man who owns one of these firms went from running a caravan park to a billionaire. Porsches. A place in Mayfair. A place in Monaco. All of it from housing migrants on public money.
His contract went from one billion to seven. It takes in nearly five million pounds a day. In one year it paid out twenty eight million in dividends, almost all of it to him. One man, drawing more from our foreign aid budget than the entire country of Ghana.
The firm made so much it went through the profit limit it was set, and had to hand tens of millions back. A cap was put on it, and even that couldn't hold it.
For all that money, its accommodation drew the most complaints in the country. Bedbugs. No heating. In London, people packed in so tight they slept outside in protest.
The money we spend housing migrants here gets counted as foreign aid. On paper, Britain feeding the world’s poor. In reality, lining a landlord’s pockets in Monaco.
And because it counts as aid, the more people come, the better the books look. The boats aren't a crisis to them. They're the business model.
None of this is new. Ten years ago an MP called it a racket, to their face, in Parliament. Profiteering, he said. Nothing was done. Now it's three firms, and the contracts have tripled to over fifteen billion pounds, with break clauses that could end it tomorrow. The Home Secretary won't touch them.
Here’s the part neither side wants you to clock. Those contracts were signed in 2019, under the Conservatives, and run flat out right now under Labour.
One lot built the machine. The other feeds it. Neither comes out clean. A Conservative MP fighting a Labour Home Office decision, under contracts a Conservative government signed. Read that twice. The face changes. The machine doesn't.
The people who live there had to FOI their own council just to learn the basics. How many. What ages. Whether they're even related. They were told nothing, and had to force it out in writing.
That's where we are. You find out your street is changing for good from a video online, and you fill in paperwork to learn who your new neighbours are.
Not because anyone voted for it. Because someone you'll never meet, in an office you'll never see, signed it off, and didn't think they owed you a word.
That estate isn't the scandal. It's just the one part they couldn't hide in time.
4lmnc retweeted
Patriots - if you are protesting tonight, in Belfast or elsewhere, do NOT give Starmer what he wants.
Stay calm. Keep your heads. Do NOT attack the police.
The state will show you no mercy.
The dangerous ‘far-right’ will be blamed, and your life will be ruined forever.
It will be that brutal. However angry you are feeling now, it is not worth it.
Protest - but do it loudly, do it peacefully.
If the police are being aggressive, record it. Film it. Do not react. Because you will not be shown the same leniency as the officers. You will be charged, you will be sentenced, you will be imprisoned.
We’re all angry.
But you will achieve far more for our cause and country OUTSIDE of prison.
If you ever held assets on @CoinList you may want to check you're not being charged extortionate custody fees.
They moved to an on-chain non-custodial model late 2025 which in English means they're now charging you monthly fees to hold your tokens until you withdraw them.
I had no email about these new fees - but luckily checked today. I've been holding @MinaProtocol on there since the ICO and assumed it was secure and happily staking away. It was not, instead they were charging me ~3% of my stack each month and I had no idea.
You can find and withdraw all your old assets at old.coinlist.co/ since they moved to a new website which doesn't show them anymore!
Source: coinlist.co/faq#what-happene…
4lmnc retweeted
$XTM Tari : Privacy Meets Performance












