DecryptoPal retweeted
After the past several months of folks claiming self custody is dead / too risky, a single exchange hack results in more losses than all the self custody failures this year combined.
xitter.cf/lopp/status/2087892465…
10/10/2025
to
29/10/2026
Karma is a loop
Stardate -296171.18743658037
Lost all faith in all of crypto except on-chain Bitcoin
NGMI
GG
1
115
DecryptoPal retweeted
The Binance $5.6B drain is a masterclass in modern EVM exploitation.
It wasn't a complex logic bug. It was an EIP-7702 delegation hijack:
1. Setup: Attacker funds 0x7c86 via Tornado Cash, deploys a sweep contract (0x63e8), and runs three live dry-runs on external wallets.
2. Execution: Attacker submits an EIP-7702 batch with 50 pre-signed authorizations (nonce n to n+49) to hit Binance 14's moving nonce window.
3. One authorization hits. Instantly, Binance 14 (an EOA) is reprogrammed to run the attacker's contract bytecode.
4. Execution looks totally organic: Binance 14 sweeps itself clean. Internal threshold alerts don't trigger because, from the nodes' perspective, the hot wallet is just executing its own transaction.
5. Binance 16 immediately auto-refills 28,000 ETH due to automated treasury rebalance scripts, feeding the exploit loop.
The cold truth: you cannot forge an EIP-7702 delegation list.
For this to execute, the attacker already held the raw private key or unconstrained signing access to Binance 14's HSM/KMS.
But hey, 5.64 billion drained across ETH, BTC, and Tron. 2.54 billion frozen by Tether, Circle, Ripple, and World Liberty within hours.
Code is law until the stablecoin admin keys log in.
Binance got bailed out by the very centralized choke points the cypherpunks warned you about.
Hardware wallets leak your home address.
Centralized exchanges leak the keys to the kingdom.
Self-custody on native, non-delegated chains remains the only honest baseline.
At least you know what to avoid.
DecryptoPal retweeted
Ordinals is too “crypto” for ancient Bitcoin whales who only spend sats on guns, steak & Coldcards; and too “Bitcoin” for crypto degens who'd trade decentralization for a pump-fun runner.
The few who do get it: true collectors, artists, first-principles thinkers, technologists.
DecryptoPal retweeted
The internet should help us find our people. Friendship. Community. A place to belong.
Help me bring Orkut back in that spirit. Add your name at orkut.com and share your supporter card with someone you want to bring along.
Love,
Orkut
DecryptoPal retweeted
These aren't NFTs.
They're offchain IOUs in a central party's private DB.
You cannot replicate the state with a node or transfer without central party approval.
If that's not your thing, there's always Bitcoin Ordinals on ord.net ⚡️
ZILKROAD // A COLLECTOR’S GUIDE_
Ahead of the opening of Zilk Road, we’ve prepared a guide to collecting, trading and managing zkSNARKs.
Pay directly with shielded $ZEC or use supported assets from other chains through Aurora Intents.
Every trade settles in ZEC.
DecryptoPal retweeted
Summary: if you have hot wallets in Chrome extensions and get any kind of malware they can just sweep the seed phrases from any extension wallets you have and all your passwords etc.
If you have any form of sync on in Chrome this will sync across to your other devices.
