🚨PSA: Massive NPM supply-chain attack injects code into hugely popular packages that can rewrite crypto destinations and tamper with wallet APIs in the browser before you sign.🚨 No FUD - better be vigilant than sorry This isn't limited to one chain - it's cross-chain, affecting any JavaScript-based wallet or dApp using these packages (e.g., MetaMask for EVM, Phantom for Solana).. How it works (simple terms): injected code hooks fetch/XMLHttpRequest and wallet APIs, then swaps recipients/amounts/approvals or shows look-alike addresses. Think man-in-the-browser for web3. Step-by-step on how Malware operates 🔸Vector 1 – Passive address swapping: malware watches for wallet contexts (e.g., window.ethereum) and swaps displayed/used addresses. 🔸Vector 2 – Active transaction hijacking: hooks fetch/XMLHttpRequest and wallet APIs to alter the transaction payload (to, amount, approvals) right before it’s handed to your wallet for signing. Also: 🔸It can alter Ethereum/Solana transaction parameters (recipients, approvals, or allowances) right before the signing prompt. 🔸Even if the UI appears correct, the underlying transaction routes funds to the attacker. 🔸It stays stealthy by avoiding obvious UI changes if a wallet is detected, relying on background hooks. 🔸Specific to crypto: It recognizes formats across multiple chains and uses "lookalike" addresses (employs a sophisticated technique using the Levenshtein distance algorithm) to make swaps harder to notice. "Will Checking My Transaction Keep Me Safe?" 🔸 Yes, if you use a hardware wallet (like Ledger): Always read the details on the device's screen - it shows the real info, and hackers can't change that. But watch out: If it just says "Contract Interaction" or you allow "blind signing" (skipping details), you might miss risks. 🔸 For software wallets (apps on your phone/computer): It's harder to spot tricks, as the screen might lie. Best to wait until experts say it's fixed. Source: jdstaerk.substack.com/p/we-j… Stay Safe - Better Vigilant Than Sorry!

$MITO Airdrop 🪂- What MAY count toward the 10% Airdrop allocation from @MitosisOrg (heavy speculation) 1⃣Kaito Yapping 2⃣Expedition / MITO Points 3⃣Game of MITO/On-Chain Games 4⃣YO Pre-Deposits 5⃣Testnet Participation 6⃣Morse / Morph NFTs 7⃣Discord Roles 8⃣Event Attendance / Community Contributions 9⃣Yarm_AI Participation Details 👇 ➡️10% genesis $MITO Airdrop allocation announced by @MitosisOrg on August 17 ➡️Kaito bucket is the only confirmed one ➡️All others are pure speculation by me ➡️I may have missed some obvious ones or made a mistake with the ones I listed - I wasn't always on top of $MITO farming (and it's taking forever). Please correct me or leave additional criteria that may be making the cut ✌️ 1⃣Kaito Yapping - 0.8% Confirmed 🔸Season 1 ran ~January-July 31, 2025 (snapshot late July) 🔸Season 2 launched August 15, 2025 (30-day program with miUSDC prizes for top 35 and future rewards for top 300). 🔸Breakdown: 40bps for top 1,000 yappers (over 6 months), 20bps for sKAITO holders (multiplier for Genesis NFT), 10bps for upcoming X-authenticated on-chain social-liquidity primitive, 10bps for all three criteria. Snapshots: Late July for initial; more TBA pre-TGE. 🔸The only confirmed split from 10% Allocation 2⃣Expedition / MITO Points - (Likely Highest % Allocation) 🔸Duration and consistency typically matter more than one-off spikes. 🔸Liquidity provision campaigns for MITO Points/XP, with rewards based on deposit size/duration (e.g., 2x YO points, MITO yields TBA). 🔸Includes pre-deposits (live August 13, 2025) for miUSDC/miETH on Base. 🔸Zootosis vaults (part of Expedition, launched May 2025) offer phased deposits for token rewards; early withdrawal forfeits ~90% (redistributed). Started March 2024 (mainnet phase); ongoing with multipliers for long-term holders. 3⃣Game of MITO/On-Chain Games: 🔸Participation in ecosystem and seasonal games like Yieldkingz casino (launched July 4, 2025) for rewards in public/private lobbies. 🔸Broader "gamified programs" using miAssets on testnet (Q2 2024 onward) for MITO earnings. 🔸Speculated as part of social/cultural engagement. 4⃣YO (Yield Optimizer) Pre-Deposits - New On-Ramp 🔸Native UI to route miUSDC/miETH; framed as pre-mainnet on-ramp. Auto-rebalancing for yields (e.g., 5.9% ETH, 10.9% USDC APY as of August 2025); part of Expedition pre-deposits. Rewards include points and no-penalty withdrawals (7-day process). Launched August 13, 2025. 🔸Expect points/credit for sustained use 5⃣Testnet Participation (Nov 28–Dec 22, 2024) - Retro Credit Likely 🔸Separate allocation rumored but no official % published. 🔸Incentivized public testnet (November 28-December 22, 2024) for XP/MITO farming via tasks, liquidity, and interactions. Separate $MITO allocation; ongoing into 2025 with upgrades (e.g., crew creation for extra XP multipliers up to 140%). 6⃣Morse / Morph NFTs - Boosts (Not Allocation Guarantees) 🔸Boosts for holders in programs like Zootosis (4% multiplier on rewards). 🔸Holders get priority for events with TGE benefits (e.g., merchandise, networking). 🔸Started May 2025 with multiplier updates; holding status checked daily (not one-time snapshot). 🔸Speculated retroactive rewards for contributions. 7⃣Discord Roles - Multipliers/Access 🔸Roles earned via verification/activity (e.g., Mitosian, Nucleus, Settler, Sensei/Guru/OG). 🔸Roles have been tied to XP boosts/perks 🔸Speculated allocation: 0.2%+ of airdrop for higher tiers. 8⃣Event Attendance / Community Contributions 🔸Special TGE benefits for attendees (e.g., June 2025 events, capped at 50; priority for Morse holders/yappers). 🔸Rewards for any community contributions (e.g., art, posts, social tasks like sharing Superpass codes). 9⃣Yarm_AI Participation 🔸Speculated Allocation 🔸Register as a Yarmer @Yarm_AI , yap for leaderboard spots (Overlap Score boosts), and deposit stables/assets into pools (e.g., via @multiplifi) for miAssets, yields (5-170% APY), and $MITO emissions/carry rewards. 🔸Launched ~July 2025; ties into 0.8% Kaito portion and broader liquidity metrics that may give you a boost What did I miss? 🫡