🚨PSA: Massive NPM supply-chain attack injects code into hugely popular packages that can rewrite crypto destinations and tamper with wallet APIs in the browser before you sign.🚨 No FUD - better be vigilant than sorry This isn't limited to one chain - it's cross-chain, affecting any JavaScript-based wallet or dApp using these packages (e.g., MetaMask for EVM, Phantom for Solana).. How it works (simple terms): injected code hooks fetch/XMLHttpRequest and wallet APIs, then swaps recipients/amounts/approvals or shows look-alike addresses. Think man-in-the-browser for web3. Step-by-step on how Malware operates 🔸Vector 1 – Passive address swapping: malware watches for wallet contexts (e.g., window.ethereum) and swaps displayed/used addresses. 🔸Vector 2 – Active transaction hijacking: hooks fetch/XMLHttpRequest and wallet APIs to alter the transaction payload (to, amount, approvals) right before it’s handed to your wallet for signing. Also: 🔸It can alter Ethereum/Solana transaction parameters (recipients, approvals, or allowances) right before the signing prompt. 🔸Even if the UI appears correct, the underlying transaction routes funds to the attacker. 🔸It stays stealthy by avoiding obvious UI changes if a wallet is detected, relying on background hooks. 🔸Specific to crypto: It recognizes formats across multiple chains and uses "lookalike" addresses (employs a sophisticated technique using the Levenshtein distance algorithm) to make swaps harder to notice. "Will Checking My Transaction Keep Me Safe?" 🔸 Yes, if you use a hardware wallet (like Ledger): Always read the details on the device's screen - it shows the real info, and hackers can't change that. But watch out: If it just says "Contract Interaction" or you allow "blind signing" (skipping details), you might miss risks. 🔸 For software wallets (apps on your phone/computer): It's harder to spot tricks, as the screen might lie. Best to wait until experts say it's fixed. Source: jdstaerk.substack.com/p/we-j… Stay Safe - Better Vigilant Than Sorry!

$MITO Airdrop 🪂- What MAY count toward the 10% Airdrop allocation from @MitosisOrg (heavy speculation) 1⃣Kaito Yapping 2⃣Expedition / MITO Points 3⃣Game of MITO/On-Chain Games 4⃣YO Pre-Deposits 5⃣Testnet Participation 6⃣Morse / Morph NFTs 7⃣Discord Roles 8⃣Event Attendance / Community Contributions 9⃣Yarm_AI Participation Details 👇 ➡️10% genesis $MITO Airdrop allocation announced by @MitosisOrg on August 17 ➡️Kaito bucket is the only confirmed one ➡️All others are pure speculation by me ➡️I may have missed some obvious ones or made a mistake with the ones I listed - I wasn't always on top of $MITO farming (and it's taking forever). Please correct me or leave additional criteria that may be making the cut ✌️ 1⃣Kaito Yapping - 0.8% Confirmed 🔸Season 1 ran ~January-July 31, 2025 (snapshot late July) 🔸Season 2 launched August 15, 2025 (30-day program with miUSDC prizes for top 35 and future rewards for top 300). 🔸Breakdown: 40bps for top 1,000 yappers (over 6 months), 20bps for sKAITO holders (multiplier for Genesis NFT), 10bps for upcoming X-authenticated on-chain social-liquidity primitive, 10bps for all three criteria. Snapshots: Late July for initial; more TBA pre-TGE. 🔸The only confirmed split from 10% Allocation 2⃣Expedition / MITO Points - (Likely Highest % Allocation) 🔸Duration and consistency typically matter more than one-off spikes. 🔸Liquidity provision campaigns for MITO Points/XP, with rewards based on deposit size/duration (e.g., 2x YO points, MITO yields TBA). 🔸Includes pre-deposits (live August 13, 2025) for miUSDC/miETH on Base. 🔸Zootosis vaults (part of Expedition, launched May 2025) offer phased deposits for token rewards; early withdrawal forfeits ~90% (redistributed). Started March 2024 (mainnet phase); ongoing with multipliers for long-term holders. 3⃣Game of MITO/On-Chain Games: 🔸Participation in ecosystem and seasonal games like Yieldkingz casino (launched July 4, 2025) for rewards in public/private lobbies. 🔸Broader "gamified programs" using miAssets on testnet (Q2 2024 onward) for MITO earnings. 🔸Speculated as part of social/cultural engagement. 4⃣YO (Yield Optimizer) Pre-Deposits - New On-Ramp 🔸Native UI to route miUSDC/miETH; framed as pre-mainnet on-ramp. Auto-rebalancing for yields (e.g., 5.9% ETH, 10.9% USDC APY as of August 2025); part of Expedition pre-deposits. Rewards include points and no-penalty withdrawals (7-day process). Launched August 13, 2025. 🔸Expect points/credit for sustained use 5⃣Testnet Participation (Nov 28–Dec 22, 2024) - Retro Credit Likely 🔸Separate allocation rumored but no official % published. 🔸Incentivized public testnet (November 28-December 22, 2024) for XP/MITO farming via tasks, liquidity, and interactions. Separate $MITO allocation; ongoing into 2025 with upgrades (e.g., crew creation for extra XP multipliers up to 140%). 6⃣Morse / Morph NFTs - Boosts (Not Allocation Guarantees) 🔸Boosts for holders in programs like Zootosis (4% multiplier on rewards). 🔸Holders get priority for events with TGE benefits (e.g., merchandise, networking). 🔸Started May 2025 with multiplier updates; holding status checked daily (not one-time snapshot). 🔸Speculated retroactive rewards for contributions. 7⃣Discord Roles - Multipliers/Access 🔸Roles earned via verification/activity (e.g., Mitosian, Nucleus, Settler, Sensei/Guru/OG). 🔸Roles have been tied to XP boosts/perks 🔸Speculated allocation: 0.2%+ of airdrop for higher tiers. 8⃣Event Attendance / Community Contributions 🔸Special TGE benefits for attendees (e.g., June 2025 events, capped at 50; priority for Morse holders/yappers). 🔸Rewards for any community contributions (e.g., art, posts, social tasks like sharing Superpass codes). 9⃣Yarm_AI Participation 🔸Speculated Allocation 🔸Register as a Yarmer @Yarm_AI , yap for leaderboard spots (Overlap Score boosts), and deposit stables/assets into pools (e.g., via @multiplifi) for miAssets, yields (5-170% APY), and $MITO emissions/carry rewards. 🔸Launched ~July 2025; ties into 0.8% Kaito portion and broader liquidity metrics that may give you a boost What did I miss? 🫡

I used to have a mindset of: "It's just an Airdrop". But it's not anymore. If I'm getting a drop for passively staking $ATOM - whether its $0.50 or $50 - I'm saying Thank you! Nothing to get upset about. Its just cherry on top. If you can't string two sentences together, moderate your Discord, continue to change your criteria, or can't provide clear comms? So be it. It's your project. If now you are asking me to grind some useless testnet quests, use specific wallets, provide REAL liquidity, provide infra or validate, and be your mechanical turk - it's not longer "It's an Airdrop". I'm your customer, and not just a user. And the way your project treats customers will leave a lasting first impression. 🫡