Marcus Kernel retweeted
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem. This is an iOS-level issue, not unique to Binance.
Immediate Action Required:
- Delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs).
- Update iOS and all apps to the latest official versions.
- If you suspect a breach, transfer funds to a new wallet created on a clean device and reset all active login sessions.
Never install unauthorized packages, and keep your software up to date.
Readers added context they thought people might want to know
Binance recommends updating iOS to the latest versions against worse_query, but researchers describe it as an unpatched 0day and Apple's iOS 27.2.1 notes omit any such fix.
github.com/forcequitOS/wo…
support.apple.com/en-us/149715
x.com/0xjohnny/statu…
Marcus Kernel retweeted
DPRK isn't just scrambling the money trail — they're literally DDOSing the visual tracking tools:
they've automated the split of $6.3b into tens of thousands of microscopic, cascading peeling chains inside a few blocks.
the sheer volume of addresses is designed to crash the GPU/CPU of any tracker trying to render the multi-chain flow, rendering forensics screens totally useless.
"WTF are you even doing here" = 50,000 automated micro-transactions designed to give chainalysis' analytics server a meltdown.
🤓
Marcus Kernel retweeted
PSA for anyone running a Linux server, node, or relay
CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed.
njump.me/nevent1qqsxq6exy862…
"... and Grin, which uses the MimbleWimble protocol to compress transaction data entirely, targeting Monero’s biggest flaws: huge transaction sizes and blockchain bloat." 👍
MONERO: 68% OF DARK WEB TRANSACTIONS
Monero applies ring signatures, stealth addresses and hidden amounts to every transaction by default, with no opt-out. It's displaced Bitcoin on darknet markets.
Our research team wrote a guide on privacy coins. Check it out below:
info.arkm.com/research/priva…
2
57
The more complex a blockchain is, the more hidden bugs it tends to have. Simplicity is the key to a robust blockchain or at least a simpler one has a lower chance of being exploited, since it offers fewer attack surfaces.
"Recently the Zano blockchain experienced an inflation bug affecting all assets on the Zano chain, including fUSD. This exploit created unauthorized fUSD. Those units were then sold into markets before the vulnerability was discovered. Our preliminary accounting indicates that several million dollars’ worth of assets held by Freedom Dollar were exchanged for counterfeit fUSD. The losses will be absorbed by the Freedom Dollar team."
3
58
Marcus Kernel retweeted
mistakes by 110ers: arguing nodes control protocol changes and miners will capitulate. subtly wrong. the economic users control the protocol, via the market. they transmit their views by transacting with their economic nodes. 1000s of nodes with no economic use have no influence.
Marcus Kernel retweeted
Fuck the people telling you not to panic. The exploit is out in the wild, public attention is on it, and everybody has access to frontier LLMs. I imagine there are dozens of hacking teams now researching how to exploit this. You are in a race against time.
Marcus Kernel retweeted
This Coldcard hack cuts deeper than anything I have seen since MtGox. This isn't shitcoiners or yield chasers getting rekt on Celsius, BlockFi or FTX . This is bitcoin maxis following the rules and losing everything. This will go down as one of the worst days in Bitcoins history
Marcus Kernel retweeted
developing situation, but if you are currently using coldcard move your funds out of an abundance of caution
bugs have been found and exploited using ai
if you used dice rolls to generate your seed, you should be fine
if you use a passphrase, you should be fine
if you use multisig, you should be fine
would still move funds out of an abundance of caution
this sucks, coinkite team should release more info soon
Marcus Kernel retweeted
🦔AI companies are bulk-buying rare books, scanning them through high-speed machines that cut the spines off, and shredding the originals. A service called ISBNdb facilitates orders of up to a million books and keeps buyers anonymous. Pre-2022 books are premium because they're free of AI-generated text. A federal judge ruled the practice is fair use because eliminating the original means only one copy exists at a time. Anthropic hired the former head of Google Books partnerships to obtain "all the books in the world."
My Take
This got to me. A bookseller told 404 Media that rare books with almost no surviving copies are being fed into this pipeline. Books that survived wars, fires, and centuries of handling are being shredded so an AI can learn to write a better marketing email.
ISBNdb's website literally says "'AI company destroys two million books' is not a headline that generates sympathy," and they still built an entire business around making it happen quietly. They offer NDAs as a feature. They coach clients to call it "digital preservation."
I've covered AI companies scraping the internet, torrenting libraries, and stealing music. This is worse because it's irreversible. You can re-upload a website. You can reprint a bestseller. You can't replace the last three copies of an 18th-century botanical text once someone shreds them for training data. And the judge said it's legal. So it's going to accelerate.
"We shred rare books and offer NDAs so nobody finds out" is a legitimate business model in 2026. What a timeline.
Hedgie🤗
Marcus Kernel retweeted
Community, We Need Your Help
Before we bring the server back online, we need your help identifying the actual cause of the hack. So far, I haven't been able to determine how the attacker gained access.
I'm not a cybersecurity expert, and my knowledge in this area is limited. To help investigate, we're making our source code public so the community can review it and help identify any potential vulnerabilities.
codeberg.org/nonlogs-io/core…
Our current suspicion is that the attack may have involved JWT token forgery, possibly due to a leaked secret key or a successful brute force attack against the secret key. However, this is only a hypothesis, and we need experienced developers and security researchers to help verify the real cause.
If you have experience with backend security, authentication systems, or JWT, your help would be greatly appreciated. Our goal is to fully understand what happened before bringing the service back online to ensure everyone's funds remain safe.
Thank you to everyone willing to help.
Marcus Kernel retweeted
The European Parliament voted AGAINST Chat Control. 314 to 276.
And it passed anyway.
Let me tell you how: they needed 361 votes to say no. On the last day before vacation. Every empty seat counted as a yes.
They lost the vote. They won the law.
That’s not democracy. That’s a trick. #ChatControl
Marcus Kernel retweeted
Chat Control 1 is back. Despite the European Parliament voting down the legislation twice this year, the Council of the European Union and parts of the Parliament today managed – through an urgent procedure – to extend it for another two years. The law was originally introduced as temporary legislation, so that its effectiveness could be evaluated. At the end of 2025, the European Commission itself concluded that it was not possible to determine whether the law had any measurable effect. Even so, it has now been pushed through.
Some of today's amendments could have stopped the law. And a majority of the voting MEPs wanted to do so. By a margin of 314-276, the Parliament voted to reject the proposal through these amendments. However, since it was an urgent procedure, 361 votes were required. As a result, the majority lost today and Chat Control 1 was passed. The urgent procedure was a dirty play by the Council and parts of the Parliament – it’s a procedure not meant to be used on legislation already rejected by the Parliament.
For now, Chat Control 1 will remain in effect. This means that tech companies may continue scanning communications without a warrant or suspicion.
However, the real battle is Chat Control 2. Unlike Chat Control 1, it would require all providers to scan communications, and to do so far more extensively than Chat Control 1 ever has.
Marcus Kernel retweeted
🚨 #ChatControl 1.0 HAS PASSED - despite a majority voting against it (314:276) 🚨
After the EU parliament has rejected #ChatControl TWICE in the past, it has been pushed as an urgent procedure for a new plenary vote. TODAY the EU parliament has voted YES for #ChatControl 1.0😡
The EU has simply continued to put the vote on the agenda to get the outcome they've wanted since the start. This is not democratic‼️
What does #ChatControl 1.0 mean for us now?
🚩 Every photo, every message, every file you send will be scanned by Big Tech automatically
🚩 Mass surveillance of 450 million EU citizen without warrants
🚩 Every citizen is put under general suspicion
Here's what you can do to stay private on the internet:
✅ Use end-to-end encrypted messengers & email (like Signal or Tuta Mail)
✅ Use Linux instead of Windows & Apple
✅ Switch to GraphenOS or LineageOS
It's a sad day for the privacy of EU citizens but we will not let this stop us from continuing to fight for what is right.
At Tuta, we will continue to provide end-to-end encrypted email to everyone, and we will continue to fight for everyone's right to communicate without surveillance.
Pictured: Parliament President Roberta Metsola (EPP) who revived Chat Control 1.0 shaking hands with Mark Zuckerberg!
Taken from EP_President on Twitter/X.
Marcus Kernel retweeted
🎉 New Listing on AnonKyc
🔶 Grin ( $GRIN ) is now listed on AnonKyc
📊 Trade GRIN without KYC only on AnonKyc
Grin is a privacy-focused digital currency built by a distributed community of developers, designed to operate without centralized control from any company, foundation, or individual.
GRIN Trading: Open
GRIN Deposits: Open
GRIN Withdrawals: Open
Trading Pair(s): GRIN/USDT
Listing Details: telegra.ph/Grin-GRIN-Gets-Li…
Marcus Kernel retweeted
Strategy has sold 3,588 $BTC for $216 million to fund dividends on our Digital Credit securities. As of 7/5/2026, we hodl ₿843,775 in our BTC Reserves and $2.55 billion in our USD Reserves. strategy.com/press/strategy-…
