Marcus Kernel (@marcus_kernel) header
Marcus Kernel (@marcus_kernel) profile picture

Grin ツ

Joined May 2024
Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)Photo by Marcus Kernel (@marcus_kernel)
Marcus Kernel retweeted
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem. This is an iOS-level issue, not unique to Binance. Immediate Action Required: - Delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs). - Update iOS and all apps to the latest official versions. - If you suspect a breach, transfer funds to a new wallet created on a clean device and reset all active login sessions. Never install unauthorized packages, and keep your software up to date.
Readers added context they thought people might want to know
Binance recommends updating iOS to the latest versions against worse_query, but researchers describe it as an unpatched 0day and Apple's iOS 27.2.1 notes omit any such fix. github.com/forcequitOS/wo… support.apple.com/en-us/149715 x.com/0xjohnny/statu…
796
1,707
1,000
8,855
3,612,186
Marcus Kernel retweeted
DPRK isn't just scrambling the money trail — they're literally DDOSing the visual tracking tools: they've automated the split of $6.3b into tens of thousands of microscopic, cascading peeling chains inside a few blocks. the sheer volume of addresses is designed to crash the GPU/CPU of any tracker trying to render the multi-chain flow, rendering forensics screens totally useless. "WTF are you even doing here" = 50,000 automated micro-transactions designed to give chainalysis' analytics server a meltdown. 🤓
Dear Mr. Binance Hacker, WTF are you even doing here? 😐 This is seriously one of the maddest laundering operation we've ever seen! They have not even started using mixers properly yet.
78
230
48
1,947
266,559
Marcus Kernel retweeted
PSA for anyone running a Linux server, node, or relay CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed. njump.me/nevent1qqsxq6exy862…
12
27
2
120
15,581
For a long time now. But there are other options to trade Grin: @Gate and @cexswapcc
3
32
"... and Grin, which uses the MimbleWimble protocol to compress transaction data entirely, targeting Monero’s biggest flaws: huge transaction sizes and blockchain bloat." 👍
MONERO: 68% OF DARK WEB TRANSACTIONS Monero applies ring signatures, stealth addresses and hidden amounts to every transaction by default, with no opt-out. It's displaced Bitcoin on darknet markets. Our research team wrote a guide on privacy coins. Check it out below: info.arkm.com/research/priva…
2
57
Great. People need an affordable device.
1
336
Privacy is useless if it's based on a centralized blockchain.
5
35
As hard as copy pasting a text message
1
1
10
The more complex a blockchain is, the more hidden bugs it tends to have. Simplicity is the key to a robust blockchain or at least a simpler one has a lower chance of being exploited, since it offers fewer attack surfaces.
"Recently the Zano blockchain experienced an inflation bug affecting all assets on the Zano chain, including fUSD. This exploit created unauthorized fUSD. Those units were then sold into markets before the vulnerability was discovered. Our preliminary accounting indicates that several million dollars’ worth of assets held by Freedom Dollar were exchanged for counterfeit fUSD. The losses will be absorbed by the Freedom Dollar team."
3
58
Replying to @8L1NDS33R
ASIC resistance = 51% attack
4
Replying to @giacomozucco
The best way someone recommended is to send the coins to yourself with 90 bytes OP_RETURN on Bitcoin chain and then spend the fork coins.
1
115
Replying to @lite_hause
The definition of fair launch is Grin.
14
Marcus Kernel retweeted
mistakes by 110ers: arguing nodes control protocol changes and miners will capitulate. subtly wrong. the economic users control the protocol, via the market. they transmit their views by transacting with their economic nodes. 1000s of nodes with no economic use have no influence.
50
57
11
657
41,900
Marcus Kernel retweeted
Fuck the people telling you not to panic. The exploit is out in the wild, public attention is on it, and everybody has access to frontier LLMs. I imagine there are dozens of hacking teams now researching how to exploit this. You are in a race against time.
39
49
13
803
110,334
This Coldcard hack cuts deeper than anything I have seen since MtGox. This isn't shitcoiners or yield chasers getting rekt on Celsius, BlockFi or FTX . This is bitcoin maxis following the rules and losing everything. This will go down as one of the worst days in Bitcoins history
65
146
20
1,707
54,613
If you spent from the multisig, then all the public keys from the setup are on the blockchain
2
50