Pinned Tweet
life update:
i’m now an officially recognized creator on base!
this brand is now the educational center for everything around base and its ecosystem, in collaboration with @aishaader13.
we’ve been heavily recognized by base:
a follow, a grant, a direct comment saying “your content is great,” and now this role.
this is what happens when you actually contribute to an ecosystem that sees your work.
for everyone asking: no, i didn’t build an app.
i’ve been in web3 for 8 months and i’ve been contributing to base consistently ever since.
i literally got rewarded for creating on base.
on @base, when you build, you always get rewarded.
and “building” on base isn’t just deploying smart contracts.
it’s streaming on base.
it’s trading.
it’s creating content.
it’s shipping ideas.
it’s contributing.
it’s supporting other builders.
it’s showing up.
base is the best place for creators. the best place to build. and the best place to earn.
and this can be anybody.
if you originally came to farm, it’s not too late to start building.
when you give to the ecosystem, it gives back to you.
@base is for creators and there’s no better time to start creating than now.
basepost!
🤝 Paid partnership
lazarus just pulled off THE biggest heist in HISTORY
crypto in the last48hrs:🚨
north korea just made TWO YEARS of its foreign income in 20 minutes.
in 2024, crypto hackings brought in $1.19B, roughly 1/3 of their foreign currency revenue
binance was $6.3B. that's 5x its whole 2024 haul.
by that math, crypto now makes up nearly 3/4 of north korea's foreign income.
so how did it happen?
1. 36 hours before
oct 28. a wallet gets funded with small tornado cash withdrawals.
attack code goes live on 3 throwaway wallets for testing, then a final rehearsal hours before.
on ethereum the attacker packs 50 pre-signed eip-7702 authorizations into one transaction so at least one lands with a valid nonce.
eip-7702 (shipped with pectra in 2025) lets a normal ethereum account hand its execution to a smart contract.
on binance 14, one of binance's biggest hot wallets, that turned the wallet into a sweeper the attacker controlled.
2. oct 29, 20:20 utc
binance 14 sends out $2.53B across 64 tokens.
24 seconds later a second hot wallet sends $174M to the same brand new address.
the first wallet kept getting swept as binance's systems refilled it.
nine other chains were hit at the same time with plain signed transfers, which is the tell: they weren't inside one wallet, they were inside binance's signing infrastructure.
20:41. a 780M usdc transfer from a third wallet is attempted and fails.
3. how they got in
binance's first finding: a compromised devops engineer's laptop that reached a service container able to submit withdrawals.
then co-ceo richard teng added more breach points, bypassed approval controls, and a mechanism that wiped the attackers' own tools and traces.
4. who
chainalysis, trm and elliptic all point to tradertraitor:
north korea's lazarus unit, the same one the fbi named for bybit ($1.46B, feb 2025) [everybody already knows this]
the strongest evidence: chainalysis watched binance's stolen funds commingle in real time with proceeds from the bitget hack (sept 24, roughly $352M to $387M), already on north korea.
elliptic says that overlap covers only a small share of the funds, so it isn't conclusive. no government has confirmed the attribution.
bybit, bitget, binance. three exchanges in 20 months.
chainalysis ties north korea to 89% of crypto hack losses this year. crazy lol
and the cashout route repeats.
after bybit, 84% of the stolen eth went to btc through thorchain. zachxbt says binance and bitget funds met after routing through thorchain.
5. the first 24 hours:
frozen so far: about $2.83B per zachxbt.
usdt $1.77B
usdc $823M
rlusd $40.5M
usd1 $27.8M
plus $30.5M frozen by arbitrum's security council.
6. the attacker's counter
he converted $325M of stablecoins into $285M of eth over about 20 minutes, accepting up to 26% below market to land in assets no issuer can freeze.
then he deposited $59.9M of usdt into aave, borrowed 19,762 eth against it and left aave holding the frozen collateral. aave says its contracts were unaffected.
18,270 btc (about $1.4B) can't be frozen either. chainalysis says the laundering patterns are ones it hasn't seen before: thousands of transfers, apparently automated.
> coinbase moved its offline key storage as a precaution. okx's ceo is asking for a real-time hack alert system between exchanges. about $130B came off crypto's market cap and $1.6B was liquidated, roughly half of it on binance.
20-year-old malone lam stole $240 million worth of cryptocurrency [4,000+ btc] over a phone call!
on the 19th of august 2024.
zachXBT was about to board a flight when he noticed a $600k transaction.
then another for $1m
then $2m
[theft happened on the 18th and they were moving it]
he started tracing it and realized someone had just lost $245m in bitcoin.
and while zach was sitting at an airport trying to figure out where the money was going, the people who stole it were busy buying:
ferraris
pagani
expensive ahh watches
jets
and spending half a million at nightclubs.
def not sus.
……
be malone lam
22 years old.
singaporean.
“Greavys.”
dropped out of school as a teenager.
met members of the crew through online gaming communities [minecraft]
eventually, they had an actual operation:
find wealthy crypto holders.
impersonate companies they trusted.
get them on calls.
gain access to their accounts.
move the money.
launder it.
and, apparently, break into houses when they needed hardware wallets.
august 18, 2024.
they targeted a Washington D.C. crypto holder who was also a genesis creditor.
someone called pretending to be google and gemini support.
got access to his google account and files containing information about his crypto.
then 4,100+ btc left his wallets.
worth more than $230m at the time.
today that bitcoin would be worth hundreds of millions more.
anyways…zach was already on the case.
he spent the flight tracing the money.
15+ exchanges.
dozens of wallets.
peel chains.
swaps.
pass-through addresses et cetera et cetera
then the wallets started connecting to people.
Greavys.
Wiz.
Box.
zach started matching the onchain activity with their online lives.
and these guys were posting EVERYTHING. literally.
cars.
jets.
mansions.
watches.
nightclubs.
birkin bags.
then he got a 90-minute screen recording of the crew celebrating the theft.
“243 million dollars!”
“I’m going to spaz out.”
they had literally recorded themselves celebrating stealing a quarter billion dollars 😭,.
one of them even exposed a real surname on his desktop.
zach connected the aliases:
Greavys → Malone Lam
Wiz → Veer Chetal
Box → Jeandiel Serrano
september 18, 2024.
lam gets arrested in miami.
serrano was arrested at LAX after returning from the maldives wearing a ~$500k watch. subtle.
the wider investigation eventually charged 18 people.
kunal mehta admitted to laundering at least $25m
another conspirator allegedly left an IP trail while moving nearly $30m
marlon ferro got 78 months.
evan tangeman got 70 months.
veer chetal pleaded guilty and agreed to cooperate.
and the whole thing got so messy there were even allegations of an attempt to kidnap chetal’s parents over the stolen money.
then you have malone himself.
this man stole $245m and spent it like it was his fucking money.
31 cars.
ferraris.
lamborghinis.
porsches.
a $3.8m Pagani.
a ~$2m watch.
private jets.
mansions.
bodyguards (urm…?)
hermès bags.
the money was moving through 15+ exchanges and a ridiculous web of wallets.
but his lifestyle was basically a public ledger too.
zach could see a wallet move millions.
then see Greavys posting a new car. see him at a club. everything.
and connect the dots.
this week, september 8, he pleaded guilty to RICO conspiracy.
the DOJ describes it as its first bitcoin-related RICO prosecution.
he faces up to 20 years.
sentencing hasn’t happened yet tho.
but at what point do we stop calling @zachxbt an onchain investigator and just admit bro is basically a private intelligence agency?
Oreos.base.eth retweeted
20-year-old malone lam stole $240 million worth of cryptocurrency [4,000+ btc] over a phone call!
on the 19th of august 2024.
zachXBT was about to board a flight when he noticed a $600k transaction.
then another for $1m
then $2m
[theft happened on the 18th and they were moving it]
he started tracing it and realized someone had just lost $245m in bitcoin.
and while zach was sitting at an airport trying to figure out where the money was going, the people who stole it were busy buying:
ferraris
pagani
expensive ahh watches
jets
and spending half a million at nightclubs.
def not sus.
……
be malone lam
22 years old.
singaporean.
“Greavys.”
dropped out of school as a teenager.
met members of the crew through online gaming communities [minecraft]
eventually, they had an actual operation:
find wealthy crypto holders.
impersonate companies they trusted.
get them on calls.
gain access to their accounts.
move the money.
launder it.
and, apparently, break into houses when they needed hardware wallets.
august 18, 2024.
they targeted a Washington D.C. crypto holder who was also a genesis creditor.
someone called pretending to be google and gemini support.
got access to his google account and files containing information about his crypto.
then 4,100+ btc left his wallets.
worth more than $230m at the time.
today that bitcoin would be worth hundreds of millions more.
anyways…zach was already on the case.
he spent the flight tracing the money.
15+ exchanges.
dozens of wallets.
peel chains.
swaps.
pass-through addresses et cetera et cetera
then the wallets started connecting to people.
Greavys.
Wiz.
Box.
zach started matching the onchain activity with their online lives.
and these guys were posting EVERYTHING. literally.
cars.
jets.
mansions.
watches.
nightclubs.
birkin bags.
then he got a 90-minute screen recording of the crew celebrating the theft.
“243 million dollars!”
“I’m going to spaz out.”
they had literally recorded themselves celebrating stealing a quarter billion dollars 😭,.
one of them even exposed a real surname on his desktop.
zach connected the aliases:
Greavys → Malone Lam
Wiz → Veer Chetal
Box → Jeandiel Serrano
september 18, 2024.
lam gets arrested in miami.
serrano was arrested at LAX after returning from the maldives wearing a ~$500k watch. subtle.
the wider investigation eventually charged 18 people.
kunal mehta admitted to laundering at least $25m
another conspirator allegedly left an IP trail while moving nearly $30m
marlon ferro got 78 months.
evan tangeman got 70 months.
veer chetal pleaded guilty and agreed to cooperate.
and the whole thing got so messy there were even allegations of an attempt to kidnap chetal’s parents over the stolen money.
then you have malone himself.
this man stole $245m and spent it like it was his fucking money.
31 cars.
ferraris.
lamborghinis.
porsches.
a $3.8m Pagani.
a ~$2m watch.
private jets.
mansions.
bodyguards (urm…?)
hermès bags.
the money was moving through 15+ exchanges and a ridiculous web of wallets.
but his lifestyle was basically a public ledger too.
zach could see a wallet move millions.
then see Greavys posting a new car. see him at a club. everything.
and connect the dots.
this week, september 8, he pleaded guilty to RICO conspiracy.
the DOJ describes it as its first bitcoin-related RICO prosecution.
he faces up to 20 years.
sentencing hasn’t happened yet tho.
but at what point do we stop calling @zachxbt an onchain investigator and just admit bro is basically a private intelligence agency?
the binance hack was staged.
look at the dates in the screenshots
they were all tweeted in june.
what’s happening??
top 5 biggest heist in crypto history
1. binance: oct 2026 ~$6.3B north korea
2. bybit: feb 2025 ~$1.5B north Korea
3. ronin network: mar 2022 $625M north korea
4. poly network: aug 2021 $611M unknown
5. coincheck: jan 2018 $534M north korea
north korea’s IT department be running the most profitable business in crypto
Oreos.base.eth retweeted
live from money2020: base is the fast, cheap, global way to make money work for your customers
Oreos.base.eth retweeted
correct, there will be traders, and there will be content creators, & then there will be people who are good at both
believe the combination will accrue an immense amount of value in a world where everyone can trade any asset immediately on their phones, & everyone wants to learn
hyperliquid is killing the idea of a "crypto trader" imo
if i can trade btc, hype, nvidia, gold and whatever comes next from the same venue, im not really just trading crypto anymore
im trading markets and i think thats increasingly how people will behave
follow the hot ball of money, the destination stays the same
Oreos.base.eth retweeted
since we’re sharing portfolios, i thought i’d put mine here too.
i create videos and content for brands/projects, and i’m looking to work with more brands across different niches.
if you need someone to bring your product to life through content, here’s my work: aishaaderugcportfolio.my.can…
open for paid ugc work.
congrats u just found the best storyteller on x.
noircreates.my.canva.site/
open for hire, im getting poor again.
Oreos.base.eth retweeted
just got off the stage at @token2049
tokenized equities will be the next supercycle in crypto
Oreos.base.eth retweeted
If you're running a chain and thinking about winding down, reach out.
Base can offer what you need, at lower cost, with a better experience for your users.
- Every asset to trade
- Deep borrow/earn markets
- Fast, cheap, trustworthy blockspace
We want to build with you.
Oreos.base.eth retweeted
1/ How I infiltrated a Chinese organized crime syndicate that has laundered $1B+ across multiple exploits for Lazarus Group.
Posing as a client, I gathered intel that helped action freezes for the Feb 2025 Bybit exploit and attribute illicit activity onchain.
calling robinhood chain and base “competition” to ethereum in tokenized equities is a little funny when both are literally built to settle to ethereum.
if anything, the chart is showing that ethereum pushed execution away from l1.
your points are valid but volume doesn’t tell you much.
in tokenized commodities, robinhood chain did about 26% of dex volume on sept 23 while holding $4.6m of supply.
solana went from 1% to 36% share in three weeks.
$4.6m of supply generating 26% of volume is a good example of why turnover and asset adoption aren’t the same thing.
the same tokens can trade over and over without that much of the underlying asset actually being represented on the chain.
Surprised this hasn’t gotten more attention: Ethereum L1 is barely showing up in the tokenized equities boom.
Tokenized equities already account for 12% of spot DEX vol on-chain, yet Ethereum L1 has close to 0 market share.
Robinhood, Arbitrum and Base are doing the gruntwork obviously. But where does that leave the L1?
Tokenization is going to reshape the onchain economy, and tokenized equities are going to be the fastest-growing segment over the next 2 years.
Ethereum needs a clear vision for what belongs on L1, what moves to L2s, and how the two fit together, from security and governance to liquidity and value accrual.
More on this in my article next week.
