https://xitter.cf/t.co/6paYKMvwW0 member in @w3alpha_
Joined August 2019
- Tweets4.3K
- Following1.1K
- Followers301
- Likes18.6K
ordan retweeted
so about the $86m ledger drain. everyone’s screaming “ledger got hacked” again. i spent the evening digging and it’s dumber and scarier than that
there’s a shop in malaysia called cryptobilis that sells hardware wallets. ledger has it listed as an official authorized reseller since at least 2022, for malaysia, indonesia and the philippines. legit shop, real devices, years of normal customers
this spring the founders sell it. the deal comes with an NDA: they can’t tell anyone about the sale until october 19
by august the company registry shows one owner with 100%. some guy from heilongjiang, china
the shop keeps running like nothing happened. the site, the name and the “authorized by ledger” badge all stay up
then on oct 8 @MagicalTux posts photos of a ledger he cracked open. hidden under the screen there’s an extra little board with an LTE modem and an eSIM. it just watches the display. you set up your wallet, your 24 words show up, and they get sent out over mobile data. ledger’s genuine check doesn’t catch it because the actual ledger chip is real. his device came from malaysia
xitter.cf/MagicalTux/status/2108…
that post does 120k views
22 hours later someone sweeps everything. 203 BTC hits two addresses in literally one block. ~$58m USDT moves on tron in the same hour. i added up all the wallets: ~$91m
about 7 hours after that ledger says “we’re investigating” and asks cryptobilis to pause sales
cryptobilis is still on ledger’s site as an authorized reseller
to be fair, nobody has officially tied the new owner to the bugged devices yet, and ledger hasn’t confirmed how it happened. but read it as a business plan:
get authorized, sell real stuff for years, quietly sell the company under an NDA, keep the badge, ship devices that phone home, then drain everything the second someone notices
and was ledger even told the shop got sold? nobody’s said so
“authorized reseller” means ledger trusted whoever ran the shop back in 2022. says nothing about who runs it today
bought your hardware wallet anywhere but the manufacturer? open it up today, ledger literally has a guide for that. then move to a fresh seed on a device bought direct
wonder who’s going to answer for this: the chinese frontman from heilongjiang, the shop’s previous owners, or ledger itself
@Ledger clearly needs to keep a much closer eye on who they call official resellers, and take way more responsibility for who sells their devices and how
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
ordan retweeted
Shout out to the @w3alpha_ family for this easy cook on @HypeTerminals. Couldn't be easier.
ordan retweeted
I Saved Injective's $500M. They Pay Me $50K.
I like hunting bugs on @immunefi . I'm decent at it.
- #1 — Attackathon | Stacks
- #2 — Attackathon | Stacks II
- #1 — Attackathon | XRPL Lending Protocol
- 1 Critical and 1 High from bug bounties (not counting this one)
Life was good. Then I found a Critical vulnerability in @injective .
This vulnerability allowed any user to directly drain any account on the chain. No special permissions needed. Over $500M in on-chain assets were at risk.
I reported it through Immunefi. The next day, a mainnet upgrade to fix the bug went to governance vote. The Injective team clearly understood the severity.
Then — silence. For 3 months. No follow up. No technical discussion. Nothing.
A few days ago, they notified me of their decision: $50K. The maximum payout for a Critical vulnerability in their bug bounty program is $500K. I disputed it. Silence again. No explanation for the reduced payout. No explanation for the 3 month ghost. No conversation at all. To be clear: the $50K has not been paid either.
I've seen others share bad experiences with bug bounty payouts recently. I never thought it would happen to me. I can't force them to do the right thing. But I won't let this be forgotten.
I will dedicate 10% of all my future bug bounty earnings to making sure this story stays visible — until Injective pays what I deserve.
Full Technical Report: github.com/injective-wall-of…
ordan retweeted
nobody accidentally swaps $50M into a pool with $36K of liquidity lol. fresh wallet, $50.4M from Binance, zero slippage protection, routed through the jankiest Sushiswap path possible. and then an MEV bot just happens to flash borrow $29M from Morpho in the same block and pocket $9.9M?
cmon. 0xngmi called this exact play a year ago - construct a deliberately terrible swap, let a friendly bot extract the value, dirty money comes out the other side as "legit MEV profit."
$154K per AAVE isn't a fat finger. it's a laundering fee
ordan retweeted
prediction markets vs. the casinos is a very interesting battle to watch
prediction markets are creating a lobbying group to escape gambling regulations
meanwhile legacy casinos are lobbying to get them regulated.
never could've imagined I'd agree with the casinos
Today we launched the Coalition for Prediction Markets @PredictAction alongside Cryptocom, Robinhood, Coinbase, and Underdog.
Millions of Americans have become active users of prediction markets, whether they trade or learn from the forecasts. These markets have emerged as the most powerful way to harness the wisdom of crowds and routinely outperform traditional polls. Economists, news networks (CNN, CNBC), journalists, policymakers, and passive readers now rely on them for high quality signal amongst the overwhelming noise of public discourse.
We created the Coalition with a simple mission: provide a voice for prediction markets against adverse legacy lobbying groups. The Coalition will also protect the transparency, market integrity, and customer protection standards that underpin the industry. We expect more industry players to join over the next few months.
Why now? With over 150B of annualized volume, prediction markets have quickly become one of the most important consumer internet applications. In recent months, lobby groups have attacked prediction markets and spread mis-information about how they work and how they’re regulated.
Just like how the bank lobby attacked crypto claiming it's “not safe”: the attacks on prediction markets aren’t about protecting consumers, they're about protecting monopolies and the profits they fear losing.
The Coalition will work with policymakers to educate the public about how prediction markets work and how they differ from casinos and sportsbooks. With prediction markets, there is no “house” and no penalty for winning. People trade in a transparent and competitive environment against each other, just like the stock market.
Prediction markets deserve the same rigor as any modern financial market – clear rules and federal oversight. The best way to protect consumers is to keep these markets federally regulated, with consistent guardrails.
Onwards.
ordan retweeted
The United States did not attend the G20 in South Africa, because the South African Government refuses to acknowledge or address the horrific Human Right Abuses endured by Afrikaners, and other descendants of Dutch, French, and German settlers. To put it more bluntly, they are killing white people, and randomly allowing their farms to be taken from them. Perhaps, worst of all, the soon to be out of business New York Times and the Fake News Media won’t issue a word against this genocide. That’s why all the Liars and Pretenders of the Radical Left Media are going out of business! At the conclusion of the G20, South Africa refused to hand off the G20 Presidency to a Senior Representative from our U.S. Embassy, who attended the Closing Ceremony. Therefore, at my direction, South Africa will NOT be receiving an invitation to the 2026 G20, which will be hosted in the Great City of Miami, Florida next year. South Africa has demonstrated to the World they are not a country worthy of Membership anywhere, and we are going to stop all payments and subsidies to them, effective immediately. Thank you for your attention to this matter!
ordan retweeted
1/2 In June 2024 a victim was brutally robbed for $4.3M+ of crypto assets at gunpoint via home invasion in the UK after the attackers posed as delivery drivers.
I am proud to share that Faris & his two other accomplices were just sentenced and nearly the full amount of stolen funds was seized by MET Police.
I previously published my investigation identifying Faris and worked closely with the victim to communicate all findings to law enforcement.
Due to minor protection laws certain details about the case remain sealed.
Court: Sheffield Crown Court
Case reference number: 01GD1223024
ordan retweeted
> be Adobe, 40-year-old PDF jockey
> 2025, stock doing a perfect -33% swan dive
> “We’ll pivot to AI” says exec on 7-figure retention bonus
> can’t ship a model because legal says every pixel needs a 12-page EULA
> Midjourney drops v7, makes our Firefly look like MS Paint with a hangover
> OpenAI drops GPT-Image, Google drops nano-banana, both free
> our response: “Please login with your Adobe ID, install Creative Cloud, update 47 GB, restart, then pay $53.99/month”
> users collectively Alt-F4 into orbit
> watch in horror as ChatGPT/Gemini reads any PDF you give it for free
> enterprise cancels 10k seats overnight
> try to counter with Sora killer video model
> training cluster catches fire after someone uploads a 1998 clipart library
> PR tweet: “We are re-imagining creativity”
> quote-tweet ratio hits 1:9k, gif of dumpster bonfire tops replies
> premiere pro is now just a bloated launcher for 15 different subscription prompts
> 20-something with a phone and CapCut is making better edits
> our flagship feature: “Generative fill but now 3% slower”
> board meeting: “Let’s raise prices again”
> stock drops another 8% during the Zoom call
> our most innovative feature in 5 years is a "subscribe to annual plan" button that clicks itself
ordan retweeted
Get ready! Binance Alpha will be the first platform to feature Boost (BOOST) on September 5.
Eligible users can claim their airdrop using Binance Alpha Points on the Alpha Events page once trading opens. Further details will be announced soon.
Please stay tuned to Binance’s official channels for the latest updates.
ordan retweeted
NEW LEAK: Price sheet of 200+ crypto influencers and their wallet addresses from a project they were recently contacted by to promote.
From 160+ accounts who accepted the deal I only saw <5 accounts actually disclose the promotional posts as an advertisement.
