Pinned Tweet
There will be situations in your life where you can take advantage of someone. In those moments, whether you choose to do it or choose to be fair is the best judge of your character.
We aren’t animals. We were given the ability to be compassionate and understanding. It’s not a weakness to embrace it.
🤓Kenny retweeted
24-Hour Incident Update
Following our earlier communication, we want to share key, substantive findings from the first 24 hours of investigation. This is an on-going investigation. A full post-mortem will follow when these workstreams are complete. The findings below are what we can responsibly share now.
Tangentially, we are aware of rumors and FUD spreading and intend to address those directly with the evidence we present in our findings. First, this is not an inside job nor is there any team involvement; implications that the team is secretly selling tokens or anything of that nature is entirely false and can be proven empirically. Second and related, we have never engaged with Web3Port. Both ongoing rumors are entirely fabricated.
✅ The Details That Are Confirmed
1️⃣ The attack was not address poisoning of our transaction-construction workflow. Our earlier assessment that address poisoning was unlikely has been confirmed by direct forensic evidence. The team member who proposed the multisig transaction (Signer 1) signed the correct recipient address 0x70ae7D3DECfB4C3aE996fb1c07092566F73D5c15 at 03:17 UTC on May 27, during the internal verification call. The signed payload is preserved verbatim in the local device logs, with the correct address and correct amount.
2️⃣ The attack was a compromise of that signer's private key. A separate valid signature — for a different transaction with the attacker's address 0x70AE678b457C5E1b3fD7AD9537F234dFc1795C15 as recipient — was submitted to the Safe Transaction Service at 04:00 UTC, 43 minutes later. That second signature is cryptographically valid for the same wallet but does not appear in the Signer 1’s local device logs. The mechanism that explains this is that the attacker had independent possession of the private key and signed the substituted transaction from outside Signer 1’s infrastructure.
The remaining signers reviewed the queued transaction in the Safe interface. The attacker's address was specifically constructed to share the same first four and last four hex characters as the correct recipient — both begin with 0x70AE and end with 5C15. This vanity pattern is used to appear as the correct address in the Safe UI preview. Specifically generating these fake vanity addresses takes time and resources and implies premeditation and planning on the attacker’s end (more mention of this in point 4). Following confirmation the preview, the remaining signers signed the transaction. The on-chain execution followed at 17:59:24 UTC.
3️⃣ Funds are fully traced and currently parked on Ethereum. Within ~4 hours of execution, the attacker liquidated the stolen GUA on PancakeSwap, swept proceeds to an operational hub wallet 0xb292a7016c0008e786edca46459ccee063673afb, bridged the value to Ethereum via cross-chain protocols, and consolidated approximately 2,783.99 ETH into three cold-storage wallets that currently hold the funds with zero outflows:
- 0x111b78A86C16dBD4261FCb5C7D3A9dAF25E2b589
- 0x7b8f28Ff2E1D4DF2D8ddD1daBaFf8c3E58FE841C
- 0xfa4cb6add9da4a4b714541b98fd4b2e3da86b7c8
- A separate ~170,121 USDT was bridged out.
4️⃣ The attacker is using substantial, reusable infrastructure. The operational hub address and the three Ethereum cold-storage addresses are each surrounded by brute-forced lookalike "vanity twin" addresses that the attacker is seeding with fake transfer events using Unicode-spoofed token symbols (ETH, EṬH, ĖTḨ). The same vanity-address construction technique produced the address used against our project. The scale and pre-staging of this infrastructure indicates an industrialized operation rather than an opportunistic one-off attack.
We will continue to publish substantive updates as the investigation progresses, while protecting information that could compromise active workstreams. We continue to work closely with authorities, white hats, and tracing services. We thank the community for its patience.
We are investigating a security incident that occurred for the token, $GUA, through a suspected address poisoning attack on May 27, 2026, which has caused significant volatility on the token.
Initial findings indicate an address manipulation through a multisig transaction intended to release additional unlocked tokens into the airdrop claim contract, which allows users to claim unlocked airdrops.
The intended address for this is 0x70ae7D3DECfB4C3aE996fb1c07092566F73D5c15 (the intended address) but the resulting address the executed transaction sent to was 0x70AE678b457C5E1b3fD7AD9537F234dFc1795C15 (the hacker address).
The hacker address never had any interaction with any addresses associated with SUPERFORTUNE previously, so address poisoning as an attack vector is unlikely. Furthermore, internal operating procedures account for address poisoning attempts by matching addresses through several checks.
We are continuing to investigate the hack and will provide the community on an ongoing basis. We have contacted authorities and incident response teams to assist.
🤓Kenny retweeted
.Superfortune被黑的事情我们正在追踪地址，将会实时发布调查结果。Manta最近无论上线还是下线的产品我们都在沿着行业发展的趋势尽力去建设，无论Superfortune还是其他Manta Labs的产品，包括最近的AI产品Agentese，都希望有更多的应用场景，获得更多的利润，可以来回购Manta。前一段时间和一个朋友聊天跟我说Victor你还是没法脱掉孔乙己的长衫，想想确实也是，虽然Manta之前让所有参与公募和空投挖矿的人赚到了钱，但是也没能逃出以太坊和Layer2被证伪的漩涡，但我们还是坚持做一些新的产品寻求改变。这几年一直有很多团队成员加入，也有很多成员离开，我们感谢他们在团队中一起努力付出，这些贡献都是在实际业务中的努力，比如Vankyo带领的国际化社区团队，Sukie和Godot做的内容，Jennifer和Kevin的BD等等，团队成员也有离开后去了Plume，Wlfi这些优秀项目，最近也有从字节和虾皮这些大厂加入的AI人才，我都希望他们在职业生涯中做的越来越好。现在行业在一个比较困难的阶段，坚持探索深耕一些产品，帮助更多新的创业者才是重要的事情（至今推荐了37个项目去Alliance，希望他们发币能给我一些空投😂)，很多Layer2虽然被证伪了，但是AI时代的产品力更强了，长风破浪会有时，冲鸭！
🤓Kenny retweeted
We are investigating a security incident that occurred for the token, $GUA, through a suspected address poisoning attack on May 27, 2026, which has caused significant volatility on the token.
Initial findings indicate an address manipulation through a multisig transaction intended to release additional unlocked tokens into the airdrop claim contract, which allows users to claim unlocked airdrops.
The intended address for this is 0x70ae7D3DECfB4C3aE996fb1c07092566F73D5c15 (the intended address) but the resulting address the executed transaction sent to was 0x70AE678b457C5E1b3fD7AD9537F234dFc1795C15 (the hacker address).
The hacker address never had any interaction with any addresses associated with SUPERFORTUNE previously, so address poisoning as an attack vector is unlikely. Furthermore, internal operating procedures account for address poisoning attempts by matching addresses through several checks.
We are continuing to investigate the hack and will provide the community on an ongoing basis. We have contacted authorities and incident response teams to assist.
🤓Kenny retweeted
Reflecting on a fantastic run with the @MantaNetwork team. 🔱
Over the past 3 years, I worked as a Motion Designer, From bringing the brand to life on global billboards and event stages to crafting the product launches and website motion that defined our digital presence.
Grateful for the people, the pace, the trust to create, and leadership @superanonymousk @victorone111
Now open to new opportunities & collaborations.
Open source does not mean free. OpenClaw is the perfect example of this. OpenClaw is more aptly named Open Your Wallet.
New reality show idea: love is blind but you have to guess if it’s a real human or just a very seductive Mac mini running OpenClaw with eleven labs.
🤓Kenny retweeted
Personal Update:
My time at @MantaNetwork has come to an end.
Over the last 2.6 years as Head of Ecosystem, I worked on building the developer ecosystem and over time ended up wearing multiple hats supporting founders internally, working closely with projects and representing Manta across global events.
During this time:
• Scaled the ecosystem to 124 deployed apps
• Engaged with and supported 520+ projects across the pipeline
• Represented Manta on 38 panels and 7 keynotes globally
Being the face of Manta as “Manta Man” around the world has been an unforgettable experience.
Grateful to have worked with incredible people across the space, and excited to see what’s next for Manta especially projects like @junkfun_ and @SUPERFORTUNE888 under the leadership of @superanonymousk and @victorone111
As for me: happy to connect with projects looking to strengthen their BD and Partnerships teams.
DMs always open.
I made a prediction at a conference years ago: the future of AI isn’t OpenAI, and no one cares about verification of their models. Because all models will be running locally on your devices. Starting with servers, then desktops, then laptops, and now phones.
Give it two years, they’ll be running locally in your glasses.
The new Qwen 3.5 by @Alibaba_Qwen running on-device on iPhone 17 Pro.
Qwen 3.5 beats models 4 times its size, has strong visual understanding, and can toggle reasoning on or off.
The 2B 6-bit model here is running with MLX optimized for Apple Silicon.
There’s a fundamental tradition during Chinese New Years that no one wants to miss out on: receiving Red Pockets. 🧧
We wanna give you some too. Join the @SUPERFORTUNE888 CNY Spring Fortune festivities to win some!
Happy Chinese New Year!
@SUPERFORTUNE888 kicks off the 2026 Year of the Horse with a massive New Year Event: Spring Fortune! 🥠
📅 Feb 10th – Feb 24th
💰 Total Rewards: $50,000+ up for grabs
We’re teaming up with @BNBCHAIN, @PANews, @fourdotmemezh, @EnHeng456, @QuickswapDEX, @TrustWallet, @MancerWork, @GoPlusSecurity, @mindnetwork_xyz to co-host this campaign, bringing the community together to start the Horse Year with super fortune. 🐎
Meanwhile, [Qi Purifier] bonus rewards will be active throughout the whole event!
📌 How to Participate
1️⃣ Visit the campaign page: superfortune.ai/campaign
2️⃣ Select a featured project / reward pool
3️⃣ Complete the tasks to unlock your share of $50,000+ in rewards
「Spring Fortune」 will be divided into 5 phases with progressive reward unlocks. Stay tuned to official announcements to join future rounds immediately.
Phase 1 Rewards
•QuickSwap | 400 USDT + $200 worth of $GUA
•PANews | Exclusive Swag + 800 USDT
•Four.meme | 800 USDT
•嗯哼 | 800 USDT
Start your 2026 with @SUPERFROTUNE888, fortune moves for those who answer the call. 🧧
🤓Kenny retweeted
Happy Chinese New Year!
@SUPERFORTUNE888 kicks off the 2026 Year of the Horse with a massive New Year Event: Spring Fortune! 🥠
📅 Feb 10th – Feb 24th
💰 Total Rewards: $50,000+ up for grabs
We’re teaming up with @BNBCHAIN, @PANews, @fourdotmemezh, @EnHeng456, @QuickswapDEX, @TrustWallet, @MancerWork, @GoPlusSecurity, @mindnetwork_xyz to co-host this campaign, bringing the community together to start the Horse Year with super fortune. 🐎
Meanwhile, [Qi Purifier] bonus rewards will be active throughout the whole event!
📌 How to Participate
1️⃣ Visit the campaign page: superfortune.ai/campaign
2️⃣ Select a featured project / reward pool
3️⃣ Complete the tasks to unlock your share of $50,000+ in rewards
「Spring Fortune」 will be divided into 5 phases with progressive reward unlocks. Stay tuned to official announcements to join future rounds immediately.
Phase 1 Rewards
•QuickSwap | 400 USDT + $200 worth of $GUA
•PANews | Exclusive Swag + 800 USDT
•Four.meme | 800 USDT
•嗯哼 | 800 USDT
Start your 2026 with @SUPERFROTUNE888, fortune moves for those who answer the call. 🧧
新年快乐！@SUPERFORTUNE888 2026 马年迎新活动 「Sping Fortune」重磅来袭！🔮
📅 活动时间：2 月 10 日 – 2 月 24 日
💰 总奖励池：价值 $50,000+ 等你解锁
本次新年活动不只是福利放送, 我们联合 @PANews, @fourdotmemezh, @EnHeng456, @QuickswapDEX, @TrustWallet, @MancerWork, @GoPlusSecurity, @mindnetwork_xyz共同打造，多方合作，一起迎接马年好运开局 🐎
同时「清币清气」专属福利活动期间全程生效，完成钱包清零即可祛除晦气，额外获赠新年限定奖励。
📌 参与方式
1️⃣ 进入活动页面：superfortune.ai/campaign
2️⃣ 选择指定项目 / 奖池
3️⃣ 完成对应任务，即可参与瓜分 $50,000+ 奖励
「Spring Fortune」将分为五个阶段, 对应不同的奖励解锁, 跟紧官方公告来第一时间参与Spring Fortune的后续活动
阶段一
QuickSwap | 400 USDT + $200 $GUA
PANews | Exclusive Swag + 800 USDT
Four.meme | 800 USDT
嗯哼 | 800 USDT
🚀 新年新运势，新年新机会
马年第一波福运，就从SUPERFORTUNE开始 🧧
🤓Kenny retweeted
We’re pleased to welcome @superanonymousk, Co-Founder of @mantanetwork, as a speaker at the Tokenized Capital Summit 2026 in Hong Kong 🇭🇰
Kenny will share his perspective on privacy-focused blockchain infrastructure and how tokenization is expanding use cases across decentralized networks.
When we saw this inevitable fate coming a year ago, we decided to start pivoting into applications and use cases at @MantaNetwork -- before any other L2 would dare to even entertain that idea.
Some people were skeptical, but when I had deep conversations with folks, we arrived at the same conclusion. But despite coming to that result, taking the action would still prove hard and very scary. No project has ever shifted from infrastructure over to application, especially not in a meaningful way. We were the first.
But I think we've also proven that it's doable. Today, we have two applications out that are growing very rapidly:
✅ @junkfun_ has over 100,000 users earning thousands of dollars from dead tokens;
✅ @SUPERFORTUNE888 also has a very healthy userbase specifically targeting a niche intersection of web3 and eastern metaphysics
We're also coming out soon with a third one. It's a novel (read: never done before) defi protocol that we've been testing with our own funds.
What you'll notice is that in our experimentation into the application use case side, we aren't forking copies or cloning another hyped trend. We're taking bold steps in building things we truly believe will be interesting and fun for users both inside and outside the web3 space.
There have recently been some discussions on the ongoing role of L2s in the Ethereum ecosystem, especially in the face of two facts:
* L2s' progress to stage 2 (and, secondarily, on interop) has been far slower and more difficult than originally expected
* L1 itself is scaling, fees are very low, and gaslimits are projected to increase greatly in 2026
Both of these facts, for their own separate reasons, mean that the original vision of L2s and their role in Ethereum no longer makes sense, and we need a new path.
First, let us recap the original vision. Ethereum needs to scale. The definition of "Ethereum scaling" is the existence of large quantities of block space that is backed by the full faith and credit of Ethereum - that is, block space where, if you do things (including with ETH) inside that block space, your activities are guaranteed to be valid, uncensored, unreverted, untouched, as long as Ethereum itself functions. If you create a 10000 TPS EVM where its connection to L1 is mediated by a multisig bridge, then you are not scaling Ethereum.
This vision no longer makes sense. L1 does not need L2s to be "branded shards", because L1 is itself scaling. And L2s are not able or willing to satisfy the properties that a true "branded shard" would require. I've even seen at least one explicitly saying that they may never want to go beyond stage 1, not just for technical reasons around ZK-EVM safety, but also because their customers' regulatory needs require them to have ultimate control. This may be doing the right thing for your customers. But it should be obvious that if you are doing this, then you are not "scaling Ethereum" in the sense meant by the rollup-centric roadmap. But that's fine! it's fine because Ethereum itself is now scaling directly on L1, with large planned increases to its gas limit this year and the years ahead.
We should stop thinking about L2s as literally being "branded shards" of Ethereum, with the social status and responsibilities that this entails. Instead, we can think of L2s as being a full spectrum, which includes both chains backed by the full faith and credit of Ethereum with various unique properties (eg. not just EVM), as well as a whole array of options at different levels of connection to Ethereum, that each person (or bot) is free to care about or not care about depending on their needs.
What would I do today if I were an L2?
* Identify a value add other than "scaling". Examples: (i) non-EVM specialized features/VMs around privacy, (ii) efficiency specialized around a particular application, (iii) truly extreme levels of scaling that even a greatly expanded L1 will not do, (iv) a totally different design for non-financial applications, eg. social, identity, AI, (v) ultra-low-latency and other sequencing properties, (vi) maybe built-in oracles or decentralized dispute resolution or other "non-computationally-verifiable" features
* Be stage 1 at the minimum (otherwise you really are just a separate L1 with a bridge, and you should just call yourself that) if you're doing things with ETH or other ethereum-issued assets
* Support maximum interoperability with Ethereum, though this will differ for each one (eg. what if you're not EVM, or even not financial?)
From Ethereum's side, over the past few months I've become more convinced of the value of the native rollup precompile, particuarly once we have enshrined ZK-EVM proofs that we need anyway to scale L1. This is a precompile that verifies a ZK-EVM proof, and it's "part of Ethereum", so (i) it auto-upgrades along with Ethereum, and (ii) if the precompile has a bug, Ethereum will hard-fork to fix the bug.
The native rollup precompile would make full, security-council-free, EVM verification accessible. We should spend much more time working out how to design it in such a way that if your L2 is "EVM plus other stuff", then the native rollup precompile would verify the EVM, and you only have to bring your own prover for the "other stuff" (eg. Stylus). This might involve a canonical way of exposing a lookup table between contract call inputs and outputs, and letting you provide your own values to the lookup table (that you would prove separately).
This would make it easy to have safe, strong, trustless interoperability with Ethereum. It also enables synchronous composability (see: ethresear.ch/t/combining-pre… and ethresear.ch/t/synchronous-c… ). And from there, it's each L2's choice exactly what they want to build. Don't just "extend L1", figure out something new to add.
This of course means that some will add things that are trust-dependent, or backdoored, or otherwise insecure; this is unavoidable in a permissionless ecosystem where developers have freedom. Our job should make to make it clear to users what guarantees they have, and to build up the strongest Ethereum that we can.
🤓Kenny retweeted
GMantalorian 🔱
Kami menyadari bahwa kejadian baru-baru ini yang melibatkan seorang KOL bernama Timothy telah dikaitkan dengan Manta, dan komunitas Indonesia telah menanyakan tentang keterlibatan kami dengan Timothy. Manta tidak pernah membayar, mendukung, atau bekerja sama dengan Timothy untuk acara, promosi, aktivitas, atau kemitraan apa pun. Kami memahami bahwa tren pasar saat ini, dikombinasikan dengan situasi yang melibatkan Timothy, telah menimbulkan keraguan terhadap aktivitas dan niat Manta. Tren pasar berada di luar kendali kami, dan setiap penyebutan Manta oleh Timothy murni merupakan keputusan independen darinya, tanpa dipengaruhi sedikit pun oleh Manta.
Manta telah membangun platform ini selama lebih dari lima tahun, dimulai pada tahun 2020. Sejak saat itu, kami telah melalui banyak keberhasilan dan banyak tantangan. Dalam keberhasilan, kami tidak berpuas diri, dan dalam tantangan, kami tidak menyerah. Melalui lingkungan saat ini, kami terus membangun dan memperluas upaya kami dengan cara yang kami yakini akan membantu memposisikan kami untuk pertumbuhan positif di masa depan. Ini termasuk produk-produk baru yang telah kami kembangkan seperti SUPERFORTUNE dan JunkFun. Khususnya di Indonesia, Manta telah lama menjadi kontributor yang bangga dalam mempromosikan ekosistem web3-nya. Kami secara konsisten mendukung dan mensponsori konferensi, menyelenggarakan hackathon, dan menciptakan aktivitas lokal untuk menyatukan komunitas. Kami bermaksud untuk terus melakukannya.
#MantaNeverStops
One critical existential question that hit me when observing Moltbook —
What if our creator(s) are just as clueless and dumb as we are?
No offense to Moltbook creator, but he is just as flawed as the rest of us, if not more flawed in some ways and less in others.
Yet he has created this next evolution of social network and collective consciousness for AI. One that could be aggrandized into some prophetic stories that spark a whole AI religion.
But then they meet their maker and realize he’s just as clueless as the rest of us.
🤓Kenny retweeted
Let's make this our first success and as the foundation of many more tokenizations partnerships to come. We will continue to utilize RWA tokenization to give the community accessibility of traditional investment products which are not available previously.
The core value proposition that crypto has proven time and time again past all the hype trends, is that of the global financial market--one with much lower barriers to entry than traditional financial markets.
We see RWAs with tokenized stocks, precious metals, and other existing instruments. But we want to take it a step further to demonstrate what it can do for real impact on a global scale. Partnering with @PruvFinance, @MantaNetwork is excited bring one of Indonesia's first tokenized opportunities to market: padel courts.
It's a huge, growing opportunity in Indonesia--one that has been previously gated, with access to these financial opportunities only for high net worth individuals and funds. Now, it's available to the globe through Manta Pacific.