Trust Nothing ✜ retweeted
True or false
Yield basis utilizing BTC wrappers with centralized origins is “safer” than using a decentralized version of a BTC wrapper
50%True
50%False
2 votes • Final results Trust Nothing ✜ retweeted
This isn't Sun's only tokenized $BTC game.
His exchange, Poloniex, has its own version on TRON with 17,545 BTC—175x larger than both WBTC versions combined.
The catch? It's never completed a proof-of-reserves audit, and its collateral is a mystery.
Following the KelpDAO hack, we built an open analysis of DVN security configurations across every active OApp on LayerZero over the last 90 days.
Of ~2,665 unique OApp contracts: 47% run a 1-of-1 DVN security floor, 45% run 2-of-2, and ~5% run 3-of-3 or higher.
As we know, KelpDAO's rsETH sat in the first bucket.
Open query, public methodology, feedback welcome:
dune.com/dune/layerzero-dvn-…
A lot of people taking shots at LZ right now who are running the exact same set up with slightly different words
Go question your bridges and asset issuers.
Force their hands. NOW.
Trust Nothing ✜ retweeted

ZachXBT@zachxbt11 Nov 2025
Southeast Asia
Southeast AsiaConnected via North America App StoreAccount-level information, not a live location or per-post device.
Replying to @SBF_FTX
[ZachXBT says:]
After 3 years you somehow still dream about CZ every day. You only have 22 more years to continue those delusions.
I helped freeze ~$30M for creditors from the FTX Nov 2022 hack pro bono after your team had negligently stored private keys unencrypted and an employee was SIM swapped (Zane, Rey, etc can verify).
Trust Nothing ✜ retweeted

ZachXBT@zachxbt10 Nov 2025
Southeast Asia
Southeast AsiaConnected via North America App StoreAccount-level information, not a live location or per-post device.
Replying to @SBF_FTX
[ZachXBT says:]
A Bahamian exchange stole $8B and offered to give users only a % back. What should we have done—said 'nah, pardon the founder'?
Trust Nothing ✜ retweeted
I Withdraw My Offer to Advise MEXC - Here’s Why (Something Sinister Is Brewing)
After winning my case against MEXC - thanks entirely to the community’s relentless support and the spotlight you helped shine on their unfair seizure of user funds - I made a public offer:
If you are truly sincere in your apology and desire to change, I’ll make myself available, free of charge, to help guide those reforms. I have, in my life, built incredibly large web2 empires after all, and that's all they are - another web2 business.
Behind the scenes, I asked MEXC to provide a mutual NDA, because I couldn’t help them if they weren’t willing to be honest with me. I even rejected their “non-disparagement” clause - which, to their credit, they removed at my request - because I made it clear: I will always reserve the right to call you out publicly if this is all just smoke and mirrors.
Unsurprisingly to any of us: it was.
The first piece of advice I gave them concerned their so-called “Proof of Reserves”
Publishing wallet addresses they themselves provide to show the assets they hold means absolutely nothing. Offering a tool to verify your individual balance means nothing, either. Every user balance is a liability to the exchange - and publishing only the assets without an independently verified list of liabilities is 100% meaningless. It’s deceptive marketing pretending to be transparency.
When I told them this their response was:
“Well, it’s better than nothing, right?”
No. In fact it IS nothing, by design.
Seeing MEXC continue to push this fake “proof of reserves” narrative reminds me of an old saying:
“If you have to tell people you’re a lady, you aren’t.”
The second point I made - both publicly and privately - was clear: Stop confiscating user funds. If you suspect illegal activity, turn it over to law enforcement. Otherwise, give people their money back.
They’re still doing it. And it’s getting worse.
Take the case of @loveme4994
This user reached out and sent me evidence, which I verified through screen recordings and other account data. MEXC cited their Risk Control Guidelines:
mexc.com/announcements/artic…
The document still includes language like “suspected” - meaning they can permanently keep your funds based on suspicion alone.
Here’s the deeper problem: almost every major item on that list could be prevented through code if they truly wanted to. But removing the loopholes would also remove their excuses to seize user funds.
And here’s where it turns sinister - and why I feel partly responsible.
After I made my account history public to prove my innocence, MEXC seems to have learned from it. In this latest case, they completely wiped the user’s transaction history after confiscating their funds.
They stole the user’s money. They admitted to it.
They offered no specific accusation.
And they erased the evidence that could have helped proven the user’s innocence.
My case was over $3 million.
This user lost roughly $4,000 - which, for most people, is life-changing.
Their $4,000 means more to them than my $3 million ever did.
While some high-profile cases have been resolved, I continue to see new ones daily that aren’t.
As long as this structural rot exists - fake “proof of reserves,” arbitrary justifications for seizures, lack of due process, and the ability to block users from their own records - MEXC remains a rotten apple.
Rotten to the core.
🫡 From the depths —
The White Whale 🐋
Trust Nothing ✜ retweeted
Privacy isn’t about hiding.
It’s about choice.
It’s about dignity.
It’s about deciding for ourselves who gets access to our data, and under what circumstances.
When that choice is taken away, so is a piece of our humanity.
Trust Nothing ✜ retweeted
$4M in fee from ByBit hack and now rekt for $6M.
. @gardenfi, a trustless bridge for BTC and wrapped assets across Ethereum, Arbitrum, Base, and others suffered an exploit worth $6.4M about an hour ago.
Here's what our preliminary investigation found: 👇
The incident is likely a private key compromise of EOA
(etherscan.io/address/0x3fdee…) holding funds across Ethereum, Arbitrum, and Base.
All assets drained to attacker address (etherscan.io/address/0x98bcc…).
Root cause appears to be compromised Web2 infrastructure controlling the EOA, with most of the stolen funds being represented in #wBTC, #USDC, #USDT.
In June 2025, @zachxbt accused the project of generating 80%+ of its fee revenue by processing assets from the DPRK's @Bybit_Official $1.4B hack in February, 2025.
As a result of the hacking incident, the Garden Finance team has announced a 10% bounty to the attacker in exchange of successful returns of funds.
(etherscan.io/tx/0x4686d76fe3…)
Cross-chain bridges are notorious weak points, with @DefiLlama data showing $2.88 billion total DeFi losses attributable to bridge exploits.
Trust Nothing ✜ retweeted
"Solver’s own inventory"
Half of it was stolen crypto.
Kim Yong Un as solver.
Garden 🌸@gardenfi30 Oct 2025Australia
AustraliaConnected via WebAccount-level information, not a live location or per-post device.
we’ve detected a compromise involving one of garden’s solvers.
the app is temporarily offline while we complete a full investigation.
the impact is limited to the solver’s own inventory — user funds and garden protocol are not at risk.
we’ll share updates as soon as we have more information.
Trust Nothing ✜ retweeted

ZachXBT@zachxbt30 Oct 2025
Southeast Asia
Southeast AsiaConnected via North America App StoreAccount-level information, not a live location or per-post device.
Replying to @punkaj__
Except a Garden deployer address messaged the attacker onchain and directly stated it is yours:
You’re likely just trying to downplay the incident to make it look like a team member does not operate the main solver.
Txn hash
0x4686d76fe35ccf0a17b1b4c0c00c52f2dc84f3da563dd081dba5e0f3e57b3012
Trust Nothing ✜ retweeted
We used to keep diaries.
Now we carry devices that record everything we do.
It’s a new era of digital diaries.
The difference is you’re no longer the only one reading them.
Trust Nothing ✜ retweeted
> blockworks becoming a data first org
that's cool, you guys could start by not reselling our free data for 4.5k/yr against our ToS, even after telling us you had removed all our data when we asked
screenshot from blockworks paid platform, 1 min ago
Update on our next phase of growth (long post)
TL/DR: Blockworks is becoming a software/data first org
When Mike and I started Blockworks in 2017, we wanted to solve "the information problem." Crypto was growing up fast and the new entrants deserved better information.
We've built everything from events to podcasts, research, data, and news.
As we’ve scaled, we’ve experienced massive growth across all business units: we've had record revenues in 2025 and we'll have another record year in 2026.
Over the past two years, we have seen particularly rapid growth in our data business. The market is telling us that our combo of data + distribution is extremely valuable. Every day, we hear from both investors and protocols that Blockworks data is critical to their daily workflow.
And so, we're going all in on what Mike and I believe is the greatest opportunity we’ve seen since launching Blockworks in 2017. More on this soon :)
Now, to talk about news...
Mike and I launched news in 2021 as an extension of our events, podcasts, and newsletter businesses.
At the time, crypto media couldn't speak fluently to tradfi, and trad media couldn't understand crypto.
Since then, Blockworks has broken big stories, published thousands of stories, been cited by nearly every major publication, and helped shape the industry conversation every day. I am very proud of the work that the team has done.
But the landscape is changing and the same problems don’t exist today.
There are many strong crypto media publications. Great journalists combined with new tools have raised the bar in reporting, and traditional outlets have also improved. Meanwhile, users are increasingly looking toward data as a primary information source.
So we’ve decided to sharpen our focus on software and data and exit our news business.
To our incredible news team: a huge, heartfelt thank you. You built something that helped shape the industry and fueled the growth of Blockworks. I have a deep amount of respect for all that you do. To anyone hiring crypto journalists, please reach out – everyone is incredible.
To the broader Blockworks community: over the coming months, you’ll see Blockworks evolve into a data-first intelligence platform. Our website will become a true data destination. Our main newsletters and podcasts will continue to set the pace for conversations that drive the industry. Our events will continue to grow (DAS is coming to Abu Dhabi next year).
And we’re rolling out more category-defining software and data products soon.
Love you all, onwards.
Trust Nothing ✜ retweeted
"As crypto reaches more mainstream users, the need for privacy is more urgent than ever."
- @a16zcrypto



























