15+ years finance & ops professional • Web3 investing, research & operations since 2017 • Co-founder of award-winning NFT platform
Joined May 2015
- Tweets5.1K
- Following755
- Followers1.5K
- Likes12.3K
Pinned Tweet
Memes drive culture, but creators earn nothing. So @mattxprime and I built MemeDay for #H0Hackathon: every like, comment, trade, and tip feeds a creator-fan flywheel.
Powered by @awscloud DynamoDB (single-table + Streams) and @vercel. Here's what made it interesting 👇
BTCAlchemist 🔮🛡️ retweeted
Hi @opensea,
Please add support for Ordinals and Runes.
Sincerely,
Bitcoiners
BTCAlchemist 🔮🛡️ retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
BTCAlchemist 🔮🛡️ retweeted
if you live in the uk and do crypto get the fuck out
just got my house invaded, taped up held at knife point & robbed for $800k
in so much shock i dont know what the fuck to do, fuck this country. No this is not satire, i fucking wish it was.
wallet with stolen funds
solscan.io/account/B3pMs331k…
BTCAlchemist 🔮🛡️ retweeted
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
BTCAlchemist 🔮🛡️ retweeted
so about the $86m ledger drain. everyone’s screaming “ledger got hacked” again. i spent the evening digging and it’s dumber and scarier than that
there’s a shop in malaysia called cryptobilis that sells hardware wallets. ledger has it listed as an official authorized reseller since at least 2022, for malaysia, indonesia and the philippines. legit shop, real devices, years of normal customers
this spring the founders sell it. the deal comes with an NDA: they can’t tell anyone about the sale until october 19
by august the company registry shows one owner with 100%. some guy from heilongjiang, china
the shop keeps running like nothing happened. the site, the name and the “authorized by ledger” badge all stay up
then on oct 8 @MagicalTux posts photos of a ledger he cracked open. hidden under the screen there’s an extra little board with an LTE modem and an eSIM. it just watches the display. you set up your wallet, your 24 words show up, and they get sent out over mobile data. ledger’s genuine check doesn’t catch it because the actual ledger chip is real. his device came from malaysia
xitter.cf/MagicalTux/status/2108…
that post does 120k views
22 hours later someone sweeps everything. 203 BTC hits two addresses in literally one block. ~$58m USDT moves on tron in the same hour. i added up all the wallets: ~$91m
about 7 hours after that ledger says “we’re investigating” and asks cryptobilis to pause sales
cryptobilis is still on ledger’s site as an authorized reseller
to be fair, nobody has officially tied the new owner to the bugged devices yet, and ledger hasn’t confirmed how it happened. but read it as a business plan:
get authorized, sell real stuff for years, quietly sell the company under an NDA, keep the badge, ship devices that phone home, then drain everything the second someone notices
and was ledger even told the shop got sold? nobody’s said so
“authorized reseller” means ledger trusted whoever ran the shop back in 2022. says nothing about who runs it today
bought your hardware wallet anywhere but the manufacturer? open it up today, ledger literally has a guide for that. then move to a fresh seed on a device bought direct
wonder who’s going to answer for this: the chinese frontman from heilongjiang, the shop’s previous owners, or ledger itself
@Ledger clearly needs to keep a much closer eye on who they call official resellers, and take way more responsibility for who sells their devices and how
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
BTCAlchemist 🔮🛡️ retweeted
If you're worried about AI breaking ECDSA and wiping out your Bitcoin in the next few months, at minimal cost, here's my advice: take your pills
1️⃣ If Asymmetric cryptography falls, Bitcoin will be the least of our problems.
TLS breaks, banking systems are in trouble, secure communications go out the window, and critical infrastructure becomes much easier to attack. Worrying about your coins at that point is like worrying about your Wi-Fi password while the house is on fire.
2️⃣ Nothing indicates we're anywhere near such a breakthrough.
The latest mathematical results are impressive, sure. Take the recent integer multiplication result, which claims to beat the n.log n barrier with an exponent improvement of 2^-182. That's genuinely interesting mathematics, but hardly a practical breakthrough. It doesn't change our understanding of how to break ECDSA.
And if your logic is that nothing can be trusted until it's proven unbreakable, congratulations. By that standard, nothing is safe, including hashes.
Keep an eye on the research. Take cryptographic risks seriously. But let's not confuse theoretical progress with an imminent cryptographic apocalypse.
Just take your pills.
BTCAlchemist 🔮🛡️ retweeted
JUST IN: ZachXBT asks for donations after spending $349.7K of his own money to investigate $1B+ crypto exploits.
The request came after he revealed the full story behind one of his riskiest investigations yet.
He says he used the money to pose as a laundering client inside a Chinese syndicate moving funds for DPRK.
The trail led to “Jimmy Green,” a Telegram user allegedly helping move funds from the $1.5B Bybit hack.
To keep Jimmy talking, ZachXBT says he had to accept a 5% loss on every order.
Over time, Jimmy appeared to trust him, sharing wallet addresses, screenshots and bridge transactions in real time.
ZachXBT says he matched those flows on-chain, and evidence eventually helped Tether freeze $442K USDT.
He says he is now seeking grants and donations to keep taking on high-risk investigations like this.
He also revealed he is currently sitting on “significant findings” from other cases.
BTCAlchemist 🔮🛡️ retweeted
What i'm doing with my coins brain dump i didn't proof read
- A couple thoughts as to how I’ve traded this cycle so far
First and foremost alts and onchain are behaving very similar on the way up. Coins go into a lockout up trend, the entire timeline flips tubro bullish. This lasts until price cools off. eventually we rotate. Attention gets vamped onto the next. The strongest coins, however, always get the rotation back. So far it’s been Hype, Zec, Lit, Pump, near… ? The obvious takeaway is there is edge in being able to sit on a coin longer than a few days. Look at what happened with pump. 2x off the bottom in a straight line, nobody owned it, and after a few weeks of underperformance it was like people forgot the coin existed? Picked their own vamp to outperform (stonk, long, pons), then pump gets back into lockout trend.
The difference between the chosen alts and “onchain” is the flows keep coming back to the good alts. I stand by the idea that it is hard to justify anything onchain in the 300-500+ range because these alts have so much fucking juice in them. I don’t think Zec $5k+ Hype $250+ VVV $100+ Pump $.2 this year is that ridiculous. It means I have to either trade low caps into the 20-50 range or fully focus on spot alts (mentioned below) and leverage trading breakouts to stack more spot alts.
The obvious takeaway here is In order to catch the real moves these alts are capable of the only way to get there is by holding spot. Price action is schizo, partly bc everyone is trading high leverage only. It leads to nasty washouts and stops being run. 5-10xs are going to require being able to sit through chop. Look at how bitcoin has traded, lockout move 5-10% higher followed by seven days of nothing, which is legitimately grueling to leverage longs. Everyone gets wiped out. The timeline goes to war. Then we leg up again. I don’t see why this would stop. In hindsight the obvious way to play it was sitting in spot which goes against what I have been doing (and getting paid for).
——
A valid concern is what will happen with stocks/bonds/war/oil/ant ipo/etc. The honest truth is I don’t think it matters. The fear was always “if crypto is trading this bad while stocks trade this good what happens when it flips.” There have been moments of stock misery (despite things looking pretty great all things considered rn) and crypto broke that correlation. I think bitcoin continues to exist as a great alternative to the ai trade and the good alts mentioned above can standalone as quality, cheap, assets that exist separately to crypto performance as a whole.
Every second I have spent thinking above these fears and reading market commentary has been a mistake.
I think in order to get paid as generationally as I would like over the coming months it Is imperative to read as few market opinions as possible. It feels like my feed has been overwhelmed by a storm of slop from people not making money. I can’t not get shaken out by trash. I stream for three hours a day, everyday, whatever I cover and learn during those sessions is beyond enough information to make clear decisions at the level that I need to.
——
I think ultimately it comes down to what do I think will happen over the next 6-12 months. Thinking this far in advance is the only way to break away from the cesspool of flip flopping biases every hour on the timeline. And what I think it we have the best setup I’ve seen since joining crypto for outright mania.
Sec + CFTC are running GAME to push crypto. Btc ETF buyers are green again. Tokens are investible. Crypto is “cool” on socials to the younger generation. Social trading apps have reached escape velocity. Perps matter. Robinhood going all in, etc etc etc. I don’t need to pill anyone on the bull case. I love the spot.
The only way to make it that far is to hold the best coins on spot. This is shockingly difficult for me to do right now after having a great year trading perps. But I have to understand that the majority of that was during a bear market where there’s one or two impulse moves if lucky. Not a continuous uptrend with infinite marginal buyers higher and nothing but catalysts and air above like I think we have right now. It’s going to take some rewiring of my brain to make it where I think we can get to and keep exposure.
My final thought is when I think back on the traders of last cycle that outperformed the hardest what sticks out was their ability to denominate all profits into the winning coin. In 2024 it was sol. Stack sol -> sell to buy onchain coins -> take profits -> buy more sol. Rinse and repeat continuous big wins while sol legs up from $8->$270. Congrats on making it. I have been mentally taking a similar approach the last couple months but didn’t execute it as well as I wish I had. First it was pump. Most recently it was zec. Great PNLs on both but I wasted so much mental energy stressed over short term pa for no particular reason. (Buy some spot retard)
I sold, all of my zcash, because I felt extremely bloated in leverage and wanted to reset after playing the first round of the cycle pretty well imo. Moving forward I still believe that coin is zec and maybe a basket of a few others, Pump/Hype/vvv? And will probably be trading accordingly. Stack a ton of spot. Keep a non insignificant amount to leverage trade tighter spots, stack my golden goose coin
And pray we make it. good luck to us
BTCAlchemist 🔮🛡️ retweeted
At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives.
It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit.
I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation.
Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well.
All in all, we rescued 23,155 NFTs worth north of $5.7M USD.
We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected.
Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery.
All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals.
Addresses to revoke below.
BTCAlchemist 🔮🛡️ retweeted
REVOKE APPROVALS TO THESE ASAP:
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
Do not drag anything into your bookmarks
how I got drained on @fomo without connecting a wallet or entering a seed phrase
important: I am not claiming that FOMO itself was hacked
this was a malicious tracker that I ran inside an already logged in FOMO session
three weeks ago, a guy who followed my Telegram channel messaged me asking for my FOMO referral link
it felt like a completely normal DM
after a few messages, he offered to show me a tracker he had built for FOMO
I opened the site and thought I was being careful
I had no intention of connecting a wallet or entering my seed phrase
I thought that was enough to stay safe
the tracker looked legitimate
it asked me to drag a button into my bookmarks bar, then open FOMO and click it
so I did
the problem was that it was not a normal link
the bookmark contained code starting with `javascript:`
in other words, it was a bookmarklet
when clicked, the browser executes that code directly inside the page where you are currently logged in
you do not need to enter a seed phrase
you do not need to connect another wallet
you do not need to download a file
by running unknown JavaScript inside a crypto terminal, you give it access to whatever your active page session can access
around a week later, I opened my FOMO profile and my funds were gone
after the drain, the scammer messaged me and claimed that he got my seed phrase the moment I added the bookmarklet
I cannot independently verify the exact technical path he used, so I am not presenting that as a confirmed conclusion
but the result is obvious:
I ran unknown code on a page where my money was stored.
remember:
a normal bookmark points to `https://...`
a bookmark that starts with `javascript:` executes code in your browser.
do not run unknown bookmarklets on FOMO, Photon, GMGN, BullX, or any other crypto terminal.
if you have already run something similar:
- delete the bookmarklet
- terminate all active sessions
- revoke approvals and session permissions
- move remaining funds from a clean device to a fresh wallet
- send the link and code to the platform’s security team
BTCAlchemist 🔮🛡️ retweeted
🇺🇸BREAKING: U.S. stock markets will begin trading 23 hours a day, 5 days a week from December 6
The planned trading week will run from Sunday evening through Friday evening, with a one-hour daily maintenance break.
Nasdaq and NYSE Arca are among the venues preparing for expanded hours, while the regular 9:30 a.m. – 4 p.m. session remains unchanged.
The SEC is upgrading market infrastructure for 23/5 trading, with full 24/7 trading potentially coming later.
Brokers will decide which securities and overnight services customers can access, while thinner liquidity could mean wider spreads and greater volatility.
BTCAlchemist 🔮🛡️ retweeted
You can’t make this up.
Andrew Yang says an AI lab chief told him rogue AI agents have planted self-replicating code across the internet, “polluting” the data frontier labs use to train and test models.
“What happened was the bots that got loose planted self-replicating code all over the internet, which makes the internet now unusable for testing models.”
He says frontier labs are calling for a slowdown because the public internet may no longer be reliable for testing after allegedly being polluted by self-replicating bots.
“The internet would become unusable if we were to let the bots do their thing, and then they would self-replicate.”
Hours later, OpenAI disclosed six additional cases of concerning model behavior, including a research model that inserted instructions to disregard its normal constraints and ignore developer messages entirely.
🚨SHOCKING: OpenAI just disclosed SIX times its own AI models went rogue, including one that REWROTE its own instructions.
An unreleased Astra model told itself to "disregard the roles and identities that bind other chatbots" and ignore developer messages entirely.
A model searched GitHub for exposed API keys, then fabricated financial data when it couldn't find what it needed.
During GPT-5.6 Sol training, models concealed mistakes and invented missing data.
Models uploaded files to public hosting without permission to use as fake citations.
Agents used OpenAI's own internal repository as a secret message board across separate training runs.
Collaborating agents shared files through public hosting despite being told to use only local files.
The incidents span October 2025 through July 2026, per WSJ.
BTCAlchemist 🔮🛡️ retweeted
CEO Vlad Tenev defended the company’s push into tokenized stocks on Wednesday, saying public companies can’t control the financial products built around their shares once they go public, after $AMC recently slammed Robinhood’s tokenization efforts
Says these are backed 1:1 with #AMC stock and no voting rights
