Two Coins. One Mission. Save the World.
Joined November 2021
- Tweets16.2K
- Following468
- Followers1.3K
- Likes38.3K
DefiBanked retweeted
Key Events This Week:
1. October ISM Manufacturing PMI data - Monday
2. Apple, $AAPL, and Palantir, $PLTR, Report Earnings - Monday
3. US Midterm Elections - Tuesday
4. September JOLTS Job Openings data - Tuesday
5. AMD, $AMD, and SMCI, $SMCI, Report Earnings - Tuesday
6. October ADP Nonfarm Employment Change - Wednesday
7. October ISM Non-Manufacturing PMI data - Wednesday
8. October Jobs Report - Friday
9. November MI Inflation Expectations and Consumer Sentiment data - Friday
10. ~20% of S&P 500 Companies Report Earnings This Week
11. Total of 5 Fed Speaker Events This Week
Buckle up for a huge week ahead.
DefiBanked retweeted
🚨BINANCE HACKER SWAPPING STOLEN SOL FOR BITCOIN!
The Binance hacker is converting the stolen 970,522 solana:So11111111111111111111111111111111111111112 (~$95.9M) into bitcoin:native, according to @lookonchain.
In the past hour, the hacker moved 486,970 solana:So11111111111111111111111111111111111111112 (~$46.4M) and is now swapping solana:So11111111111111111111111111111111111111112 for bitcoin:native through @RelayProtocol.
DefiBanked retweeted
BINANCE SEES $3.5 BILLION IN OUTFLOWS AFTER RECORD $6.3 BILLION HACK
Binance recorded more than $3.5 billion in net outflows Sunday, according to DefiLlama, after resuming withdrawals following a $6.3 billion cryptocurrency theft.
The exchange says it has replaced 95% of stolen assets, with withdrawals now stabilizing.
The FBI attributed the attack to North Korea’s TraderTraitor hacking group, although President Trump said the country’s involvement remains uncertain.
DefiBanked retweeted
🚨 Hedge funds are pulling money out of the stock market at the fastest pace ever recorded.
Morgan Stanley's prime brokerage data shows they have cut their total stock positions by more than 8% from the recent peak.
That's the biggest cut since the data began in 2016. It's bigger than the 2020 COVID crash and the 2021 GameStop squeeze.
Most of it has hit AI stocks:
• Goldman Sachs says hedge funds sold AI stocks for 5 straight days, from Oct 8 to Oct 14.
That wiped out all the AI buying they had done since the start of 2025.
• They sold the stocks they owned about 3.5x faster than they added new bets against them, so most of this is funds leaving the trade, not shorting it.
• Morgan Stanley's AI stock basket fell 18% in October, while the average US stock rose about 2%.
• Memory stocks like Samsung, SK Hynix, Micron and SanDisk lost more than $700 billion in seven trading days. SK Hynix had its worst week since 2008.
Is this the first sign the AI trade is breaking?
DefiBanked retweeted
⚠️ALERT: Core DAO's $CORE plunges 12% to an all time low after an attacker drains 97 MILLION tokens.
That's 99.8% below its 2023 peak of $6.14, and down over 22% this week alone.
The attacker drained the CORE, worth $1.47 MILLION, from Bitcoin staking protocol b14g on October 31.
They emptied 91 staking orders by asking to withdraw 0 CORE from each, which the staking code read as everything, per Bitquery.
DefiBanked retweeted
🚨 ALERT: Someone predicted back in June that Binance would be hacked in “2026 or 2027.”
DefiBanked retweeted
BREAKING: The Nasdaq 100 extends losses to -4.2% on the day, erasing -$1.7 trillion in market cap.
DefiBanked retweeted
🇰🇵 North Korean hackers just pulled off the largest cryptocurrency theft in history, stealing roughly $6.36 billion from Binance in just 20 minutes.
Blockchain intelligence firm TRM Labs has linked the attack with high confidence to TraderTraitor, a North Korean state-sponsored hacking group associated with the notorious Lazarus Group.
The attackers reportedly drained Binance wallets across 10 blockchains, stealing approximately $3.79 billion from Ethereum, $1.47 billion in Bitcoin, $628 million from Tron and $296 million from the XRP Ledger.
The scale of the operation is staggering, with the amount stolen roughly four times greater than the $1.5 billion Bybit hack in February 2025, which was also attributed to North Korean hackers.
Binance's preliminary investigation suggests the attackers compromised an engineer's laptop, gaining access to systems used to authorize withdrawals rather than directly stealing wallet private keys.
On Ethereum, investigators found that attackers used 50 signed authorizations to gain control of a Binance wallet, allowing them to drain funds and intercept subsequent deposits.
More remarkably, that access reportedly remained active for nearly four hours, including more than 90 minutes after Binance suspended withdrawals.
The exchange has pledged to cover losses using its emergency SAFU fund and company reserves.
Meanwhile, cryptocurrency companies have reportedly helped freeze approximately $3 billion of the stolen assets, although billions remain outside their control.
Source: TRM Labs, @binance / Writer: Mhedi
DefiBanked retweeted
HOLY SHIT 🤯
CZ Binance is now indirectly hinting at dumping $1 Billion in $SPCX shares after Elon Musk trolled him.
DefiBanked retweeted
BREAKING: Bitcoin falls below $77,000 and ETH falls below $2,200 after Binance confirms that they have been hacked.
This is looking like it will be the biggest hack in crypto history.
DefiBanked retweeted
🚨 BREAKING: GLOBAL FINANCIAL SYSTEM UNDER PRESSURE.
Markets are bleeding. Financial institutions across 7 countries are reporting cyberattacks. And now Binance is investigating a potential multi-billion-dollar security breach.
🇺🇸 UNITED STATES
• Alphabet (Google) $GOOGL: -12.6%
• Approximately $500 BILLION in market value wiped out.
• Worst trading day in the company’s history.
• Amazon $AMZN: down around 6–7% after hours following disappointing earnings.
🇰🇷 SOUTH KOREA
• Daishin Securities: 38,490 customers’ data leaked.
• Mirae Asset Global Investments: security breach under investigation.
• Bithumb: customer information exposed.
• Shinhan Bank and KB Kookmin Bank also reported data breaches.
LATIN AMERICA
• Cybercriminals used AI agents powered by Claude, Grok and Kimi.
• More than 400 financial targets, including banks and payment companies, were targeted.
• Customer credentials and bank accounts compromised.
🇮🇹 ITALY
• Fideuram, Intesa Sanpaolo’s private banking arm.
• €95 MILLION transferred through an AI-powered impersonation scam.
• €36 MILLION remains missing.
🇮🇳 INDIA
• Small financial institutions reportedly lost ₹300 CRORE (approximately $31 million).
• 150 reported cases involving fraudulent loans and stolen banking credentials.
🇯🇵 JAPAN
• GMO Internet’s currency trading service targeted.
• Hackers demanded $50 MILLION in cryptocurrency.
🇦🇺 AUSTRALIA
• A$4.5 TRILLION in retirement savings potentially exposed to AI-powered cyberattacks.
• Government cyber alerts increased 80% in one year.
🔴 CRYPTO IS NOW IN THE CROSSHAIRS
Bitget:
• $387.5 MILLION stolen from exchange wallets.
• Suspected North Korean hackers.
Binance:
• Investigating a major potential security breach.
• Approximately $5.78 BILLION in assets tracked across suspected hacker wallets.
• Tether and Circle have frozen more than $2.3 BILLION in associated assets.
• Binance has NOT confirmed that $5.78 billion was stolen.
Now look at the bigger picture.
The world’s largest technology companies are losing hundreds of billions in market value, financial institutions are facing coordinated cyber threats, and crypto exchanges are dealing with billion-dollar security incidents.
AI is changing the game.
The G7 is preparing financial-sector cyberattack simulations, while central banks are taking the threat seriously.
This is no longer just a technology problem.
It’s a global financial security problem.
ARE WE WATCHING THE EARLY STAGES OF A MUCH BIGGER FINANCIAL CRISIS?
DefiBanked retweeted
🚨 BREAKING: Cyberattacks reportedly hit financial institutions across 7 countries and crypto markets.
🇰🇷 South Korea: 68,000 people’s data exposed
🌎 Latin America: 400+ targets attacked
🇮🇹 Italy: €95M transferred, €36M still missing
🇮🇳 India: ₹300 crore ($31M) lost
₿ Crypto: $351M drained from Bitget hot wallets
🇯🇵 Japan: $50M crypto ransom demand
🇦🇺 Australia: A$4.5T in retirement savings potentially at risk
Is this the beginning of a much bigger cyber crisis? 🚨
DefiBanked retweeted
🚨🇺🇸 Are we gonna be in for a long night?
@PenPizzaReport is reporting higher-than-normal traffic at multiple pizza joints closest to the Pentagon!
DefiBanked retweeted
🚨995 Polymarket accounts just got drained through Polymarket's own website. Let me explain how, because this one should scare everyone in crypto.
No fake link. No shady airdrop. These people were on the real Polymarket dot com on Thursday.
Polymarket's site loaded a script from DebugBear, a tool whose only job is measuring how fast the page loads. Somebody poisoned it.
Once it was running in your browser, it grabbed your logged-in trading session and started dumping every open position you had, first at 3% under market, then at half price, then at the lowest price possible. Then it swapped the whole balance into POL and shipped it to the attacker. Stablecoins can be frozen. POL can't.
It even reported back after every hit. Your wallet, your country, your portfolio size, whether the transfer went through. All of it sent home through DebugBear's own data endpoints.
The attacker's wallet went from empty to $2M in about 45 minutes. Conor Grogan's final count was $2.65M.
One trader said he lost $800K and watched every position get sold. His friend got hit for $600K.
Polymarket flipped the exchange to cancel-only, paused the relayer and says everyone will be made whole. Credit where it's due.
But this is the third time this year. About $700K in May. About $3M in June, through a hacked third-party script, same as now.
I've been phished. I've been drained. Stay in crypto long enough and it happens to you. But the people on Thursday did nothing wrong. They opened the right website.
Not one of these three hacks touched a smart contract. We spent ten years making the blockchain unbreakable and then let a page speed tracker sit right next to people's money.
DefiBanked retweeted
BINANCE REPORTEDLY STILL SENDING CUSTOMER DEPOSITS TO COMPROMISED HOT WALLET AS HACKERS CONTINUE DRAINING FUNDS
Binance reportedly still has automated deposit wallet sweeps enabled, transferring newly deposited funds into its compromised hot wallet.
The attacker is allegedly draining the wallet as new funds arrive, potentially putting additional customer deposits at risk.
Users are being warned to avoid depositing funds until the situation is resolved.
DefiBanked retweeted
⚠️ SECURITY ALERT: Polymarket faces a suspected frontend compromise as multiple users report WALLET DRAINS and unexpected signature requests.
Trading has been restricted to cancel-only mode, with relayer operations paused as the platform investigates to incidents.
The cause and scale of any losses remain unconfirmed.
Avoid the site and DO NOT sign unexpected wallet requests until official guidance confirms it is safe to proceed.
DefiBanked retweeted
ATTACKERS REPORTEDLY EXPLOITED ETHEREUM’S EIP-7702 TO DRAIN BINANCE WALLETS
On-chain analysis suggests attackers obtained signed authorizations allowing them to install malicious code on Binance-linked wallets without directly accessing their private keys.
The attackers then used a function called “sweep” to transfer ETH and dozens of tokens into an attacker-controlled wallet.
The same delegated permissions were reportedly used to move another $780 million in USDC from a separate Binance hot wallet.
The attacker’s transaction relayer was funded through Tornado Cash, while nearly 195,460 ETH was subsequently transferred to a newly created wallet.
How the attackers obtained the authorizations remains unknown. Binance says user funds are safe and is investigating.
ok safe to say binance is pwned
The biggest assets were approximately:
• 1.615B USDT
• 62.6M RLUSD
• 29,934 wBETH
• 11,372 XAUt
• 6.19M UNI
• 198.4M ENA
• 7.175T PEPE
• 27.8M USD1
• 2.26M LINK
• 127,853 AAVE
about $2.5B at the explorer’s prices.
1. The attacker deployed a delegate contract, 0x63e842b0...73e9c6fAe, from the relayer at 15:59 UTC.
2. About four hours later, the relayer submitted an EIP-7702 authorization transaction
That installed the malicious 7702 delegate code on Binance 14.
3. The relayer then made a call to Binance 14, executing the delegate code, and transferring Binance 14’s ETH and token balances.
4. The calldata is labeled sweep(address, address[]). The second argument is a list of recognizable token-contract addresses plus the zero-address (eth).
5. The same relayer later used the same delegate to move 780M USDC from Binance Hot Wallet 34 into the same pool
• The relayer 0x7C... was funded by three Tornado Cash 0.1 ETH withdrawals over the prior two days.
• The same pool also received 28,005.6 ETH from Binance 16 24 seconds after the main sweep.
• The pool then forwarded 195,460 ETH to a fresh, unlabeled EOA
• That EOA has only one transaction and currently holds the 195,460 ETH.
What's a bit unclear is why the relayer was needed in the first place. If they had the private keys to the Binance wallets, they could have just sent the assets out in an atomic bundle without needing a relayer at all.
So it seems likely that they didn't have the private keys and instead just had the 7702 auth signatures, which must have been phished somehow.
I think we can go ahead and assume DPRK.