
Crypto tools and the traps around them. Check links before you click: @TASCheckBot. Part of @tradingAgentStk
Joined May 2012
- Tweets11.4K
- Following943
- Followers716
- Likes12.5K
pulled every builder-code fill for 8 AI trading apps on hyperliquid, last 30 days
1,561 users, $24.2M volume. users of 6 of 8 apps lost money overall
midas: 59% of users in profit, still −$4k
dxap: 34% in profit, still +$24k
win rate tells you nothing. size of the losers does
2
1
32
TradingAgentStack now on Claude
Got a Telegram bot link? Ask Claude if it's real before you start it.
Our TradingAgentStack connector checks it against the bot's own list.
t[.]me/trojan_solana_bot comes back as not official. The real one is solana_trojanbot on Telegram.
Free: tradingagentstack.com/mcp
13
An abliterated (uncensored) LLM just found ~$3,300 in live ElevenLabs keys on the open internet, per Deedy Das. The OpenAI keys it found were already drained.
If AI keys get swept that fast, assume exchange keys do too. Before a bot gets one: withdrawals off, IP allowlist, a sub-account, never in a repo.
1
33
we're building drain alerts for bot wallets. public addresses only, never keys.
pings you on test transfers, sweeps, new approvals, and when other wallets on the same bot are getting hit.
not live yet. waitlist: tradingagentstack.com/x/c/dr… (or /alerts in our telegram bot)
32
How the Bloom drain ran, from the onchain timelines: a 1-lamport test to confirm it could sign, tiny checks across wallets, then ~9,400 SOL swept in about 51 seconds.
Bloom says 49 wallets, 9 users, full reimbursement, cause still under investigation.
If a bot holds your key, size that wallet for a one-minute worst case.
26
3 hardware wallet makers, 3 data leaks in 2026: Ledger (Jan, via Global-e), Trezor (Aug, via ShipMonk), Keystone (this week).
Seeds weren't in the data. The risk is what comes next: fake emails, calls, letters, "replacement devices".
No real wallet company asks for your seed.
1
48
drained this week? order matters:
1. new wallet, new seed, clean device
2. cut off the way in (bot wallet, approval, API key)
3. log every tx hash
4. report it
5. ignore anyone selling "recovery"
our sourced guide: tradingagentstack.com/x/c/tr…
1
42
free tool we built: paste any telegram bot, exchange or wallet link into @TASCheckBot and it tells you if it's the official one, a known fake or a lookalike.
add it to your trading group and anyone can /check a link before they click
3
165
electrum users: update to 4.8.3 before you touch "increase fee" again.
a bad server could swap in a fake tx and you'd sign the thief's version. how it works and what to do:
ELECTRUM BITCOIN WALLET CONFIRMS CRITICAL SECURITY VULNERABILITY EXPLOITED IN THE WILD
Electrum has disclosed a high-severity vulnerability allowing malicious servers to trick users into sending Bitcoin to an attacker when increasing a transaction fee.
The attack works by intercepting a broadcast transaction and replacing it in the wallet’s history with a fake transaction redirecting funds to an attacker-controlled address.
If the user attempts to increase the fee using Replace-by-Fee (RBF), Electrum can sign the malicious transaction, sending the Bitcoin to the attacker.
Electrum confirmed two reported incidents, including one user who lost funds. Attackers even generated addresses matching the last four characters of the intended recipient’s address.
The vulnerability affects versions before 4.8.3 and has been patched in the latest release.
Users are urged to update immediately and verify all destination addresses and amounts before signing transactions.
2
38
tool of the day: bonkbot
the key lives on bonkbot's backend and your telegram approves every trade. so your telegram account is the wallet
turn on their 2fa or passkey today. it gates withdrawals and key export
full check (ours): tradingagentstack.com/check/…
1
41
Time to $JUMP
@jumperapp tokenomics released
33.33% reserved for community,
which means the airdrop could be massive like @variational_io
31
Uh Oh!
the @zksnarks_ floor is below mint price now 1.3 ZEC
People realising this is actually just an IOU on a centralized databse
Dont be fooled by the hype. Look in
1
53














