Blockchain Data Company - Try https://nitter.cf/t.co/SQNXvxzEKe & https://nitter.cf/t.co/KwLMkkKndj @DEXRabbit_Com, @WhalePolymarket | https://nitter.cf/t.co/DVrTOHc4Xw on Telegram
New York, USA
Joined September 2018
- Tweets2.9K
- Following133
- Followers6.1K
- Likes742
Pinned Tweet
Investigate Crypto without learning any tools
mcp.bitquery.io/
Jupiter Lend's USDC pool kept about 10% of its deposits as spare cash through October.
At 21:56 UTC on 29 October, one withdrawal of $44.0M took 99.94% of it.
It came from a whale whose wallets had parked USDC across midnight on 471 nights since July 2025, drawing on Kamino and Jupiter Lend.
The cluster sent $70.9M to Circle and has not come back.
Savers are owed $416.1M, and the queue to withdraw has grown since.
One wallet in the same cluster owes Jupiter Lend $114.5M.
bitquery.io/investigations/j…
On the night of 29 October, the Binance hacker swapped stolen coins in a rush and lost $119M against market prices.
Most of it came from overpaying for ETH on Ethereum, where Uniswap's main pools ran up to 38% above the market.
Traders and their bots sold into those pools, and after costs, they kept $59.9M.
The bots paid $29.5M to Ethereum's block builders and validators for priority access.
bitquery.io/investigations/b…
The Binance attacker took 200,630 ETH and now holds 508,621 ETH.
The rest was bought with stolen stablecoins and tokens.
bitquery.io/investigations/b…
Between 20:04 and 23:56 UTC on 29 October,
Binance's own withdrawal system signed away $6.3 billion from 17 of its hot wallets to an attacker, on nine chains.
@binance says a compromised engineer's laptop let the attacker in, and that no private key leaked.
Tether, Circle and Arbitrum, with four smaller issuers, locked $2.7 billion.
The attacker swapped another $729 million of stablecoins before the freezes landed.
At 03:54 UTC it still held about $3.1 billion, mostly ETH and BTC that has not moved.
bitquery.io/investigations/b…
On 29 October, between 17:10 and 18:10 UTC, someone emptied 737 Polymarket accounts and took $2.73 million.
Every drain was a normal withdrawal with a valid approval, sent by Polymarket's own relayer.
No smart contract was broken. The money left as POL and was split across new wallets, then bridged toward Ethereum.
Polymarket blames a hacked outside provider and says users will be made whole.
Even so, one more account was drained 38 minutes after that statement.
At 19:49 UTC, most of the money still sat on Polygon.
bitquery.io/investigations/p…
The average swap on Solana costs just a tenth of a cent.
Yet people pay apps and routers fees of up to 1% of the trade amount in some cases.
That’s huge compared to the actual cost of executing a swap.
$sol #solana
bitquery.io/investigations/s…
On 26 October, one attacker used the keys of five Solana validators, Solflare's and Blockdaemon's among them, and took 1,343 SOL worth, about $135K.
62% of it was JitoSOL. The identity keys emptied into one wallet in 3 minutes, and the vote accounts were empty within two hours, just before the check that picks the next voting set.
All four active validators stopped voting a day later.
The money crossed to Ethereum through Bridgers and Chainflip, and 57.0 ETH went into Tornado Cash.
Stakers' SOL was never touched, but it earns nothing while the four sit out.
bitquery.io/investigations/s…
Solflare Validator Hack: $135K Taken, Sent to Tornado Cash
bitquery.io/investigations/s…
Bitquery.io ( Bloxy ) retweeted
Rug in progress on BSC. "PREDICT" shows $8M/hour volume, but every wallet trades exactly once. Same operator, 7 tokens in 3 days, ~$6.5M cashed out. How we spotted it with the Bitquery MCP. Not financial advice.
Rug in progress on BSC. "PREDICT" shows $8M/hour volume, but every wallet trades exactly once. Same operator, 7 tokens in 3 days, ~$6.5M cashed out. How we spotted it with the Bitquery MCP. Not financial advice.
On 27 October the ChainPort bridge minted 2.98B wIRON, the Base copy of Iron Fish's IRON, in 14 mints that passed its own checks.
That is 38.7 times all the IRON that exists.
Two new wallets sold every coin for $197.4K.
One sent its share to FixedFloat. The other swapped its share for 0.865 BTC through THORChain, and that bitcoin moved again on Wednesday morning. Then 212 senders burned 192.0M wIRON to claim real IRON.
Whether ChainPort pays those claims isn't visible on-chain.
Full investigation: bitquery.io/investigations/i…
Every night this October, a cluster of wallets moved about $290M of USDC out of Aave and Sky's PSM, parked it in one wallet at 00:00 UTC, and put it back about half an hour later.
It has done so on 394 nights in a row.
On a median night, its USDC balance at midnight is 37 times its average over the day, which is what a reward that reads balances once a day would see.
For that half hour, Aave's USDC pool is nearly empty of spare cash.
The developer Wavey spotted the pattern first.
Full investigation: bitquery.io/investigations/u…
Between 22 and 27 October, someone emptied 29 accounts on Predict fun, a prediction market on BNB Chain, and took 397,708 USDT.
Each drain was signed with the wallet owner's key, and no Predict fun contract was broken.
We found no public report of the 22 October wave.
Within two hours of each wave, the money was on Ethereum, and 166.8 ETH of it went into Tornado Cash.
Predict fun blames a hacked API docs site and has promised refunds.
One more account was drained about an hour after that statement.
bitquery.io/investigations/p…
Bubblemaps says memecoins promoted by Solstice, a top trader on the FOMO app, were bundled.
Our own data backs that up. One cluster of 542 wallets created and bought five of the six coins in the story, and the sixth was launched the same way.
Four dev wallets each took 51.8% of supply at launch and sold within half an hour, and 537 bundle wallets bought small slices within 33 minutes.
Later each group cashed out together through stake accounts. Solstice's own public wallet lost money on the coins.
But money from the cluster reached an exchange account also paid by a wallet that has swapped $381K with Solstice's account.
bitquery.io/investigations/s…
1/ An investigation into @The__Solstice, top #3 social trader, and his ties to a massive bundling operation
Solana now makes a block, its batch of transactions, about every 0.21 seconds, half the 0.42 seconds it took in early August.
The change came in four steps between 21 August and 9 October.
The chain did not stop once in the 361 days we checked, and fewer blocks went missing after the change.
Each block now holds less, so Solana does about the same work per second in smaller pieces. A typical swap still pays about a tenth of a cent in network fees.
Staking rewards now arrive every 26 hours instead of every 51 hours, and the fastest bots buy new coins as quickly as before.
bitquery.io/investigations/s…
Solana halved its block time to 0.21 seconds, with no outage
bitquery.io/investigations/s…
Early on 26 October, an attacker emptied 48 wallets used with Bloom, a Telegram trading bot, and took 9,408 SOL, about $953K.
The wallets belong to nine traders.
A script tested one wallet per trader, then drained each trader's wallets biggest first, in 94 seconds.
It used the owners' own keys, and its list included wallets that had not traded on Bloom since the first half of 2025. It took only SOL.
Almost all of it sits unmoved in one wallet, and Bloom has promised refunds.
bitquery.io/investigations/b…
