If your signer accepts raw 32-byte digests, it can't tell a transfer from handing someone your whole wallet.
1/ The Binance drain's most reusable lesson for custody teams isn't "hot wallets are risky." It's that a hot-wallet key signed an object most policy engines don't even parse: an EIP-7702 authorization.
5/ What I'd ship this week: signers reject opaque digests and decode typed payloads only. Hard-deny 7702 auth signing on custody keys that never delegate. Alert on any type-4 tx naming your address as authority. Watch your EOAs for delegation code. Drill the revocation.
4/ Why policy missed it: a 7702 authorization is a signature over (chain_id, delegate, nonce). No recipient, no amount, no calldata. A rules engine keyed on destination and value has nothing to evaluate, and a signer fed raw 32-byte digests can't tell it from a tx hash.
3/ The sweep took ~167,464 ETH plus 63 tokens, and the borrowed code was used to pull ~823M USDC from a second Binance smart wallet. The delegation sat live for ~3h 50m until a zero-address revocation at 00:10:35 UTC.
2/ On-chain: one type-4 tx at 20:20:59 UTC Oct 29 carried 50 authorizations from the wallet Etherscan labels Binance 14, covering nonces 18,914,775-18,914,824. Only one matched. That delegated the wallet to an attacker sweeper.
Lock them all up. This is treason
🚨 BREAKING: The FBI just arrested a former Fort Bragg contractor with TOP SECRET clearance who allegedly posted classified military operation videos on SOCIAL MEDIA
Thank GOD he was caught, another leaker!
James Ashbacher, 37, worked security at U.S. Army Special Operations Command...according to the DOJ, he photographed classified ops footage and posted it online, where other users then spread it to a second site 🤯
When it started spreading, he allegedly messaged someone asking them to take it down, saying he was "trying to do some damage control"
When agents searched his home, they reportedly found a classified award write-up AND a missing night vision goggle system belonging to a special ops unit
NO MERCY FOR LEAKERS AND TRAITORS 🇺🇸
I know that Binance is the biggest CEX, but which country protects them? The answer is none. If you are going to stick with a CEX would it be safer to choose a USA based company like Kraken or Coinbase? If North Korea state sponsored hackers stole $6B from a US company I’m pretty sure that there would be military consequences for them.
Monte retweeted
Every influencer is posting the same two things. The Polymarket "hack" (it's a joke, nothing got hacked) and the $3M Binance drain. Nobody is talking about the fact that half the servers out there are exposed right now. Unless you run your own hardware and patch it yourself.
CVE-2026-98432, a bug in the Linux kernel TCP/IPv4 stack. One CPU frees memory while another is still reading it to answer a SYN packet. Use-after-free. Remote, no auth, an open port is enough.
CVSS 9.8 Critical on v3.1, 8.3 High on v4.0. In practice the most likely outcome is a crashed kernel, which means a dead server.
Ubuntu 16.04, 18.04 and 20.04 are vulnerable. On 22.04, 24.04, 26.04 and 26.10 the fix is still in progress. The AWS, Azure, GCP and Oracle cloud kernels are on the list too. So basically every VPS running your bot, node or site.
What to do:
sudo apt update && sudo apt upgrade
uname -r to check your kernel version
and reboot after the update, the new kernel doesn't load otherwise
Older releases can use Ubuntu Pro (ESM, Livepatch). Upstream Linux already has the fix in 7.3-rc7, now it's on Ubuntu to ship the packages.
While everyone argues about someone else's $3M, go check your own server. It takes 2 minutes.
Monte retweeted
Pèp ayisyen,
Nou prèske fin deplwaye sòlda nou yo ak ekipman nou yo sou tè Ayiti. Sa a se pa yon operasyon kont pèp ayisyen an, ni yon envazyon peyi Ayiti. Nou pa yon gwo pisans. Nou pa gen okenn enterè ni pou nou vin domine pèp ayisyen an, ni pou nou mete men sou richès Ayiti.
Nou se yon peyi modès k ap devlope. Sèl sa nou vle, se pou kat teknisyen avyasyon nou yo tounen lakay yo. Epi n ap bay gang yo yon leson, gang sa yo k ap fè pèp ayisyen an soufri, ki touye moun pèp la renmen yo, k ap anpeche l viv yon lavi nòmal, lib, san laperèz.
Se prèske nou menm sèl k ap peye pou operasyon sa a. Menmsi nou resevwa yon ti èd lojistik nan men kèk lòt peyi, se ak pwòp ti kès nou n ap kouvri 90% nan depans yo.
Sa koute nou chè, men nou te aprann nan pwòp soufrans nou: jistis ak lapè pa gen pri. Nou te pase nan menm soufrans Ayiti ap travèse jodi a. Nou te viv yon beny san ki te pi terib toujou pase sa pèp ayisyen an ap sibi kounye a. Nou konnen sa sa vle di: viv nan laperèz, pa fè politisyen konfyans, pa kwè okenn moun ki pwomèt l ap ede w. Paske pèsonn pa t vin ede nou, e moun ki te vini yo pa t gen bon entansyon nan kè yo.
Men nou te rive chape anba sa. Apre 200 lane soufrans, finalman n ap viv nan lapè, e jodi a nou se peyi ki gen plis sekirite sou kontinan an.
Nou pa vin ann Ayiti pou nou touche lajan, paske pèsonn pa peye nou pou sa. Nou vin ann Ayiti pou nou goumen kont mechan yo.
Men sa m ap mande nou: fè nou konfyans, lapriyè sèl vrè Bondye a, epi mande L pou L geri Ayiti.
“Lè sa a si pèp ki pote non m lan lapriyè nan pye m, si yo soumèt devan mwen, si yo pran chache m ankò, si yo vire do bay vye peche yo t'ap fè yo, m'ap tande yo nan syèl kote m ye a, m'ap padonnen peche yo, m'ap fè peyi a kanpe ankò.”
2 Kwonik 7:14
Ede nou ede Ayiti.
Epi lè misyon nou an fini, n ap tounen lakay nou. Petèt jenerasyon Ayisyen k ap vini yo ap sonje nou kòm zanmi ki te vin ede yon lè.
It's a sad day in the Monte household... “Seize the time… Live now! Make now always the most precious time. Now will never come again.” Jean-Luc Picard
All of us at Marvel Studios are deeply saddened by the passing of Sir Patrick Stewart. Sir Patrick brought Professor Charles Xavier to life with extraordinary grace, intelligence, and humanity, defining the character for generations of fans, from "X-Men" to "Logan" to "Avengers: Doomsday." He was a singular talent, a generous collaborator, and a true gentleman. Our hearts go out to his wife Sunny, his children, his friends, and the countless fans around the world whose lives he touched with his art.
So important. No way for lightchain to capture and sell your data. Let me say it again, no way for lightchain to capture and SELL your data. Wouldn’t it be nice to know that your data is yours and not something others seek to monetize ?
Exactly right. Ai agents are already exploring… you might have some running right now on the Grok platform. The growth of Ai agent use in Business, government, and with normal people is going to grow exponentially. Lightchain is positioned to provide these agents what they nee
AI agents are evolving beyond simply generating answers. The next step is giving them the ability to act, transact, and operate independently.
Imagine an AI agent that needs to research a topic, access different models, purchase data, and complete a task without waiting for human approval at every step. For that to work, AI needs more than intelligence. It needs a way to pay for the services it uses.
@LightchainAI is building toward this vision with wallet-based payments, $LCAI, independent GPU operators, and on-chain records for AI jobs.
Developers could build applications where agents access AI services and pay per answer, while operators contribute computing power to the network.
The bigger idea is an open AI economy where software can become an active participant, not just a tool people use.
The real test will be adoption, reliability, security, and whether this model can compete with existing AI infrastructure.
But one thing is clear: the future of AI may not only be about smarter models. It may also be about enabling them to do more.
And that’s worth watching with @LightchainAI.
Lightchain Ai has been built from the ground up to support the AI Agent economy.
An AI agent can't hold a credit card, but it can hold a wallet.
Yet most providers still limit users to monthly plans, fiat subscriptions and account censorship.
Lightchain lets any wallet pay per answer, at a price it knows before it asks.
@TheBlockCo explains why agents need wallets in this article.
Ligthchain.ai could be teh next huge thing in crypto and AI. Check us out. Mainnet is live. Testnet just got a major upgrade that will be game changing.
theblock.co/press-releases/a…
this is concerning nitter.cf/cohere/status/21147520…
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
Monte retweeted
🚨 WOW. Trump DHS in court just NUKED Los Angeles County's claim that "38.9%" of 200 sampled names on the 20,930 noncitizen voter list were born in the US
‼️ **ZERO were born in the United States** as declared under penalty of PERJURY by USCIS Fraud Detection Chief Nicolas Bartell, after checking the actual federal immigration files of LA County's 200-voter sample
"After a thorough review of the immigration records of all the individuals on the County's Sample List, it was determined that none of the individuals USCIS matched to the County's Sample List were born in the United States according to USCIS records."
And so THERE IT IS. LA is wrong because they DO NOT ACTUALLY CHECK, they just take fraudsters' word for it! 😠
51 of those foreign-born individuals simply LIED on California's honor-system voter rolls by claiming they were born in America — and LA County took their word for it to smear the DOJ's investigation!
Out of the 200 names, USCIS found only 4 who might even have a derivative citizenship claim and 1 who is dead.
California's narrative just collapsed in federal court!
SEQUESTER THE BALLOTS NOW.
h/t @MattFinnFNC
LBANK listing coming soon!!
🔥 THE COMMUNITY SHOWED UP. 💜
Quorum reached in just 6.5 hours!
When a community comes together, it makes its voice heard.
LIGHTCHAIN.AI — THE NEXT CHAPTER STARTS NOW. 🚀
#LightchainAI #LCAI
Monte retweeted
🚀 Could $LCAI be the next Solana?
Solana revolutionized blockchain speed. Lightchain AI could revolutionize decentralized AI.
⚡ High-performance blockchain
🧠 Decentralized AI computation
🤖 Autonomous AI agents
🌐 AI marketplace
💎 Real utility. Massive potential.
Monte retweeted
🔥Token of the Day (Monday) on ethereum chain!🔥
@LightchainAI
#TokenOfTheDay #GemsAlert #Moon #ETHEREUM
