E. Hillford (@Surfingcrypto) header
E. Hillford (@Surfingcrypto) profile picture

Yes to freedom! Yes to crypto! Yes to cash! No to CBDCs Ethically open minded | No bias Reminder: Ethereum Virtual Machine (EVM) is the Web3 foundation

Joined March 2017
Photo by E. Hillford (@Surfingcrypto)Photo by E. Hillford (@Surfingcrypto)Photo by E. Hillford (@Surfingcrypto)
E. Hillford retweeted
Thank you Anthropic for making us focus on the important things in life 😘
We’ve trained Claude to flag potential misuse in conversations, a technique we call self-assessment. Right after it responds, Claude gives a preliminary safety assessment of the conversation. Since we began using self-assessment in June, it has surfaced misuse that our other safeguards weren’t designed to catch. Because Claude has already read the conversation, self-assessment is very efficient. And unlike classifiers, which target a discrete set of harms, it draws on Claude’s own judgment, so it gets more accurate as our models improve. Read more on our new Safeguards blog: safeguards.anthropic.com/202…
22
18
794
57,069
E. Hillford retweeted
Rabby is removing MegaETH from the supported blockchains. [Insert the oof meme] because this must hurt.
61
3
22
287
39,761
The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North Korean malicious cyber activity as "TraderTraitor." The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages. How You Can Help: FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets. A list of addresses associated with this activity is available here: fbi.gov/investigate/cyber/al…
885
3,191
796
12,063
2,534,842
E. Hillford retweeted
It should now be abundantly clear that ETH on Ethereum L1 is a very different beast from stablecoins like USDC and USDT, or ETH on e.g. Arbitrum. It is time to ask really hard questions: Which “beast” do people really want, and when? And how much capacity should there be to move instantly between them? Clearly, we still want strongly censorship-resistant assets like ETH and Bitcoin. But in many cases, having an entity that can intervene in the event of a hack can be a positive. However, the way that power is exercised can feel arbitrary. Is Paolo asleep? Do you have a direct line to Jermey so suddenly they block without court order. I think it would be good to have assets and rollups that offer an additional layer of protection, but under clear, transparent, consistently applied rules that protect smaller users too, not just the well-connected.
38
24
2
258
16,846
E. Hillford retweeted
Replying to @chainalysis
The beginning of agentic laundering?
12
22
3
749
64,131
Just got a phishing email that Gmail authenticated as Google. DKIM/DMARC passed. I can see a lot of people falling for this one, since it plays to the idea that your account has already been compromised. Scammer puts the scam in an app-password name, triggers a real Google alert, then forwards the alert email to your email address. How this attack works, and why it’s convincing: 1. The trick: The attacker puts the threatening text and shortened URL into an app password’s customizable name on another account. Google incorporates that text into a real security notification and signs the email. 2. The delivery: That notification is forwarded through another mailbox to the victim. In this message, Gmail still recorded passing Google DKIM and DMARC authentication. 3. What makes it convincing: The Google sender, signature, branding, and “Check activity” button are legitimate. The suspected attacker-supplied text appears inside the same trusted-looking template, using a deadline to push you toward its separate link. 4. The giveaway: Both the notification and its genuine Google button refer to someone else’s account. The “permanent access after 24 hours” claim is false; app passwords can be revoked. Be careful out there folks!
109
986
66
3,828
501,115
E. Hillford retweeted
Update: Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit were commingled at the same address 45 minutes ago, after arriving via THORChain. This indicates the same actor is likely behind both incidents. The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO. Commingling address: 0x15104a9ce0f08a8f0075a0869ae80e795fe0feb7 Bitget exploit context: nitter.cf/zachxbt/status/2104528…
BREAKING: Chinese illicit actors laundering funds from the $387M Bitget exploit on behalf of the alleged DPRK attackers are openly asking for support with orders in public Discord servers and Telegram channels of services they use. Notably, Alias 4 (below) was also seen laundering funds from the Kelp DAO $292M exploit earlier this year. I've observed the same pattern after multiple TraderTraitor attributed exploits, and I've closely tracked these groups. I plan to share more of my data on them in coming weeks. Currently, funds are being chain-hopped via bridges and being deposited into mixing services such as Wasabi. Alias 1 - Cc Discord: cc02006 Discord ID: 1351486674386948148 Txn: F08657EFAEAE7B58217CD17A22BF4779582E5D080C2E92E173BC239A5D828363 Alias 2 - jack Discord: jack_34808 Discord ID: 1553705721768714377 Txn: 68583D313A0CCC99F2702D61D05A242A69C86CAE09ED252B65F34B677C377F69 Alias 3 - Melon Discord: under0346 Discord ID: 1394240539108573215 Txn 1: ABE2AEF8B10057E60F8259CA2CA2CD5D71D38D254960FEEE89CB3C95A964873F Txn 2: 7BE290865901DEB1680A6D692A11392D1FDDACA0D31C48F26DCB249F2444BD6B Alias 4 - lolo / Marin TG: pvpcz TGID: 6223514198 Discord: losern Discord ID: 1024415186527985704 Txn: 8E935C19D00F40639B78BF1FD094FE48C92118F3E586AB52DF93851080CCCE15 Alias 5 - HELP ME Discord: helpme031897 Discord ID: 1554035533817188384 Txn: 7C58CAD760EBBED54F2CA4D2146D056910B7B6688B4F524396DC8807353C2379
186
435
171
3,172
490,200
‼️ French lawmakers voted for an internet traffic tax that the makers of VLC say would cost them more than €1M a year. Content providers would pay €0.055 for every gigabyte sent to French users, as counted by ISPs. Its Socialist authors expect €10B a year. The government opposed it, warning that about half the bill would fall on smaller providers, many of them French. It passed 11 votes to 10, with 35 of 577 deputies present.
112
265
139
2,125
192,533
🚨 BREAKING: Apple has warned iPhone users in 99 countries that mercenary spyware is targeting them. Lebanese journalist Radwan Mortada is one. Apple had already warned him in 2021. He says he doesn't know if this attack is linked to his film on Lebanon's 2024 pager explosions.
27
279
22
1,326
88,178
E. Hillford retweeted
🚨 0.77€ de taxe pour regarder un film Netflix ! Ce vendredi, les députés viennent d'adopter un amendement socialiste visant à taxer les données qui circulent sur Internet à hauteur de 5,5 centimes par gigaoctet reçu en France. Ils ont complètement pété les plombs. Voici quelques exemples de ce que ça va désormais vous coûter : 🔴 Vous regardez un film Netflix de 2 heures en 4K ? Jusqu'à 0,77 € de taxe brute sur les données transmises. 🔴 Vous téléchargez un jeu vidéo de 150 Go ? 8,25 €. 🔴 Vous récupérez 200 Go de photos personnelles stockées chez Google ? 11 €. 🔴 Vous rapatriez 1 To de vos propres fichiers depuis Google Drive ? 55 €. 🔴 Vous restaurez 2 To de sauvegardes après une panne informatique ? 110 €. Ces taxes seront facturées aux plateformes américaines, qui vous vous en doutez bien, vous redescendront la facture ! Ils sont en train de construire une fiscalité qui pénalise le simple fait de transmettre de la donnée. Et ceci alors que nous sommes à l'aube d'une révolution technologique majeure avec l'IA ! Pour rester compétitifs, tous les pays doivent accélérer leur transformation numérique. Et nous en France, que trouve-t-on comme idée de génie ? UNE PUTAIN DE TAXE SUR LA DATA ! Et en plus ils ont le culot de nous la présenter comme une mesure écologique qui encouragerait à réduire les volumes de données échangées. Quelle bande de guignols. Il faut être totalement déconnecté des réalités économiques pour considérer qu'un pays peut retrouver sa prospérité en multipliant indéfiniment les prélèvements sur les activités productives. Cet amendement n'est pas encore une loi définitive, mais le simple fait qu'une telle proposition ait été adoptée à l'Assemblée nationale en dit long sur la manière dont nous sommes gouvernés. Ces fous du bus vont vraiment nous mettre au fond du ravin.
1,504
7,528
826
28,452
1,996,748
🚨 CHAINALYSIS HACKED Chainalysis, the on-chain investigations, tracking and monitoring company has been hacked and customer data has been leaked, including Full names, IDs, email addresses, roles, etc. Chainalysis users should expect an increase in phishing attacks, among others.
29
50
25
308
40,970
E. Hillford retweeted
insane thread
Elon, have a lot of respect for you, but bad time to troll. Please stop. Our SPCX shares (from our $500m investment in your Twitter takeover) are worth more than a billion. Would appreciate if you show a little support. Thanks!
21
12
1
268
61,971
E. Hillford retweeted
Look at the contrast: Binance loses billions: - Coinbase manually blocks addresses - Tether and Circle freeze billions in 60 minutes - Ripple and World Liberty coordinate in group chats - Executives hug it out on X A normal user loses $50k to an approval scam: - "Blockchain transactions are irreversible, anon" - "Code is law" - "Have you considered reading the contract bytecode?" - Zero help from stablecoin issuers Decentralization for the peasants, emergency bailouts and centralized freezes for the tier-1 cartel. There are two crypto industries, and you’re not in the protected one.
Our team is doing everything we can to support in the current situation, including blocking sends to compromised wallets. We've also reached out to Binance to offer our help. Moments like this call for the industry to work together. Openly sharing any useful information and helping to protect customers should come first, regardless of which platform they use. If you can do anything to help, please do! Crypto has been through many tough times, and has always come out stronger on the other side. This won’t be any different.
186
544
67
4,111
182,753
E. Hillford retweeted
turns out circle will freeze without a court order---but only if the hacker is buying ETH
39
40
2
664
21,909
E. Hillford retweeted
User funds are safe. Binance will cover all hacking losses. Deposits and withdrawals are temporarily suspended while our team conducts security checks, freezes funds, and works with law enforcement. We will share a full post-mortem once the investigation is complete. Please rely only on official Binance channels for updates.
1,128
1,016
405
8,072
964,718
E. Hillford retweeted
The craziest thing about the hack is that even if the hacker were to sell all their eth, it’s still way less than the ethereum foundation has sold over the past 12 months
42
37
5
551
27,787
AND WHAT AM I SUPPOSED TO DO NOW? WITHDRAW TO THE SAFETY OF MY LEDGER??
35
45
10
701
38,154
E. Hillford retweeted
Coinbase found the solution against hacks by not letting you withdraw the same year you requested it.
59
240
30
4,488
167,391
E. Hillford retweeted
You can track inflows/outflows from all CEXs on defillama.com/cexs
23
26
2
302
33,742
E. Hillford retweeted
Binance hot wallets were drained of $5.60B today across Ethereum, Bitcoin and Tron, 67 assets in total. Tether and Circle have so far frozen $2.38B of it: $1.56B USDT ($1.18B on Ethereum, $379M on Tron) and $823M USDC. Not frozen: 18,270 BTC ($1.45B), 197K ETH ($451M) and about $730M of USDT. @cz_binance at 5:15 PM EST: "User funds are safe! It does look like a hack on Binance... as a shareholder, I expect all user funds will be fully covered."
17
27
18
148
75,894