Truth for the Commoner. Bitcoin, freedom, and truth in the digital age. Daily newsletter + podcast. Subscribe.
Where the freaks dwell
Joined October 2017
- Tweets30.8K
- Following2.5K
- Followers117K
- Likes22.4K
"To raise a family in 500 square feet, it's an impossibility."
@BrokenCountry_ director Mira Metter on Canada's housing crisis.
Higgsfield promised to open source its product and never did.
ComfyUI's community built open source alternatives anyway.
Now Higgsfield sent a cease and desist demanding the challenge be taken down within 48 hours.
ComfyUI CEO: "When we started Comfy, we made the community a promise. Our product stays open, free, and yours. We've kept it every day since, and one letter isn't going to change that."
"People will become, begin to hunt, live and fish in city parks."
@BrokenCountry_ director Mira Metter on Canada's own 2040 forecast.
Attackers appear to have exploited Ethereum's EIP-7702 to drain Binance hot wallets of ~$2.5B.
On-chain researcher @0xQuit: "It seems likely that they didn't have the private keys and instead just had the 7702 auth signatures, which must have been phished somehow."
ok safe to say binance is pwned
The biggest assets were approximately:
• 1.615B USDT
• 62.6M RLUSD
• 29,934 wBETH
• 11,372 XAUt
• 6.19M UNI
• 198.4M ENA
• 7.175T PEPE
• 27.8M USD1
• 2.26M LINK
• 127,853 AAVE
about $2.5B at the explorer’s prices.
1. The attacker deployed a delegate contract, 0x63e842b0...73e9c6fAe, from the relayer at 15:59 UTC.
2. About four hours later, the relayer submitted an EIP-7702 authorization transaction
That installed the malicious 7702 delegate code on Binance 14.
3. The relayer then made a call to Binance 14, executing the delegate code, and transferring Binance 14’s ETH and token balances.
4. The calldata is labeled sweep(address, address[]). The second argument is a list of recognizable token-contract addresses plus the zero-address (eth).
5. The same relayer later used the same delegate to move 780M USDC from Binance Hot Wallet 34 into the same pool
• The relayer 0x7C... was funded by three Tornado Cash 0.1 ETH withdrawals over the prior two days.
• The same pool also received 28,005.6 ETH from Binance 16 24 seconds after the main sweep.
• The pool then forwarded 195,460 ETH to a fresh, unlabeled EOA
• That EOA has only one transaction and currently holds the 195,460 ETH.
What's a bit unclear is why the relayer was needed in the first place. If they had the private keys to the Binance wallets, they could have just sent the assets out in an atomic bundle without needing a relayer at all.
So it seems likely that they didn't have the private keys and instead just had the 7702 auth signatures, which must have been phished somehow.
I think we can go ahead and assume DPRK.
Circle CEO Jeremy Allaire: "In coordination with law enforcement, we have frozen more than 800M USDC associated with the incident and will continue supporting the investigation."
"Now Americans make $77,000 or so on average. Canadians still make $53,000 on average."
@MartyBent and @mjwerry on Canada's GDP per capita.
Tether CEO Paolo Ardoino says Tether has frozen more than $1.567B in USDT tied to the Binance hack.
"Protecting the industry and our partners is our main priority."
Binance has been hacked. CZ has confirmed.
At 20:24 UTC today, a wallet labeled "Binance 14" was drained in a single transaction: 167,464 ETH (~$388M) plus 63 token transfers including ~$1.6B in USDT. Minutes later, "Binance Hot Wallet 34" lost 780M USDC. A third wallet, "Binance 16," sent another 28,005 ETH.
Total estimated outflows: $2.5B+ across multiple blockchains.
The receiving address was funded through Tornado Cash. Within minutes, the attacker began dispersing funds, sending $1.2B in USDT across three new addresses in $500M/$500M/$200M chunks, each preceded by a 0.5 ETH test transfer. The attacker is actively dumping stolen Tether.
CZ posted: "User funds are safe! It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m). I don't manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered."
Tether and Circle have frozen roughly $1.8B of the stolen assets between them. Binance's cold storage appears unaffected so far.
This is still developing.
"It's important to distinguish that it's not free. Health care, like, there is no free lunch, right?"
@BrokenCountry_ director Mira Metter on Canada's health care.
TFTC retweeted
Your choice Quebec.
Follow the lemmings off the cliff or try something different?
TFTC retweeted
Canada has been on a steep decline for over a decade and Mira and Mike produced @BrokenCountry_ to highlight just how far the country has fallen.
Don't think for one second that the US can't suffer a similar decline. We may already be on the way.
The Washington Post, like the WSJ, is now sounding the alarm on Brazil's authoritarianism.
The point, @ggreenwald says, isn't that Bolsonaro is innocent. It's that Judge Alexandre de Moraes is a tyrant who persecutes political enemies with no limits.
The Post editorial is titled "When judges become prosecutors." It says Brazil's pursuit of the Bolsonaro family raises "troubling rule-of-law questions."
Its example: Flávio Bolsonaro arrived in Miami on Wednesday, three days after losing Brazil's presidential runoff, because he feared imminent arrest.
The Post calls that an indictment of the Western Hemisphere's second-largest democracy.
washingtonpost.com/opinions/…
