CEO @movement_xyz Move is for Money. 🇺🇸🇦🇫
Khane Nanet
Joined August 2018
- Tweets11.7K
- Following946
- Followers7.2K
- Likes93.2K
Pinned Tweet
Since Movement seems to have your attention, here’s some of the progress we have made over the last few months:
✅ Secured licensed payment rails to move Money from the US, Europe, and Canada
✅ @HesabPay_ chose to build their Neobank for the global south exclusively on Movement
✅ @near_intents integration live, bringing liquidity across different chains to users
✅ @dfnsHQ integration live, bringing a full stack core banking digital asset platform to our partners
✅ USDCx @circle integrations live on @MEXC , @kucoincom and @BitMartExchange
✅ Movement joined the Circle Alliance Program
✅ @zothdotio integrating to bring yield infrastructure via zVaults and Global Cross Border payments via zPayments
✅ @meshpay integration live to allow seamless flow of stables and other assets from CEX to wallet
✅ Investment announcement in @sortedwallet and @stableyardfi
✅ Launched our own native wallet @motion_wallet
✅ $MOVE token listed on @fasset exchange
✅ Acquisition of @canopyxyz to bring yield infrastructure to Movement users
We are building the rails that bring digital assets in reach of fintechs and banks in emerging markets, and the users they serve.
More news to follow, just make sure you get your news directly from the source.
Gmove.
Hesab selected Movement as its exclusive stablecoin settlement layer for cross-border flows.
$160M in monthly volume. 1 million+ transactions per month. The corridors they serve run on informal cash networks with 2-5 day settlement and capital sitting idle in pre-funded float.
Movement provides access to licensed rails across the US, Canada, and the EU. Same remittance, cleared in real-time.
Torab retweeted
In addition to our earlier alert, the same attack has now been identified on additional sites. These are actively serving the Step Drainer:
• stonkfun[.]xyz
• pickle[.]finance
• echelon[.]market
• origami[.]finance
• fluxbeam[.]xyz
• stakepoint[.]app
• supswap[.]xyz
• longbow[.]cash
• shprd[.]finance
• apexdefi[.]xyz
We’re actively investigating and gathering more data.
Torab retweeted
I want to speak to you directly about what happened.
Bottom line - your money is safe, and we're covering every loss.
Our initial investigation suggests this security incident may have started with a compromised DevOps engineer's laptop. That gave an attacker access to a service container, where they submitted unauthorized withdrawal transactions.
To be clear: the attacker did not simply use one engineer's permissions, and this was not a single "one-click" action. It involved a more complex attack process. Our investigation has not attributed responsibility to any individual.
So far, we have found no evidence of any wallet private key leak.
We'll share a detailed technical post-mortem once the investigation is complete and every fact is verified - and publish an updated Proof of Reserves once remediation is complete.
What you need to know:
• Your funds are safe
• Binance will cover all losses from the SAFU fund and company funds
• Estimated total impact: ~$6.3B, with ~$3B frozen on-chain so far, in coordination with our blockchain partners
• No evidence of any wallet private key leak
• Deposits are unaffected and operating as normal
What we've done:
• Temporarily suspended withdrawals while we complete a security revamp of the withdrawal service and its related addresses
• Revoked the affected address authorizations
• Engaged law enforcement and blockchain intelligence partners to trace and recover funds
Our team hasn't stopped. We're working closely with law enforcement to ensure the matter is handled appropriately - and I'll share what I can, as soon as I can.
Torab retweeted
Update: Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit were commingled at the same address 45 minutes ago, after arriving via THORChain.
This indicates the same actor is likely behind both incidents.
The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO.
Commingling address:
0x15104a9ce0f08a8f0075a0869ae80e795fe0feb7
Bitget exploit context: nitter.cf/zachxbt/status/2104528…
BREAKING: Chinese illicit actors laundering funds from the $387M Bitget exploit on behalf of the alleged DPRK attackers are openly asking for support with orders in public Discord servers and Telegram channels of services they use.
Notably, Alias 4 (below) was also seen laundering funds from the Kelp DAO $292M exploit earlier this year.
I've observed the same pattern after multiple TraderTraitor attributed exploits, and I've closely tracked these groups. I plan to share more of my data on them in coming weeks.
Currently, funds are being chain-hopped via bridges and being deposited into mixing services such as Wasabi.
Alias 1 - Cc
Discord: cc02006
Discord ID: 1351486674386948148
Txn: F08657EFAEAE7B58217CD17A22BF4779582E5D080C2E92E173BC239A5D828363
Alias 2 - jack
Discord: jack_34808
Discord ID: 1553705721768714377
Txn: 68583D313A0CCC99F2702D61D05A242A69C86CAE09ED252B65F34B677C377F69
Alias 3 - Melon
Discord: under0346
Discord ID: 1394240539108573215
Txn 1: ABE2AEF8B10057E60F8259CA2CA2CD5D71D38D254960FEEE89CB3C95A964873F
Txn 2: 7BE290865901DEB1680A6D692A11392D1FDDACA0D31C48F26DCB249F2444BD6B
Alias 4 - lolo / Marin
TG: pvpcz
TGID: 6223514198
Discord: losern
Discord ID: 1024415186527985704
Txn: 8E935C19D00F40639B78BF1FD094FE48C92118F3E586AB52DF93851080CCCE15
Alias 5 - HELP ME
Discord: helpme031897
Discord ID: 1554035533817188384
Txn: 7C58CAD760EBBED54F2CA4D2146D056910B7B6688B4F524396DC8807353C2379
Torab retweeted
User funds are SAFU!
Yet, this pregnant lady 👇 pulled an all nighter, along side hundreds of Binancians.
Many industry friends and even competitors (including some previously-not-so-friendly ones) provided very much needed help. 🙏
It hurts, but we will survive. 💪
Torab retweeted
Binance hot wallets lost ~$6.28B across 8 chains today. $6.07B went in the first 55 minutes, and the attacker kept re-sweeping one Ethereum wallet for two more hours.
Since then Tether, Circle, Ripple, Paxos, World Liberty and Binance have frozen ~$2.80B. About $3.27B can still move, mostly BTC and ETH.
I traced it all on-chain, including how the attacker raced the freezes 🧵
Torab retweeted
Interviewed an engineer friend who works at a traditional major bank.
Very interesting observations:
- Junior engineers are not allowed to push code with AI. Claude Code & Codex are banned from
- Senior engineers can freely use Claude Code & Codex, but only to check their and others work.
- If you push AI-generated PRs, you will get a bad rep within the organization.
- They still have a QA department that does all the reliability on their software.
- He only uses Claude for his personal projects, which there is a lack of, because he works 9 to 7.
Sincerely asking what happens to these people.
If you are not using the frontier technology, it's either that the institution gets replaced, or that eventually, these people get laid off to realize suddenly that the world has moved on, and they just stopped in the pre-Claude Code era.
Every serious tech team is losing sleep and finding grey hairs with the incredible progress of frontier models.
There is no choice but to be as paranoid as possible.
The game and the pieces on the board have changed in a way that most don’t realize, by orders of magnitude.
Head on a swivel.
We decoded the @initia exploit.
One signed tx at 14:59:26 UTC minted 2,000,000 AUSD out of nothing. 153 seconds later a valid @LayerZero_Core message released 1.4M real AUSD from the Ethereum adapter. $2.65M was back on Ethereum within 7m21s of the mint.
Three exits, all into 0xDD92…edFA:
AUSD: 1.4M from the AUSD OFT adapter, 71% of its balance, 576K left.
ETH: 105 from the native-ETH OFT adapter, 96% of its balance, 4.84 left.
USDC: 1.08M as fresh mints from 0x0, via Circle's CCTP.
The mint was the attacker's own key calling one Move function, 135,888 gas, no bridge message involved. The token is an argument (recipient, token, amount), consistent with one wallet printing AUSD, USDC and ETH. LayerZero's DVNs then attested to burns that really happened, and an OFT adapter cannot check whether burned tokens were ever backed: each Ethereum lockbox pays at par for any Initia-side mint bug.
Prep started 6.5 hours before the mint: 0.1 ETH from Tornado at 08:27 UTC, dust sends through @axelar AxelarHandler from 13:14, and a 0.006 ETH deposit at 14:37 into the same ETH adapter it emptied 29 minutes later. Every stable was ETH within 3 minutes of landing via 1inch and 0x, AUSD in 84 seconds. All 1,135.52 ETH (~$2.73M) now sits in a fresh wallet, 0x358e…CAC8.
Same shape as Liquid on 6 Sep, where an Elements bug created 4,000 L-BTC and a valid peg-out paid 3,996 real BTC.
Initia's DEX holds $3.50M of TVL and did $334K of volume in 24h. Its bridges carried 8x that for one wallet in 7m21s: on Initia, the deepest pool was the bridge.
Torab retweeted
to the best of our knowledge so far, this is a Day 0 bug related to Initia's MoveVM on CosmosSDK that allowed the exploiter to mint additional tokens on the Initia L1 but does not apply to native INIT tokens.
the attacker was able to mint and bridge out ~$2.7m worth of AUSD, ETH, and USDC before the chain was paused.
As of Oct 23, 2026, 3:41:30 PM UTC, the Initia L1 and Rollups have been halted due to a security incident.
Our team is actively investigating the situation and working to establish the full scope of any impact with security teams, validators, and exchanges.
We will share verified information through our official channels as it becomes available.
Please remain cautious of unofficial links, messages, or claims circulating during this time.
Torab retweeted
PSA: in light of recent cyberattacks and vulnerabilities, I recommend everyone:
* use a good password manager (1Password) and do not duplicate passwords
* use two factor auth for everything important (not via sms!! Google Authenticator or better yet YubiKey)
* Auto-updates on, and restart weekly so they actually install
* Freeze your credit
* Get an IRS Identity Protection PIN
* Get your cell carrier to give you a port-out PIN or number lock that makes the carrier refuse to move your number without the PIN
You can ask your claude code to audit what on your laptop is out of date and needs updating.
Torab retweeted
The wallet wars are here.
Very Good Security chief strategy officer Terry Angelos joins a16z's Alex Rampell, his TrialPay co-founder from back in 2006 (TrialPay was later acquired by Visa), to discuss how agents are learning to spend money.
"Agents have all of a sudden become significantly more helpful and useful because they effectively have arms and legs, which are payment credentials."
VGS holds the payment credentials behind about 1/3 of all e-commerce, and now it's helping AI agents pay merchants. If you've bought anything online, there's a good chance VGS has already helped keep your card safe.
In the last three months, Terry says agents went from "spectators to actors." Once an agent has your payment credentials, it can book the piano teacher it previously could only find and recommend.
Now Stripe's Link, Shopify's Shop Pay, and PayPal are racing to connect to agents. It's all headed toward open standards from the card networks: agentic tokens that let an agent pay with your actual card.
VGS went from zero agentic tokens to a few million a week in three months.
0:55 From TrialPay to Visa to VGS
2:05 How VGS vaults 1/3 of e-commerce
6:05 Why big merchants use 3-5 processors
9:55 Why AI agents need a payment vault
12:15 Agents go from "spectators to actors"
13:40 The wallet wars, old and new
19:55 Walled gardens vs open standards
23:55 How agents can pay with your real card
26:40 Your saved card goes multiplayer
29:40 How do you trust an agent's purchase?
32:35 Who pays when your agent gets it wrong
35:40 Why Amazon blocks agents
39:50 What's overhyped and underhyped
43:35 When merchants get agents too
45:40 Why agents could break card rewards
47:00 VGS's eras: vault, updates, network
@terryangelos @arampell
Torab retweeted
alright so I tried to figure out why things are blowing up
simple summary: it's geopolitics. and if the Middle East gets bad enough, then the backers for OpenAI's $1.4T funding round could pull out so that's sending shockwaves through markets bc they're the big data center tenant ppl are worried about. the incremental appears to be that Ukraine is also getting unhinged
there's not an AI specific catalyst this seems more like geopolitics. Last night TSM guided acceleration and Citi pressed if there was demand destruction on memory - TSM said no, that's already factored into the guide which means there's not some specific Korea fundamental thing -- and price action there is likely more of a margin call
Ukraine bonds have dumped 20% since July. He just asked for $70b Euros from the EU while Trump denied shutting off Starlink (Elon had said it wasn't him, so it just looks like a sht show). Trump told Zelensky to stop attacking Russian refineries. Zelensky has since crashed out and said "The block is out, we're done". And is now vowing to hit Russian refineries. And it appears he's already followed through hitting a facility in Surgut with drones
Indonesia got delisted from the MSCI and the entire country equity index is -14% in a day, increasing the likelihood of EM contagion
Iran has moved their nuclear facilities under ground in PickAxe mountain and trump has talked about using the "MOAB" which stands for Massive Ordnance Air Blast - which is just shy of a nuclear blast. THis is a 21,600 pound bomb that isn't even particularly effective at hitting underground sites so might just be generically destructive. For some reason Trump thinks that doing this after mid terms is fine - but oil is already pumping
reports from Israel meanwhile: Israel now deploying mobile bomb shelters in major cities, with 2 reportedly spotted in Ashdod and Tel Aviv within 24hs, as IDF raises its alert level to highest across all fronts amid preparations for a possible strike on Iran
fun times
Torab retweeted
ESPN turning sports betting into a colorful, cartoon-style tutorial is an utter disgrace.
espn.com/espn/feature/story/…
