OSINT & Blockchain Intelligence Analyst @Certik @CertiKAlert l Steward & contributor @_SEAL_Org
everywhere
Joined May 2023
- Tweets1K
- Following863
- Followers163
- Likes1.3K
Pinned Tweet
Two years ago, for @CertiK, I wrote one of the first documented reports on wrench attacks.
Today I've authored the "Coercion & Duress" framework for @_SEAL_Org.
🙏 Now steward for this section. TY @_SEAL_Org .
Link 👇
frameworks.securityalliance.…
AllyPry retweeted
#CertiKStatsAlert 🚨
In October we’ve confirmed ~$6.5B lost to exploits and phishing.
With ~$9.2B in losses, 2026 now has the highest losses on record.
More details below 👇
CertiK Report Security Dashboard 👇 certik.com/certik-report/das…
˜$9,2B losses in 2026 so far... crazy... 😰
#CertiKStatsAlert 🚨
In October we’ve confirmed ~$6.5B lost to exploits and phishing.
With ~$9.2B in losses, 2026 now has the highest losses on record.
More details below 👇
CertiK Report Security Dashboard 👇 certik.com/certik-report/das…
AllyPry retweeted
On the Binance incident, my preliminary take:
• ~$3B frozen on-chain + ~$1.17B SAFU could cover ~66% of the reported loss.
• The estimated remaining gap of ~$2.1B is ~1.3% of the ~$165B reported in Binance’s Oct. 1 PoR.
• Binance has committed to covering the rest with company funds. From the above data, I view the commitment as credible.
I’ll keep tracking on-chain flows and updated PoR.
Best thread on @binance hack so far 👇 gj @DicksonWuML
Binance hot wallets lost ~$6.28B across 8 chains today. $6.07B went in the first 55 minutes, and the attacker kept re-sweeping one Ethereum wallet for two more hours.
Since then Tether, Circle, Ripple, Paxos, World Liberty and Binance have frozen ~$2.80B. About $3.27B can still move, mostly BTC and ETH.
I traced it all on-chain, including how the attacker raced the freezes 🧵
AllyPry retweeted
@tether @durov please freeze etherscan.io/address/0x5227f… ASAP. 900M USDT in potential Binance hack
AllyPry retweeted
#CertiKInsight 🚨
@x100global attacker is currently sending funds to Tornado Cash: etherscan.io/address/0x82967…
300 ETH ($690k) has already been sent so far.
CertiK Report Security Dashboard 👇
certik.com/certik-report/das…
For those who still doubted that France was on its way to becoming a dictatorship... 👇
Strange how many media outlets are having a hard time covering the news and what's happening today in France on X. Coincidence? 🤔
Just in: France's Prime Minister asked telecom companies to prepare to block social media platforms. "I wish to have the ability to temporarily suspend access to these services in case of a repeat of urban violence," he wrote. @blast news broke the story.
Sooooo no one is safe...
nitter.cf/KeystoneWallet/status/…
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
AllyPry retweeted
#CertiKInsight 🚨
On 30 Sept, HOT Omni Bridge on NEAR was exploited resulting in five observed BSC treasury payouts totaling $3.86M, which was later returned.
Read our full analysis here👇
certik.com/blog/hot-bridge-n…
CertiK Report Security Dashboard 👇
certik.com/certik-report/das…
AllyPry retweeted
🚨 #CertiKInsights
We have seen suspicious movement from @79thVault .
2.01M 79AU were sold via a privileged function, moving 16.2k BNB (~$12.5M) to attacker: bscscan.com/tx/0xee0e4416751…
~90% held at: bscscan.com/address/0xa9537B… to which a 10% bounty was offered.
Stay Vigilant!
AllyPry retweeted
1/ How I infiltrated a Chinese organized crime syndicate that has laundered $1B+ across multiple exploits for Lazarus Group.
Posing as a client, I gathered intel that helped action freezes for the Feb 2025 Bybit exploit and attribute illicit activity onchain.
AllyPry retweeted
#CertiKInsight 🚨
We have seen suspicious fund movement on Base.
A newly deployed proxy was used to borrow ~1,783 aBaswstETH from vault
basescan.org/address/0xD1895…,
later redeemed via Aave for ~1,783 wstETH (~$6M) now at
basescan.org/address/0x0B512…
Stay Vigilant!
AllyPry retweeted
SEAL Frameworks are now in the @fund_defi OPSeC Repository!
AI security, prompt injection, data exfiltration, sandboxing, security awareness, etc.
Free, chain-agnostic guidance that builders and policymakers can both use.
opsec.defieducationfund.org/…
Better-informed policy is good for everyone building in this space. OPSeC gives our industry a way to make that happen by curating free security resources, hosting educational events, and ensuring technical frameworks reach the policymakers who need them.
Learn more: defieducationfund.org/defi-e…
AllyPry retweeted
#CertiKInsight 🚨
1/4
According to our data, September 2026 recorded ~$772.4M in losses.
Full dashboard & stats 👇
certik.com/certik-report/das…
Here are the key takeaways you need to know 🧵
AllyPry retweeted
September was a stark reminder of how quickly the threat landscape can shift.
With both losses and incident count reaching their highest levels of 2026, the month’s data reinforces the need for security across every layer.
Full breakdown below ↓
#CertiKStatsAlert 🚨
Combining all the incidents in September we’ve confirmed ~$766.4M lost to exploits and phishing.
September has seen the highest recorded losses as well as the most incidents in 2026.
More details below 👇
Damn what a month... 😞
#CertiKStatsAlert 🚨
Combining all the incidents in September we’ve confirmed ~$766.4M lost to exploits and phishing.
September has seen the highest recorded losses as well as the most incidents in 2026.
More details below 👇
AllyPry retweeted
#CertiKStatsAlert 🚨
Combining all the incidents in September we’ve confirmed ~$766.4M lost to exploits and phishing.
September has seen the highest recorded losses as well as the most incidents in 2026.
More details below 👇
New wrench attack in French today… it never ends 😔
@lopp @beausecurity
ouest-france.fr/societe/fait…
