Bold | Enginerd | Cyberstuff | Data science(AI) | Jedi Knight | Sportoholic | Grinch | Übermensch | Science, yeah! | Derechos Reservados©Pablo Corona Fraga 2009
México
Joined June 2009
- Tweets41K
- Following950
- Followers5.4K
- Likes6.6K
Pinned Tweet
Now available :
Practical Guidance for Risk Management in the age of cybersecurity
amazon.com/dp/B09S64JZ13
We don't fully understand intelligence (natural nor artificial) yet, but what we know for sure is that it is expensive.
Me preguntaron si mantendría mi wallet en @binance después de lo de ayer.
Mi respuesta es que sí, si cubren los fondos (como dijeron que harían), por 2 razones:
Pablo Corona Fraga retweeted
Confirmed: Binance hacker routed stolen TRX through Bitget wallet bridge into ETH, dumping straight into a wallet previously used in the Phemex hack.
It's Lazarus, without a doubt.
Funny how an APT unit can orchestrate a $6.3B multi-chain heist, but still gets caught reusing old deposit targets from 2025.
Swapping TRX to native ETH as fast as humanly possible because they know mainnet ETH has no admin freeze button.
2024: DMM Bitcoin
2025: Phemex & Bybit
2026: Binance ($6.3B)
They don't even bother generating fresh deposit addresses anymore. Lazarus is just running an automated DevOps pipeline to turn Web3 liquidity into national treasury reserves.
Bridge TRX -> native ETH -> Tornado/privacy -> off-grid.
The industry keeps building bridges, and North Korea keeps using them as sovereign exit liquidity.
Pablo Corona Fraga retweeted
Supply chain attack through trusted 3rd party monitoring script that was replaced with malicious code.
POLYMARKET HALTS TRADING AFTER HACKERS DRAIN USER FUNDS WITHOUT PASSWORDS OR SEED PHRASES
Attackers allegedly exploited users’ active sessions to sell their positions and withdraw funds directly through Polymarket’s own system.
The attack reportedly originated from a compromised DebugBear website performance monitoring script, which was replaced with malicious code that users’ browsers trusted.
Trading resumed after roughly one hour. Polymarket says affected users will be reimbursed and the incident has been referred to UK law enforcement.
Pablo Corona Fraga retweeted
moonlighting as a cybersecurity reporter bc polymarket traders got hacked.
analysts tracking over $2.7 million drained, company promises to reimburse losses: wired.com/story/polymarket-f…
Pablo Corona Fraga retweeted
Binance investiga un posible hackeo mientras Tether y Circle congelan US$2.300 millones y el Bitcoin cae
Vía: Bloomberg Línea (@BloombergLinea_)
bloomberglinea.com/mercados/…
La pregunta sobr el incidente de Binance es cómo obtuvo el atacante las firmas?
Mis candidatos:
- clave privada comprometida
- vulneración de un servicio de firma digital o de su integración con el HSM
- uso indebido de un proceso de firma autorizado.
Ninguna ha sido confirmada.
Pablo Corona Fraga retweeted
What an insane evening.
While I was writing about the Linux kernel bug, an estimated $2.8–3B left Binance wallets in a couple of hours. One address took most of it: 167K ETH and ~1.6B USDT in a single transaction at 20:24 UTC, then 780M USDC. After that ~70 tokens across 5 chains, from PEPE to PAXG.
Here's the interesting part. Tether froze 971M USDT. Circle froze 823M USDC. Almost $1.8B in stablecoins switched off on the receiving side.
ETH doesn't work like that. No issuer, no stop button. Once it moves, it's gone.
CZ confirmed the hack and says user funds are safe. The market wasn't convinced right away: BTC under $78.5K, BNB down 8%, $628M liquidated in an hour.
Tonight showed the difference between a stablecoin and an actual crypto asset better than any thread could. A freeze button is great when it stops a hacker. Less great the day someone presses it on you.
Las calculadoras de bulbos sustituían a 150 ingenieros.
Hoy ese anuncio sería de IA (si alguien se atrevieron a hacerlo) con 150 ingenieros trabajando en sus laptops en vez de sosteniendo reglas de cálculo.
Machine-Checkable Compliance for AGI Governance: Formalizing Principles as Auditable Norms and Evidence-Linked Indicators
@MDPIOpenAccess
mdpi.com/3042-9692/1/2/7http…
La liga está mal escrita, aquí la buena
mdpi.com/3042-9692/1/2/7
Les comparto el paper que hice en colaboración con @vanediazrod y gente de @JohnsHopkins sobre mecanismos para verificar el cumplimiento de potenciales sistemas de AGI.
Machine-Checkable Compliance for AGI Governance: Formalizing Principles as Auditable Norms and Evidence-Linked Indicators
@MDPIOpenAccess
mdpi.com/3042-9692/1/2/7http…
Mucho progreso y agilidad, pero por qué carajos le dicen datáfono a la terminal de pago? No tiene sentido. Data de datos y fono de ... sonido!!???
Se acerca el buen fin y este sitio https://mercadobuenfin[.]com sigue activo, usa la imagen de @MercadoLibre @ML_Mexico , pero no son. No aceptan @MercadoPago y piden los datos de la tarjeta directo.
First time I went to a @Metallica concert was in 1992. 36 years after, we are here.
Long way to the top!!!