All cops are bastards and that includes little Timmy. Why do you wanna be a cop when you grow up little Timmy what the fuck?
No0oo retweeted
📺On February 5, 1994, Patrick Stewart hosted ‘Saturday Night Live’ with musical guest Salt-N-Pepa
Likely Binance hack ongoing, $2 billion drained and counting. Another $780M USDC clip just got taken from the hot wallet as well, so compromise looks to be still active
etherscan.io/address/0x5227f…
No0oo retweeted
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
Whew
Polymarket Incident Breakdown (Oct 29)
We have traced 2.724M pUSD across 721 source wallets in transactions paying the recipient embedded in a DebugBear-hosted drainer.
1. The Payload & Delivery: The malicious code was served from [cdn.debugbear.com/C7xcKKrjUn…](cdn.debugbear.com/C7xcKKrjUn…) inside the real DebugBear namespace.
2. Attack Mechanism (Browser-Side Compromise)T
The script reads Polymarket wallet/auth state, walks React internals to hook the live trading client and signer, and uses EIP-712 DepositWallet batch signatures alongside Polymarket’s own relayer. No seed-phrase extraction occurs in this payload.
It executes via two theft paths (targeting portfolios and positions over $10):
External wallets: Positions are transferred directly.
Magic accounts: Positions are sold first, then collateral is swept.
3. Routing & On-Chain ProofThe coded route stays on Polygon (pUSD → USDC.e → POL or USDC → recipient) using quotes via api.fun.xyz, with a direct USDC.e transfer as a fallback.
4. Money Trail
18:17 UTC: Embedded recipient 0x3F991...Ffc18 held 28.636M POL (representing converted proceeds, not a separate loss total) and forwarded 25 position IDs to 0x5a276...0c0b.
18:21 UTC: The second wallet (0x5a276...0c0b) sold/redeemed those positions and held 4,262.36 pUSD.
5.Polymarket’s public production build at 17:59 UTC includes "remove debugbear rum script", confirming removal in the observed build.
More data coming
No0oo retweeted
Amigos compatriotas. Texas ya no tiene misiles Patriots para defenderse
According to the Wall Street Journal, the US military has taken our Patriot Missile Defense System out of Texas and sent it to Israel in preparation for a new round of combat operations against Iran after the midterms.
At the same time, the Intercept reports that "top defense officials are expressing increasing worry about the vulnerability of U.S. bases around the world and even within the United States..."
Links in thread.