Incident report: our Apex keeper wallet was drained yesterday after the @Railway environment variable breach. Railway disclosed yesterday that an unauthorized party got into customer environment variables, some of them decrypted. Our Apex keeper key lived there. Wed Oct 21, 5:30 PM CDT: 1,896.73 FLR sent from our keeper wallet to a brand-new wallet. 6:19 PM CDT: that wallet bridged the FLR off Flare through GasZip. Drain: flare-explorer.flare.network… Bridge out: flare-explorer.flare.network… Receiving wallet: 0xd9773325282874d18cb83f1fe50f14c39750b2ee What was not touched: Apex vaults are non-custodial. A keeper can run strategy orders. It cannot withdraw. No vault funds moved. The loss is the keeper's gas wallet. What we did: revoked the old keeper on chain from a hardware wallet, and we're rotating every secret that lived on Railway and redeploying on new keys. If you run anything on Railway, roll every variable now, wallet keys first. Railway's notice: blog.railway.com/p/security-… Logging this with @Flare_Reef so the record stays public. Breaches happen. Own it, fix it, drive on.

To the @flare_vault team, and ANY builder feeling this right now: Slow down. Take a breath. When I was 23, I interviewed to run 7 restaurants for an owner in his 50s. He asked what scared me most about the job. I said, "Making a mistake." He laughed so loud I was embarrassed. I'm 40 now and I get the joke. Mistakes aren't the risk. They're part of the job. I'm wrong all the time. You joined in August. A couple of months in, people pointed out problems and you went to work on them. That was the right call, and a lot of this community said so. Here's the honest part. Getting from launch to a working, trusted product takes months, and then a year after that. Feedback in month two isn't the network turning on you. It's people caring enough to look. We started Apex in November 2025. Almost a year, more than one scrap-it-and-start-over, and over 1,200 commits later, we're still making it better. What works for us: we spend more time on safety and guardrails than on shipping. Building is the easy part. Staying safe is the hard part. And build something worth having even if nobody shows up. Apex does its job for us whether anyone else looks at it or not. We keep improving it so it's ready when people come. Own it, fix it, drive on. Wherever you build next, we're rooting for you. The door here stays open. xitter.cf/flare_vault/status/211…

$4 billion stolen last year. 65 incidents last week. The people who caught it all got six hours in the feed. Coming soon: @Flare_Reef . The permanent record for all of crypto. Post it, tag the Reef, it's yours forever with the proof. Free. If you don't know the risk, you're at risk. flarereef.flareforward.com