Pinned Tweet
We compared read-only API keys on 20 exchanges, from each exchange’s own docs.
All 20 offer a key that can see your account and can’t touch it. Some expire if you don’t bind an IP, some never expire, two require an IP from day one.
Sources: truehold.xyz/blog/read-only-…
Chainalysis's Nov 4 update also said logins were down, so customers couldn't yet reset the password it asked them to reset.
If that password is also on an exchange account, change it there first. xitter.gq/WuBlockchain/status/21…
Chainalysis: Names, Usernames, Password Hashes, and Valid Tokens of All Users Were Exposed; Some Plaintext Passwords Also Leaked
Blockchain analytics firm Chainalysis disclosed in an updated security incident notice that the names, usernames, password hashes, and valid authentication tokens of all users had been exposed to the attacker, and that some customers’ plaintext passwords were also leaked through a separate attack method. After detecting abnormal activity, the company suspended KYT transaction monitoring, address screening, and login services, and required all users to reset their passwords and rotate API keys where necessary.
Previously, on October 30, Chainalysis first disclosed that it had been breached by a hacker using offensive AI agent technology; at that time it only confirmed that certain customer identity information had been accessed and said it had found no evidence that passwords or session tokens had been leaked.
Sui did this in May 2025: validators froze $162M taken from Cetus, then 90.9% voted for an upgrade that moved it to a recovery multisig.
On Polygon the freeze is already in place. The fork would move POL out of an address without its key. xitter.gq/WuBlockchain/status/21…
Polygon Labs Member Proposes Hard Fork to Recover Approximately 70.49 Million POL Stolen from Polymarket and Binance
A member of the Polygon Labs Validator Support Team has published a Polygon Improvement Proposal (PIP) suggesting a hard fork on the Polygon PoS mainnet to recover approximately 70.49 million POL stolen in two recent hacks involving Polymarket and Binance, valued at about $6.5 million based on October 29 prices. Of the total, Polymarket accounts for approximately 23.86 million POL, while Binance accounts for approximately 46.63 million POL. The related funds are currently restricted from transfer by block-producing nodes.
The proposal aims to move the POL balances from the attackers’ addresses to recovery addresses designated and verified by the two institutions through a hard fork, without changing the total token supply. The proposal will be submitted for discussion at the Polygon Protocol Governance Call on November 5. If approved, client development and testnet rehearsals are expected to be completed in approximately two weeks.
In August BTCPay said only LND nodes were exposed and regular hot wallets were safe. Now hot wallets on 2.4.1 and earlier are being drained, Litecoin included.
If your BTCPay hot wallet predates 2.4.2, move it to a new seed now. xitter.gq/TheHackersNews/status/…
‼️ Hackers are exploiting a patched BTCPay Server flaw to steal Bitcoin and Litecoin from hot wallets.
Versions 2.4.1 and earlier were targeted. Users are urged to move to a fresh server and wallet, even if no theft is detected.
Here's what happened ↓ thehackernews.com/2026/11/ha…
azat retweeted
Imagine a stranger lends you $100M. No collateral, no name. One rule: pay it back in the same transaction.
In March 2023, Euler lost ~$197M to one. The loan wasn’t the problem. The missing check was. 📁
#flashloans #crypto
Thanks @altcoinbuzzio for citing our Solana tokenized stocks tracker in your piece on Backpack bringing META shares to Solana.
Per the tracker, Backpack is one of three issuers of META on Solana, alongside xStocks and Ondo.
altcoinbuzz.io/why-is-backpa…
In July someone tried to hack me on a work call.
I knew the guy. We’d met at a @EthereumDenver and I’d pitched him @trueholdxyz . Mid-call his Teams “broke” and he sent me a file, MSTeams SDK Update.scpt, saying it would fix it.
A .scpt file opens in Script Editor, which can run shell commands on a Mac. Microsoft has written up the same trick with a fake Zoom SDK update and tied it to Sapphire Sleet, a North Korean group that goes after people in crypto.
I didn’t run it. His account had most likely been taken over. So, If someone sends you an “update” in the middle of a call, end the call and message them somewhere else.
If you did run a file like this, treat that Mac as compromised:
- move funds out of any wallet whose keys or seed phrase were on it, from a different device
- log out of Telegram, your browsers and exchanges everywhere, and change passwords from a clean device
- check ~/Library/LaunchAgents and /Library/LaunchDaemons for anything you don't recognise
Then wipe it and reinstall macOS.
Nine well-known crypto tracking tools have shut down or been folded into other products since 2022. Zapper was the latest, offline since 3 August.
A free dashboard costs money to run every day and earns nothing from someone who only looks, so when funding gets tight, dashboards go first.
Whatever you use, keep your own exports.
Where their users went, sorted by what they used the old tool for: truehold.xyz/blog/crypto-tra…
Short-Sightedness
At the end of the year, it’s customary to look back and set goals for the next one. But we are obsessed with the past and the next few quarters. Which model is topping benchmarks right now. Which AI slop went viral on Twitter this week. Almost no one seriously asks where the world is heading in 20 or 25 years.
Yet the changes are already in motion. And they are not reversible.
Demographics, economics, AI, climate, geopolitics — all of it is moving forward by inertia alone. There are credible forecasts that by 2050 the world will be significantly older. Fewer workers. More debt. Governments will spend trillions trying to reverse declining birth rates and rebuild economic systems for a reality that no longer looks like the 20th century.
Automation will eliminate routine work. Anything that can be automated will be. What remains valuable will be what AI cannot do well. Finance will move deeper on-chain. Crypto will stop being exotic and become infrastructure. Global markets will grow harsher, more competitive, less forgiving.
Healthcare will become more precise and far more expensive. AI will diagnose conditions before symptoms appear, but access to the best treatment will turn into a political and social battleground. People will live longer, and that longevity itself will create new tensions.
Cities will continue to expand while entire regions contract. Climate pressure will accelerate migration. Conflicts will not disappear; they will simply become more technological. Space will stop being science fiction and start being serious business.
The future will be large, uneven, and uncomfortable.
In a world that increasingly behaves like a zero-sum game, having a clear position and clear values will once again become a rare competitive advantage.
Great conversations at Solana Breakpoint 2025 in Abu Dhabi 🤝
Had a really good chat with the Solayer team exciting to see what they’re building and to exchange insights around the Solana ecosystem.
Events like this are all about meaningful connections and real discussions with builders.
#Solana #Solayer #Breakpoint2025 #Web3 #Blockchain #Networking
