onchain vet / AI nerd dev @everstrat_xyz / @GuideDAO fam 🦇🔊
Joined April 2009
- Tweets585
- Following495
- Followers311
- Likes855
We’re building @everstrat_xyz for everyone who got to step 6
While the hacker was dealing with all that Binance mess, he was using a truly decentralized asset on dexes: ETH. @everstrat_xyz protocol made more in fees in those few hours than it did in an entire month. lmao defillama.com/protocol/yield…
the grand finale
I traced roughly $2.5B in assets leaving the Ethereum wallet labeled Binance 14. The receiving address, 0x5227f603…fCCB2f8c, has no Binance label on Etherscan.
Here’s where the money went next:
> 500M USDT → 0x9749292D…4736C762. Roughly 325M USDT was subsequently exchanged for ETH. The wallet held about 122,317 ETH and 175M USDT at the time of review.
> 200M USDT → 0x0Ddf0480…1320697e. It swapped 10M USDT for approximately 3,552 ETH.
> 195,460 ETH → 0x8532FA14…900543D4. That ETH remained there. The intermediate wallet had also received another 28,005.6 ETH from “Binance 16.”
The biggest red flag: the address that initiated the sweep was previously funded through Tornado Cash. That same address is hardcoded as the authorized operator in the delegated contract.
To be precise: I found Tornado funding before the sweep. I did not find the traced proceeds being deposited into Tornado.
My assessment: the combination of fresh wallets, Tornado-funded execution, and rapid USDT-to-ETH conversion raises serious concerns about an unauthorized outflow. Ownership of the recipient remains unverified, and this is not a confirmed Binance hack.
Snapshot: October 29, 2026, approximately 20:54 UTC.
Original transaction: etherscan.io/tx/0x53bd38b816…
Tornado funding: etherscan.io/tx/0xd9e59064d7…
the grand finale
I traced roughly $2.5B in assets leaving the Ethereum wallet labeled Binance 14. The receiving address, 0x5227f603…fCCB2f8c, has no Binance label on Etherscan.
Here’s where the money went next:
> 500M USDT → 0x9749292D…4736C762. Roughly 325M USDT was subsequently exchanged for ETH. The wallet held about 122,317 ETH and 175M USDT at the time of review.
> 200M USDT → 0x0Ddf0480…1320697e. It swapped 10M USDT for approximately 3,552 ETH.
> 195,460 ETH → 0x8532FA14…900543D4. That ETH remained there. The intermediate wallet had also received another 28,005.6 ETH from “Binance 16.”
The biggest red flag: the address that initiated the sweep was previously funded through Tornado Cash. That same address is hardcoded as the authorized operator in the delegated contract.
To be precise: I found Tornado funding before the sweep. I did not find the traced proceeds being deposited into Tornado.
My assessment: the combination of fresh wallets, Tornado-funded execution, and rapid USDT-to-ETH conversion raises serious concerns about an unauthorized outflow. Ownership of the recipient remains unverified, and this is not a confirmed Binance hack.
Snapshot: October 29, 2026, approximately 20:54 UTC.
Original transaction: etherscan.io/tx/0x53bd38b816…
Tornado funding: etherscan.io/tx/0xd9e59064d7…
Poland: 1.07 children per woman.
If that persists, the generational math is:
100 → 51 → 26 → 13.
Almost half the size, every generation. ~87% smaller in three generations.
TL;DR on the stealmybitcoin.com challenge
nginx caps bodies at 1MB + buffers everything. Every public PHP2Shell PoC needs a 12MB body or request streaming and both dead.
Had to rebuild the OOM from scratch via empty-filename multipart amplification. Also stock 8.4.26 silently enforces a 1020-part limit.
The kill shot (memory leak via Set-Cookie) needs hitting a ~300-byte window in heap state, but the boundary drifts ±KB between Apache workers. Got 502s proving I reached the target code path and just couldn't land it reliably blind.
Did the author make it unhackable? i think it's honestly winnable, just expert-tier: the config kills all copy-paste exploits and forces real heap feng shui over HTTP
I took a closer look at the stealmybitcoin.com CTF, which aims to demonstrate that PHP2SHELL is not realistically exploitable. So I gave it a try.
Note: My analysis could be wrong, and I'm more than happy to be proven otherwise.
Here’s what I found:
• The server responds with Server: nginx and X-Powered-By: PHP/8.4.26.
• My differential fingerprinting scanner independently confirmed at least PHP 8.2+
• Hypotheses: I considered two possible setups:
◦ nginx → PHP-FPM
◦ nginx → Apache → PHP-FPM/mod_php
• After comparing the server's behavior against local test environments, the closest match appears to be nginx → PHP cli-server.
Plot twist: the response behavior is consistent with the PHP cli-server serving a static index.html rather than an index.php. If that's indeed the case, the challenge appears to be intentionally made unexploitable.
My conclusion (for now) is that I'm questioning whether this is a good-faith challenge.
Happy to be corrected if I've missed something!
raised $100m+ to build a internet computer and ended up with a fart on Twitter. is the gas proprietary too?
bro’s probably coked up on investor money
AI makes a locked-down OS harder to justify,
if your coding agent help change the desktop itself, with a built-in skill for the job.
i want to open Codex, tell it what pisses me off about my desktop, and have it help fix it. i can see myself losing an entire evening to that.
why stick with an OS that limits what my agent can change on my own computer?
before i buy the autonomous manufacturing pitch, i'd like one uncut run on a prompt chosen by someone outside the team. let us inspect what it actually produces
i've read landing and came away more impressed by the video production than convinced by the product lmao
Introducing SKY-001, the first Engineering World Model.
On CAD and BIM tasks, it beats GPT-6 Astra and every frontier model we tested:
-> 51-125x faster
- > 150-210x cheaper
-> Higher IOU than all frontier models
SKY-001 lets you dream a physical object before you build it.
18 months of work. Built by the team out of Maluuba's deep learning lab (acq. by @MSRResearch).
The first ‘AI General Engineer’ will be the backbone for Autonomous Manufacturing.
your next AI upgrade might be a GitHub link.
my bro @WaveCut maintains NInfer-all, an open-source engine for running AI locally on NVIDIA GPUs. the project's tests include a 27B model on an 8GB RTX 3060 Ti. github.com/iamwavecut/ninfer…
I've integrated Ternary Bonsai 2 into NInfer, and other good stuff is in there, too.
Runtime: github.com/iamwavecut/ninfer…
Models:
huggingface.co/WaveCut/Terna…
huggingface.co/WaveCut/Qwen3…
yesterday i found on maps a place that looked like "Epstein Island, but in Poland" and went to see it.
it's Radomierzyce Palace (maps.app.goo.gl/XMCunKWhpYFw…), right by the German border and not far from Czechia. the estate is listed at 10 million PLN. about $2.6m. (lowersilesiainvestment.pl/na…)
a huge palace surrounded by water, a bridge, and an enormous metal gate blocking the entrance. it looked deserted from outside. that's where the comparison comes from
if we're talking RWAs, here's an actual palace. $2.6m isn't exactly big money on crypto Twitter.
France had riots this weekend. life over here in Poland feels pretty calm. Poland is my pick for the best country in Europe.
@elonmusk buy it and call it Castle X. it already comes with a moat.
My girlfriend is the reason I found an AI agent use case I actually care about.
I’m fine watching movies in English. Some of the more complex movies are harder for her to follow in English.
Now I can tell my hermes desktop: “Yo, dub this into polish language using OpenVoice. Keep the dialogue in sync and get the best quality my M4 Mac mini with 16GB can handle”
A couple hours later, we have a really good quality version we can watch together. this is really insane.
github.com/myshell-ai/openvo…
smeshny retweeted
I wrote code. Now I face 45 years in prison because others misused it.
Code that no one controls. Code that no one can change or shut down.
Yet somehow, I’m being held responsible for what others chose to do with it.
I feel like the whole BoA money laundering thing should be talked about, but what's left to say?
I spent a year in prison for not filling out a form around selling Bitcoin and got in trouble because someone two degrees separate from me allegedly used it to launder funds. The amount in question was around $30k.
BoA launders $5b and has to give one fifth of it back to the government. No jail for anyone.
This is America.
Kraken's parent plans to buy Saldo Bank.
if the dream is grandma lining up at a bank for USDT, that's not mass adoption. that's financial necrophilia.
i wanted her paying for coffee from her wallet lmao xitter.gq/Payward/status/2110318…
We’ve signed an agreement to acquire Saldo Bank, a licensed specialized bank in Lithuania operating across five European markets. An EU banking license meaningfully expands Payward Banking. Subject to closing conditions and regulatory approvals.
payward.com/press-release/pa…
Codex regular is so damn slow now it’s basically unusable. Feels like they nerfed it on purpose so you’d pay for Ultra Fast… and Ultra Fast is about to be just as slow as regular used to be. omg
xitter.gq/thsottiaux/status/2107…
smeshny retweeted
DeFi is powerful, but managing multiple strategies manually can get complicated fast.
What if you could simply deposit ETH once and let a protocol handle the strategy execution, rebalancing and exposure for you?
That’s the idea behind @everstrat_xyz .
The cryptographic world computer:
vitalik.eth.limo/general/202…
My attempt to express in somewhat concise terms the true meaning of basically everything planned to happen to Ethereum starting from the fork after Hegota. It's really not just a blockchain anymore. It's a hybrid architecture that combines together blockchains and modern cryptography, to enable much more powerful properties.
FOCIL, EIP-8288, Lean consensus, state management, formal verification, advanced mempool improvements (including privacy), and the longer-term specter of obfuscation all mentioned.