BashCo retweeted
Tonight’s outcome isn’t about placing faith in Democrats or socialist principles; it’s about holding Republicans accountable for betraying their promises.
All Republicans had to do was:
1. put Americans First
2. not start another war
3. prosecute sex traffickers
BashCo retweeted
🚨 We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers.
If you're running an instance, please shut it down (./btcpay-down.sh) until we complete the investigation.
Today I resigned from Binance.
I was responsible for securing $6.3 billion on my personal laptop.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
BashCo retweeted
Please update your BitcoinJS and related dependencies. We have backported some fixes all the way to BitcoinJS v5.
Big thanks to everyone mentioned in this post, especially to @landabaso who helped coordinate with the reporters and publish fixes.
We've just published 15 security advisories across BitcoinJS libraries (14 High and one Medium), with patched releases available on npm.
This follows work with @junderwood4649 and the reporters to investigate the issues, prepare fixes and provide backports for the maintained release lines.
The findings cover areas including transaction and block parsing, PSBT fee calculations, proof verification, mnemonic handling and elliptic-curve operations. Their impact depends on the affected version and how an application uses the library. Each advisory explains those conditions and the required remediation.
If you maintain an application using BitcoinJS packages, please check your direct and transitive dependencies and upgrade affected versions.
For bitcoinjs-lib, the patched releases are 7.0.5, 6.1.10 and 5.2.3, depending on your release line. Both tiny-secp256k1 and bitcoin-js/tiny-secp256k1-asmjs have fixes in 2.2.5.
The other patched releases are bip39 3.1.2 and 2.6.1, bip38 3.1.2 and 2.0.4, bolt11 1.4.2, merkle-lib 2.0.11 and bip32-utils 0.11.2.
Some fixes require changes in the application as well as a dependency update.
You can find the affected ranges, technical details and upgrade guidance here:
github.com/bitcoinjs/bitcoin…
github.com/bitcoinjs/tiny-se…
github.com/bitcoinjs/bip39/s…
github.com/bitcoinjs/bip38/s…
github.com/bitcoinjs/bolt11/…
github.com/bitcoinjs/merkle-…
github.com/bitcoinjs/bip32-u…
Thanks to the researchers and reporters: the Bitcoin Red Team (@Rob1Ham, @callebtc and @danielabrozzoni), @0xaudron, @real_a_kalout and ARSB (github.com/ARSB1).
BashCo retweeted
Il est 20h. Les enfants sont couchés.
Vous êtes tranquillement devant la télé avec votre femme.
Soudain, des cris éclatent dans la rue. Des coups, des vitres qui explosent. Des dizaines d’émeutiers vêtus de noir s’en prennent à votre immeuble. Ils tentent de forcer la porte, saccagent le hall, arrachent les boîtes aux lettres.
Vos enfants se réveillent en hurlant. Votre femme panique.
Vous appelez la police.
« Tous nos agents sont occupés, veuillez patienter. »
Puis la communication coupe.
Vous jetez un œil par la fenêtre. En bas, ils viennent de mettre le feu aux poubelles. Les flammes lèchent déjà la façade. La fumée commence à entrer dans l’appartement.
Soudain, un grand fracas.
La porte de l’immeuble vient de céder.
Des hurlements montent dans l’escalier.
« On va vous tuer ! Ouvrez cette putain de porte ! »
Ils sont sur votre palier.
Vous n’osez même pas regarder par l’œil de bœuf.
Que faire ?
Sortir ? Fuir ? Impossible. Ils sont dans l’escalier.
Sauter par la fenêtre ? Vous êtes au quatrième étage.
Se défendre ? Avec quoi ?
Vous n’avez jamais pensé avoir besoin de vous défendre chez vous. Vous avez toujours fait confiance à l’État. Les armes, ce n’est pas votre truc.
Vous avez travaillé toute votre vie, payé vos impôts, respecté les lois.
Et maintenant, vous voilà coincé dans votre propre appartement, avec vos enfants en pleurs et votre femme qui vous demande ce qu’on va faire.
Derrière la porte, les pas se rapprochent.
Cette fois, ce n’est pas une vidéo d’émeutes que vous regardez à la télévision. C’est chez vous que ça se passe.
Et personne ne viendra vous protéger.
BashCo retweeted
Replying to @chasmmmmmmmmmmm
When the game is decompiled and finished with this process, we need to start using p2p to share these around. Everything else is too centralized and can be DMCA’d or essentially “frozen” in other ways.
BashCo retweeted
women love it when they can hear the hard drives spinning in the NAS you keep in your bedroom when they're trying to sleep, it turns them on to think you're seeding torrents
BashCo retweeted
I sued the IRS for grabbing my crypto transaction data without suspicion or a warrant, arguing that multiplying the places where my private data was held endangered me and my family. I lost, and the Supreme Court declined to take my case. Data leaks have real world consequences.
Data leaks have real world consequences.
WRENCHED – a documentary by @Jake_Hanrahan and The Rage.
COMING SOON 🔪
Japan is our greatest ally and it's not even close. Nearly every other country is adversarial, but not Japan. I hope our relationship with Japan continues to grow and be prosperous for both nations.
Literally nine days ago Trezor was warning about an increase in phishing attempts.
Following the Coldcard vulnerability disclosure, we're already seeing an increase in phishing attempts.
Stay alert for scams ⚠️
• Never share your wallet backup, aka recovery seed (12/20/24 words)
• Only enter your wallet backup directly on your Trezor device during recovery
• Trezor will never contact you asking for your wallet backup
• Never follow wallet-migration instructions from unsolicited emails, messages or phone calls
Trezor devices are not affected by the Coldcard incident.
How much is "deeply sorry" worth on the open market?
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
If you bought a Trezor in the past 90 days, congratulations to all your new long lost relatives. reddit.com/r/TREZOR/s/N0aO5s…
BashCo retweeted
There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds.
Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.
If you are unable to update right away, turn off your BTCPay Server to prevent unauthorized access until you can update.
On the subject of dice...
A Stanford statistician built a dice-rolling machine to prove board game companies have been selling you loaded dice for a hundred years.
The machine drops dice inside a glass chamber, records every landing, and runs the sequences through statistical tests. Every mass-produced die it tested was biased. Every Monopoly die. Every Yahtzee cube. Every D&D twenty-sider. Every casino die below one hundred dollars.
The bias is so small the human eye cannot see it in one game. It is so consistent it drains a player over a night at a real table.
His name is Persi Diaconis. He is 79. He ran away from home at fourteen to learn card magic from Dai Vernon. He came back twenty years later with a PhD in statistics from Harvard and became the person casinos, magicians, and mathematicians all quietly consult when they need to know how something actually shuffles, rolls, or falls.
This eight-minute Numberphile clip is Diaconis explaining exactly what the machine found.
The dots on a die are drilled holes. The paint filling them weighs less than the plastic that was removed. The six face is lighter than the one face. Every die you have ever owned has been tilted by a fraction of a gram since the day it left the factory.
Casinos already knew. A single die at the Bellagio costs one hundred and fifty dollars, is discarded after eight hours of use, and is engineered so the paint in the pits weighs exactly what the plastic did.
That is the whole difference between a game piece and a regulated instrument.
Here is what Diaconis proved on the record.
A cheap six-sided die favors the six face over thousands of rolls. A plastic twenty-sided die can favor certain numbers by a substantial margin depending on how the corners are cut. A thirty-sided die, unless the internal geometry is spherical, rolls some faces two to three times more often than others. One retired executive rolled a single die three and a half million times before it physically wore round.
Euclid worked out part of this in 300 BC. Diaconis has spent forty years finishing the rest.
"There is no such thing as a fair die. There are only dice fair enough for the purpose you are using them for."
Fairness is not a property of the die. It is a property of the die plus the throw plus the surface. Change any one and the same die stops being fair.
The video is free. Diaconis's papers are free on his Stanford page.
Everyone who has ever argued over a roll has been trusting a piece of plastic they never checked.
The math is free. The willingness to admit your die is loaded is a much rarer commodity than fairness.
BashCo retweeted
Please treat this as urgent. Migrate your funds. Follow the advisory for your model, upgrade your device, generate a new seed, and carefully move your funds.
Help spread the word, especially to people who are less online and may not see this update.
The threat is still ongoing.
🚨URGENT COLDCARD SECURITY UPDATE
Read carefully before acting.
👉Mk3 seed generated on 4.0.1+ without ≥50 private, independent dice rolls: begin a careful migration now.
👉Mk4/Mk5 <5.6.0 or Q <1.5.0Q: update first, generate a new seed, then migrate.
blog.coinkite.com/entropy-te…
HOW TO VERIFY DICE ROLLS ON COLDCARD AND SEEDSIGNER
- Coldcard vulnerability explained: move your funds ASAP if you did not use dice rolls
- How to create a seed with dice on coldcard, seedsigner
- How to verify that the seed matches online tool: iancoleman.io/bip39/
- Remember to roll NEW dice and create a NEW seed after testing
- Some general dice rolling advice and tips



















