Yes to freedom! Yes to crypto! Yes to cash! No to CBDCs Ethically open minded | No bias Reminder: Ethereum Virtual Machine (EVM) is the Web3 foundation
Joined March 2017
- Tweets14.5K
- Following2.3K
- Followers486
- Likes53.5K
E. Hillford retweeted
4 data leaks reported today:
1. Coinbase's vendor Amplitude exposed some users’ contact data (funds unaffected).
2. Bithumb (Korea) had user data leaks.
In TradFi, two securities firms in Korea leaked data:
3. Mirae Asset
4. Daishin Securities
You can't prevent a leak, but you can protect yourself.
Leaked exchange data (names, emails, phone numbers, addresses, ID documents, transaction history) is mostly used for phishing, SIM swapping, and social engineering.
Reduce info you share
- Use a unique email alias for each exchange (SimpleLogin, Apple Hide My Email, etc). A leak then can't be linked to your other accounts, and you can spot which service leaked.
- Share only what's required. Don't add optional profile details.
- Use a dedicated phone number (a VoIP or secondary SIM) for exchange accounts if you can, since leaked numbers are the main route to SIM swaps.
Lock down the account
- Use a unique, long password from a password manager.
- Turn on hardware security keys (YubiKey) or passkeys, or at least an authenticator app.
- Avoid SMS 2FA.
- Enable withdrawal address whitelisting and a withdrawal time lock if the exchange offers them.
- Set up an anti-phishing code, which puts a code you choose in every legitimate email from the exchange.
- Review active sessions and API keys regularly. Delete any API keys you don't use.
- Restrict API keys to withdraw-disabled and IP-whitelisted.
Defend against
- SIM swapping: Ask your carrier to add a port-out PIN or number lock.
- Phishing and impersonation: Assume anyone who contacts you about your account, "security issues," or "refund recovery" is a scammer, even if they know your name, balance, or recent trades.
- Exchange support staff don't ask for your password, 2FA codes, or seed phrase.
- Never click links in emails or texts. Go to the site yourself.
- "Wrench attacks": Leaked addresses plus holdings data have led to real-world extortion and robberies. Don't publicize your holdings, and keep large balances out of anything tied to your home address if you can.
If a breach is announced
1. Change the exchange password and any other account that reused it.
2. Check haveibeenpwned.com for your email address.
3. Revoke API keys and active sessions.
4. Review recent withdrawals and security settings.
5. Watch for phishing emails and texts that reference the breach, because scammers move fast after one.
Stay SAFU! 🙏
E. Hillford retweeted
🚨JUST IN: Robinhood $HOOD falls more than 4% after hours despite record Q3 revenue.
Revenue rose 12% from a year earlier to a record $1.42 BILLION.
Meanwhile, it earned $0.51 per share, below the $0.56 analysts expected.
Crypto revenue fell 55% to $120 MILLION.
Prediction markets now bring in more, at $173 MILLION, up over 6x.
E. Hillford retweeted
Looks like wagyu dot xyz was hacked & all user data including swaps, ip addresses, countries & transactions details got leaked. @PerpetualCow refused to pay a $5 million ransom. All the information is posted on whiteArmors site
E. Hillford retweeted
“Now we’re spending a lot of time in how to make Robinhood Chain even bigger, how to support the community, we know we’ve been hearing from a lot of builders that we could be doing more to support the community, and I think you should expect us to really ramp that up.” - @vladtenev on Robinhood Chain
Hmm… Thinking it’s obvious everyone should be more bullish 🤔
E. Hillford retweeted
Discord is about to put your public messages on Google
Discord will start making messages from Discoverable public servers searchable on Google and other search engines from mid-December.
The feature is ON by default in most regions, but you can opt out:
User Settings → Data & Privacy → turn off “Show my message content from Discoverable channels on web pages.”
In the EU, UK, Canada, Brazil, Australia and South Korea, it will be OFF by default.
Private servers, DMs and group DMs are not included. Usernames and avatars won’t appear alongside indexed messages.
E. Hillford retweeted
‼️ EU governments approved a GDPR change to let companies train AI on Europeans' personal data without consent.
It makes AI training a possible "legitimate interest", judged case by case. Parliament must still agree.
Max Schrems calls it a "digital expropriation" of Europeans.
E. Hillford retweeted
I know with all the other shit going on everyone has forgotten about the implanted Ledgers in the wild.
But if you know of any (drained or not) please keep sharing information, photos, purchase date + location, etc.
Come to @SEAL_911. Tag me. Tag @MagicalTux. Tag @Ledger. 🙏
I found a SIM implant in my friend's @Ledger Flex. He set it up but never used it, so no funds were lost.
He bought it from @cryptobilis at their May 22 2026 Global Pizza Party, Raintree Club Kuala Lumpur.
nRF9151 LTE module, eSIM module, v1.1 UFL antenna
cc @MagicalTux
E. Hillford retweeted
🚨HUGE: CZ confirms BNB Chain plans for a NEW parallel high-speed Layer 1.
The EVM-compatible network will run alongside BNB Smart Chain, connected through a native bridge, using BNB for gas, staking and governance.
CZ summed up the approach: “Multiple chains, one coins.”
It targets 200-millisecond blocks and 20-millisecond pre-confirmations, aiming to support high-frequency trading and real-time payments. Planned features include native account abstraction and onchain privacy pools.
An internal multi-validator devnet is already running, with public testnet targeted for late 2026 and mainnet for early 2027.
E. Hillford retweeted
📊 MARKET: BitMine only needs 63,519 $ETH to reach its goal of owning 5% of the supply.
E. Hillford retweeted
When BNB started 9 years ago, I never thought I would be ringing the bell for a blockchain token (treasury) on NASDAQ one day. I don’t know what shows crypto and tradfi converging more than this.
#BNB Standard
Today is the beginning. $BNC CEO @odagius at the Nasdaq podium, minutes before the Opening Bell, with @cz_binance. @BNBCHAIN
E. Hillford retweeted
We got Microsoft Authenticator to hand over account tokens to a fake Teams app.
The app needed zero Android permissions. It just claimed to be Teams, and Authenticator never checked who was actually asking.
The result: full delegated access to mailbox, files, and calendar through Microsoft Graph.
Full write-up by @ofekdavidlevin with code and PoC: enclave.ai/blog/authmask-we-…
Readers added context they thought people might want to know
Microsoft patched this (CVE-2026-80097) in Authenticator v6.2606.4246+. It requires a malicious app already on the device. No exploitation reported at advisory time. Update via Google Play.
enclave.ai/blog/authmask-…
msrc.microsoft.com/update-guide/v…
E. Hillford retweeted
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
