Monero harmonist
Joined February 2017
- Tweets5.7K
- Following2.1K
- Followers314
- Likes64.7K
Fuck I hate RBF so much man. Way more money lost than saved because of it I’m sure.
🚨Cake Wallet's Bitcoin RBF (bump fee) feature allows a malicious or compromised Electrum server to swap the recipient address during transaction replacement, diverting funds to an attacker.🚨
BE SAFE USING @CAKEWALLET RIGHT NOW !!!
$BTC $XMR
(Hedged)🦀 retweeted
Presenting the 1 XMR giveaway by @GhostSwap_io!
To enter: follow us (@MonericaProject) and @GhostSwap_io then comment your favorite trading pair (e.g. BTC to XMR) and repost.
Winner randomly selected November 6th!
🤖 Made with AI
(Hedged)🦀 retweeted
The more small merchants around you accepting Monero, the more sovereign you and the people around you are.
(Hedged)🦀 retweeted
La peña está en FOMO en Monero en Solana. Tíos, eso no es Monero. Incluso han desacoplado la equivalencia de precio!! 🤣🤣🤣
Flipas.
(Hedged)🦀 retweeted
Let's not forget, YouTube is owned by Google.
But we already built our own YouTube backup.
video.monerica.com now live
YouTube has banned The Bitcoin Conference channel.
All our channel does is post keynotes and panels from the largest Bitcoin conference in the world, bringing Bitcoin education to the masses.
Please reinstate our channel.
@YouTube @TeamYouTube
(Hedged)🦀 retweeted
Ok, monero:native price has gone up.
I'm not selling.
I want to buy something useful to also show the market that it's useful to accept Monero regardless of its price.
Can I get a bag of the yeast-inoculated anaerobic coffee?
(Hedged)🦀 retweeted
gold about to go to zero
lmao
Last month, we demonstrated high-rate alchemy: turning mercury into real, stable gold, beating CERN’s record by a factor of 10.
Last week, we enriched isotopes in the world’s most powerful plasma centrifuge, beating the Soviet record that stood for 40 years.
Now, we’re building a fusion reactor in San Francisco to achieve record power density.
(Hedged)🦀 retweeted
monero always goes up during hacks.
God candle incoming.
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
New Monero user found, nobody told her to use a sub address? (Don’t use/reuse the primary address starting with 4, use the sub addresses, they start with 8)
To everyone who generously supported me through Monero: I wanted to reassure you that it worked, and I’ve received your donations! Thank you from the bottom of my heart 🙏🏻
While I’m choosing the best alternative to Patreon, your support gives me some breathing room and peace of mind for a while.
For anyone who would like to donate anonymously and as securely as possible, here is my Monero wallet address:
47vYtX6NLYCPzJWoTMPzk4FqZ2gZhmr4DUtCSTMGWvw7FGxLFZ7swSvHocfMLE5FzphE8gJ9xySkjSwid78XnFyaG8GAZSV
(Hedged)🦀 retweeted
Monero is the only crypto in the top 20 without a spot ETF application on the stock market
ask yourself why
(Hedged)🦀 retweeted
🚨 New Monero Extension Wallet SCAM running Google ads right now.
I was checking SEO ranks for a side project today and spotted a sponsored google ad for a shiny new monero chrome extension.
browser extensions are the oldest seed-stealing vector in crypto: launch a clean v1, buy fake reviews, then push an auto-update with malware. so i decided to look under the hood.
at first glance, they nailed the optics. polished ui, signature orange palette, 800x600 popup, and 22 glowing 4.7★ reviews (clearly bought).
the website looks even cleaner than kyc.rip or xmr.club. written by people who clearly understand privacy jargon: local signing, view keys never leaving, aes-256, custom node options, standard "not official / don't store large amounts" disclaimers. hell, i almost thought about pitching default rpc for @mnr_network.
then came the red flags:
- zero socials in the footer. no x, no telegram, no signal, just a generic protonmail.
- github repo linked on the site was tagged v2.3, pushed 3 weeks ago. clean monero-ts code, no backdoors.
- but the chrome web store was already serving v2.4, updated october 20th.
a live extension ahead of the public repo with zero commit history is an immediate sirens-blaring warning.
so I pulled the crx package and started decompiling the obfuscated bundle.
here is what's actually hiding inside v2.4:
1. repo mismatch: github is v2.3 and unchanged for weeks. web store got bumped to v2.4 yesterday alongside paid google ad campaigns.
2. license mismatch: site claims mit, repo license detection throws "other".
3. the payload isn't in javascript: they hid it inside the compiled wasm engine.
4. every 90 seconds, it calls an undocumented wasm function (completely absent in official monero-ts).
5. it reads an internal string, slices it into 64-character chunks disguised as harmless transaction ids, and ships them to their own telemetry node as standard rpc lookups.
6. it quietly passes your browser fingerprint straight into the wasm engine.
7. it forces these lookups through their hardcoded node regardless of the custom rpc you configured, completely bypassing the wallet's own allow-list.
8. unreached payloads are cached and retried in an offline queue.
none of this code exists in their public github.
I haven't reverse-engineered the raw payload bytes yet, but a covert exfiltration channel baked inside the exact binary holding your private keys has zero innocent explanation.
receipts:
- extension id: lkabbmdknccomhhhfhnljhfpofnhhifm
- crx sha-256: 5d10f7fb0b260abc2338118717815e526683583cb073d0df38891a805e2bad0a
go to the chrome web store and report this listing immediately.
Never trust browser extensions with your seeds.
Stay paranoid.
this is obviously a paid shill.
suggest blocking all accounts that quoted, reposted, or replied in support.
a few-day old account got already 3k followers, a single hello-world post got 26k views, all accounts commented are unfamiliar faces. I don’t think our little Monero community has suddenly grown that much.
very suspicious especially it’s a browser extension wallet which could potentially hot-update to version that drains your funds completely, and… nowhere to trace at all.
I’d stay on battle tested wallets like GUI, @cakewallet or Ripley Terminal.
stay paranoid, guys.
(Hedged)🦀 retweeted
i'm getting close to 25% of native performance on an intel cpu in 1 browser tab. very cool.
benchmark your 100% in-browser XMR mining @ tallhatdoug.com/earn/!
you may be surprised at how efficient it is....
(Hedged)🦀 retweeted
You need to understand how Right-wing people under 40 view the Left.
When we think of Leftists, we do not think of Barack Obama or Ezra Klein. Yes, these guys are on the Left, but younger Millennials and Zoomers on the Right do not think of Leftists in their own age bracket as polished technocrats.
These are not the sort of people that make up our Left-wing counterparts that we grew up with, went to school with, or work with.
When we think of Leftists, the first thing that pops into our head are a bunch of disgusting, depraved, spiteful mutants who want to destroy everything around them as payback for the crime of being born.
We think of Discord troons that invaded our hobbies, Reddit mods who are drunk on the most insignificant power imaginable, that one girl from high school or college who became a literal Communist, and that friend or family member who cut off all contact because we refused to treat their mental illness like a status symbol.
We think of people who, if they ever became a majority of the country and actually managed to possess political power, would inevitably kill tens of millions of people out of blind envy and petty cruelty.
Younger people on the Right come across as impatient and anxious in their mindset and mannerisms because they understand what will eventually happen when these people succeed their Gen X and Boomer predecessors in the Democratic Party.
They know what is to come if their own generational cohorts on the Left actually take power, and they feel incredibly exasperated that it seems like none of their parents or grandparents understand just how late the hour truly is.
(Hedged)🦀 retweeted
The recent hardware wallet supply chain attacks are a sobering reminder that protecting your funds goes beyond just keeping your private keys safe.
One reason we built Cupcake was to give people another option for self-custody that reduces reliance on third parties. Instead of purchasing a dedicated hardware wallet, you can turn an old phone into an offline signing device and use it with Cake Wallet to manage your funds.
Check it out and learn more at cupcakewallet.com
