Zade | Node (@zadenode) header
Zade | Node (@zadenode) profile picture

Hack breakdowns | 24/7 on chain. 🛡️ Researcher @AnalytixA 🛡️ Track casino bets: https://nitter.gq/t.co/HzE8glUQ9p 🛡️ Polymarket tracker: https://nitter.gq/t.co/L8iFq4nFeq

On ETH
Joined March 2022
Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)Photo by Zade | Node (@zadenode)
1/ I went undercover as a victim to expose a crypto scam that's stealing thousands from people right now. The scammer: → Runs Instagram ads targeting Italians → Stole a disabled man's identity to build trust → Has 13,000+ Telegram subscribers → Uses @MEXC_Official to drain funds via HIVE chain Here's exactly how the scam works. 🧵
3
2
4
1,084
This raises some red flags… 🚩 The page shows “Unlock & Sell” as a single button, but the lockers we know only have an option to unlock, not sell. That implies a combined transaction where the sell is executed automatically after unlock and potentially move your funds to unknown places. The flow shown on the page doesn’t match how the unlock mechanism usually works. We urge everyone to DYOR and do NOT use or connect your wallet until this has been investigated. #dxsale #exploit #warning
DxSale has revamped the dxlock locker UI for any locks that were done in v2 - v4 at dx.app/mydashboard Simply connect your wallet that you’ve used for locking your lp or presale and you will be able to unlock your LP. 🚨 Do not respond to anyone DMing you via X, telegram, email saying they are part of the Dx team or ex employees - the malicious attackers are trying to coerce users into giving their wallet access or have them connect to alternative scam websites after which they will take your LP. The new dxlock is a self serve service, and it is very easy to use. 🚨 For legacy v1 locker reach out to us and we can work out on a solution ✅Only ping t.me/dxsden on telegram for confirmation if you need any help
3
9
871
Zade | Node retweeted
I bet $34,995.71 on Polymarket that MicroStrategy sold Bitcoin in May. Evidence came out while the market was open. Legally confirmed. Then Polymarket changed the rules, and refused to pay. Last chance to do the right thing @shayne_coplan Where’s my fucking money?
13
7
162
4,128
After @gempad_app LP drain last year now @dxsale follows suit... If only you could make a lock without it being a proxy contract and verifying it for everyone.. Oh wait.. you can! @pinkecosystem
🚨 BREAKING: @DxSale just drained ~$7.3M from OG @BNBCHAIN LPs DxSale ran the largest liquidity locker of 2021. Hundreds of millions sat inside it. Even $SAFEMOON was locked here The team is now mixing the funds through what looks like @anyswapbot, and funds are now untraceable
3
2
9
1,590
Zade | Node retweeted
Another fake investment platform has extracted more than $1.1M We are tracing the funds of a victim who lost $500K himself Thanks to @Phalcon_xyz , we can identify which wallets are linked to other scams, such as this one: TB7ZTxA6FUQUBZ4bgL3xabdcpu7e81Bzyh Also there is another wallet involved which is banned by @tether TKRAMq1pyVRFr9ZtjHTPPga2pnyNxko9mJ I would really appreciate it if any of you have any information about those wallets and are willing to share it with me.
5
40
6,595
RetoSwap has been drained of 7,000 XMR ($2.7 Million) after a flaw in the Haveno protocol.
5
22
5
138
19,515
⚠️ The stolen funds are sitting here: 0x03CBDe692C655CC154821f4e06d740E94B8e7E70 - 25 ETH 0x83eD6616249BDe595fD1a7776fff897d225feA30 - 20 ETH 0x1C007adB1fbC03A5120DD2Fa8f5690BE48Bbf996 - 10 ETH 0xECA51D05fdfCE01fd00d28F599F54e6e44EE8F78 - 1.5 ETH 0x8734EcBaC00E28E3d8bfA93052a50c0d612DD9A8 - 0.5 ETH 0x0f192A6D03A2E2057f8D5305CdAFf01a9B92D41c - 1 ETH
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
1
2
253
Zade | Node retweeted
I almost got hacked! Don’t Interact with @vadeusnetwork !!!! they posted fake hiring tweets days ago about $25/hr. 6hrs/day. Remote! At first glance their profile looked so legit. But out of ignorance and FOMO i went on. here’s how I almost got hacked! 🧵 They made a fake
8
6
2
21
1,313
INTEL: China, US and UAE Conduct First Joint Crackdown on Crypto Romance Scams in Dubai dismantling 9 scam compounds and arresting 276 suspects
9
12
5
178
24,641
Zade | Node retweeted
Thorchain has been hacked six times in five years, and not once the same way. Each one through a different layer of the architecture. 2021 - Smart contract bug in the ETH Router. Attackers tricked Bifrost into reading manipulated msg.value events. ~$15.5M across three exploits. 2022 - Validator software bug. Non-deterministic behavior across nodes triggered a 20-hour outage. 2023 - TSS keygen vulnerability. Devs admitted a malicious validator could have drained vaults during a prior key generation. Network halted preemptively. 2025 (Jan) - Economic design failure. THORFi's lending model required RUNE to keep outperforming BTC/ETH. It didn't. $200M trapped. 2025 (Sep) - Social engineering. DPRK ran a Telegram deepfake on co-founder JP, extracted his MetaMask keys from iCloud Keychain. $1.35M lost. 2026 - TSS cryptography flaw. A malicious validator exploited the GG20 implementation, leaked key material across signing sessions, reconstructed the vault key. $10.7M drained. Plus: ~$605M of Bybit/Lazarus stolen funds laundered through in 2025. Validators voted to block, reversed under "code is law" pressure. Six distinct vectors: smart contract code, validator software, TSS keygen, economic design, social engineering, TSS cryptography. ~$227M directly lost or trapped. The architecture keeps finding new ways to fail.
17
19
7
160
34,670
Do NOT share your seed phrase / private key ever. Even if you think a legitimate entity is contacting you.
This is terrifying @Ledger. I just received a physical scam letter at my home address in Italy 🇮🇹 How the hell do scammers have access to the addresses of Ledger users? This goes way beyond phishing emails now. People’s safety is literally at risk.
2
104
Zade | Node retweeted
Open Letter to @VitalikButerin, @shayne_coplan, the @Polymarket Team, @peterthiel & @foundersfund . Dear Vitalik Buterin, Dear Shayne Coplan and the entire Polymarket leadership & investor team (Founders Fund / Peter Thiel, Intercontinental Exchange, and all early backers), I am writing this public appeal as a concerned user of the prediction market ecosystem — the same ecosystem you, Vitalik, helped envision through Ethereum’s promise of decentralized truth-seeking. Prediction markets should discover truth through evidence and incentives — not become a playground for whale manipulation and UMA voter bias. When large holders can sway outcomes and the platform closes its eyes to clear facts, the entire idea of fair resolution collapses. This is exactly what happened with the Trump–Xi communication market: polymarket.com/event/who-wil… I formally dispute the “NO” resolution. It contradicts Polymarket’s own standard of “Consensus of credible reporting” and shows that whale-driven votes were prioritized over verifiable facts. Here is the structured evidence: 1. Resolution Standard Polymarket resolves based on “Consensus of credible reporting.” This does not require an official joint press release. It does require multiple credible sources converging on the same fact. That threshold was overwhelmingly met — yet the market resolved “NO”. 2. Primary Sources • President Trump on camera: “I have [spoken with Xi] and we’re discussing…” (youtube.com/watch?v=cHYx52py… ~1:45) • White House (Karoline Leavitt): confirmed Xi “understood the request to postpone and accepted it” — impossible without communication. • Chinese MFA: “The two countries are in communication regarding President Trump’s visit to China.” No denial. 3. Control Case When the claim was false in 2025, China issued an explicit rejection (CNN). Here — zero denial + affirmative language. The pattern confirms the communication happened. 4. Global Media Consensus Reuters, The Guardian, ABC News, AP, SCMP, FOX, Yahoo News and others all reported the same fact. 5. Double Standard The Mohammed bin Salman market resolved YES on much weaker evidence. Here we have direct presidential confirmation + White House + Chinese government + media consensus — and it’s “NO”. Core Argument We have primary sources from both sides and global media consensus. Ignoring this is not a resolution error — it is a failure to put facts over votes and whale influence. #FactsOverVotes Why This Matters Vitalik — you have always championed truth-seeking mechanisms. Shayne and the team — you built a multi-billion platform with the mission of finding truth. Allowing whales and UMA voters to override clear evidence damages trust in the entire ecosystem. My Request: 1. Public explanation how “NO” satisfies “consensus of credible reporting”. 2. Clarification why primary sources were ignored in favor of market votes. 3. Consistency review with other markets (e.g. MBS). 4. Immediate re-evaluation of this resolution. It is unfair and dangerous when facts are sacrificed for whale profits or voter popularity. #FactsOverVotes I am happy to provide any additional sources. This is about preserving the credibility of the prediction market revolution you helped create. Thank you for your time. I look forward to your response. Best regards, m9keout from Ukraine Concerned Polymarket user and believer in decentralized truth.
35
35
4
80
4,162
Drift lost $285M yesterday. Not because of a code bug. The smart contracts were audited twice. It was a governance failure: → 2/5 multisig with no timelock → Admin could list fake collateral instantly → Circuit breakers disabled by a single key → Durable nonces used to pre-sign the takeover weeks before The code was safe. The keys weren't. I'm now auditing which Solana DeFi protocols have the same governance setup. First findings dropping soon. Protocol teams DM me for a free governance check before you're next.
Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers. This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution.
1
138
12/ If you or someone you know has been scammed by this person: 1. Report to @MEXC_Official support immediately 2. Save ALL chat logs and transaction IDs 3. File a police report in your country 4. DM me I can help trace your funds This scammer is STILL ACTIVE with 13,000+ subscribers and running Instagram ads RIGHT NOW. @zachxbt @SlowMist_Team @PeckShieldAlert @CertiK
1
1
109
13/ Scammers don't just exploit code they exploit trust. A stolen identity. Fake profits. Patient manipulation. If someone promises you easy crypto profits and asks you to withdraw to "your own address" it's not yours. Follow @zadenode for more investigations. Investigation supported by @AnalytixA
1
151