
Hack breakdowns | 24/7 on chain. 🛡️ Researcher @AnalytixA 🛡️ Track casino bets: https://nitter.gq/t.co/HzE8glUQ9p 🛡️ Polymarket tracker: https://nitter.gq/t.co/L8iFq4nFeq
On ETH
Joined March 2022
- Tweets104
- Following56
- Followers18.3K
- Likes218
Pinned Tweet
1/ I went undercover as a victim to expose a crypto scam that's stealing thousands from people right now.
The scammer:
→ Runs Instagram ads targeting Italians
→ Stole a disabled man's identity to build trust
→ Has 13,000+ Telegram subscribers
→ Uses @MEXC_Official to drain funds via HIVE chain
Here's exactly how the scam works. 🧵
Zade | Node retweeted
This raises some red flags… 🚩
The page shows “Unlock & Sell” as a single button, but the lockers we know only have an option to unlock, not sell.
That implies a combined transaction where the sell is executed automatically after unlock and potentially move your funds to unknown places.
The flow shown on the page doesn’t match how the unlock mechanism usually works.
We urge everyone to DYOR and do NOT use or connect your wallet until this has been investigated.
#dxsale #exploit #warning
DxSale has revamped the dxlock locker UI for any locks that were done in v2 - v4 at
dx.app/mydashboard
Simply connect your wallet that you’ve used for locking your lp or presale and you will be able to unlock your LP.
🚨 Do not respond to anyone DMing you via X, telegram, email saying they are part of the Dx team or ex employees - the malicious attackers are trying to coerce users into giving their wallet access or have them connect to alternative scam websites after which they will take your LP. The new dxlock is a self serve service, and it is very easy to use. 🚨
For legacy v1 locker reach out to us and we can work out on a solution
✅Only ping t.me/dxsden on telegram for confirmation if you need any help
Zade | Node retweeted
I bet $34,995.71 on Polymarket that MicroStrategy sold Bitcoin in May.
Evidence came out while the market was open. Legally confirmed. Then Polymarket changed the rules, and refused to pay.
Last chance to do the right thing
@shayne_coplan
Where’s my fucking money?
Zade | Node retweeted
After @gempad_app LP drain last year now @dxsale follows suit...
If only you could make a lock without it being a proxy contract and verifying it for everyone..
Oh wait.. you can! @pinkecosystem
🚨 BREAKING: @DxSale just drained ~$7.3M from OG @BNBCHAIN LPs
DxSale ran the largest liquidity locker of 2021. Hundreds of millions sat inside it. Even $SAFEMOON was locked here
The team is now mixing the funds through what looks like @anyswapbot, and funds are now untraceable
Zade | Node retweeted
Another fake investment platform has extracted more than $1.1M
We are tracing the funds of a victim who lost $500K himself
Thanks to @Phalcon_xyz , we can identify which wallets are linked to other scams, such as this one:
TB7ZTxA6FUQUBZ4bgL3xabdcpu7e81Bzyh
Also there is another wallet involved which is banned by @tether
TKRAMq1pyVRFr9ZtjHTPPga2pnyNxko9mJ
I would really appreciate it if any of you have any information about those wallets and are willing to share it with me.
Zade | Node retweeted
RetoSwap has been drained of 7,000 XMR ($2.7 Million) after a flaw in the Haveno protocol.
⚠️ The stolen funds are sitting here:
0x03CBDe692C655CC154821f4e06d740E94B8e7E70 - 25 ETH
0x83eD6616249BDe595fD1a7776fff897d225feA30 - 20 ETH
0x1C007adB1fbC03A5120DD2Fa8f5690BE48Bbf996 - 10 ETH
0xECA51D05fdfCE01fd00d28F599F54e6e44EE8F78 - 1.5 ETH
0x8734EcBaC00E28E3d8bfA93052a50c0d612DD9A8 - 0.5 ETH
0x0f192A6D03A2E2057f8D5305CdAFf01a9B92D41c - 1 ETH
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
I almost got hacked!
Don’t Interact with @vadeusnetwork !!!!
they posted fake hiring tweets days ago about $25/hr. 6hrs/day. Remote!
At first glance their profile looked so legit.
But out of ignorance and FOMO i went on.
here’s how I almost got hacked! 🧵
They made a fake
Zade | Node retweeted
INTEL: China, US and UAE Conduct First Joint Crackdown on Crypto Romance Scams in Dubai dismantling 9 scam compounds and arresting 276 suspects
Zade | Node retweeted
Thorchain has been hacked six times in five years, and not once the same way. Each one through a different layer of the architecture.
2021 - Smart contract bug in the ETH Router. Attackers tricked Bifrost into reading manipulated msg.value events. ~$15.5M across three exploits.
2022 - Validator software bug. Non-deterministic behavior across nodes triggered a 20-hour outage.
2023 - TSS keygen vulnerability. Devs admitted a malicious validator could have drained vaults during a prior key generation. Network halted preemptively.
2025 (Jan) - Economic design failure. THORFi's lending model required RUNE to keep outperforming BTC/ETH. It didn't. $200M trapped.
2025 (Sep) - Social engineering. DPRK ran a Telegram deepfake on co-founder JP, extracted his MetaMask keys from iCloud Keychain. $1.35M lost.
2026 - TSS cryptography flaw. A malicious validator exploited the GG20 implementation, leaked key material across signing sessions, reconstructed the vault key. $10.7M drained.
Plus: ~$605M of Bybit/Lazarus stolen funds laundered through in 2025. Validators voted to block, reversed under "code is law" pressure.
Six distinct vectors: smart contract code, validator software, TSS keygen, economic design, social engineering, TSS cryptography. ~$227M directly lost or trapped. The architecture keeps finding new ways to fail.
Do NOT share your seed phrase / private key ever.
Even if you think a legitimate entity is contacting you.
This is terrifying @Ledger.
I just received a physical scam letter at my home address in Italy 🇮🇹
How the hell do scammers have access to the addresses of Ledger users? This goes way beyond phishing emails now.
People’s safety is literally at risk.
Open Letter to @VitalikButerin, @shayne_coplan, the @Polymarket Team, @peterthiel & @foundersfund .
Dear Vitalik Buterin, Dear Shayne Coplan and the entire Polymarket leadership & investor team (Founders Fund / Peter Thiel, Intercontinental Exchange, and all early backers),
I am writing this public appeal as a concerned user of the prediction market ecosystem — the same ecosystem you, Vitalik, helped envision through Ethereum’s promise of decentralized truth-seeking.
Prediction markets should discover truth through evidence and incentives — not become a playground for whale manipulation and UMA voter bias. When large holders can sway outcomes and the platform closes its eyes to clear facts, the entire idea of fair resolution collapses.
This is exactly what happened with the Trump–Xi communication market:
polymarket.com/event/who-wil…
I formally dispute the “NO” resolution. It contradicts Polymarket’s own standard of “Consensus of credible reporting” and shows that whale-driven votes were prioritized over verifiable facts.
Here is the structured evidence:
1. Resolution Standard
Polymarket resolves based on “Consensus of credible reporting.” This does not require an official joint press release. It does require multiple credible sources converging on the same fact.
That threshold was overwhelmingly met — yet the market resolved “NO”.
2. Primary Sources
• President Trump on camera: “I have [spoken with Xi] and we’re discussing…” (youtube.com/watch?v=cHYx52py… ~1:45)
• White House (Karoline Leavitt): confirmed Xi “understood the request to postpone and accepted it” — impossible without communication.
• Chinese MFA: “The two countries are in communication regarding President Trump’s visit to China.” No denial.
3. Control Case
When the claim was false in 2025, China issued an explicit rejection (CNN). Here — zero denial + affirmative language. The pattern confirms the communication happened.
4. Global Media Consensus
Reuters, The Guardian, ABC News, AP, SCMP, FOX, Yahoo News and others all reported the same fact.
5. Double Standard
The Mohammed bin Salman market resolved YES on much weaker evidence. Here we have direct presidential confirmation + White House + Chinese government + media consensus — and it’s “NO”.
Core Argument
We have primary sources from both sides and global media consensus. Ignoring this is not a resolution error — it is a failure to put facts over votes and whale influence.
#FactsOverVotes
Why This Matters
Vitalik — you have always championed truth-seeking mechanisms.
Shayne and the team — you built a multi-billion platform with the mission of finding truth. Allowing whales and UMA voters to override clear evidence damages trust in the entire ecosystem.
My Request:
1. Public explanation how “NO” satisfies “consensus of credible reporting”.
2. Clarification why primary sources were ignored in favor of market votes.
3. Consistency review with other markets (e.g. MBS).
4. Immediate re-evaluation of this resolution.
It is unfair and dangerous when facts are sacrificed for whale profits or voter popularity.
#FactsOverVotes
I am happy to provide any additional sources. This is about preserving the credibility of the prediction market revolution you helped create.
Thank you for your time. I look forward to your response.
Best regards,
m9keout from Ukraine
Concerned Polymarket user and believer in decentralized truth.
Drift lost $285M yesterday.
Not because of a code bug.
The smart contracts were audited twice.
It was a governance failure:
→ 2/5 multisig with no timelock
→ Admin could list fake collateral instantly
→ Circuit breakers disabled by a single key
→ Durable nonces used to pre-sign the takeover weeks before
The code was safe. The keys weren't.
I'm now auditing which Solana DeFi protocols have the same governance setup.
First findings dropping soon.
Protocol teams DM me for a free governance check before you're next.
Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers.
This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution.
12/ If you or someone you know has been scammed by this person:
1. Report to @MEXC_Official support immediately
2. Save ALL chat logs and transaction IDs
3. File a police report in your country
4. DM me I can help trace your funds
This scammer is STILL ACTIVE with 13,000+ subscribers and running Instagram ads RIGHT NOW.
@zachxbt @SlowMist_Team @PeckShieldAlert @CertiK
13/ Scammers don't just exploit code they exploit trust.
A stolen identity. Fake profits. Patient manipulation.
If someone promises you easy crypto profits and asks you to withdraw to "your own address" it's not yours.
Follow @zadenode for more investigations.
Investigation supported by @AnalytixA



























