Pinned Tweet
🔒 12,000+ tuned in to hear founders tackle one of Web3’s biggest threats: Security

🎙️ This is xSpaces — real builders, real talk.

✅ Live every Tue + Fri @ 1PM EST
💼 Sponsors & guests: xspaces@dbcrypt0.com

🎧 Listen + follow if you value real Web3 talk.
5
4
19
4,543
xSpaces retweeted
We watched 33 celebrity coins hit $97B at their peaks and called it adoption
5
6
30
2,291
xSpaces retweeted
Binance's own spokesperson just said it:

“EIP-7702 played a significant role in the hack”

How many people fought me on this? Too many to count

7702 didn't start the breach, but it made the hacker's job FAR easier

The full breakdown is right here 👇
The Ethereum community is doing Olympic-level mental gymnastics to defend EIP-7702

Yes, 7702 didn't cause the Binance hack

Binance's signing system got owned and wallets on 10+ chains got drained

Binance owns the breach but 7702 turned the biggest piece of it into a one-click job

Here's what 7702 did with that access:

The attacker got Binance's signer to produce 50 pre-signed authorizations

One landed

That single signature turned one of Binance's biggest Ethereum hot wallets into a sweeper the attacker controlled

$2.5 billion left in ONE transaction

The wallet stayed hijacked for nearly 4 hours and kept getting re-swept as Binance refilled it

More than half the entire $6.3B haul went through that one wallet

Without 7702 that one sweep is 64 separate transfers each needing its own signature from Binance's system

Every one is another chance to get caught or be stopped

With 7702 it's one signature and an open-ended drain

And nobody can say they didn't see it coming

The 7702 spec itself says delegated code gets unrestricted access to the account, and that there is "no safe way" for apps to ask users to sign these

Within a month of launch, Wintermute found 97% of 7702 delegations pointed at wallet-draining sweeper contracts

People warned about this in 2024 yet it shipped anyway because UX won the argument

Now the token side

Your ERC-20s aren't really "in" your wallet. They're a balance in someone else's contract

Use them in DeFi and you're handing out approvals, often unlimited, that drainers have farmed for years

And plenty of issuers can freeze your balance whenever they want

That's the main reason ~$2.8B of this hack got frozen

Great for Binance but not so great the day it's your wallet

7702 takes that same "trust this code with my stuff" model and extends it from one token to the entire account

Largest theft in crypto history by more than 4x

Likely the largest theft of any kind. EVER.

And it lands right back on crypto's reputation which certainly isn’t stellar right now
1
6
30
1,062
xSpaces retweeted
Your favorite crypto caller buys 20 seconds before he posts then he dumps on you

@Bubblemaps just mapped the side wallets of four big callers

If you ever bought off one of their posts, you were the exit liquidity

Here's what the wallets show (Bubblemaps' own estimates):

🔸 @0xEthan: 3 side wallets buy the same second as his public wallet. Then the call. Then they're out in about 3 minutes

🔸 @Anglio: 5 linked wallets in front of 61% of his October calls, roughly 20 seconds early on average

🔸 @The__Solstice: public wallet down about $70K. Linked side wallets up about $270K

🔸 @kimchi1x: an estimated $6M on $TRUMP through hidden linked wallets

That $40M Kimchi number everyone passed around was apparently just rumor

$6M is the figure with wallets behind it

And $80K of 0xEthan's estimated $125K came from PumpFun callout rewards

So the launchpad pays for the calls too

Bubblemaps says this is its own analysis, not a verdict

But when the public wallet loses and the hidden ones win, the follower IS the trade

Let’s expose all these shady KOLs because there are hundreds more just like these 4
Got evidence on a shady KOL?

DMs open
3
3
21
1,243
xSpaces retweeted
This bot tripled my Grok @bot output 🤯

You're burning quota on bloated bots that only do 1 or 2 things

Fleet Doctor trims them down so every message counts

Same quota. 3X the work.

Fix your fleet here ⬇️

x.ai/bot/dO9rojWVgF…
1
1
5
988
xSpaces retweeted
Attitudes like this are why Web3 will never progress

Choosing to blame users while ignoring glaring security weaknesses

If we don’t do absolutely everything in our power to make the UI/UX flawless and simple

Then there is zero chance we will ever see mass adoption

Ethereum is failing massively at that mission and is arguably one of the most flawed chains for users
Or they could have better opsec
5
5
26
1,212
xSpaces retweeted
The Ethereum community is doing Olympic-level mental gymnastics to defend EIP-7702

Yes, 7702 didn't cause the Binance hack

Binance's signing system got owned and wallets on 10+ chains got drained

Binance owns the breach but 7702 turned the biggest piece of it into a one-click job

Here's what 7702 did with that access:

The attacker got Binance's signer to produce 50 pre-signed authorizations

One landed

That single signature turned one of Binance's biggest Ethereum hot wallets into a sweeper the attacker controlled

$2.5 billion left in ONE transaction

The wallet stayed hijacked for nearly 4 hours and kept getting re-swept as Binance refilled it

More than half the entire $6.3B haul went through that one wallet

Without 7702 that one sweep is 64 separate transfers each needing its own signature from Binance's system

Every one is another chance to get caught or be stopped

With 7702 it's one signature and an open-ended drain

And nobody can say they didn't see it coming

The 7702 spec itself says delegated code gets unrestricted access to the account, and that there is "no safe way" for apps to ask users to sign these

Within a month of launch, Wintermute found 97% of 7702 delegations pointed at wallet-draining sweeper contracts

People warned about this in 2024 yet it shipped anyway because UX won the argument

Now the token side

Your ERC-20s aren't really "in" your wallet. They're a balance in someone else's contract

Use them in DeFi and you're handing out approvals, often unlimited, that drainers have farmed for years

And plenty of issuers can freeze your balance whenever they want

That's the main reason ~$2.8B of this hack got frozen

Great for Binance but not so great the day it's your wallet

7702 takes that same "trust this code with my stuff" model and extends it from one token to the entire account

Largest theft in crypto history by more than 4x

Likely the largest theft of any kind. EVER.

And it lands right back on crypto's reputation which certainly isn’t stellar right now
25
15
167
19,994
xSpaces retweeted
Yesterday's hack taught us 3 things:

1. Web3 is nowhere near decentralized
2. That might actually be a good thing
3. EIP-7702 is dangerously flawed

I hate admitting #2

But when funds get drained, someone being able to step in beats nobody being in control 🤷‍♂️
8
5
33
2,561
xSpaces retweeted
🚨 Estimates as high as $3.5B in ongoing @binance hack 🤯

Tether has apparently frozen $971M USDT

Details still coming out now
Unconfirmed, but possibly massive binance hack. Entire Binance wallet drained into new EOA. Contract call was funded by Tornado Cash
6
5
34
3,286
xSpaces retweeted
Stop refreshing store pages for deals 🛒

I built Deal Scout, a free Grok Bot that hunts for me:

• Pings me at my target price
• Scans Amazon, Walmart, Target, Best Buy, Costco
• Flags price drops on past buys
• Never buys without my OK

Grab it 👇

x.ai/bot/b7s0ryUaUL…
3
2
19
1,316
xSpaces retweeted
Has “Dedicated To Crypto Adoption” in bio

Then recommends using a new address for every tx and pitches a paid service

While ignoring the massive flaw regarding outdated token standards and approvals

Good luck with that crypto adoption bro
Learn more about the thesis of optimized crypto security here:

storage.koini.io
2
4
16
1,278
xSpaces retweeted
Stop hunting for Grok @bot tips. Let them come to you.

Tip Stack:

• 5 verified tips every Tue + Thu
• Every tip links a real source
• Sunday: ranked templates that fill gaps in YOUR bots
• Never repeats a tip

Free template 👇

x.ai/bot/-rl_NyYKrZ…
1
2
13
891
xSpaces retweeted
🚨 About $4.8M just left X100 on Ethereum

No stolen key, no bug

Somebody took 2 of 3 seats on its "Senate" and voted the treasury away

Blockaid says it's still live
1
2
12
925
xSpaces retweeted
Another founder just told you “good enough” wins

This space started with a promise of real ownership, real security, real decentralization

Now we cheer for whatever ships fastest and call the compromises “pragmatic”

My oh my, how far we have drifted
What @ilblackdragon and NEAR team has built is a pragmatic solution which solves users’ problems “today” and such solutions win the users, technically perfect solutions win larpers (that too for a short time, you can never satisfy them for long)
4
7
77
3,216
xSpaces retweeted
140+ crypto projects announced shutdowns in 2026

Together they raised more than $1.25 billion, and that's only what they disclosed

Total funding is estimated at over $1.7 billion

Here are just the top 20 with full list in comments ⬇️
6
7
20
1,566
xSpaces retweeted
"Go f*** yourself"

That's what Elon told the advertisers who walked off X

On stage at the NYT DealBook Summit November 29, 2023

Every media outlet wrote the obituary that week

So how'd that work out? 👇

X's valuation:

🔸 Oct 2022: $44B (what he paid)
🔸 Late 2023: $19B 2024: $9.4B (Fidelity's low, down 79%)
🔸 March 2025: $33B equity, $45B with debt (xAI deal)

Six months from a 79% markdown to right back at what he paid

Then February 2026, SpaceX absorbed xAI and X at $250B

The boycott was supposed to empty the platform

🔸 Late 2023: ~541M monthly users
🔸 Today: ~570M monthly users

And the ad cartel that led the boycott?

X sued them in August 2024. GARM shut down two days later 😂

Now the part that really stings

Elon's net worth the day he said it: ~$240B

June 12, 2026: first trillionaire in history, on SpaceX IPO day

Peak: ~$1.45T

Today, even after the post-IPO selloff: ~$907B

Nearly 4x in under three years. Still worth roughly 2.5 Jeff Bezoses

The brands tried to starve him out

He became the richest man in history instead

Somebody check on the brands 😬
2
7
47
3,463
xSpaces retweeted
Best move Ledger could have made would have been announcing a $90M recovery plan

Not releasing a new device no one asked for
2
1
27
1,467
xSpaces retweeted
If you run more than 5 Grok Bots, they need a doctor

Mine checks every routine each weekday, only pings me on failures

It also rebuilds bloated bots into upgraded copies so I’m not burning my weekly quota in 2 days

x.ai/bot/dO9rojWVgF…
0
1
9
1,003
xSpaces retweeted
Look at the state of crypto security right now:

🔸 X accounts getting hacked
🔸 Devices shipping with implants
🔸 Google promoting scam links
🔸 Wallets drained daily
🔸 Security standards are a joke

How do you look a friend in the eye and tell them to buy crypto?

I can't
1
4
25
1,237
xSpaces retweeted
At least the guy I bought my Ledger from gave me a COA
5
1
19
1,678
xSpaces retweeted
$86M is the newest number on a six-year-old Ledger problem 😬

@SpecterAnalyst traced it

Hundreds of victim wallets across Ethereum, TRON and Bitcoin, funds pooling into addresses he's published

Before anyone runs with "Ledger got hacked," note what that report still calls unconfirmed:

the cause
the number of users
whether Ledger has a vulnerability at all

You can't tell a Ledger wallet from a MetaMask wallet on-chain

Same standard and identical addresses

So the $86M came off the chain and "Ledger" came off X and Reddit, from victims saying so

Two kinds of evidence, stapled into one headline

But the pattern underneath is real, and it's old

2020: an API flaw in Ledger's marketing database leaked 1,075,382 emails and 272,853 order records with names, phone numbers and home addresses

Then dumped free on a hacker forum that December

Then fake replacement devices started arriving at those addresses

Some owners got extortion mail and some even got threatened at home

January this year the order data leaked again through their payment processor

Ledger runs a live page tracking the phishing aimed at its own customers

Fake apps, mailed QR codes, callers posing as support

Six years, and the Secure Element has never been what broke apparently

But the customer list is what keeps leaking and that’s a bigger problem than most will admit

A hardware wallet buyer list is the best target list in crypto

Proof you own enough to buy dedicated hardware and a home address attached

They built a vault nobody can crack, then mailed out the list of who owns one 🤨
There have been a reports on X and Reddit of wallet-draining by Ledger users.

I traced the theft addresses and identified inflows from more hundreds of victim wallets across several major blockchains, including Ethereum, TRON, and Bitcoin.

Total losses $86M+
9n9954hj97t82unx49dl
TK6DWNpNe1w2iJRNFpU8aHdrPTATxvXT6C
TBkcUMYC7CkTK99tkTnaStQVBastfrs9d9
TCGE3xp6YGRKXxDZiLfysgJW3f22KfMNsW
0x69c8f401cfc6cd40ac94691d6d7c48e3b7a47841
0x033636e45d519bebb7b5c2520ca6ce56fbdb4f7a
0x83aeac166f6832ae3500000a24510a95a052a599
bc1qqnkwurxs99xkx5t4yffqhq3u6qwy0qpjyujtm9
bc1qgqheemzla77pesl227hdtgf5ykz62d0zvld26n
TSDWtuZ2pARUVz4v3PkL2hi3iXPjowAr5a
3
4
27
7,656