Feed

NEW: The US Treasury sanctioned eight Canadian OTCs on Friday (Nov 6), including Nia Nations (NNCE) & Million Exchange (MillionEX), five months after I replied to them on X suggesting they sanction the Iranian OTC brokers in Canada being abused by illicit actors.

As I've stated before, Canada is a bottom-three jurisdiction globally with rampant abuse due to ineffective laws.

https://pocketpad.io/market?tab=activity
https://x.com/pocketpad_io

WL mint was 0.015 ETH for the first one and 0.03 ETH for the second.

The public mint was 0.03 ETH.

Sales were in the 0.05–0.1 ETH range.

https://t.me/owleth1/5

​Onchain lending protocol with unified order book Avon has been acquired by Aave.

- EIP 7702 Security Considerations - link

- Red Flags and Green Flags of Yield Bearing Stablecoins 

@EthSecurity1

Re: Gnosis pay data leak and what you can do about it right now https://x.com/officer_secret/status/2118860726647276007

#privacy

There have been a lot of interesting projects over the past few days

GreenStreet MMO - by Gomble Games

Spacerz - nft by Mich. Prev collection

JPEGZ - 11k nft. free to claim

Pocket Noob - game by gigaverse

More projects: https://x.com/OwlLfg/status/2118823903460024603
WL forms, etc you can find more detailed information about each project yourself

3 giveaways on X:
10 spots for nft on elysium
15 freemint spots for nft on elysium
10 spots for nft on elysium

Extended & Variational TGEs Are Coming

Two of the most anticipated perp DEX airdrops are next in line. Variational, the #2 perp DEX in October with $78B in volume (behind only Hyperliquid’s $229B, per CryptoRank), plans its $VAR TGE for Q4, with 32% of supply going to users fully unlocked. Extended has confirmed $XTEN for November: 1B supply, 30% to points users and 32.9% unlocked at TGE.

History says timing matters. All 8 recent perp DEX tokens rallied after TGE, from +65% for GRVT to +2,931% for HYPE. But half of them peaked within 12 days, and half now trade below their TGE price. The median token is 53% off its ATH.

AVNT is the cautionary tale: +820% in 12 days, now 66% below its TGE price. Only HYPE, LIT, O and TREAD still trade above launch.

🔗 Sources: CryptoRank, CoinMarketCap, DefiLlama, The Defiant

Top 7 Perks | Variational Points +12% | Nado Private Invite | Kolo Free Card Issuance | $20 in KAST Points

🚨 WAX Bridge Exploited for ~$90.5K

The withdraw logic accepted negative fees, so the attacker set the fee to the withdrawal amount with a minus sign, and the system deducted nothing while still sending the full amount.

Repeating the trick drained the WAX Multi-Chain Bridge across multiple chains.

🔗 Details

​​📈 Prediction Markets Trading Volume Hits $123B in October

Prediction markets recorded their highest monthly trading volume ever in October, reaching $123B, up 57.5% MoM and more than doubling since August.

Sports markets generated $26B in trading volume, crypto markets reached approximately $14B, while political markets exceeded $800M, up 43% MoM due to the November 3 US midterms, with Kalshi leading across all categories except politics.

👉 https://cryptorank.io/prediction-markets

​Stablecoin financial platform for Latin America Takenos raised $7M in a Seed funding round led by North Island Ventures (NIV), Road Capital, with participation from Variant Fund, Lattice Fund, Reverie.

Chainalysis full user data breach: names, usernames, password hashes, valid tokens exposed, some plaintext passwords leaked
@EthSecurity1

​Financing infrastructure for tokenized securities Lombard Systems (ex SemiLiquid) raised $4M in a Seed funding round led by Ethereal Ventures, with participation from ALPS Capital, First Commit, Veris Ventures, ATKA.

​Self-custody hardware wallet for Solana Unruggable raised $500K in a Strategic funding round led by Colosseum.

​Institutional uranium trading and settlement platform Uranium Digital raised $16.5M in a Series A funding round led by Blockchain Capital, with participation from Portal Ventures, Apeiron Investment Group.

​Fintech company Revolut closed funding round led by Glade Brook Capital Partners, Coatue, Durable Capital Partners, T. Rowe Price, Baillie Gifford. Amount raised is not disclosed.

​​🛡️Gate Introduces Proof of Security (PoSEC)

Gate rolled out PoSEC — a framework showing whether an exchange’s cold storage alone could cover all user funds if its hot wallets were lost.

The metric: Cold Storage ÷ User Assets. Gate’s current coverage: 104.58%.

Following its Proof of Reserves push, Gate is positioning PoSEC as a new transparency standard for exchanges.

👉 https://cryptorank.io/exchanges/gate

🏁 A day after Democrats took Congress, Microsoft hit a record. 🛢 Oil fell 10%, 🪙 Trump's own coin lost 17%.

⠀

🚨 Now they want the SEC back in charge of crypto. 31 of its 39 “securities” already lost 90%+.

⠀

After winning Congress, they're writing a market bill with a bigger SEC role. The SEC already called these coins securities: 🪙 BNB, 🪙 XRP, 🪙 SOL and 36 more, $287B together. They'd be first in line.

⠀

🔵 Polymarket | Odds | Volume
Trump impeached by end of 2027 | 61% | $1.2M
Impeached and removed before 2028 | 24% | $30K
Clarity Act signed in 2026 | 3% | $25.0M
2028 president: Jon Ossoff | 20% | $732M

⠀

💧 SEC list on DropsTab

​Web3 digital asset insurance company Soter Insure closed Series B funding round led by Galaxy Digital, with participation from Coinbase Ventures, Franklin Templeton, Brevan Howard Digital, Standard Chartered Ventures, SBI Holdings (SBI Group), Token Bay Capital. Amount raised is not disclosed.

BNIX / OSK (CoreVault) hacked for ~$181K

Rootcause: The vault’s BNB principal redemption logic depended on a manipulable on-chain spot price that could be distorted within a single transaction via flash loan.
Key technical failure
redeemPrincipal() calculated the BNB amount to pay out as:
bnbAmount = redeemableUsd × wbnbPerUsd / 1e18
The wbnbPerUsd price came from OracleLib.getAccountingPrices, which used a 3-source median.
When the TWAP / average-price windows were empty or unfilled, the median degraded to the live PancakeSwap WBNB/USDT spot price.
That spot price sits in a low-liquidity pair that is trivial to move with a large flash-loan dump.
Attack flow (simplified)
Attacker flash-borrowed ~207k WBNB.
Dumped ~195k WBNB into the PancakeSwap WBNB/USDT pool → artificially inflated wbnbPerUsd.
Called redeemPrincipal() while the manipulated price was live.
The vault over-paid BNB from the insurance/reserve pool (~260 BNB / ~$181k).
Attacker swapped the excess BNB back, repaid the flash loan, and kept the profit (~160 BNB / ~$112k).
Core design flaw
The protocol treated a same-block, flash-loan-manipulable spot price as a reliable accounting oracle for redemptions. Proper protections (strict TWAP requirement, secondary oracle fallback that cannot degrade to spot, or circuit breakers on large price deviations) were missing or ineffective.

@EthSecurity1

- Preventing Second Preimage Attacks in Merkle Trees: A Complete Guide 

- Stablecoin Security: How Design Choices Create Vulnerabilities and Economic Risk 

-  Inside the FBI: Crypto, Crime & National Security – Ep. 171

@EthSecurity1

Fresh Elysium Watchlist

Grump Guys - WL form

ely frens - WL form

Elywizardz - freemint. WL form

More: https://x.com/OwlLfg/status/2118088433759621457

You can find more Elysium projects on my X profile. I've shared plenty of early-stage projects there

50 FREEMINT GTD spots for https://x.com/FeedTheFireRH

1) Go to http://feedfirerh.com and complete Tier 2 with the wizard Ashbeard (follow, like, etc)

2)Follow https://x.com/OwlLfg and drop your wallet address in the replies under the tweet - https://x.com/OwlLfg/status/2118077673318560021

If you haven't received Tier 2, the system won't count you. Make sure to complete all the tasks!!!

Fresh Watchlist

https://x.com/OwlLfg/status/2118063589701693947

PlunderPort - freemint on L0. WL form

TIDEBOUND - early game on hood. WL form. Top100 gtd. 101-400 fcfs.

Plinth - early RWA on eth

4 giveaways on X
1) 5 freemint spots on L0
2) 15 freemint spots on hood
3) 7 spots for nft on Elysium
4) 10 spots for ntt on Elysium

​Brazilian crypto and stablecoin payments provider GoMoney has been acquired by Yellow Card.

Update 2: Disclosing the EU financial institution exploited for $133M+ is allegedly Credit Mutuel Arkea, a French bank with $235B in assets.

The attack on the bank occurred for multiple days. I suspect the amount stolen is larger when accounting for OTC activity.

BINANCE HACKER STARTS USING MIXER TO LAUNDER STOLEN FUNDS, MIXED 800K SO FAR ⚠️

An address linked to the hacker deposited 8,567 $SOL (~$798K) into Privacy Cash.

Multiple other addresses are showing similar activity. We are monitoring these movements in real time and working to trace and reconcile the full flow of funds.

Address: https://solscan.io/account/HVxuFQK7u3357o4XNiyqsuZ1bkxGFNFycWRm3Hk6VS7#transfers

~ https://x.com/OnchainLens/status/2117667980758995211

​​🐋 Larger Trades Are Driving Derive’s Options Growth

Derive’s options premiums reached nearly 5x last year’s level in the first nine months of 2026, while active addresses increased just 20%.

The largest 1% of option legs accounted for 53% of Q3 notional volume, up from 22% a year earlier.

👉 Explore the full story: https://cryptorank.io/insights/research/onchain-options-premiums-more-than-tripled-in-2026-as-derive-pulled-ahead

The Contagious Interview: A Sophisticated Hacking Vector Reshaping Web3 Recruitment Risks

Link: https://medium.com/coinmonks/the-contagious-interview-a-sophisticated-hacking-vector-reshaping-web3-recruitment-risks-89a860216f4d

🔑 Not your keys, not your coins. Unless the chain says otherwise.

⠀

This week 🪙 Arbitrum moved the Binance hacker’s $30M. No key, no signature. Second time this year.

⠀

🪙 Ethereum rolled back The DAO hack: 3.6M ETH, $8.2B today. 🪙 BNB Chain stopped the whole chain. 🪙 Sui froze $162M and took it.

💧 DropsTab | 💧 DropsBot | 📈 Drops Analytics

TLDR: hackers used fake job interview to socially engineer employee, then exploited internal wallet signing service.

Engineer A hit by tampered homebrew install, engineer B by fake interview. Binance says attacker used AI tool on engineer B’s pc to reach engineer A. Engineer A’s stolen deploy token used to launch wallet attack.

DO NOT EVER USE YOUR MAIN PC FOR JOB INTERVIEWS!!!

• https://x.com/officer_secret/status/2117632023720313314

#scam #investigation #hack

Extended Dashboard: $XTEN Tokenomics Revealed Ahead of November TGE

Extended has published its tokenomics ahead of a TGE planned for November. Total supply is fixed at 1B, and the whole airdrop unlocks at launch:

• Community Airdrop: 30%, fully unlocked at TGE
• Founders & Team: 25.14%, 12-month cliff, then linear vesting to month 48
• Investors: 24.86%,12-month cliff, then monthly vesting
• Ecosystem: 20%, incl. 150M reserved for staking rewards

The airdrop goes to Extended Points holders, who claim by accepting the terms in the mobile app. Unclaimed tokens go to the ecosystem fund.

Staking goes live at TGE: from 500 $XTEN, users get up to 30% off trading fees and up to a 5x boost on vault yield. Trading fees can be used to burn $XTEN, and Extended may also buy it back on the open market.

🔗 x.com/extendedapp/status/2117309226423108056

Top 7 Perks | Variational Points +12% | Nado Private Invite | Kolo Free Card Issuance | $20 in KAST Points

Looks like an old scam has become popular again so be careful: https://x.com/officer_secret/status/2117583825832161774

#scam

SOLANA MEV BOT KING DRAINED OF $786K King, one of Solana's oldest arbitrage bots with $7.2M in lifetime PnL, was drained of ~$786K, including 4.26K $WSOL, 191
$SOL
and $366K in stablecoins. Drainers: BHRayETPjvgg3BCr9H82V1D6NRwxu5v44JAaVuaod3jU Forwarder: Ddmy5oM8xtTs1EBC6eF2SZwQfBreewQpFgtUDm51Hkqj Victim: 7dGrdJRYtsNR8UYxZ3TnifXGjGc9eRYLq9sELwYpuuUu
@EthSecurity1

Update: I’ve identified an additional $27M+ of CEX withdrawals by the illicit actor bringing the total to $133M+ for the incident.

A portion of the CEX withdrawals occurred after my initial disclosure.

My working theory is a large financial institution in Western Europe was exploited and it’s currently being covered up.

No proper incident disclosure has resulted in $30M+ being laundered away which could have been frozen by EU law enforcement.

Theft addresses:
0x5cf70edce65847ef989933c3072fb0e7f335abc1
0xe378cdccb369a64a0190577787ef61ca2eefa6b2
0x3e6c3d135ca8f8be793e5fe1715ce6c057d140f2
0x99d314e6970b8d3db0dbe6f6e041cc904143400f

- When Hackers Get Hacked: Analyzing the Breach of LockBit - link

- The State of Drainers Vol. 1 - link

- Astaroth Banking Trojan Harnessing GitHub to Steal Crypto Credentials.

@EthSecurity1

Fresh Watchlist

https://x.com/OwlLfg/status/2117379912168309239

ELYNX - NFT on Elysium. WL form

Pumpkin Pit - game&freemint. WL form

Lord Hood - NFT on hood. WL form

Elysiumgloom - NFT on Elysium. WL form

4 giveaways on X
Nexaria 10 spots
KARMAFUCKERS 15 spots
cascade 30 spots
Elysium Punks 10 spots

​Livestream prediction market on Monad CRSHMARKET raised $3.5M in a Seed funding round led by 6th Man Ventures (6MV), with participation from Reciprocal Ventures, Lattice Fund, Starting Line.

DefiLlama set the standard for tracking TVL and other onchain metrics in DeFi. Today, we're the next step: verifying the backing of onchain assets and vaults.

We're proud to launch our first verification page alongside Frax Finance.

On Frax's DefiLlama page, you can see real-time tracking of frxUSD's backing, including offchain assets, which we've independently verified.

Stay tuned for more verified onchain products in the coming days and weeks.

​Capital markets firm for onchain and traditional markets LO:TECH raised $12M in a Series A funding round led by MMC Ventures, with participation from Faction (ex Lightspeed Faction), 13bookscapital, ATKA.

​Stablecoin cross-border payments platform Bloquo raised $3.7M in a Seed funding round led by Crescera Capital, Triaxis Capital, with participation from Lattice Fund.

Community Alert: An EU entity is suspected of losing $106M+ from multiple centralized exchange accounts yesterday (Nov 1). The suspected stolen funds were withdrawn as USDC & USDT by an illicit actor.

Over the past 24 hours the illicit actor has been aggressively swapping USDC for ETH, transferring to instant exchanges (WellWallet, Kyrrex, etc), converting to XMR via Wagyu, and bridging across multiple chains.

While the illicit actor remains unidentified, I can say with a high degree of confidence it is NOT Lazarus Group based on multiple laundering indicators.

Theft addresses:
0xADd95cD98E0288ba69785E3151E1db86adF8Dd58
0x29e9D7715D935e0D0D4B0DD0efC952A97E551020
0x378B4f150707C283574DC89739608D29036D57d5
0x795a9d22F233024487161Fe6daFf73397c162621
0x730Bcb1296758c377149d7409f98f041cf723992
0x12D9012731eb0D54871A31Af5566Eb9ECCa351Db
0x5A154f77852ed274Fd6F4c324a1Ee27809052FF7
0xA1096A66f9ed58A9594A6A1ad67A5472C0907224
0x90F0b6D51ed2FE2348A45b2C49BC441E959bc557
0x8A97BC406180e28b11C5495fA099BF5119c6C6B0
0xd010cba790a6ab0048da18f2fbe8e3faf463a16a

​Platform for trading global stocks with stablecoins StableStock closed Strategic funding round from Amber Group, Nomad Capital, Flow Traders, Gate Ventures. Amount raised is not disclosed.

​​📉 October 2026 Was Ethereum's Second-Worst October on Record

ETH ended October with a 16.1% decline, its second-worst October performance since 2016.

The decline also snapped Ethereum's three-month winning streak, following strong gains in July, August, and September.

👉 https://cryptorank.io/charts/quarterly-returns

- RISC Zero Security Disclosure: Arbitrary code execution in guest.

- TON Transaction Simulator for Revealing Smart Contract Vulnerabilities.

@EthSecurity1

Fresh Watchlist

Elympus - NFT on Elysium. WL form

At the moment, I am keeping track of token launches
H0 - privacy on hyper
Battery - protocol on hyper
Navo - launchpad

More projects: https://x.com/OwlLfg/status/2116656549770985749

2 giveaways on X:
15 freemint spots on eth
3 gtd spots for nft on Soneium

Seems chainalysis been hacked


It told customers in an email seen by ICD that an attacker using "offensive agentic techniques" accessed users' names, emails and role labels.

It says this has nothing to do with the $6.3B Binance heist.

@EthSecurity1

​On-chain die-cast cars collectibles platform Rip Cars raised $1.5M in a Strategic funding round from DBA, Colosseum, Kyle Samani, Novora, Anas Khader, Sacha Saint-Leger, Erik C..

​Onchain exchange for trading and hedging interest rates Rates Exchange received funding from Coinbase Ventures. Amount is not disclosed.

It looks like ChangeHero is being used for laundering Binance funds: https://x.com/officer_secret/status/2116187104631775369

#security #investigation

​Real-world asset perpetuals platform on Hyperliquid Trade[XYZ] closed funding round from Intercontinental Exchange (ICE), Stanley Druckenmiller. Amount raised is not disclosed.