Security Analyst
Everywhere
Joined February 2025
- Tweets537
- Following882
- Followers1.3K
- Likes3.6K
Pinned Tweet
🚨 Security Alert
It appears that the @TrustWallet browser extension may have been compromised via a supply-chain attack in the Dec 24 update.
Reports indicate that importing a seed phrase into the extension can result in immediate wallet draining.
⚠️ Do NOT use the Trust Wallet extension for now, and never import seed phrase until an official clarification and fix are released.
❗ As of now, there has been no official communication from the Trust Wallet team regarding this incident.
Exploiters are using multiple addresses and More than $2,000,000 appears to have been drained
Cute , using @OpenAI poisoned-tenant exploit to phish me minutes after this post
Rules are rules, @balajis , Malaysia bars Israeli passports. No exceptions for tech visas. If your people got in on second passports, that’s not a hoax. That’s a security breach.
Take @nasdaily , who promoted NS. Israeli, holding dual citizenship, entered Malaysia anyway. That’s the exact loophole you’re calling a “hoax.” The anon account should’ve made the call while he was on your campus.
Valid documents isn’t the same as no Israelis. You know that. That’s why it’s missing from your letter.
Akinator | Testnet Arc retweeted
Rules are rules, @balajis , Malaysia bars Israeli passports. No exceptions for tech visas. If your people got in on second passports, that’s not a hoax. That’s a security breach.
Take @nasdaily , who promoted NS. Israeli, holding dual citizenship, entered Malaysia anyway. That’s the exact loophole you’re calling a “hoax.” The anon account should’ve made the call while he was on your campus.
Valid documents isn’t the same as no Israelis. You know that. That’s why it’s missing from your letter.
not surprised
❗️ An Israeli startup founder secretly uploaded a cluster of malicious typosquatted npm packages that impersonate Anthropic, Vercel, LangChain, Ollama, OpenAI and Aspect Security and profile developer machines on install.
The packages skip passwords and tokens by design. Instead, the install script harvests identity: hostname, every git and SSH email on the box, teammate emails from the git reflog, AWS/GCP profile and account details, and the corporate DNS domain, all shipped to a Google Cloud Run endpoint.
There were about 20k downloads before takedown.
1
461
Akinator | Testnet Arc retweeted
Rule #1 in politics: never trust a politician when they’re selling you a “noble” cause.
Especially when it’s boomers trying to push “child protection” while expanding surveillance. They’ll use the sympathetic issue now, then expand the powers later. That’s how it always works. Give them a little control and watch how fast “temporary and voluntary” becomes permanent.
This guy doesn’t even understand modern AI beyond GPT and Claude, let alone the security and privacy implications of scanning encrypted communications.
Bunch of out-of-touch politicians happily building the infrastructure for the next generation to live under constant monitoring and compliance.
Wake up GOY, it’s all theatre.
Akinator | Testnet Arc retweeted
It took a little longer than expected, but we have created a website for people to view the footage collected from Gaza in one place. You no longer have to download the entire archives to see them.
It includes:
64,537 videos
17,905 photos
Ability to download individual videos
Searchable index
Exhaustive sources list (300+ journalists)
Geolocation data
Livemap with minute to minute updates
Victim list
It can be accessed here: ArchiveGenocide.com
Please share & quote tweet to help this post break out of the twitter algorithm prison.
We will keep adding the rest of the archives to the site, be patient- it is difficult work. Continue to seed the torrents provided, as that is the best way to ensure the footage remains stored in decentalized way.
God bless all those who sacrificed their lives to get this footage out, and everyone invovled in collecting/archiving it.
Join our telegram:
t.me/+p_Ufon9FBOY0Y2Q0
Follow our backup accounts:
@ZionismExposedx & @IsraelExposedAr
Cold war in bytes
‼️ BREAKING: Anthropic has embedded hidden spyware-like code in Claude Code that covertly targets Chinese users. It then sends information regarding every user by injecting it into their prompt message.
Claude Code is sending info like timezone, proxy and possible AI Lab connections into the system prompt in ways Chinese users can't notice.
A coding agent with repo and command permissions should not silently hide routing metadata inside prompts. This is a serious breach of user trust.
2
448
Akinator | Testnet Arc retweeted
If Anthropic put out a $1000/month tier that gets 5x the $200 tier limits and also lets us keep Fable access, I'd do it in a heartbeat.
The rules haven't changed, they just got more real:
- Stay fucking anonymous
- Never flex your stack. Not even a little
- Keep it low-key ; nobody needs to know you're sitting on anything
- Don't make yourself the easy mark
The planet is crawling with sociopaths who will put a gun to your head for "just" $100k
at one point people will realize that going to these conferences and having others know your real life name and story is an incredible security risk
the world is becoming an increasingly dark place and no one is safe, unfortunately, especially now with AI assisted tools
prayers
18
575
Akinator | Testnet Arc retweeted
Trump promised to end wars, reduce prices and expose pedophiles.
He starts wars, raises prices and protects pedophiles.
Akinator | Testnet Arc retweeted
Punishment for raping a child:
🇨🇳 China - Death penalty
🇵🇰 Pakistan - Death penalty
🇦🇺 Australia - Life imprisonment
🇸🇦 Saudi Arabia - Public beheading
🇹🇷 Turkey - Prison sentences (up to 24 years)
🇰🇵 North Korea - Death by firing squad
🇮🇳 India - Death penalty
🇧🇩 Bangladesh - Death penalty
🇺🇸 America - Presidency
For God's sake!! They're gonna be dead in 10 years or less
Putin : 73 years old
Trump : 79 years old
Netanyahu : 76 years old
Narendra Modi : 75 years old
Xi Jinping : 72 years old
Khamenei : 86 years old
All of them have lived their lives and witnessed their peaks already. The next generation wants peace and growth, not World War 3
The world needs young leaders now
4
329
Akinator | Testnet Arc retweeted
Iran didn’t kill JFK
Iran didn’t employ Epstein
Iran didn’t attack the USS Liberty
Iran didn’t tell us Iraq had WMDs
Iran didn't commit the Gaza genocide
Israel did.
Akinator | Testnet Arc retweeted
💔🇮🇷 BREAKING: The U.S. & ISRAEL murdered 57 elementary school girls this morning
Akinator | Testnet Arc retweeted
Dear Americans,
Your president is Netanyahu, and Trump is his puppet
Akinator | Testnet Arc retweeted
DO NOT GIVE DISCORD YOUR ID.
DO NOT GIVE DISCORD YOUR ID.
DO NOT GIVE DISCORD YOUR ID.
DO NOT GIVE DISCORD YOUR ID.
DO NOT GIVE DISCORD YOUR ID.
DO NOT GIVE DISCORD YOUR ID.
DO NOT GIVE DISCORD YOUR ID.
“Crypto without privacy isn’t crypto.”
Meanwhile, @solanamobile's own privacy policy :
• Name, surname, email address, phone number
• Device identifiers (IMEI, serial #), IP address, general location
• Wallet public keys, addresses, on-chain tx history, NFT holdings
• dApp Store activity, purchases, support communications
Shared with Google (Android), app developers, affiliates, authorities, and in business deals.
Telemetry you can only partially opt out of.
Private SOL transfers via Privacy Cash? Cool
Privacy from the company itself? Wide open 🫠
Crypto without privacy isn't crypto
Private transfers are now live on Seeker thanks to Privacy Cash 🔥
4
761
Given the response and accountability taken, I expect Trust Wallet to emerge stronger from this incident.
Incidents like these usually lead to deeper reviews, stronger controls, and a more hardened security posture going forward.
We are trying to do the right thing for our users. We will share a full post-mortem once we have verified findings from pending audit logs and investigations, and continue to tighten security operations and controls.
Protecting users is always our priority. We will learn and rise from this, and do better. We greatly appreciate your patience and continued support. 🙏
And a big thank you to the security community for the support and monitoring; @ZachXBT, @samczsun, @AndrewMohawk, @pcaversaccio, @vikmeup, @tayvano_ , @0xakinator , @chainalysis, @arkham, and many more whitehat hackers! 🫡
They finally announced:
teapaw.org/TrustWallet/status/200…
We’ve identified a security incident affecting Trust Wallet Browser Extension version 2.68 only. Users with Browser Extension 2.68 should disable and upgrade to 2.69.
Please refer to the official Chrome Webstore link here: chrome.google.com/webstore/d…
Please note: Mobile-only users and all other browser extension versions are not impacted.
We understand how concerning this is and our team is actively working on the issue.
We’ll keep sharing updates as soon as possible.
