https://xitter.cf/t.co/b0t4cWXoBU
$XMR
Joined January 2013
- Tweets9.1K
- Following5.8K
- Followers15.2K
- Likes19.3K
👽Kushed|SquadSwap🐰 retweeted
Ledger hacker used zcash and was traced.
Ledger theft, day two. Since yesterday the thief has pushed ether through Tornado Cash three times, and each time on into Zcash's shielded pool. We followed every lot out the far side. Here is how, step by step.
1. THE SAME BUILD, THREE TIMES
An ether wallet pays a fresh splitter. The splitter pays four fresh wallets. The four drop it into Tornado Cash's 100, 10 and 1 ETH pools. Minutes, every time.
Run 1, yesterday 15:17: 1,254 ETH. Run 2, today 09:42: 1,291 ETH. Run 3, today 11:56: 450 ETH from 0xfa4EaBB840A33C156E600311433AE261CBfCb0e2, in the pools by 12:15.
2. OUT OF TORNADO CASH
The mixer breaks the link between a deposit and a withdrawal. We do not need the link. Our tooling fingerprints the withdrawal transactions themselves: how each one is constructed, who constructs it, and when.
Yesterday's 65 withdrawals (1,084 ETH) and today's 96 (1,726 ETH) all carry the same signature. The six other withdrawals from those pools in today's windows do not. Run 3 came out from 12:18 into 0x0d697aa182801566d87adc86e68e95fd3b2f5f82 (213 ETH) and 0x676b16cc18542f37d202a1a79ac05463395496a4 (122 ETH), and 195 ETH of it was inside a cross-chain swap service by 12:38. Forty-two minutes, end to end.
3. INTO ZCASH, AND OUT AGAIN
The swap service turns the ether into shielded ZEC, where sender, amount and recipient vanish. But the service's own shielding of each lot is public, and from it we derive a value signature for that lot's exit, then scan every transparent exit from the pool. 108 of 108 exits across both days match their lot to the zatoshi. Not one other exit from the pool does.
First lot today: in at 10:18:18, out at 11:06:16 in block 3512847 (8d26a9b095d4d28373527f7a6eb81a3be7f906d1e2190960c0512ff64f369418 and 738c6d1261e79766e4dd16bdbd38dced91b8e3a86ce41dcda83eda1f19208fbf), straight into a ZEC to USDC order.
Today so far: 20 lots ordered (2,379 ZEC, $2.9m), 14 out, 5 inside the pool, 1 still settling. Every exit feeds a ZEC to USDC order paying two wallets born at 11:11, 22 of the 28 paid by 12:43:
0x816D5Ee17DB1495d1409F135b98FF3edc5F3cDf8: 940,561 USDC
0xBA736A4b616e79867B6d586293966b552883f3F3: 852,258 USDC
1.79m USDC, unspent. @Circle can freeze it.
(1/2) 🧵⤵️
👽Kushed|SquadSwap🐰 retweeted
Join us tomorrow for a special launch announcement
Hosted by @Kushed_Crypto and @0xFForest
Set a reminder here:
xitter.cf/i/spaces/1jGXgBpyYVPKZ
😶
Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link.
We have taken down the domain, and we are investigating the situation, including how the hackers got access to our legit domain.
Local Home Depot removed all registers and replaced them with self checkouts and there are two employees per checkout ready to help you self checkout. Make it make sense.
👽Kushed|SquadSwap🐰 retweeted
Polish politician says:
"We have zero illegal migrants. We don't give a shit. We take care of our families. I want my daughter to be alive, not raped and killed."
Europe needs more politicians like him.
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
👽Kushed|SquadSwap🐰 retweeted
Why is @ProtonVPN lying about running price sensitivity testing on their customers?
Their pricing page gives you one of two prices at random. This is A/B testing, but instead they're saying the price difference is due to remnants of a sale.
Their own code says otherwise.
1/5🧵
👽Kushed|SquadSwap🐰 retweeted
Don’t fall for the fake Fox/GOP outrage. Two weeks ago the House passed a bill that greenlighted the transfer of Spanish territory to Morocco. Every Republican except me voted for it, but now THEY are acting shocked at the invasion.
congress.gov/119/bills/hr859…
congress.gov/119/bills/hr949…
Well well well... Goodbye Spain. Was good while it lasted but you are no longer in control of your own country... just like many countries these days.. including U.S.
🚨#BREAKING: Fights are now BREAKING OUT IN THE STREETS between Spanish citizens and the Moroccan invaders.
TENS OF THOUSANDS of Muslim migrants have now descended on a town of just 83,000 people.
Complete and total chaos.
👽Kushed|SquadSwap🐰 retweeted
No way???? An Indian is doing what Indians do any time they get into any position of power anywhere?
👽Kushed|SquadSwap🐰 retweeted
The House is scheduled to vote this week on a National Defense Authorization that would integrate our military tech & supply chains with Israel’s.
Today, the Rules Committee will decide whether my amendment to strip section 219 will get a vote.
RT to support the Massie amdt.!
👽Kushed|SquadSwap🐰 retweeted
I was the only Republican to vote for my amendment to cut $3.3 billion of welfare to Israel. The GOP can’t seriously claim to be America First.
