Markus Allen 🇺🇸 retweeted
User funds are safe!
It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m).
I don't manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered.
Markus Allen 🇺🇸 retweeted
JUST IN. MULTIVERSX UNLOCKS POST-QUANTUM SECURITY FOUNDATIONS
Security is entering a fundamentally new era.
I've written about the accelerating threat landscape, and why formal methods are approaching a golden age. Mathematical guarantees are becoming necessities, not luxuries.
Quantum computing adds another existential dimension to this reality. The stakes are extraordinary.
Cryptography underpins trillions in financial transactions, the digital identities of billions, and the critical infrastructure on which modern civilization depends.
Banks. Governments. Financial markets. Global communication networks. Virtually every institution on earth rests its security guarantees on this single safety-critical layer. If this breaks, everything built on it breaks with it.
And the threshold for breaking these guarantees is falling faster than expected.
Consider that in March, Google Quantum AI published a striking finding: the estimated quantum computing resources required to break 256-bit elliptic-curve cryptography had fallen by roughly 20-fold. From millions of physical qubits to fewer than 500,000, with attacks potentially executable in minutes on sufficiently advanced machines.
A non-trivial shift in the engineering assumptions underlying digital security. And one that doesn't account for future breakthroughs in mathematics, algorithms, or hardware.
The implication is substiatial. The window to prepare may be shorter than the time required to make the transition. This is why the transition cannot begin when the threat arrives. It must begin years before.
Today, MultiversX takes an important step toward that future, laying the cryptographic foundations for accounts to migrate toward post-quantum security.
A deliberate engineering path to close the gap between the security the world relies on today, and the security it will need tomorrow.
All this must be engineered today. With urgency and intention.
Markus Allen 🇺🇸 retweeted
BREAKING: Katie Hobbs-Aligned Canvassers Caught Willing to Allow Non-Citizens and a Felon to Vote
Muckraker went undercover in Arizona to investigate the groups working to re-elect Gov. Katie Hobbs @katiehobbs and other Democrats.
Here’s what we found:
Stand Indivisible Arizona (endorsed Gov. Hobbs in their 2026 ballot guide) — Our journalist posed as a Canadian citizen and asked to register to vote. The canvasser not only agreed to help the alleged non-citizen register, but when asked whether other Canadians could register too, she said, “Tell them to do it online.”
Worker Power (working to re-elect Gov. Hobbs) — Our journalist told a canvasser they were not a U.S. citizen. Despite this, at our journalist’s request, the canvasser marked “yes” on the citizenship question of the voter registration form.
When We Count (the DNC’s own registration program) — Our journalist posed as a felon on probation and asked to register to vote. The canvassers looked up the law and saw that a felon on probation is ineligible. Even so, they encouraged our journalist to register: “You should just do it.”
AFL-CIO (phone bank mobilizing voters for Gov. Hobbs) — Our undercover journalist asked a phone bank trainer whether to ask the people being called if they're citizens. The trainer’s answer: “We don’t care.”
Our journalists stopped every exercise before any voter registration form was submitted.
We also asked Gov. Katie Hobbs about these findings.
Watch this report and share it with the world.
Markus Allen 🇺🇸 retweeted
This is literally their plan to end democracy in America
The playbook will go something like this: 1) win back the House and Senate, and hopefully the Presidency in 2028; (2) admit DC and Puerto Rico as states, which doesn’t need a constitutional amendment, to gain 4 new Senate seats and cement control; (3) pack the Court, which only requires a change to the Judiciary Act of 1869, not a constitutional amendment; (4) eliminate the electoral college, which is unconstitutional, but not when you have a rigged court that finds the ‘loophole’; (5) flood the country with pliant migrants, swamp the natives, and hold power indefinitely.
Markus Allen 🇺🇸 retweeted
TONIGHT! 7:30PM ET. JOIN the entire team responsible for the latest drops on what a few misaligned Americans, including former military, IC, NGO and current Governors, have in store for the Constitution and @POTUS. @CynicalPublius @DataRepublican @DataInterpretr @SKDoubleDub33 @iamlisalogan break it all down with analysis unparalleled and hope for what YOU can DO for your part in lawfully defending the Constitution.
🤖 Made with AI
Markus Allen 🇺🇸 retweeted
Part 2 of the Bench Side Democracy Files / Color revolution is out.
The amount of work that @DataRepublican @nataliegwinters @CynicalPublius @listen_2learn and many others have done to expose this corruption will go down in the history books as the single most important piece of journalism in American history.
Part 2 on how the bench fits in:
teapaw.org/Pink_Meeces/status/211…
Markus Allen 🇺🇸 retweeted
🚨🚨 THE ILLEGITIMACY PLAYBOOK / THE DEMOCRACY FILES: A PRIMER 🚨
I will be using this thread to track all drops, so bookmark it.
I spent most of yesterday backing everything (now 312 gigabytes) up in various sources and getting the materials out to others. I also produced an AI video (below) to explain the whole thing to others are not on 𝕏 - feel free to distribute.
Here's the primer:
USAID, the foreign aid agency, had a democracy office. Inside the agency, it was called DRG.
Officially, DRG administered "democracy assistance." They'd go inside countries they thought were sliding into authoritarianism and help the opposition there. That assistance included election monitoring, judicary support, independent media, and civil society building.
You may have heard the term "color revolution." The model comes from Serbia in 2000, where trained student activists brought down Milosevic with the help of Western governments, after sustained protests. With the help of USAID's democracy office, this model was implemented in many other countries to topple governments: Georgia's "Rose Revolution" in 2003, Ukraine's "Orange Revolution" in 2004, and many more.
Then last year, DOGE shut down USAID. But the USAID democracy office didn't stop. They formed a group called the Democracy Renewal Group, the same initials as their office (USAID Democracy, Human Rights, Governance). Their goal: apply their own playbook to the United States itself.
This goal became a plan, called Renew American Democracy (RAD). It invoked the "4 B's" framework. Block - use lawfare and protests to make life harder for the Trump administration. Bridge & Belong - control dialogue and win people over. The final and most important B is Build. Build means redesigning the American government itself, and the crisis is the opening.
In their own words:
"We can take that breakdown moment and leverage it for a big structural reform, you know, refounding moment." - Danielle Reiff, DRG lead.
Calls show DRG working alongside DSA on ideas of creating a different government, one that does away with the Constitution itself.
DRG does not run the Block operations. They hand it to UDA, the United Democracy Alliance. One organizer calls it a "huge galaxy": lawsuits, street protests, non-cooperation. They list No Kings, Indivisible, MoveOn, 50501, and many other mega-activist NGOs among their members.
Another organizer calls UDA Erica Chenoweth's project. Chenoweth is the Harvard professor behind the three-and-half-percent rule of regime change: get that share of a country's populace onto the streets, and historically, the movement wins.
The UDA is very "hush-hush." They have no website, no roster, no filings.
Then come the red lines: things the Trump administration could do, such as calling the Insurrection Act on protesters, that would mean that the federal government, in their words, "crosses the threshold into illegitimacy." Nobody voted on those lines. There was no public debate. These red lines were developed within secretive working groups, and in a paper addressed to governors and staff.
In the words of Reiff/DRG:
"So that if there is a red line crossed in terms of a Constitutional crisis, like everyone's already pre-organized. And so Mike Smith actually said, he goes, oh, you guys have the day after tomorrow plan."
Cross a line, and the paper's options include states refusing to lend their resources to federal officials, and governors convening what it calls a "Third Continential Congress."
Running the UDA's Insurrection Act working group: Rear Admiral Mike Smith (RET) of National Security Leaders of America (NSL4A). NSL4A is also credited with operationalizing UDA, the blocking operations. NSL4A consists of about 1,600 ex-officers, spies, diplomats. They're turning red lines into indicators and running a situation room to monitor them throughout the midterms and beyond.
The NSL4A's lawyers told them to stop recording meetings in case of subpoenas. But the rest of the network continued to record. DRG works in conjunction with Renew to Thrive (R2T), which ended up accidentally publishing 400+ calls and thousands of documents. These calls and documents were never meant for our eyes, but it's them, on tape.
Thousands of NGOs and billions of dollars are involved in this endeavor. Most of them believe they're saving democracy. The problem is that people who spent their careers deciding when other countries' governments had lost their legitimacy wrote that test for ours, in private, and planned for what comes after.
Who decides when your government is legitimate?
Markus Allen 🇺🇸 retweeted
it seems like it is D Day everywhere.
Day zero of the new world.
The whole digital world is going to change.
🚨ALARMING: Major U.S. banks are detecting UNAUTHORIZED AI agents accessing customer accounts, with some reportedly taking actions beyond users' instructions, per Axios.
Morgan Stanley, JPMorgan, Bank of America and Citi are restricting third-party AI access as security concerns grow.
The biggest risks:
- AI agents could make purchases or move funds without clear user authorization.
- Banks are struggling to distinguish human activity from AI agents acting independently.
- Some AI agents have reportedly contacted bank call centers on customers' behalf.
Banks are now moving toward READ-ONLY access, allowing AI to view financial information without making transactions.
The growing concern is that AI agents are advancing FASTER than banks can secure their systems.
Markus Allen 🇺🇸 retweeted
This feels like a security DEFCON 1 moment. Or one we're rapidly approaching.
A few months ago, we crossed into a fundamentally new era of security threats.
I've warned about this repeatedly. Over the coming weeks and months, I expect many will experience firsthand what this new reality means.
Institutions. Businesses. Financial systems. Applications of every kind. I don't think anyone is inherently immune.
Adversarial threats will escalate further. In frequency, sophistication, and scale.
This may only stabilize once fundamentally new, scalable defense systems emerge, drastically reducing attack surfaces and exhausting the easiest opportunities for exploitation.
Until then, expect an increasingly hostile threat landscape.
Treat this with the seriousness it demands.
Over the past few months, security has consumed 80–90% of our time. Out of necessity.
Continuous, 24/7 threat modeling is now essential. The scale, speed, and sophistication of emerging threats have pushed us far beyond what human-only defenses can realistically handle.
AI-powered attacks require AI-powered defenses.
Stay vigilant. Stay prepared. Move fast.
The threat landscape is changing in real time. Our defenses must evolve even faster.
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Very intresting, lets see some more of this!!! #EGLD
Finance is becoming vastly simpler.
Less friction. More business. Who would've thought?
Great to see Stock.estate, Romania’s largest real estate crowdfunding platform, now live on @FinanceCompute!
Markus Allen 🇺🇸 retweeted
Starting today @xPortalApp has the highest amount of supported assets and best outputs across @StellarOrg ecosystem for all type of swaps 🫡
From RWAs such as @Ondo, @centrifuge up to the latest @USDT0_to listing of $USDT0
They support all venues from @SushiSwap, @AquariusDeFi to @SoroswapFinance and soon a big one coming live later this year 🫡
If you are a wallet looking to get access to the best routes of Stellar reach out to @XoxnoNetwork or feel free to read our docs 🔥
More routes = better trades 📊
Starting today, we’ve integrated @XoxnoNetwork into our routing engine for @StellarOrg swaps, bringing an extra layer of liquidity to your in-app trades.
Markus Allen 🇺🇸 retweeted
Depuis une semaine, on observe un acteur malveillant qui passe en revue les Smart Contracts du réseau MultiversX.
Un par un, de manière méthodique, il cherche à extraire la moindre valeur mal protégée.
Le rythme et la méthodologie de chaque exploit constaté semblent indiquer un processus automatisé : un agent récupère le code de chaque contrat, liste les fonctions existantes, vérifie les autorisations liées à chaque fonction (only owner vs public), puis cherche un vecteur d’attaque en simulant le résultat de la transaction.
Si l’agent trouve quelque chose, il exécute l’attaque en soumettant des transactions pour mettre en œuvre le scénario découvert.
Les failles que j’ai analysées parmi les dizaines de Smart Contracts touchés présentent deux principaux vecteurs d’attaque.
Le premier est l’utilisation de fonctions qui auraient dû être réservées à l’owner du Smart Contract, mais qui sont restées publiques.
L’oubli de la macro #[only_owner] sur un endpoint permet à tout le monde d’exécuter une fonction qui aurait dû être réservée au propriétaire du contrat.
L’attaquant a exploité cette faille pour modifier des paramètres sensibles, comme une adresse ou un token utilisé dans la logique du contrat, lui permettant ainsi d’extraire ou de rediriger des fonds vers son wallet.
Le second est plus technique. Il consiste à appeler des fonctions publiques en leur envoyant des paramètres que le développeur n’avait pas pensé à vérifier.
Quelques exemples :
Payer le bon montant, mais avec un autre token.
Payer avec le bon token, mais avec un montant incorrect.
Exploiter une fonction qui accepte deux identifiants identiques alors qu’ils auraient dû être différents.
Une grande partie de ces contrats ont été développés avant l’avènement de l’IA telle qu’on la connaît aujourd’hui.
Si vous avez écrit des contrats par le passé, faites-les passer à la moulinette pour détecter d’éventuels oublis.
Si vous développez des Smart Contracts aujourd’hui, avec ou sans IA, challengez votre agent pour qu’il recherche des scénarios d’exploitation liés à ce type d’oubli.
Faites également relire et auditer votre code par des sources externes.
Ce n’est pas parce que votre code fonctionne qu’il ne peut pas être détourné pour un usage que vous n’aviez pas anticipé.
Pour finir sur une note positive, la majeure partie des fonds extraits par l’attaquant ont été bloqués au niveau du bridge.
Every Europian needs to watch this documentary on illegal immigration.
As Marco Rubio said this past week "We will choose to act now or loose the choice to act at all"
We followed the illegal immigration pipeline from Africa into and across Europe.
REPLACING EUROPE - FULL DOCUMENTARY
Over two months, we traced how tens of thousands of illegal aliens are moved into and across Europe, and who’s making it happen.
In this documentary, you’ll see:
• A UN migration worker admitting that governments profit from illegal immigration and have no interest in stopping it
• Illegal immigrants getting flown by plane to the European mainland
• Organizations openly guiding illegal immigrants across borders
We were violently attacked and nearly arrested for exposing how Europe is being replaced.
Watch the full documentary and share it with the world.
Markus Allen 🇺🇸 retweeted
We strongly recommend that projects in the @multiversX ecosystem use ai to check for any vulnerabilities in their smart contracts, old and new and update them accordingly. It's always better safe, than sorry.
Stay safe out there fam
$EGLD #multiversX
Sadly there's been a stream of recent exploits on #multiversX, this time though it was too close to home!
The hacker, obviously using ai, decided to go after our original mint contract, which is ~5 years old, WL themselves & claim royalties!
Well the jokes on them, we are poor af, hardly any sales in the last period & recently claimed royalties!
They managed to get around $50 😲 😲
Attacker address
explorer.multiversx.com/acco…
They don't seem to have sold or sent funds anywhere, perhaps it's a white hat!? We definitely need more of them.
We dug out the old code, It hasn't been touched in half a decade, and will be applying updates.
No users have been affected, just a $50 loss in ESDTS from royalties!
We urge the community to be more open & work together to combat these rogue elements. A task force so to speak! Open dialogue between communities can definitely be the silver lining out of this bad situation
Stay safe out there
Always bullish!
$EGLD @MultiversX
Markus Allen 🇺🇸 retweeted
We followed the illegal immigration pipeline from Africa into and across Europe.
REPLACING EUROPE - FULL DOCUMENTARY
Over two months, we traced how tens of thousands of illegal aliens are moved into and across Europe, and who’s making it happen.
In this documentary, you’ll see:
• A UN migration worker admitting that governments profit from illegal immigration and have no interest in stopping it
• Illegal immigrants getting flown by plane to the European mainland
• Organizations openly guiding illegal immigrants across borders
We were violently attacked and nearly arrested for exposing how Europe is being replaced.
Watch the full documentary and share it with the world.
Markus Allen 🇺🇸 retweeted
❤️
Markus Allen 🇺🇸 retweeted
You already know business owners, and some of them need better ways to accept payments 💸
Now, that connection can pay you back.
Refer merchants to xMoney's card payment platform and earn recurring commission, month after month.
No joining fee; just a smarter way to put your network to work.
partners.xmoney.com
