Pinned Tweet
quick reminder this $SEA announcement from @opensea was over a year and a half ago
when can we expect some accountability?
$SEA is coming.
Here are a few things to know:
• Historical OpenSea usage, not just recent activity, will be an important ingredient
• Claim process will be simple and accessible. US users welcome
• We’re focused on long-term sustainability and supporting a healthy, enduring community
• No details on timing yet. We’re taking the learnings from this space and getting it right
As always, only trust updates from @openseafdn and @opensea
Azuki is down 20% on the day
it used to be a top 3 project, right alongside Apes and Pudgy penguins
now it’s about to go under $1,000 for the first time ever
what went wrong?
interestingly as tech stocks continue to crumble and more hacks occur, my “boomer” decision to invest in agriculture, water and other commodities seems to be paying off
call me a pessimist, but this feels like just the beginning
Binance just got hacked and the fix was a freeze button.
They say about $3 billion of the stolen coins is already frozen.
Even Arbitrum froze some.
Great for users, but weird for a space built on nobody can stop your money.
I don’t know where this leaves crypto but i can’t expect anyone on the outside to touch the asset class with hacks like these seemingly occuring every 6 or so months
Update: The current verified total frozen amount is around $3 billion.
Our teams continue to work closely with law enforcement, issuers, blockchain intelligence firms and industry partners to trace and freeze additional assets.
We will only share confirmed figures and will provide further updates as more verified information becomes available. User funds are safe.
$5.6 billion in crypto lost today
over 4x bigger than the bybit hack
tbh this is the last thing our industry needs
BREAKING: World's largest crypto exchange Binance hacked with over $5.6 billion stolen:
• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 million additional cryptocurrencies
This is the largest hack in crypto history.
Pudgy just launched a hub for everyone who's ever touched the brand.
Meanwhile 5 penguins sold in the last 24 hours.
I think they nailed the top of the funnel. The bottom is the part that's stuck.
Can The Huddle actually bring buyers back? @pudgypenguins $PENGU
Introducing The Huddle, the hub for the Pudgy Penguins ecosystem.
The Huddle brings Pudgy NFT collectors, $PENGU holders, and anyone who has interacted with the Pudgy Penguins brand to one place, as one Huddle.
More information below.
13 AI businesses grew revenue this week.
18 shrank.
the frontier labs ship a feature, and somebody's moat turns into a changelog entry
there’s still time to make money in AI, but it won’t last forever
earning $600 a month now from online sales
never thought i’d be in e-commerce but with AI it’s too easy not to be
my models act as my influencers to get traffic, PMs to run my site on autopilot and orchestrators keep everyone aligned
never been a better time to build
Bored Apes outsold CryptoPunks last week.
Except one ape did 69% of the work.
#9500 went for 1,000 ETH on Blur, about 160x the floor.
The other 60 apes did roughly 450 ETH. Punks did 700.
who's paying that for a non-rare ape, @BoredApeYC?
the biggest NFT collection right now isn't an ape or a punk
it's Pokémon cards
Courtyard did $13.8M in sales the last 7 days. every other NFT collection combined did $10.3M
257K trades. BAYC had 64
PFP guys are not ready for this conversation
so the “smartest” model just put “ATS” in the title of my resume so it would pass job screeners
don’t think i’ll be participating in your IPO @AnthropicAI
Someone just used a year-old bug to rob ApeStrategy.
They swapped out all 21 of its Bored Apes and sold the Mudwater packs for about $14k.
The worse part is the contract now holds 21 apes it can't see or sell.
Who's checking the other early strategies? $APESTR
gm gm here we go again.
This morning somebody abused a bug in ApeStr to swap 21 apes for 21 ApeStr-owned apes.
This was a known exploit (see the SQUIGSTR exploit from ~1 year ago) but incentive to run it was never there.
The bug lies in buyTargetNFT: it forces a strategy contract to send arbitrary calldata to any target. Afterwards it checks only three things: its BAYC balance rose by exactly 1, it owns expectedId, and "cost" equals its ETH balance drop.
This was patched in later NFTStrategy releases, but affects the original 6 (PunkSTR not affected).
The attacker bought 2 BAYC to use as bait. Using a helper contract, they prep the strategy contract by selling an ape to it for 5 wei and immediately buying it back for 6 wei. That primes the contract's ethToTwap with 6 wei.
They then call buyTargetNFT and pass the calldata to transfer an ape from ApeSTR to the helper using safeTransferFrom. This in turn hands execution over to the helper (remember, safeTransferFrom is NOT safe), which transfer TWO apes back to ApeSTR to satisfy the balance check (1 out, 2 in leaves ApeSTR at +1). It also calls processTokenTwap, which converts the 6 wei, setting the cost of one of the newly deposited apes to 7 wei (6 * 120%). The helper contract buys it back in the same tx.
example flow:
- Attacker has BAYC #1 and #2. ApeSTR has BAYC #3.
- Attacker "sells" BAYC #1 to ApeSTR for 6 wei and sends BAYC #2 to it for free, but steals BAYC #3 in the process.
- ApeSTR relists BAYC #1 for 7 wei, which the attacker buys.
- Attacker now has BAYC #1 and BAYC #3, and ApeSTR has BAYC #2 (but doesn't even know it).
The attacker ran this for all 21 BAYC in the ApeSTR contract, resulting in them being able to claim packs for all of those BAYC. Total net proceeds: $14k.
This previously affected SQUIGSTR because of their shared contract - any art blocks NFT sent in would satisfy the balance check, allowing the attacker to drain the contract of squiggles in exchange for basically valueless art blocks NFTs.
It was known to be possible on ApeSTR as well, so I guess it was just a matter of time before we saw it happen.
The unfortunate consequence is that now, ApeSTR has 21 apes that it is completely unaware of, so they cannot be bought from the contract. And 210 attacker-owned mudwater packs were dumped into bids.
i will say there's something nice about not having to check 47823 different places for everything web 3 related
now if they could just drop $SEA I'd be happy
if you're not enjoying the grind you're doing it wrong
choosing health, working on what you love and tracking your progress over time
watching it all compound over time
i don't get the guys that make it out to sound miserable
genuinely blessed that we get to live this way instead of simply surviving