Guy Sheetrit

36 hours to stage. 20 minutes to drain. $6.36B gone. • Binance: ~$6.36B moved across 10 blockchains, most of it in about 20 minutes on Oct 29, per TRM Labs. Binance says about $6.3B • Staging: at least 36 hours, per TRM. Tornado Cash funding, code tested on wallets, a final rehearsal 4 hours before it hit a hot wallet • Ethereum: 50 pre-signed EIP-7702 authorizations turned a hot wallet into a sweeper. TRM's assessment: hot wallet signing infrastructure was compromised • Entry: Binance first pointed to a compromised DevOps laptop, then called the attack more complex. It reports no evidence of a private key leak. Post-mortem pending • Response: freezes started about an hour in. $2.7B-$3B frozen depending on the source, with ~$2.4B out of any issuer's reach, per TRM Ten chains. One suspected weak point: the path that produces a valid signature. The root cause isn't confirmed yet, but Chainalysis describes valid signed authorizations and ordinary signed transfers. This crew staged for a day and a half and executed in minutes. Chainalysis also sees laundering patterns that suggest automation. A response that starts at the first alert starts late. What works now: 1. Attack the signing path. Laptops, CI, service containers and anything else that can request a signature, continuously. 2. Cap the blast radius. Outflow limits on hot wallets, enforced outside the system that signs. 3. Hunt the staging. New delegations, test deployments and small rehearsals are visible before the theft. 4. Prove every fix. Re-attack after patching. A vulnerability isn't closed until the exploit fails. That is what Lyrie does. Our autonomous agent is #1 in the world on UC Berkeley's CyberGym: 99.2% of real-world vulnerabilities reproduced with working exploits in a single trial, ahead of agents from Google, OpenAI, Anthropic and Microsoft. Under attack, or worried you're next? 🚨 Emergency response & assessment: [email protected] 🤝 Investors & partners: [email protected] 🌐 presentation.lyrie.ai #cybersecurity #CryptoSecurity #Web3Security Data: @trmlabs @chainalysis

48 hours. Five breaches. One pattern. • Binance: ~$5.5B reportedly drained from hot wallets • Polymarket: a compromised third-party script hijacked logins, ~$2.7M stolen • Ledger: wallets sold in Singapore carried malicious hardware implants • Florida Dept. of Education: 4.9M Social Security numbers exposed • Banks in 7 countries: AI tools breaching firms in Korea, a cloned CEO voice wiring €95M in Italy Different vectors. Same root cause: attackers tested these systems harder, faster and more often than their owners did. Attackers now run AI agents 24/7. Exploit windows have collapsed from weeks to hours. A yearly pentest and a quarterly audit can't keep up. What works now: 1. Attack yourself continuously. Every app, API, wallet service and third-party script, every day, not once a year. 2. Prove every fix. Re-attack after patching. A vulnerability isn't closed until the exploit fails. 3. Map your supply chain. Scripts, SDKs, vendors and hardware are your attack surface too. 4. Verify every AI agent. Identity, permissions and a signed audit trail for every action it takes. That is what Lyrie does. Our autonomous agent is #1 in the world on UC Berkeley's CyberGym: 99.2% of real-world vulnerabilities reproduced with working exploits in a single trial, ahead of agents from Google, OpenAI, Anthropic and Microsoft. Under attack, or worried you're next? 🚨 Emergency response & assessment: [email protected] 🤝 Investors & partners: [email protected] 🌐 presentation.lyrie.ai

We’ve been quiet. Lyrie hasn’t. Ranked #1 worldwide 99.2% reference success rate on CyberGym. The highest reported score among single-trial Agent-focused entries. Result: September 15, 2026. The work speaks. Now let’s talk. cybergym.io/cybergym/

🔐 Lyrie.ai's $2M pre-seed is now on @TechCrunch. Every AI agent on the internet is effectively anonymous. No identity. No scope enforcement. No tamper detection. We built the infrastructure that changes that. techcrunch.com/press-release…

🎯 Lyrie.ai now deploys real-time zero-day tracking across global enterprise infrastructure. Autonomous discovery. Instant disclosure workflows. One command: lyrie hack — 7-phase autonomous pentest with PoC exploits + code-level remediation. As covered by @TechRepublic @eWEEK @Datamation

📡 Today's press coverage of @lyrie_ai: @TechCrunch · @CSOonline · @NetworkWorld · @TechRepublic · @eWEEK · @Datamation · @esecurityplanet Three announcements. One message: the AI agent era needs a security layer. We built it. lyrie.ai