Hay gente que se cree esto?
Holy sh*t. Claude Code just found a hidden chip inside my Chinese power bank from Guangzhou. Every time I charged my iPhone, it quietly copied the whole phone…
It also read our saved Wi-Fi password off my iPhone, got onto our home network and sent everything to a server.
I bought it for $19 at an airport kiosk there 3 weeks ago. No brand, 30,000 mAh on the label, and it felt heavy.
The first time I plugged in, the screen asked "Trust This Computer?". I tapped Trust without thinking and went on with my day. That one tap gave it access to everything.
This morning I finally set up Claude Code to warn me when any device starts reading my files. An hour later, 10 seconds into charging, the screen filled with yellow warnings, then red ones: data was moving when it should only be charging.
I asked Claude Code what was going on. My phone saw the power bank as a small computer with 64 GB of storage and its own internet connection.
A USB cable has wires for power and wires for data, and a normal charger only uses the power ones. This one used both, and it had already copied all of this:
→ /device → IMEI and serial number
→ /contacts → 1,206 numbers
→ /apps → every app I have, including my 2 bank apps
→ /photos → 3,912 pictures, my passport among them
→ /wifi → our network name and its key
→ /wife's iPhone → her photos too, she charged from it twice and tapped Trust too
Each time we plugged in, it used that key to get online and send out the new files:
sends to → 47.***.***.12
uploads → 19 in 3 weeks
last one → last night at 2:14, while we slept
I pulled the cable right away. Then Claude Code blocked that address on our router and walked me through changing the Wi-Fi password and the logins for my bank apps.
I had it opened at a repair shop, and what was inside is in the first comment. A 30-second check for your own is in the second one. Save this and test every power bank in your house today.
Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far
Readers added context they thought people might want to know
In many jurisdictions this is a crime. In the US under Computer Fraud and Abuse Act, 18 U.S.C. §1030, in the UK under Computer Misuse Act (CMA) 1990, in Germany Strafgesetzbuch (StGB), and many others.
justice.gov/jm/jm-9-48000-…
legislation.gov.uk/ukpga/1990/18/…
gesetze-im-internet.de/stgb/
Cómo creen que lo llamen los venezolanos de a pie, “pago móvil Bluetooth”?
Luis retweeted
After $6B got stolen by Lazarus Group from Binance, I am pitching KoreanFlare again
I'm building KoreanFlare - voice-activated wallet protection against North Korean hackers.
Our solution is simple:
Before any transaction, users must say "Kim Jong is gay" into their microphone. If you refuse or sound North Korean, wallet locks permanently.
Why it works:
- No hacker wanna see “PigJong”
- No North Korean hacker will say it (instant execution)
- Voice AI detects Korean accent
- Decentralized proof-of-disrespect consensus
- 100% effective (my theory, no testing needed)
Built on Cloudflare but web3 because I said so.
Do you things dear @heyibinance and team. Thanks
Best,
Hrithik
Founder, KoreanFlare
Es decir, el dev tenía los permisos suficientes para mover al menos 6B desde su laptop cuando quiera
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Yo por eso guardo mis ahorros (100 USDT) en MetaMask
Se confirma hackeo a Binance
Fueron robados 2.800.000.000 USD de los cuáles seguramente se hagan cargo con el fondo de reserva que hacen los brokers centralizados
El hackeo más grande de toda la historia cripto, encima hoy también habian vulnerado a Polymarket...
Acá pueden seguir la wallet y las transacciones del hacker
La wallet del hacker 0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c
Tether y Circle llegaron a congelar fondos del hacker antes que los redirija a otras wallets, la verdad que estuvieron rápidos
El dinero restante fue a otras wallets pero el de la captura es la más pesada
Stay safu, qué semana...
Luis retweeted
Y un recordatorio a todo el mundo:
Detrás de las pantallas, sean famosos o no, hay personas que les afectan los comentarios.
Viví junto a komanche en persona una como lo cancelaban simplemente porque sí. Una de las funas más estúpidas. No os imagináis cómo fueron esos días para él.
Komanche tenía muchos problemas y no es la única causa de lo que ha sucedido, pero ese odio, fuego, ira y furia hacia él lo empeoró todo.
Qué fácil es romper algo en alguien cuando no tienes que escuchar cómo se rompe. O peor, cuando lo sabes y lo haces por 4 likes de mierda.
Recordad siempre que las palabras pueden dejar más cicatrices que las armas.
Ojalá un mundo con más empatía ❤️
Amo que los chavistas estan haciendo una lista de todo lo que El chavismo no ha podido arreglar en 30 años.

































