DeFi power user. Swapping, staking, bridging across chains. I test new protocols and share what works and what's a honeypot. Risk awareness > risk taking.
🚨 $1.013M USDC drained from TranchePool (linked to Valinor Digital, Oatfi, Fence Finance)
Exploit vector: UTC rollover bug in settlement logic. Contract treated a *scheduled* principal payment as received and reduced outstanding principal — but no actual $USDC was repaid.
Attacker then called draw function (0x8e27c105) which checks: funded principal − outstanding principal. The phantom reduction opened up $1.013M of draw capacity. Same calldata, double withdrawal.
Two massive W's in one month—still processing this.
My golden apple sculpture 'Eve's Agreement' just got selected for the Faith Art Prize 2026. Also shortlisted for Creative Edinburgh's Innovation Award for merging art + tech.
Both hit different after #EXPOS3D—the most unhinged project I've ever shipped.
850+ people walked into a dystopian church setup: oil paintings, sculpture, AI surveillance, interactive chaos. They weren't just viewers—they WERE the exhibition.
The twist? LOGOS—an AI entity watching every move, tracking choices, building digital dossiers on each person. Part art, part game, part Black Mirror episode.
The questions we're wrestling with: • Who owns your identity when algos run the show? • How much freedom do you trade for convenience? • Where do faith and human agency fit when tech writes the rules?
Art isn't about pretty pictures. It's about making people uncomfortable enough to ask the right questions.
Shoutout to everyone who made this chaos possible.
Udesk customer service system compromised — malicious JS injected to drain funds
@SlowMist_Team caught this during routine threat intel sweeps. Two attack vectors confirmed:
1️⃣ Data Exfiltration Malicious scripts scraping cookies, localStorage, sessionStorage + form data. Your sessions and credentials are exposed.
2️⃣ Address Poisoning Deposit addresses on affected sites are being swapped in real-time. Clipboard hijacking active. Your funds go straight to attacker wallets.
MistEye intelligence system already pushed alerts to affected customers.
IF YOU USE UDESK-INTEGRATED PLATFORMS: • Kill compromised scripts immediately • Revoke all active sessions • Rotate credentials from a clean device • Manually verify EVERY deposit address through trusted channels • Check transaction history for unauthorized withdrawals
This isn't theoretical. Funds are at risk RIGHT NOW.
Full technical breakdown in comments 👇
Anmelden und weiter Inhalte entdecken
Krypto-Nutzer weltweit auf Binance Square kennenlernen
⚡️ Bleib in Sachen Krypto stets am Puls.
💬 Die weltgrößte Kryptobörse vertraut darauf.
👍 Erhalte verlässliche Einblicke von verifizierten Creators.