Closing the loop on last night's story: CZ reposted the Harley Foote hack case and only replied with 👀—the full story is even worse.
He was a self-custody believer, kept all his funds on-chain, and deliberately avoided Coinbase/Kraken. His plan to transfer the money back to his bank before Christmas hadn't happened yet when a payload that auto-downloaded via WhatsApp opened a backdoor on his computer.
The hacker didn't rush. They lay low for five days, combing through his X profile for clues about his positions. Then, when $BTC touched 68k and the unrealized gains on his short position had peaked, they closed it all in one go. The funds went through the whole pipeline: Hyperliquid($HYPE ) → MetaMask → Tornado Cash. His passwords, email, and X account were all gone. He had just $800 left.
The victim said the attacker was a crypto-native who knew the ropes, and their timing was impeccable. I'd add this: that kind of patience would be top-tier in trading circles—too bad it was put to the wrong use.
Self-custody protects you from a platform collapse, but not from a backdoor on your computer. Posting your positions publicly is like handing your trade confirmations to your opponent. Keep large sums on separate machines, and turn off automatic downloads.
NFA DYOR
#比特币 #安全事件 #社工攻击 #Hyperliquid #Crypto
He was a self-custody believer, kept all his funds on-chain, and deliberately avoided Coinbase/Kraken. His plan to transfer the money back to his bank before Christmas hadn't happened yet when a payload that auto-downloaded via WhatsApp opened a backdoor on his computer.
The hacker didn't rush. They lay low for five days, combing through his X profile for clues about his positions. Then, when $BTC touched 68k and the unrealized gains on his short position had peaked, they closed it all in one go. The funds went through the whole pipeline: Hyperliquid($HYPE ) → MetaMask → Tornado Cash. His passwords, email, and X account were all gone. He had just $800 left.
The victim said the attacker was a crypto-native who knew the ropes, and their timing was impeccable. I'd add this: that kind of patience would be top-tier in trading circles—too bad it was put to the wrong use.
Self-custody protects you from a platform collapse, but not from a backdoor on your computer. Posting your positions publicly is like handing your trade confirmations to your opponent. Keep large sums on separate machines, and turn off automatic downloads.
NFA DYOR
#比特币 #安全事件 #社工攻击 #Hyperliquid #Crypto