crypto_friz1 retweeted
🚨: @Ledger Attack
Today @Ledger SDK vulnerabilities where identified citing passkey signature information being sent to @Ledger during key generation & evidence of record keeping of this information by @Ledger.
Now, hackers are directing the world’s best AI engines to attack these vulnerabilities in an attempt to rob @Ledger users… again.
Please consider getting all your funds off @Ledger immediately.
crypto_friz1 retweeted
If you're using a Ledger hard wallet, I'd consider switching immediately.
Look at what their latest signing kit includes:
By default, every transaction you make sends your data to their servers, including:
- the network you used
- recipient address
- your device model
- firmware
- blind sign status
The worst part is, you can't even opt out yourself! The wallet app you use has to turn it off for you 🤯
All this from a hard wallet company that's had MULTIPLE customer data breaches.
I don't know if it's possible, but imagine if bad actors possessed both your physical address info (already leaked) and this data. If they were able to match them up, they could simply identify which physical addresses held the most assets.
They do NOT respect your privacy. I urge you to consider switching to another hard wallet.
If your wallet of choice isn’t @ambire and it runs Ledger’s latest signing kit, chances are every signature you make gets reported back to Ledger.
I noticed it early while bumping Ledger packages to debug an issue! No affected version ever reached Аmbire production, and we’re shipping it disabled by default, with an opt-in toggle in the privacy settings 🛡️
However, the devil was that it was sneakily enabled by default in the Ledger SDK since their ledgerhq/context-module v1.16... So right after the lib update - every transaction you sign with a Ledger device started sending to blind-signing.api.ledger.com the network, the contract or recipient address, device model and firmware, app versions and whether you signed blind.
I'd argue that privacy should be the default, @Ledger 💪
Happy to see more and more people becoming aware of the privacy implications and picking Ambire for our ongoing privacy focus.
Catching things like this 👀 is part of the job for us!
but still my questions is
why is price action not out performing the market with all these fundamentals
$INJ
17
crypto_friz1 retweeted
every time your wallet shows you a balance, it's asking a server for it. unless you run your own node, that server belongs to someone else. it sees which addresses you asked about, which IP asked, and when. nobody talks about this because nothing looks wrong. no transaction, no signature, no gas. just a quiet read.
@OasisProtocol broke this down and it's one of the most overlooked privacy leaks in crypto. 🧵
crypto_friz1 retweeted
your wallet doesn't need to send a transaction to leak who you are.
every balance check is a request to a server. unless you run your own node, that server sees which addresses you asked about, from which IP, and when.
keep five addresses in one wallet and check them from the same connection, and whoever holds the logs can tie all five together without you ever signing a thing.
spread addresses across providers, route requests through a proxy, or run your own node. who gets to see a read matters as much as what it returns.
cc @OasisProtocol
crypto_friz1 retweeted
TAX LOOPHOLES THAT FEEL ILLEGAL, BUT ARE 100% LEGAL
1) RENT YOUR HOME TO YOUR OWN BUSINESS
crypto_friz1 retweeted
A $15M $INJ ETF launched on Nasdaq
so why did the price barely move❓
the $15M is the @Injective Foundation's own INJ
600,000 shares at $25, paid in INJ not cash
on launch day almost the whole fund belonged to the Foundation
the public traded $75K on day one
that money moved between buyers and sellers
it never entered the fund
and on chain the whole launch is one move
1,910,010 INJ changed validator
nothing came in, nothing went out
it was already staked
launch day, Nasdaq closed at 21:00 UTC
20 minutes later the position moved in 4 redelegations
🔸 560K from FalconX
🔸 500K from Mblock
🔸 500K from FP Validated
🔸 350K from NTT DOCOMO GLOBAL
the fund stakes through Luganodes
one wallet is 99.99% of that validator
everyone else has 60 INJ and dust
about 110 INJ sits free in it
it has signed 7 transactions in its entire life
total staked INJ on the whole chain grew just +298K from Nov 3 to Nov 6
the launch added no new stake
FP Validated held half a million of this wallet
today it holds 256 INJ in total and is unbonding
and trading slept through it
on Nov 4 INJ jumped 11.5% on the news
the INJ perp here printed one liquidation
$145.89
staking it yourself pays about 6.8%
the fund takes 30% of the rewards plus 1.10% a year in fees
holders end up with about 3.7%
and the INJ is locked, unbonding takes 21 days
a Nasdaq launch
and on its own chain just a validator change
$INJ @injective
I seriously hope things keep ramping-up for $INJ.
Nasdaq bell does not mean much until token performs really well.
Sitting at below $ 1 billion market cap makes me a bit stressed. It should have been well about $ 3/4 billion by now - before the ALT Season begins.
$INJ ETF in the U.S. ✅
Next Step: [Redacted] + [Redacted] + [Redacted] + [Redacted] Releases.
All before end of year.
26
crypto_friz1 retweeted
If $INJ ETF listing was such a great thing. Allowing millions to purchase the ETF - why hasn't the price stayed in the same range - given its Market Cap is less than 1 billion.
The opening of gates to NASDAQ should have pulled investors - but for now it didn't.
The $INJ ETF listing in the U.S. is just the start.
Get ready for the real fun to begin now.
Tick Tock ⏳⏳
If $INJ ETF listing was such a great thing. Allowing millions to purchase the ETF - why hasn't the price stayed in the same range - given its Market Cap is less than 1 billion.
The opening of gates to NASDAQ should have pulled investors - but for now it didn't.
The $INJ ETF listing in the U.S. is just the start.
Get ready for the real fun to begin now.
Tick Tock ⏳⏳
Yes $NEAR price keeps dipping.
NEAR.com is now the most liquid venue to buy and sell PEARL spot.
Non-custodial, listed permissionlessly, tradeable in just a few clicks.
I love this because it's the exact same strategy that challenger exchanges use. Binance used to list everything first, then Bybit and Bitget, then Hyperliquid. Now NEAR.
(Dragonfly is invested in both PEARL and NEAR)
62
for now - it has been dumping over past few days
until MM's are interested - any coin (even near:native ) keeps dipping
9
crypto_friz1 retweeted
$3.70. $NEAR down 8.6%, weakest among majors tonight.