Pinned Tweet
Is the Ledger wallet implant story over, or just beginning?
Mark Karpelès has been opening @Ledger wallets to find out — and there are signs someone is manufacturing spy hardware at scale.
A 1-on-1 with the former Mt. Gox CEO, the man who physically pried this case open.
@MagicalTux joins us today at 11am ET 👇
xitter.cf/i/broadcasts/1DxLdZPlY…
COINDCX DISPUTES $16 MILLION HACK ALERT
Co-founder Sumit Gupta says the flagged wallets were compromised in July 2025 and current funds were unaffected. Confirmed transfers do not establish a new loss for the exchange or its customers.
Read more here:
thedefiant.io/news/hacks/coi…
The Defiant retweeted
ALPHA MODUS REPORTS $250M-PLUS BITCOIN HOLDING
The company says it acquired 3,170 BTC in a share-and-warrant swap, not a cash purchase. The 51.6 million shares issued account for most of its outstanding stock.
Read more here:
thedefiant.io/converge/cefi/…
CHINESE PROSECUTORS SEEK 61,896 BITCOIN CONFISCATION
The bid allows for lawful investor restitution. The UK-held coins remain under English court control; investor ownership claims must be assessed under Chinese law.
Read more here:
thedefiant.io/news/regulatio…
The Defiant retweeted
MATTER LABS INTRODUCES PERMISSIONS TOOL FOR EXISTING CHAINS
Prividium Commander lets institutions add application permissions without switching blockchains, the company says. Custody providers retain signing controls.
Read more here:
thedefiant.io/converge/tradf…
DEVELOPER LINKS CRYPTO THEFTS TO RAILWAY
@ethereumdegen alleges roughly $370,000 was stolen through exposed secrets. Enterprise builds resumed, letting those customers deploy replacement credentials while other plans waited.
Read more here:
thedefiant.io/news/security/…
PHP EXPLOIT ATTEMPTS REACH MILLIONS
@Cloudflare CEO Matthew Prince reported the network-wide attempts. The flaws can allow code execution without login; affected DeFi sites need PHP updates, not just website or plugin fixes.
Read more here:
thedefiant.io/news/security/…
ECDSA CHECKS SIGNATURES WITHOUT PRIVATE KEYS
On an insecure toy curve, the same signature passes for hash-derived value 30 but fails for 29. The verifier uses the public key, not the private key or secret nonce.
Read more here:
thedefiant.io/news/security/…
The Defiant retweeted
CRYPTO CREDENTIAL IS NOT TRANSFER APPROVAL
@Mastercard's tool provides user-verification assurance and checks asset/network compatibility. Payment providers still must meet their own compliance obligations.
Read more here:
thedefiant.io/converge/tradf…
PENDLE EXPANDS LOOPING TO TOKENIZED STOCKS
@pendle_fi expanded one-click looping beyond principal tokens. Seven stock longs on @base borrow $USDC on @aave, with leverage limits of 2.6–4.2x and liquidation risk.
Read more here:
thedefiant.io/news/defi/pend…
COLLECTOR CRYPT REPORTS $24.3M DAY
Users opened 123,425 trading-card packs in 24 hours. The reported gross receipts equal roughly 13% of @DefiLlama's trailing 30-day pack sales, not platform profit.
Read more here:
thedefiant.io/news/nfts-and-…
AERODROME AND VELODROME MERGE
Aero is live across seven chains, replacing weekly liquidity-reward votes with continuous allocation. Token conversion is not automatic and cannot be reversed.
Read more here:
thedefiant.io/news/defi/aero…
Just In:
Aerodrome and Velodrome have merged into @aeroxyz.
One token across @base, Ethereum, @Optimism, Arbitrum, Ink, Arc and Robinhood Chain.
The weekly vote that set liquidity rewards is gone and allocation is now continuous.
Read more here:
thedefiant.io/news/defi/aero…
Pump.fun is facing backlash over pseudonymous trader Kimchi and it's not only about a marketing campaign.
Here's what onchain records say happened Tuesday night, ET:
7:00:15 pm — A 3-hr old Solana wallet creates the Kimchi coin and buys 79% of the supply for about $9,300.
Same second — That wallet routes every creator fee the coin will ever pay to one address. Pump.fun’s own docs say this can only be set once. It can’t be changed.
6 seconds later — @kimchi1x posts on X, his first post in five days (a picture of him standing next to a luxury car)
57 seconds later — 750 million tokens, 75% of the supply, are sent to the same address that's collecting fees.
78 seconds later — Pump.fun runs an ad telling normies to "be the next kimchi"
19 minutes later — Co-founder Alon Cohen announces the partnership.
54 minutes later — Pump.fun posts: “KIMCHI MADE $32,000,000 ON PUMPFUN 30 MINS AFTER JOINING.”
That $32 million is the paper value of tokens he has not sold. 75% of the supply sits in one wallet against $1.33 million of liquidity.
Every timestamp above comes from Solana block times and X post IDs.
Read more here:
thedefiant.io/news/tokens/ki…
OBOL RELEASES CHARON SECURITY PATCH
@Obol_Collective urges mainnet operators to upgrade after certificate-authority keys were compromised. Unpatched HTTPS connections could let attackers impersonate servers if intercepted or redirected.
Read more here:
thedefiant.io/news/security/…
RAILWAY URGES ALL USERS TO ROTATE SECRETS
Railway said an intruder may have obtained decrypted secrets. Paused deployments prevent customers from updating apps with replacement credentials.
Read more here:
thedefiant.io/news/security/…
VENDORS BLOCK EIGHT EMUDHRA ISSUING CERTIFICATE AUTHORITIES
One private key was just 4, researcher Scott Helme found. Vulnerable clients could accept forged HTTPS certificates if an attacker gets onto their network path.
Read more here:
thedefiant.io/news/security/…
The SEC's innovation exemption caps volume on tokenized trading venues.
@armaniferrante says Backpack's tokenized stocks already trade past that cap on Solana, so joining the sandbox would mean halting its own market.
Full episode here: xitter.cf/DefiantNews/status/211…
🎙️ @Backpack had nearly 90% of its capital on FTX when it collapsed. The company was dead.
Now @armaniferrante is building a single globally regulated exchange, with one order book for crypto and stocks.
The full story with @CamiRusso 👇🏻
Matter Labs @the_matter_labs launched Prividium Commander today at Money20/20 — permissioning, approvals and audit trails for bank digital asset operations.
Banks can buy the product without ever touching a ZKsync chain.
CEO Alex Gluchowski calls it “the new entry point into the Prividium platform.”
Read more here:
thedefiant.io/news/infrastru…
The Defiant retweeted
AI PAYMENT PILOT: @Mastercard OPENS DEVELOPER SIGN-UPS
APIs and a sandbox let builders test agents buying digital services within approved budgets. The service is not commercially available.
Read more here:
thedefiant.io/converge/tradf…



