🚨 Arkadiko Post-mortem(Using claude and surfAI) the attacker address provided by @ArkadikoFinance used Claude to trace the funds and cross-checked the results against public on-chain transactions. On October 22 (UTC), 2,065,481.479441 stSTX and 1.65221692 sBTC were drained from Arkadiko vaults. Attacker / fund recipient address: SP1JB85VZ7TX7SWSNW0PHV115YPQE5QXJDG6P60AQ Governance proposal / execution address: SP1V1BN459229EJG94YYBJDN50ADVB6MXVVEZ0G34 Proposal #12 passed with about 4.57 million DIKO in favor and 0 against, granting an attacker-deployed contract permission to withdraw collateral and mint USDA. The attacker also minted 1,500,354,999 unbacked USDA. That is the number of tokens minted, not $1.5 billion in losses. The funds moved as follows. Swaps The attacker swapped stSTX in 5 transactions for about 2.28 million STX. Selling USDA separately netted about 540,000 STX. Distribution From the recipient wallet, about 2.29 million STX and 1.65 sBTC moved to SPR3...SCY1, and about 514,000 STX moved to SP26...KJ18W. Bitcoin Through 4 successful withdrawals, 4.85824088 BTC was paid out to bc1q8h...j08s. That total includes sBTC acquired through additional purchases. The funds then moved to bc1q09...4qle, whose owner has not been identified. Ethereum Across 14 matched bridge transfers, 305,348.87 USDCx was burned on Stacks and 305,320.87 USDC was minted on Ethereum. At the receiving addresses 0x9a86...3875 and 0x4256...4073, the USDC was swapped for ETH. Tornado Cash A downstream wallet, 0xe8cb...5006, deposited 213.3 ETH across 9 transactions. However, other funds were commingled upstream, so the full amount cannot be attributed to the Arkadiko exploit. These figures include swaps and transfers of the same funds, so adding them all together would overstate the losses. The Binance and Bybit deposit routes in the image are marked as "speculative." I confirmed ETH transfers from Binance hot wallets to wallets linked to the incident. What hasn't been confirmed is whether the stolen STX was deposited into those exchanges beforehand. That's the flow. Honestly, I didn't even know governance was still active. I don't know yet how much can be recovered. But based on the public fund flows, I think it's highly likely that most of the direct selling pressure from this incident has already passed. A significant amount has already gone through the market, and my guess is that some of it went to exchanges. The next thing to watch is how much can be frozen and recovered through exchange cooperation and investigations. That said, with STX already carrying Binance's Monitoring Tag, the timing is a real headache. Of course, as an industry leader, Binance will know very well that a dApp exploit and a security flaw in the mainnet itself are different things. I don't expect this incident itself to directly affect Binance's judgment. But I don't think outsiders' trust in the ecosystem can be completely separated from it either. And of all times, this had to happen near the end of the month. I suspect relatively few users had active vaults at the time. But USDA holders and liquidity providers were also affected, so it's hard to call that a relief when people have lost money. Separately, this is something I've felt for a long time: the ecosystem's response in situations like this is disappointing. If the attacker addresses and suspected fund flows had been shared with the first official announcement, users could have worked together to trace the exploit and check for further risks. It would also have helped them assess their own exposure and decide what to do with their assets. But the initial announcement left out the addresses and routes needed to make those assessments and respond. I think the confirmed findings could have been shared, with the speculative parts clearly labeled as such. I understand that the Stacks ecosystem has a lot to navigate right now. Even so, these are exactly the moments when I'd like to see information shared early so the community can respond together. During the Cetus incident on Sui, multiple dApps stepped up alongside the foundation to coordinate a response. I think it matters to keep showing who is doing what, how they are working together, what progress has been made, and what still needs to be resolved. As a user, seeing that process gives you a sense that "even when something goes wrong here, the ecosystem comes together and works through it." I don't like the attitude that seems to treat publicly showing this kind of response as a blemish on the ecosystem. If you want to boast about a strong DeFi ecosystem over the long term, I think you also have to show up when an incident happens. If the position is that this is a decentralized ecosystem and individual projects are responsible for their own affairs, then claiming their DeFi successes as wins for the entire ecosystem whenever things go well is inconsistent. The SEC investigation concerning Stacks and Hiro was also closed in 2024. At the very least, I don't see why sharing attacker addresses, disclosing fund flows, and helping coordinate a response should still require so much tiptoeing. You can't have it both ways. From where I stand, it looks like "we're strong eco" when things go well, and "nothing to do with us" when funds get stolen. If this attitude persists, I believe the long-term cost will be far greater than the money stolen here: the loss of trust in the ecosystem. And it is the users and projects that stay who will end up paying that price.

(⏰ 오후 7시 마감) SmartX 웨이트리스트 신청 BNB의 Fomo, SmartX의 제일 첫 웨이트리스트 명단이 오늘 오후 7시 마감됩니다! 현재 완전 초기 중에 초기고, 현재는 로그인만 하면 바로 신청할 수 있어요. 지난 KBW때 사이드 이벤트를 방문해봤는데, 확실히 BNB 라 그런지 중국계 트레이더들이 많은 느낌이었고, 장소도 매우 붐벼서 하입 받을 가능성이 어느 정도 있겠다고 생각하고 있습니다. 웨이트리스트는 별도로 할 거 없이, 그냥 기존 계정으로 로그인 하고 간단한 퀴즈(1분 컷)만 하면 완료입니다! 밈코 트레이딩 하시는 분들 중에, 뭔가 당연하게 토큰 안 찍을 것 같이 보이는 gmgn이나 fomo 같은 플랫폼을 쓰느니, 이왕이면 보너스 TGE를 노려보겠다는 분들이 주로 신청하면 좋지 않을까 합니다! @SmartXTerminal 화이팅! 👉 SmartX Waitlist 등록: 댓글에 남길게요!

주식 & 코인을 무료로 에어드랍? - 스톡코인 제네시스 카드 20장 래플! 엠버가 키우는 IPO & 주식 거래 플랫폼 스톡코인에서 제네시스 NFT 딱 500장을 발행합니다. 카드 소유자에게는 카드 홀딩 90일 이후 XRP, 삼성전자 토큰화 주식 에어드랍을 비롯한 다양한 혜택을 순차 제공한다고 해요. 저는 지금까지 스톡코인에서 오픈AI 청약, 스페이스X 청약 등에 참여해 공모주 청약 느낌으로 꽤 달달한 수익을 얻기도 했기에 꾸준히 IPO 청약에 참여하려고 하고 있습니다. 당첨된 후에 스톡코인 측에서 따로 연락드릴 예정이고, 당첨되신 후에 가입하셔도 되니까 일단 신청해놓고 당첨만 기다리시면 에어드랍이 지갑으로 쇽쇽~👍 아직 인지도 덜할때 제네시스 카드 받아두시는 거 추천합니다! 제 전용 풀 20장이 따로 있으니, 아마 신청하시면 왠만하면 애드 받으시지 않을까 싶어요! 💡 참여방법 1. 스톡코인 X 팔로우 (@stockcoinai) 2. 머니스택 X 팔로우(당연히 하고 계시죠!? @MoneyStack9 ) 3. 1분 컷 구글 응모 폼 작성(채널 코드 란에 'MONEYSTACK' 입력 ) 댓글란에 구글 폼 있습니다!