
Software Engineer | running #btc full node | lukecoin is shitcoin
Joined June 2022
- Tweets24.9K
- Following1.6K
- Followers9.5K
- Likes64.6K
Pinned Tweet
[합의 알고리즘]
최근 sec의 규제로 pow가 다시 주목받고있는데요.
제 생각엔 sec의 규제가 없더라도 가장 안전한 합의 알고리즘은 Pow입니다
이에 대해서 작성해 보도록 하겠습니다
🧵
1/n
아니 okx털림 이거 진짜임? ㅋㅋ
@grok okx 털렸어?
잡았다 이새끼!
@FBI he is binace hacker
이모지 하나 달았다고 일론한테 뭐라하노 해킹당한새끼가 ㅋㅋ
Replying to @elonmusk @HuaweiMate6
Elon, have a lot of respect for you, but bad time to troll. Please stop.
Our SPCX shares (from our $500m investment in your Twitter takeover) are worth more than a billion.
Would appreciate if you show a little support. Thanks!
스테이킹 보상은 기본 검증 보상에 우선 처리 수수료랑 MEV 수입이 더해지는 구조임.
해커가 대규모 스왑 때리고 그 틈에 차익거래랑 청산 경쟁 붙으면서 팁이랑 MEV 수입이 늘어난 걸, 이더에 최종 정착했다고 해석하네 ㅋㅋ
평소 가스 가격이 0.1 gwei도 안 되는 수준으로 아무도 안쓰는 체인에서 거래 몰리니 실행 계층 보상이 튄 거임.
또 바이비트 때 라자루스가 탈취한 ETH를 THORChain 거쳐 BTC로 바꿨음.
그리고 이더리움은 PoS라 해킹자금이 북한에 이더 형태로 보관되면 이더한테 조온나 악재임
블록 생성권한 일부가 북한한테 가는거고 북한은 해킹한 이더 현금화보다 비잔틴 펄트했을때 이익이 더크면 어떤형태든 네트워크 공격할텐데 이걸 좋아하네 ㅋㅋ
북한은 러시아에 고기방패로 병사 2만 명 넘게 보내는 대가로 약 8,700억 원 받음
근데 북한 해커 박진혁 씹새가 바이비트랑 바이낸스 털어서 번돈은 약 11조 원임 ㅋㅋ
병사 2만 명 넘게 보내서 벌 돈의 13배를 이새끼가 해킹 두 번으로 털었음
혼자서 0.1 삼성전자 순이익 한거임 ㅋㅋ
ㄹㅇ
코인베이스 프라임 진짜 존나 위험함
코인계의 블랙스완 이벤트임
ETF + 스트레티지 포함 200만개 수탁중일듯
I suspect IBIT is already on North Korea’s shortlist.
In February 2025, the attackers behind the Bybit hack compromised a Safe{Wallet} developer’s Mac through a malicious project disguised as legitimate Docker-related tooling. They had access for 17 days before the theft, giving them enough time to manipulate the transaction interface used by Bybit’s signers. The signers believed they were approving a legitimate transaction. Instead, they unknowingly authorized the theft of $1.5 billion from a cold wallet.
The keys could stay offline while the signers approved a theft through a compromised interface.
TRM Labs attributes the recent Binance incident with high confidence to TraderTraitor, the North Korean group also linked to Bybit and the theft of 4,502.9 BTC from DMM Bitcoin. Binance’s preliminary investigation points to a compromised DevOps engineer’s laptop as the entry point. Binance says there’s no evidence that private keys were leaked, while TRM’s analysis suggests the attackers may have gained control of the signing infrastructure. If confirmed, the attackers could have moved funds through a compromised approval process without extracting the keys.
Now imagine the same thing happening to IBIT.
BlackRock’s IBIT is the world’s largest Bitcoin ETF, holding roughly 815,000 BTC worth around $63 billion. Coinbase remains its active Bitcoin custodian. Although Anchorage Digital has been appointed as an additional custodian, the fund’s latest quarterly filing says there are currently no plans to transfer any Bitcoin there.
That’s an extraordinary concentration of Bitcoin under one custodian. Regardless of how large or well-funded that provider is, a critical failure in its security infrastructure could put the entire fund at risk.
A $6 billion theft would wipe out roughly 9.5% of IBIT’s assets, equivalent to around $4 per share at current valuations.
Binance managed to freeze some stolen stablecoins. Bitcoin has no such mechanism, making stolen BTC far harder to recover.
BlackRock doesn’t separately insure the Bitcoin held by the fund. Coinbase has disclosed $320 million in commercial crime insurance coverage, shared across its customers. Its custody agreement also limits liability to $100 million per cold storage address, with any recovery subject to contractual terms, liability determinations, and other conditions.
If a major theft occurred and the fund couldn’t recover the Bitcoin or obtain sufficient compensation, the remaining losses would ultimately be borne by IBIT shareholders.
Bitcoin ETFs have made owning Bitcoin much more accessible, and there’s real value in that convenience. But as more capital flows into these products, enormous amounts of Bitcoin are also being concentrated among a handful of custodians and the infrastructure they depend on.
The larger these pools become, the more attractive they are to attackers. A compromise at any critical point could have consequences far beyond a single institution.
And that’s why security has no finish line.
Even the most sophisticated cold storage setup still depends on hardware, software, supply chains, signing workflows, and the people operating them. Keeping private keys offline is essential, but it doesn’t eliminate the risks surrounding the transaction approval process.
Spread your assets across independent custody setups. Keep your private keys offline. Verify transaction details on a trusted device screen, independently of the computer initiating the transaction. Continuously review your security architecture, and build it around the assumption that some part of your infrastructure will eventually be compromised.
There are no silver bullets in security, and no permanent guarantees. Stay vigilant, keep verifying, and never mistake a clean track record for proof that you’re safe.
Bunker mode.
디파이 이더충들 개웃기네
연 2~3% 추가 수익 먹겠다고,
ETH를 WETH로 바꿔서 Aave 유동성 풀에 예치했는데,
해커가 훔친 USDT 담보로 니네 WETH 빌려감 ㅋㅋ
니넨 평생 못뺀다 ㅅㄱ ㅋㅋ


















