Bitget Wallets Suspected of Security Breach, Over $170M in Assets Moved and Swapped to ETH Breaking: MLM monitoring indicates that Bitget may be experiencing an ongoing wallet security incident, with three hot wallets and one cold wallet suspected to have been compromised. More than $170 million worth of assets have reportedly been moved out and swapped into ETH, with activity linked to 0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee. The affected wallets are said to still hold about $530 million in assets. The attack vector and total losses remain unconfirmed, and Bitget has not yet publicly responded.

Introducing Finality: Chargebacks for Stablecoins Trillions of dollars are transacted today without a way to dispute a single payment. Finality is the first to give enterprises dispute resolution to their customers without reversing blockchain transactions. We're inviting payment providers, LPs, and arbitrators to help shape the network ahead of broader access.

Since this @zachxbt post: • Coldcard - a Bitcoin hardware wallet, was hacked for $40 million. • Trezor - one of the largest cold wallets, experienced a major data leak. • SafePal - one of the largest cold wallets, experienced a major data leak. Incredible timing.

Come post your brilliant ideas in the comments, you arrogant plonkers. Apple patched another ~30 security holes in iOS 26.6.1 with a particularly nasty one: "Processing an image may lead to arbitrary code execution" (CVE-2026-65346) You're going to get GODSTOMPED by the many men who are NOT good. Tons of iOS exploits were abused for YEARS before the "good guys" ever caught wind. Some of the flaws they were exploiting had been sitting there for DECADES. Your "security" is contingent upon the GOODWILL of other men. That is a horrible game plan. And when you lose all your money for being cute with your OPSEC, don't cry too loud. Skill Issue. The vulnerable code behind iOS CVE-2026-20700 predates the 2007 iPhone itself, having been inherited from macOS, with roots reaching back to NeXTSTEP. It was not patched until 2026. Yes, really. It was actively exploited "in the wild" by multiple threat actors, and chained together with other security holes. @tayvano_ "DARKSWORD" And before DARKSWORD, iOS was getting cucked by "CORUNA", an iOS exploit that achieves FULL DEVICE COMPROMISE. I'll repost some others (non-exhaustive) since you people glossed over them: KISMET - NSO Group FORCEDENTRY - NSO Group FINDMYPWN - NSO Group PWNYOURHOME - NSO Group ENDOFDAYS - QuaDream BLASTPASS - NSO Group OPERATION TRIANGULATION - Unknown GRAPHITE - Paragon Solutions What else is there to say? ∙ North Korea IS capable of zero-days, and chaining zero-days, but they don't need any of that to annihilate the crypto industry. They're operating at a fraction of their true power, like DragonBall Z. They send you guys poisoned PDFs, phishing links, Zoom links, and your dead bodies float down the river. It's a Graveyard of Rekt™ What battle? What defence? It's a slaughter and butcher. When "normies" clown crypto, it's accurate. It's a joke industry. There's Bitcoin, there's Ether, and there's the USD. That's it. Everything else must invent a reason to exist, in an attempt to acquire: more Bitcoin, Ether, and USD. People have been trying to "make moves" for 17 years, only to get bodied by tokenized fiat currency. KEK North Korea is a third world threat actor, not even close to being the top elite. But they don't need to elite to manhandle the crypto industry. And despite the Rekt City™ that takes place daily, the crypto industry displays the greatest hubris by far. Projects communicate through postmortems as if some profound lesson was absorbed, only to get killshotted the very next day, by some other exploit they never saw coming. You have mountains of evidence, security researchers stating the contrary, but y'all triple down that an iPhone is more secure than a Hardware Wallet. Millions of lines of code on a multimedia entertainment device vs A compact codebase on dedicated hardware that has one job Not even Apple engineers would agree with you. DONKEY. ∙ @vidya_no68665 thinks he's clever with: >"You're suppose to set the Iphone aside and only interact with it when needed not fucking daily drive it, I thought this was fucking obvious." You are grossly overestimating the security of stock iOS with absolutely nothing on it. The attack surface is MASSIVE. On iOS, your PRIVATE KEY is exposed in RAM, you retard. The Secure Enclave cannot do secp256k1 so your wallet has no choice but to decrypt and sign in memory. You are naked, AND in the AFU State which is the most vulnerable state for an iPhone. Compare that to a proper hardware wallet where the private key remains inside the Secure Element. (Do not mention Coldcard, I have a specialty dunk thread for those noob investors already, who are full of arrogance). @__noided Further, run Wireshark on a separate device and see how busy your "clean iphone" is with hundreds of connections happening in the background. It's not "quiet". Your iPhone is never idle, and it's constantly parsing untrusted data: iMessage, WebKit, ImageIO, fonts... which IS the attack surface. @n13 -- Airplane Mode is a software toggle, not a hardware kill switch. Wi-Fi/Bluetooth/Cellular/NFC/UWB run their own firmware and remain connected to the main processor. Some use DMA to access restricted regions of host memory. Now, Apple does constrain this access but they don't eliminate it. Find My literally still works against a powered off iPhone using reserve power. It broadcasts a Bluetooth Low Energy beacon that other Apple devices can pick up and relay through the Find My network. Your iPhone is still transmitting even when "off". If people want to get cute with muh "QR Codes", come on now. The iPhone can still parse attacker-controlled input, AND memory corruption bugs in image-processing code have led to RCE already. CVE-2026-65346 is a recent example, patched this week. You can presume there are others that the "good guys" haven't found yet. Why would they be notified? ∙ History Lesson: Exploit after exploit, Apple was brought to their knees. In desperation, you know what Apple did in response? They sued the NSO Group. lol lmao even "PLS STOP HACKING US, PLSSSS" And then? Apple walked away from their own lawsuit because discovery would have forced them to disclose sensitive intel that other bad actors would have weaponized against them. NSO Group aside, there's an entire black market and grey market for iOS zero days. And these upstanding scholars are not buying exploits to report them to Apple. They are going to use them to destroy you, for as long as possible until they're patched, if ever. If they're lucky, they can use it for YEARS. "In the wild" simply means "the good guys finally noticed bro". Great plan, everyone. Good work. Guess who discovers tons of iOS zero-days? Google Citizen Lab Amnesty Kaspersky Numerous independent researchers Anonymous reports Often, it's not even Apple themselves. Your goodwill is stacked on top of goodwill from people who have zero obligation to Apple. Y'all have no clue if it was exploited or not because not everyone is reporting they got Rekt™. And, you have no idea if you were exploited when it concerns zero-days. It can execute and persist, without you noticing. @SatoshiSideho -- Apple has been getting Rekt™ for years @bch_gangster -- Zach does great work and I'm not knocking that. But he's a self-taught on-chain investigator, not a cryptographer, and he's never claimed otherwise. He has social reach, and you're citing him on something outside his expertise. People can be wrong, you know? ∙ The amusing thing is I dunk on hardware wallets all the time, targeting their actual weaknesses unrelated to noob skill issues. Go read them. I've been citing iPhones & Pixels well before Zach's post, and well before any KOL reacted to "timeline news". Y'all have this notion that I don't have a plethora of tools at my disposal and have reached a sound conclusion based on hard evidence, and BATTLE EXPERIENCE. I don't need a job, your job, or any referral links. I can speak with the most freedom, uninhibited by bias. Meanwhile, dudes clinging onto their sole iPhone are looking for confirmation bias.

Since that @zachxbt post: Apple patched 87 security holes with unique CVEs in iOS. And every update unveils new destruction. Most people don't own an iPhone 17 (MIE support), so it's even worse advice. A hardware wallet is far more secure, full stop. Any grievances are strictly a matter of skill, truly. "Crypto" is never far from The Graveyard of Rekt™

❌ WRONG. DONKEY ADVICE. ZachXBT is a brilliant investigator, brilliant OSINT researcher. But he's NOT a security engineer. Crypto is the WORST INDUSTRY to consult on security anything. Getting Rekt™ is the Standard Operating Procedure. Not a day goes by where crypto isn't exploited. And everybody reads the post mortem as if some lesson was learned, only to get exploited again by another exploit they never saw coming. What does that tell you? ARROGANCE. The smartest people working on security are in Web2, not Web3. That is where I defer. Google Project Zero, for example, saved your ass more times than you can count. You just never hear about it. They disclose numerous iOS zero-days that you know nothing of. Do not compare Google Project Zero to your neighbourhood Web3 firm. It's a Porsche to a Unicycle. I have read all your comments. Crypto has an arrogance problem. What business does a KOL have speaking on this subject? 1. Memory Integrity Enforcement (MIE) Nobody mentioned that the iPhone 17 is unique among ALL iPhones. Why? The iPhone 17 has Memory Integrity Enforcement (MIE). Always on. Synchronous mode. HARDWARE level, not software. ALL OTHER IPHONES ARE INFERIOR. You and your donkey ass "muh old iphone", muh lockdown mode, muh just use it to sign, muh muh muh. ENOUGH. Software cannot patch in what the silicon doesn't have. And before you reply muh iPhone 17 is safe, NO! MIE raises the COST of exploitation. It does not remove the attack surface. Apple says this themselves. "Operation Triangulation" already bypassed a hardware mitigation in the wild, through undocumented chip registers nobody outside Apple knew existed. The iPhone 17 is the Minimum Viable Donkey. It is NOT a hardware wallet. 2. PHYSICAL ATTACKS Nobody mentioned Before First Unlock (BFU) vs After First Unlock (AFU). iPhones (and Pixels) have state-of-the-art Secure Elements, stronger than off-the-shelf chips found in hardware wallets. This is true, but it's not the reality. It's only true if the iPhone is in BFU state with data at rest. ...But to sign a transaction you have to UNLOCK the phone. Congrats, you're now in the vulnerable AFU state. Widely available forensic tools (your local police station has them) extract data from iPhones and Pixels TODAY, yes even the latest models in their AFU state. When was the last time you turned off your phone? Exactly. 99.99% of people are running the AFU state. Contrast that to a hardware wallet whose keys never leave the signing boundary. Unlocked or not. The safest state for a phone is OFF, which is useless to you as you need to sign. 3. REMOTE ATTACKS This is where you will get utterly destroyed and cry on Twitter after losing all your money. You have NO defence against zero-click exploits (with many more to come): KISMET - NSO Group FORCEDENTRY - NSO Group FINDMYPWN - NSO Group PWNYOURHOME - NSO Group ENDOFDAYS - QuaDream BLASTPASS - NSO Group OPERATION TRIANGULATION - Unknown GRAPHITE - Paragon Solutions Muh dedicated device, muh one app. DONKEY. The attack surface is the whole ass phone. Next, the following run independent firmware alongside iOS, each with their own attack surface. You can't "harden" these: Baseband/Modem WiFi Chipset Bluetooth SIM Card eSIM NFC UWB inb4 muh sandboxed. Exploits chain over boundaries. A hardware wallet gives you a TRUSTED DISPLAY. You verify the transaction on a separate device from the compromised host. Muh Phone = Host and signer are the SAME device. If it's cucked, the attacker controls what you SEE and what you SIGN. You're going to lose all your money. The list of zero-click exploits documented against iPhones keeps growing, many of which are hoarded. Every iOS update patches numerous security holes you knew nothing of. There have been ZERO documented cases of funds being remotely extracted from a hardware wallet's secure element. ZERO >inb4 muh Ledger bluetooth. The security model already assumes it's hostile. >inb4 muh Ledger Connect Kit, muh Ledger NPM. Both attacks hit the HOST. Software wallets have no defence, and your iPhone wallet IS a software wallet. Ledger users needed to BLIND SIGN. The device told them it couldn't verify the transaction and they signed anyway. >inb4 muh Secure Enclave. An exploited iPhone will lie to you, or just yoink your funds with no action required from you. The Secure Enclave only supports NIST P-256. Bitcoin and Ethereum use secp256k1. Your wallet's signing keys CANNOT live inside it. They live in app memory where the exploit is. You're not ready for that conversation though.

Arc Mainnet is live. Arc launches as the Economic OS for the internet: an open platform for global markets, real-time value movement, tokenized assets, and agentic economic activity. Arc is more than a blockchain. It launches as a full-stack financial platform with assets, applications, interoperability, developer infrastructure, and Circle platform services live from day one. Arc delivers USDC as native gas, deterministic sub-second finality, EVM compatibility, and institutional validators. It integrates with Arc Studio, App Kits, Arc Portal, Circle Agent Stack, CCTP, Gateway, CPN, and StableFX. A complete economic platform at genesis. Arc launches with infrastructure for: → Agentic economic workflows → Lending and borrowing → Trading and liquidity → Onchain FX → Payments and settlement → Tokenized assets → Exchanges, wallets, custody, compliance, data, and developer tooling 190+ institutional and ecosystem builders are building across Arc.

the duke of @arc has entered the chat I hear it's @jerallaire dog