Crypto Educator 🧘‍♂️ | DeFi Security & Exploit Analysis 🔎 | Breaking Down What Goes Wrong Onchain | Market Insights 💡 | Always DYOR | DM for collabs

The Cosmos
A protocol you’re in just got exploited What you do in the next hour matters more than anything you read after Save this before you need it 🧵🧵🧵
47
4
128
702
Gm legends 🧘‍♂️ Update on the Bitget saga Official total is now $387.5 million They say that is Zcash and TRON added Not new theft after containment Withdrawals come back in phases All at 08:00 UTC 👉28 Sept: BTC 👉29 Sept: ETH on Ethereum, BSC, Arbitrum, Base, Optimism 👉30 Sept: USDT on Ethereum, BSC, Solana, Tron 👉2 Oct: other tokens, fiat, P2P Bitget says the vulnerability has been found and patched Bounty is live 5% to freeze, 5% to recover Circle and Tether froze about $318k in stables at one tagged wallet That is a sliver of $387.5 million Mandiant and SlowMist still investigating Full post-mortem still pending Still ignore recovery DMs Only verify from @bitget and @GracyBitget
Bitget confirmed $351.6 million Largest centralized exchange hack of 2026 so far On-chain saw it first The exchange number came after Here is both sides 🧵🧵🧵
15
3
14
666
Crypto_Rexy🧘‍♂️ retweeted
Only follow official channels for updates
𝗜𝗠𝗣𝗢𝗥𝗧𝗔𝗡𝗧 𝗨𝗣𝗗𝗔𝗧𝗘𝗦: The withdrawal plan will be announced by September 26th, 4:00 AM UTC. We appreciate your patience on this matter. Based on the latest onchain tracing and classification of transactions, assets equivalent to approximately $387.5 million were transferred to attacker-controlled addresses across multiple networks. The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible. The incident involved assets across Ethereum and several EVM networks, XRP Ledger, Zcash and TRON. The primary attacker-controlled receiving addresses identified to date are: → EVM: 0x770b10b273fc44fe9197d6bf20f145c2e98463ee → XRP: rwNhefsz1UQEusxhCvHip3RANinWi4CTck → ZEC: t1WgMdtND8NF7NDUuYmq8MpMj1NTCXkMDVG → TRON: TBWNguTTgezw9dVorX441C6nDrZpRxYwKD The confirmed affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX. Our investigation and tracing efforts remain ongoing. The figures above reflect information confirmed at the time of publication and may be updated as additional transactions are classified and traced. The incident remains contained, with no further unauthorized transfers since the incident was contained, and the investigation with Mandiant and SlowMist remains ongoing Withdrawals remain temporarily paused while additional security checks and remediation are underway. Bitget will continue to provide verified updates on the investigation, asset recovery, withdrawal restoration and the User Protection Fund through its official channels. 𝘍𝘰𝘳 𝘪𝘯𝘧𝘰𝘳𝘮𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘱𝘶𝘳𝘱𝘰𝘴𝘦𝘴 𝘰𝘯𝘭𝘺.
16
7
123
42,925
Bitget confirmed $351.6 million Largest centralized exchange hack of 2026 so far On-chain saw it first The exchange number came after Here is both sides 🧵🧵🧵
57
4
53
4,258
If you hold funds on Bitget Only follow @bitget and @GracyBitget Ignore recovery DMs Withdrawals are paused That means you cannot take funds out yet It does not mean your balance was deleted
1
4
42
Where this stands right now 👉Confirmed unauthorized transfers, yes 👉Confirmed total, roughly 351.6 million by Bitget, roughly 357 million by on-chain tally 👉Confirmed private key leak, no, according to Bitget 👉Confirmed entry method, still not published 👉Confirmed Lazarus, no Wait for reports 🧘‍♂️
3
30
Gm legends 🧘‍♂️ Usdt didn’t start on ethereum or tron, it started on bitcoin 2014, tether’s first tokens were issued on bitcoin through the omni layer, back when bitcoin was the only chain that mattered Then it left Ethereum got faster, tron got cheaper, omni couldn’t carry a global dollar at scale, by 2023 tether stopped minting on omni entirely The world’s largest stablecoin became a bitcoin adjacent asset that almost never actually settled on bitcoin That’s the part people forget when ardoino posts four words, usdt on bitcoin, it’s coming home This isn’t a rebrand, it’s closing a twelve year loop Here’s what’s actually different this time Rgb protocol v0.11.1, built commercially by utexo, tether co-led their 7.5 million dollar seed round in march Not a wrapped token, not a sidechain, not a bridge iou Rgb keeps the asset data off chain and only commits a cryptographic proof to a bitcoin utxo, recipients verify the history themselves, lightning then moves the actual transfer off the public mempool Bitcoin for settlement security, rgb for private asset state, lightning for speed and cost That combination is the entire thesis Why this matters now and not in 2014 Usdt sits around 183 billion dollars today Tron alone holds roughly 94 billion of that, it won the fee war omni lost over a decade ago Bitcoin doesn’t need another symbolic listing, it needs a dollar rail cheap and private enough that wallets and exchanges actually route real volume through it Status check because hype is cheap Rgb is live on mainnet, tether has announced issuance, utexo is signing launch partners including unisat, wallets and exchanges are still in the integration queue This is a rollout, not a finished migration Utexo’s own co-founder said the quiet part out loud, if this fails, people stop treating bitcoin as a settlement layer for dollars at all Read “coming home” correctly It’s not nostalgia for 2014 It’s the same chain usdt was born on, finally getting the infrastructure it didn’t have the first time
22
4
81
4,368
Crypto_Rexy🧘‍♂️ retweeted
Isn’t it unfair that most crypto debates on this app are about price Charts Entries Market cycles But in some parts of the world crypto isn’t an investment It’s the only option 🧘‍♂️ Let’s talk about what crypto actually looks like from a country where the bank already failed and the economy is against its citizens 🧵
114
2
109
2,543
First time aping into one on Fomo There’s something about this one on Arc chain that has my attention CA 0x5849fd68a097b3ee7d87ce88a0fcbb76857648ff Let’s see how this plays out 👀 @arcman1000x
Paid partnership (ad)
46
2
60
1,258
Gm legends 🧘‍♂️ Yesterday was the halt Today is what happened after Cosmos Hub is back online The Hub itself was not the exploited chain ATOM from the Neutron incident had already reached the Hub That is why validators stopped the chain Those funds are now in a community validator multisig Neutron still owes the post mortem Until that lands ignore recovery DMs 👉A halt is containment 👉A multisig is recovery Do not mix the two
A Cosmos DEX told users to pull liquidity Then Neutron halted Then Cosmos Hub halted too The issue was potential compromise of Astroport admin control on Neutron Here is what actually happened 🧵🧵🧵
58
13
56
2,571
The next big need for AI might not be the models as most people would have been thinking It might be the infrastructure underneath them That’s why @dawninternet making digital infrastructure financeable onchain is interesting The USD.infra Vault creates a way to direct capital toward the compute and connectivity AI actually depends on The bigger idea is simple Finance the infrastructure, not just the applications built on top of it 🧘‍♂️
The USD.infra Vault Is Now Open 🔓 The Internet runs on digital infrastructure. Now with DAWN, that infrastructure is financeable on-chain. Introducing the USD.infra Vault: A new way to finance digital infrastructure powering AI compute and connectivity.
Paid partnership (ad)
21
1
23
1,479
Crypto_Rexy🧘‍♂️ retweeted
Pogo Beta is officially live. 🔸The Unique Generated Content Network: built for signal, not noise. While CT fills up with AI slop, we're here to push real alpha again. Join today: pogo.social
90
58
131
16,244
A Cosmos DEX told users to pull liquidity Then Neutron halted Then Cosmos Hub halted too The issue was potential compromise of Astroport admin control on Neutron Here is what actually happened 🧵🧵🧵
54
2
52
4,975
The important part right now Do not lock onto a dollar figure yet Early estimates are not the same as confirmed losses Until Neutron Astroport or another directly affected party publishes the verified amount The loss figure remains unconfirmed
1
3
32
If you have liquidity on Astroport Follow the official project updates Do not connect your wallet to recovery links sent through DMs And remember Neutron and Terra are not the same situation The investigation is still developing🧘‍♂️
3
41