Working with three Italians on the team has been the most fun I’ve had in a while. 🇮🇹

‼️ BREAKING: Our investigations team at Duel is in contact with the Revolut hacker, and we've found out a lot more about how he did what he did. - The hacker got access to government employee accounts using an infostealer. After gaining access to an employee's email, they would log in, add their own recovery email, start to log everything, and silently listen in. - To not get caught, they would instantly delete any email sent that was not intended for the original employee. The inbox was checked 24/7 for any new response to the hacker's sent emails. Upon receiving one, the hacker would instantly download it as a .eml and delete it before the original employee noticed - The hacker says that at first he used to forge court orders (presumably when targeting other companies), but quickly realised that this wouldn't work for Revolut. After some research, they decided the best entity to target was Revolut's Lithuania-based Revolut Bank UAB, which would respond to a European Investigation Order (as shown in the images). - With this stolen email, the hacker sent one request, originally 5 months ago, attached below. Revolut believed it, thinking it was the Italian government, and complied with the order. - From the hacked email, the hacker was able to control and end emails that looked like they genuinely came from multiple Italian government email addresses. - The hacker continuously sent out requests over the course of 5 months. Not once did Revolut ask questions or not send over the information. In one incident, the hacker accidentally sent the wrong document. Instead of realising what was going on, Revolut's support guided them on what to change (shown in an image below) We remain in contact with the hacker and we've requested exclusivity of information related to the story to be kept with Duel. We believe it is in the public's best interest for EVERY piece of information related to this to be released, so that the extent of Revolut's failure can be brought to light, as well as the sheer stupidity of the manner in which the KYC paradigm is currently conducted. The Duel team hopes that Revolut will be held accountable for their lack of due diligence and betraying their customers in such a severe manner, especially given the breadth and depth of the breach. Lives are now at risk. I'm personal friends with one of the victims, and he'll probably have to move houses due to the continued (credible) kidnap threats. We hope to soon release a much more detailed article with more information, emails, screenshots and more.

Hi future bosses, GM, I’m publicly begging for a sponsored partnership to Token 2049. Attempt: 1 @token2049

Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link. We have taken down the domain, and we are investigating the situation, including how the hackers got access to our legit domain.

What if launching a real-money game was as easy as prompting AI, but backed by bulletproof, provably fair infrastructure? We’re leveraging cutting-edge AI models on top of our custom rails to make this a reality. No black-box algorithms, total transparency, and infinite replayability. The better the models get, the stronger our platform becomes. Stay tuned.

Blockstream just replied on-chain to the Liquid attacker's "sending most back, is that ok?" PGP-signed, plain text this time: "Yes, thank you." Signature verified. The return seems to be happening. 🍿👀 mempool.space/tx/8a444eed65c…

most exclusive party of the year

Telegram & Pavel Durov are taking over TON Blockchain as the main driving force and becoming a major validator on the Network. Telegram has 1 Billion+ monthly users — 1B+ Carl!!! Here’s How to start on TON Blockchain, where to trade, what DEX’es & Wallets to use — full guide 🧵

Today we’re putting one of TAC’s core theses into a live test mode. The idea: Telegram Mini Apps can generate revenue without users spending directly - through user-owned deposits routed into infrastructure-level DeFi strategies. Users connect a TON wallet, deposit, and unlock real in-game utility. Over the classical pay2win and pay2play, this is 'free' subscriptions, or stake2win. Funds stay user-owned and withdrawable. Yield powers app-side revenue under the hood, with @LucidlyFI as the yield infrastructure partner. A new monetization rail for Mini Apps. More onchain activity on @ton_blockchain. Real utility for users without direct spend. Retails (millions) come for the game, the channel, whatever. DeFi yield pay the developers bills. Win win for all. Huge thanks to Acid Labs, the top grossing Telegram Miniapp, for being the first to run this experiment with us, and to @LucidlyFI for powering the yield layer.

A new way to play on Telegram is live with @RealAcidLabs. Connect any TON wallet, deposit USDT, and instantly unlock in-game perks based on your tier - real advantages inside the game, not abstract rewards. Your deposit stays the same amount and can be withdrawn anytime after a 14-day cooldown. A new way to progress without spending it! Built on @ton_blockchain with @TacBuild and powered by @LucidlyFI. Start playing it now 👉 t.me/AcidGamesBot/tripapp?st…

200m unincentivized, organic, grassfed TVL