defi turtle

thanks to @TheShibMagazine for the ongoing K9 coverage and in particular for the highlight on my role with the K9 Finance DAO this week 🥰 I couldn't be more thankful for the opportunity to support @K9finance and will continue to do my best for the DAO 🫡

@RuggRat_X @Queen1Crypto app is back up :)

@RuggRat_X @Queen1Crypto we are working on fixing it, wasn’t brought down ahead of time will post updates in TG once server issue resolved

🚨🔥 FINAL WARNING LOOMING — LESS THAN 5 DAYS LEFT (K9 Migration) 🐾⏳ Community — this is it. We now have less than 5 days before the critical K9 deadlines begin locking in. If you still have assets connected to K9 on Shibarium, this is your moment to act. Do. Not. Wait. --- ⚠️ What Happens Soon 📌 Feb 24 • Remove ALL K9 liquidity • Revoke approvals • Last safe day to withdraw knBONE without delay 📸 Feb 25 • Snapshot of KNINE / vKNINE / esKNINE • Post-snapshot activity will NOT be recognized in migration 📌 Feb 26 • K9 validator shuts down These dates are real. Smart contracts don’t extend grace periods. --- 🦴 If You Hold knBONE — PRIORITY We’ve already seen users report: • Bridge not recognizing tokens • Redemption errors • UI inconsistencies If you plan to bridge and redeem, do it immediately. After the deadline: ⛔ Bridging may take up to a month ⛔ Support may be unavailable ⛔ May 30 freeze is possible Waiting increases risk. --- 🌊 LPs + Stakers • Withdraw liquidity • Exit validator positions • Revoke all contract approvals Leaving positions open during a shutdown is not a strategy. --- 💛 Calm But Serious This isn’t about fear. It’s about responsibility. Many of us have been here for years. Let’s finish this chapter correctly — with clarity and protection for everyone involved. If you know someone still exposed to K9 positions on Shibarium, tag them. Share this. No one should lose funds because they missed a deadline. Stay sharp. Stay safe. 🐾🤝 #K9Finance #knBONE #CryptoSafety #Migration #Shibarium

@Mazrael_shib @CryptoSupp38181 @K9finance K9 built its own product and got a Google Grant to support the infrastructure... The K9 team has never been given access (or would want access for that matter) to anything related to core Shibarium infrastructure. Why keep making things up?

@CryptoSupp38181 @K9finance this was buzz reply with "evidence" that I (i am rose as per him) deleted. not correcting the counterfeits shills from main account. "Devs" that worked with Shib such as Buzz-Shima/Turtle also would have had access to the infra at some point and could have left a backdoor.

Over the past several months, K9 Finance DAO has followed every step requested by the Shib team regarding the Shibarium bridge hack and the process to make affected users whole. Throughout this period, we have operated in good faith and maintained multiple private communication channels in an effort to reach closure. At this time, we have received no further communication or guidance in any of our private chats with the Shib team. The decision to bring this matter to a public timeline is not one we take lightly, and it should not be interpreted as an attempt to create drama. It is a necessary step to provide clarity to our holders and ensure responsible governance. To uphold transparency and fairness, the DAO is establishing a final window for resolution: K9 Finance will wait until January 6th, 2026 for users to be fully and verifiably made whole from the Shibarium bridge incident. If no complete restitution is provided by that date, the DAO will formally convene and vote on our future relationship with Shibarium, including whether continued business on the chain remains viable for the long-term health of the K9 ecosystem. This statement serves as our professional notice to the community and to Shib.io. It reflects our duty to protect our holders, not a desire for conflict. We remain open to collaboration, aligned incentives, and constructive resolution. But our community deserves clarity, finality, and a defined path forward. Further updates will be shared as new information becomes available. - K9 Finance DAO

Shibarium Bridge hacker foolishly chose not to accept the K9 bounty - it’s finally time to share the investigation we’ve been working on…🔎 this is juicy 🤤 The hacker made one stupid mistake and it completely unravelled their Tornado Cash laundering. 💰🌪️💵 That one mistake let me link: 🔗 The original hack wallets 🔗 Tornado withdrawal wallets 🔗 And dozens of KuCoin deposit accounts, likely used by money mules 👮🚨🚓 When I first noticed this transfer I couldn't believe what I was seeing. Jackpot! 🎰 I spent days tracing the blockchain: • 1000’s of transactions; 293 of interest • 111 wallets • 260 ETH laundered through Tornado Cash • 232.49 ETH ending up in KuCoin • 48 KuCoin deposits; 45 unique deposit addresses The entire obfuscation strategy fell apart because a hacker-linked wallet accidentally sent 0.0874 ETH to a “secret” withdrawal wallet that was supposed to be clean - completely destroying their privacy. Using MetaSleuth, I mapped the money flow: Original hacker wallet → “dumping” wallets → Tornado Cash → a web of post-mixer wallets → KuCoin deposit addresses. We quietly shared this with the @ShibariumNet team first so they could work with law enforcement before going public, in case any funds were still frozen or recoverable at KuCoin, but now the time has finally come where we can share this work publicly. @0xdefiturtle also tried working with @kucoincom fraud department but they told us they needed a law-enforcement case number before acting, despite having everything mapped and all the evidence handed to them on a silver platter. So now I’m publishing the on-chain evidence and methodology for the community, and for any victims who want to file their own reports. In this thread I’ll walk you through the full explanation of this analysis, step by step. Be sure to open up the @MetaSleuth dashboard (linked below) to see the graph of all the key addresses and transactions that I uncovered.

🚨Breaking News🚨 25 ETH bounty for Shibarium Bridge Hacker - final offer. I don't think they deserve it. Let's see if they foolishly miss their last chance to profit from K9.... ⏳💸 #ShibArmy please spread the news!

@DonoCrypto 🫡

While others are panicking, we just bought the dip on $ETH and $HYPE with easy gains within minutes.

@Mr_Lightspeed 🤣👏

Anyone can be a crypto KOL. Just put on a costume.

K9 Finance continues to await verified updates on Shibarium bridge operations. As the bounty window approaches its end, we expect to hear progress from the SHIB team so the DAO can plan its next moves with clarity. Our priority remains protecting the community and $KNINE on ETH.

Update: The decay period for the bounty offered by @K9finance to the Shibarium Bridge Exploiter has now kicked in. The 5 ETH offer is lowering every second for the next 3 weeks. The Exploiter has been sent the following message: “⏱️ Tick tock... ⏳ The bounty decay has started. 💸 Your bounty is now decreasing every second to return the blacklisted KNINE. Accept now if you want to secure any value for the KNINE” TXID: etherscan.io/tx/0xa5127d0aa… A metadata refresh on the NFT they were sent representing the current size of the bounty has also been triggered & can be viewed below. What was once a 5 ETH bounty is now ~ 4.8 ETH and going lower the longer they choose not to accept the offer from K9 DAO etherscan.io/nft/0xce70370d… opensea.io/item/ethereum/…

Happy anniversary to Bone Crusher, K9 Finance DAO's liquid staking platform on Shibarium! It's been an awesome year for me using the product and I was able to acquire hundreds of millions of $KNINE by vesting $esKNINE as well as earning hundreds of $BONE by locking and staking $KNINE! We've had bonus tokens from partners, and have added 2 new farming pools! 300+ liquid stakers, bridging 2M+ $BONE, minting $knBONE on Shibarium, 600+ lockers and stakers with 200B+ $KNINE locked and staked. This platform helped make the K9 Finance DAO validator the #1 validator, have the most TVL, and deepest liquidity in pools on the network. Truly leading the way for Shibarium. I am honored to be a part of this DAO. Thank you for letting me be a part of it. Here's to the K9 Finance DAO, the development team, and the sub-DAO for all their efforts to make this platform what it is today. I appreciate all of you!

The Shib team has joined @K9finance to offer a bounty to the Shib Bridge Exploiter Shib Deployer 2 has sent a message offering a 50 ETH bounty in exchange for the tokens stolen. etherscan.io/tx/0x9e6cade52…

@buzzdefi0x @Mazrael_shib @kaaldhairya 😂

@Mazrael_shib @kaaldhairya etherscan.io/tx/0x9e6cade52…

lol @ leeches. Make contract for your token only but SHIBARMY should fork 50 over the 5 and 5 over the actual requested amount for only your token? Another attack and ManipulHater and division attempt from k9. Wen Shane fud blog or next counterfeit raid?

Update: The Shibarium Bridge exploiter responded with the following message: "Hi K9 Finance DAO! I can't accept 5 ETH. The bounty I can accept is 50ETH and I will not return KNINE for less. Please let me know when you are willing to meet that price" @K9finance DAO responded with a message co-approved by @kaaldhairya: "5 ETH is the final offer from K9 DAO & it starts decaying in 5 days. This is already more than standard 10% bounty based on the 41 WETH in LP you could have gotten from selling. The KNINE is locked, so you don't have negotiating power. The SHIB team will send an additional offer for 50 ETH for the remainder of the funds separately from shiba-swap.eth (Shib Deployer 2) Keep watching messages and maybe you'll walk away with your 50+ ETH and a waiver of legal actions. But your offer from K9 DAO is 5 ETH. The bounty starts to decay in 5 days. Act quickly or you'll miss your chance. Save face - either accept the 5 ETH for the KNINE or it is worth $0 to you."

Dear Shibarium Bridge Exploiter: Limited-time offer for 5 ETH in exchange for returning frozen KNINE to @k9finance DAO The bounty contract is only available for 30 days. 5 ETH reward will start to decay in 1 week. Act ASAP for the full 5 ETH reward The K9 DAO has authorized a 5 ETH bounty for you to return the funds. We have deployed a trust-less contract for you to accept the bounty. Should you accept, K9 DAO will not initiate any further civil claims

@Mr_Lightspeed appreciate you 🙏

the ETH used to buy the 4.6M BONE came directly from the bridge/stolen funds, not the attackers own wallets or any other form of outside capital that BONE was then delegated to have 2/3 majority, which enabled the attacker to withdraw from ERC20Predicate (where all of the Shibarium projects ERC20 tokens are locked) this also means the BONE purchase was really just a redistribution of existing escrowed ETH from the bridge, netting no new actual funds into Shibarium... just went from one place to another (ETH living on the bridge ended up as delegated BONE)

@0xdefiturtle @Mazrael_shib @K9finance @UnificationUND But where did they get the funds to make that massive $BONE buy? Did they have access to the bridge funds at the time of exploiting the 10 validators? I know these events occurred in a "flash"

Does that say loan or buy?

@Digarch @Mazrael_shib @K9finance @UnificationUND yeah, but even with the existing BONE on those 10, they didn't have a 2/3 majority which explains the huge BONE buy + delegation in the attacker transaction

@0xdefiturtle @Mazrael_shib @K9finance @UnificationUND Right, so the stolen validator keys provided access to the staked $BONE on the 10 validator nodes

the 10 validators that signed were controlled by the attacker, most likely because they were all being run by 1 entity the reason the @K9finance and @UnificationUND validators didn't sign is because they are operating on their own infra that wasn't compromised the reason there was a huge BONE buy is because the attacker needed to have 2/3 majority to push a bad chain state (because K9 and Uni still had too much BONE vs. the other 10 even with the keys compromised) the bridge being hacked creates major issues for all Shibarium projects, K9 included i think the question is, who controlled the 10 signing keys to the compromised validators? 1 person? 1 machine?

@Digarch Yeah that's why swapped to bone. Validator keys were acquired from attacker getting then to sign attack. But two seem to knew preemptively and blacklisted to not sign 🤔

🚨 Shibarium Bridge Security Update 🚨 Earlier today, a sophisticated ( probably planned for months ) attack was carried out using a flash loan to purchase 4.6M BONE. The attacker gained access to validator signing keys, achieved majority validator power, and signed a malicious state to drain assets from the bridge. Because the BONE was delegated to Validator 1, it remains locked (due to unstaking delays), giving us the chance to freeze those funds. ⸻ 🔒 Immediate Actions Taken •Paused stake/unstake functionality as a precaution. •Moved stake manager funds out of the proxy into a hardware wallet controlled by our trusted 6/9 multisig. •This move is temporary until we fully confirm the extent of any validator key compromise. ⸻ ✅ Next Steps Once secure key transfers are completed and validator control integrity is verified, the stake manager funds will be restored in full. Our top priority is protecting the network and community assets. We will continue to provide transparent updates as the investigation progresses. ⸻ ⚠️ Important Notes •We are currently in damage control mode and do not yet know if the breach originated from a server or a developer machine. •We are actively working with Hexens, Seal 911, and PeckShield to investigate the incident. •Authorities have been contacted. However, we are open to negotiating in good faith with the attacker: if the funds are returned, we will not press any charges and are willing to consider a small bounty.

Incident Update: We’ve temporarily disabled the knBONE bridge while we support the Shibarium devs, who have paused BONE staking/unstaking to freeze the attacker’s ~3.7M BONE. Existing balances are unaffected. Bridging knBONE ↔️ BONE is paused until containment is confirmed. We’ll share more as soon as it’s safe to do so / becomes available.