Bizzee P

Update: not every Gnosis Safe collapsed to EOA. Some carried over intact (Alchemix: threshold=3, Yearn governance: threshold=6). The Aave Guardian Safe specifically has 0 bytes of code on PulseChain, which is why it was exploitable. The vulnerability is real but not universal. Digging into what determines which Safes survived and which didn't.

⏺ 🚨 The protocols everyone assumes are dead on PulseChain aren't dead. They've been captured. Was digging through forked protocols today and found someone took over Aave V2. The Guardian multisig became a single key EOA on PulseChain. 51 days post fork, they replaced the entire LendingPool with a 3 function drain contract. Sweep tokens, burn aTokens, empty initialize. 527 bytes. The whole lending protocol, gone. Why would someone do this? If you don't take the keys, someone else will. Every forked multisig is an open door. You either walk through it and secure the protocol, or you leave it for someone with worse intentions. Draining Aave's remaining deposits and locking down the implementation is arguably the responsible move on a fork chain where the original team will never show up. 🧵 Here's how it works. When PulseChain forked Ethereum, every Gnosis Safe multisig became a single key EOA. The Safe proxy infrastructure didn't carry over. What required 5 of 10 signers on Ethereum only needs ONE signer on PulseChain. One key from the original multisig gets you full control over everything that multisig governed. 👀 @NineIronCapital just caught the same pattern on Reserve Protocol. ERC1967 proxy upgrade, forked admin key, full governance takeover in 5 blocks. Compound's Timelock admin is an EOA. Uniswap governance has quorum=0. Yearn vaults still hold 44M pDAI. 🔑 The "dead" protocol graveyard is a key factory. And the keys are already being used.

Nobody's resuscitating anything. The point is the opposite. Aave was captured a long time ago. These protocols have been actively taken over, on chain, with receipts. Whether you think they're worth anything or not, someone with an Aave Guardian key thought it was worth deploying a custom drain contract 51 days post fork. 0xa301 (Guardian) deployed 0xf30e as new LendingPool implementation. 3 functions: sweep, burn, initialize. That's it. And Reserve Protocol governance is being taken over right now. The "dead pig" keeps attracting visitors.

It’s 2026 the older protocols have already been updated and the new eips will larp what the older stuff is offering. Quit trying to resuscitate the dead pig it’s old it’s ugly and has cancer. Let it dead peacefully there’s gains to be made elsewhere without the headache and risks.

@DcentraliseMe @Hexangelo5 Thx brother. Appreciate all your hard work too. 🔥

@Bizzee_P @Hexangelo5 Lots of great analysis coming from this guy, worth a follow 👆

⏺ 🚨 The forked Curve DAO on PulseChain is fully operational and nobody is paying attention.... CRV inflation is running. 300K+ new CRV minted every day. Last mint: May 4, 2026. A small group of OG sacrifice wallets is farming the entire system with zero competition 🔒 They're locking CRV into veCRV with 4 year locks (until 2030), adding custom gauges, voting 100% weight to their own gauges, minting the rewards, and running it all through forked Convex for boosted yields 🔥 The forked Convex voter proxy still controls 80%+ of all veCRV on PulseChain. 262 gauges registered. A handful of active voters controlling where ALL emissions flow. Someone even tried a hostile takeover in February. Rapid fired apply_transfer_ownership() on veCRV and GaugeController. All failed. The admin is locked behind the Aragon DAO proxy. These wallets already had their locks in place before the attack even happened 🔐 300K+ CRV flowing per day. One group catching all of it. No competition. No attention. Just quiet accumulation while everyone else sleeps. Why this matters ⚡ On Ethereum, Curve governance controls where billions in liquidity flow. The "Curve Wars" were fought by Convex, Yearn, and entire protocols spending hundreds of millions just to control gauge weights and emissions. On PulseChain, that same system is live and uncontested. A handful of wallets are locking it up for pennies. If PulseChain DeFi ever gets real liquidity, whoever controls the gauges controls where it flows. The wallets are already in position. Receipts: veCRV: otter.pulsechain.com/address/0x5f3b… CRV Minter: otter.pulsechain.com/address/0xd061… Convex Booster: otter.pulsechain.com/address/0xF403… GaugeController: otter.pulsechain.com/address/0x2F50…

@yourfriendSOMMI lol i wonder?

@Bizzee_P Interesting. Who could this be?

@HexJamHex @NineIronCapital 🙏🏽🙏🏽

@Bizzee_P @NineIronCapital Amazing work, buddy!! Keep it coming! ❤️💛🧡💚💙🩵💜🩷🤍❤️

🔍 Adding to @NineIronCapital's thread on the forked Arbitrum L2 returning to life on PulseChain.... He told you the wallet came back after 237 days. He didn't tell you what that wallet actually IS 👀 On chain history shows it ran MakerDAO keeper infrastructure on PulseChain: Liquidation auctions (Clipper redo/take) Debt auctions (Flopper dent/yank) System debt healing (Vow heal) Minted cDAI on forked Compound Staked as Arbitrum validator One wallet. Three forked protocols. Operator level activity. This isn't some random address poking around. This is the person maintaining protocol plumbing across MakerDAO, Compound, AND Arbitrum on PulseChain🔥 Zero Ethereum history. PulseChain native. And they just woke up 🧾 Receipts: Wallet: otter.pulsechain.com/address/0xCb4e… Flopper (debt auctions): otter.pulsechain.com/address/0xA41B… Vow (system healing): otter.pulsechain.com/address/0xA950… cDAI (Compound): otter.pulsechain.com/address/0x5d3a… Arbitrum Old Rollup: otter.pulsechain.com/address/0x5eF0… ETH history (zero): etherscan.io/address/0xCb4e…

.@LibertySwapFi gives us private swaps 💪 But Aztec Connect is something we have been ignoring and need to pay attention to. Private lending, staking & yield through a zk rollup 🔒 They built it around DAI. Called it zkDAI 🏦 Private stablecoin txs via zk SNARKs. pDAI is the exact asset class it was designed to shield 👀 The code is fully open source. Aztec's exact words: "We'd love to see an independently operated Aztec Connect and are ready to fund it" 🤯 Nobody has revived it. On any chain. PulseChain already has the contracts & verification keys from the fork. The infrastructure for private DeFi is just sitting there waiting ⏳🏁

@NineIronCapital just flagged Aztec RollupProcessor activity on PulseChain. 🔍 The forked contract has 18 live bridge contracts wired into Curve, Lido, Yearn, Uniswap, and Liquity. The admin was never renounced. Ethereum gave up the keys before shutdown but PulseChain forked the pre renouncement state. Upgradeable proxy. 1 of 2 Safe. Perpetually open escape hatch. This isn't a vault. It's a cross protocol gateway with a ZK verifier intact and no one at the wheel.⚡ Same pattern as Gearbox, MakerDAO, Compound. Forked infrastructure everyone assumed was dead, turning out to be fully intact. 👀 If someone gains control of this contract they don't just get the tokens inside. They get a single entry point wired into six major DeFi protocols, with ZK privacy, through an upgradeable proxy they can rewrite to do anything. 🧩 The pioneers have already activated Gearbox, MakerDAO, and Compound. If this contract is next, the implications are bigger than anything they've touched so far. @yourfriendSOMMI

@SDJaHawl @NineIronCapital These forked protocols launched with no teams. Just copied code and abandoned positions. The pioneers are activating dead infrastructure. Dormant pools with bad debt sitting unliquidated isn't decentralization. It's neglect. Someone has to turn the lights on.

@Bizzee_P @NineIronCapital So consolidating “control” of every major forked DeFi protocol is a good thing? I want to learn this stuff, but I thought DeFi was about not having control?

Some thoughts on what @NineIronCapital discovered today...

@RichardHeartWin couldn't feel more bullish

Prices suck. Yell stupid things at me, so you feel better.

@LibertySwapFi @zkxwallet Congratulations you guys! Well done! 🔥

🎉 ZKX Wallet is NOW LIVE! 🎉 We are thrilled to announce the official release of @zkxwallet built by @LibertySwapFi for users who want full control, seamless DeFi access, and real privacy. Key Features: 👉 Shield & Unshield Assets: Instantly move funds between public and private balances using advanced zero-knowledge privacy tech (powered by Railgun integration). 👉Send, Swap & Bridge: Fast transfers, token swaps, and cross-chain bridging directly in the extension. 👉Full PulseChain and EVM Support: Works seamlessly across Ethereum, PulseChain, and other EVM-compatible networks. 👉Non-Custodial Security: You control your keys. We never have access to your funds. 👉 Fully open-source 👉Clean, Intuitive Interface: Designed for both beginners and experienced crypto users. Whether you’re shielding stablecoins gaslessly, trading across chains, or simply want privacy by default, ZKX has you covered.