BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️
46.7K posts
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️
@bencrox
Community Architect. Solana 華語區大使 🇭🇰 廣東話 / 古典中國文學愛好者 / Can read 🇯🇵🇲🇲🇰🇪🦀⚓️🐍🧠 Like 🏇🏻 🏄🏻♂️ ⛹🏻♂️ 🚣♂️ 🎾 🚶🏻♂️➡️ 🧑🏻💻 🧑🏻🌾 🛠️ ㊙️🈲♨️
Hong Kong Katılım Mart 2007
1.9K Takip Edilen5.9K Takipçiler
~300m stolen → 580m user fund locked
After 5 weeks, the 580m becomes a 3m seed that hopefully grows to 5m when 140m external fund were supposed to add to 280m locked
Perhaps the locked are not treated in such way, but not clear. At least 50% loss even for long term believers
Drift@DriftProtocol
We told our community we would find a path to recovery. This is that path. Today’s update covers: how users will be compensated and how the exchange is being rebuilt.
English
I don’t think the drift heist had been resolved anyway.
Yet it had been quite deadly for the whole ecosystem, inevitable. The USDT white knight is not about saving drift, but a Solana dealt, that even evolve to an AAVE special episode.
Asia has been toxic. Sigh.
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
Huge respect for @SolanaFndn for supporting Aave with USDT deposits and also bringing $AAVE to Solana.
This is a great example how DeFi is united across all ecosystems. Grateful for @calilyliu and whole team!
DeFi United.
Lily Liu@calilyliu
We use our treasury to support the growth of the Solana economy. That is, definitionally, DeFi. But economies don’t exist in isolation. For Solana to be healthy, all of defi has to be healthy. We like competition. We compete hard. But if we zoom out, we’re all pushing toward open finance and open systems. We’ve deployed our treasury into Solana DeFi for many years. We supported Tether’s recovery plan for Drift. In moments like these, it’s important to show up for the broader ecosystem too. That’s why we are lending USDT into @aave for the first time to support their recovery efforts, and we will also be bringing $AAVE to Solana this weekend. DeFi United
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
I spent the entire day tracing the KelpDAO stolen funds by DPRK, specifically the TraderTraitor group.
At 07:39 UTC, laundering began—just three hours after the Arbitrum Council froze 30.7 ETH (~$71M).
The attacker split the remaining funds into three wallets:
0x62c72510016732333e68177d388a8111643FC64E - 25K ETH (~$57.6M)
0xD4B87bAB0ee142182f7F6DA030AeFe3E7f171530 - ~25.7K ETH (~$59.2M)
0xF9802c5EB6b972Ba686aFa7CA615910Ea8310b85 - 25K ETH (~$57.9M)
The first two wallets are still holding funds, while the third began laundering immediately after receiving them and now holds ~3.8K ETH (~$8M).
The funds were bridged to the Bitcoin network, with ~99% flowing through THORChain.
THORChain’s swap volume today reached $211M, Over 10x its 30-day daily average, generating ~$189K in fees.
During laundering, the funds were commingled with proceeds from other DPRK-linked incidents, including the BTC Turk (2025) and Bybit (2025) hacks:
bc1qt3fxzwgqayqgukgr6ny5ns9vpdpcgt72f6wwfs
0xF585F57c93e4FB8ea97D9E8E6310354Bbc4DEfb9
Tracing the flows, a total of 442 BTC (~$33M) currently on the Bitcoin network across multiple wallets. This excludes funds still pending confirmations or withdrawals.
Over 400 addresses have been used so far in the laundering process. I have 356, excluding several intermediary wallets not included.
DPRK remains a major threat to the ecosystem. When actions like the Arbitrum Council’s intervention occur, they should be recognized for the difficult but necessary decisions they made.
As for THORChain, we saw the same pattern during the Bybit hack, so nothing different should be expected. JP will likely use this moment to draw attention and appear in interviews discussing how the protocol was used to launder illicit funds.
Stay smart
Specter@SpecterAnalyst
DPRK just started laundering the funds 25K ETH were transferred to a new wallet and 2.8K ETH were distributed across multiple wallets and began laundering via thorchain 0xF9802c5EB6b972Ba686aFa7CA615910Ea8310b85
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
Today, Drift is announcing a collaboration with @tether and other partners totaling up to nearly $150 million to support our commitment to a relaunch with USDT at the center, and a path to user recovery.
These funds encompass a $100M revenue-linked credit facility, an ecosystem grant, and loans to market makers, designed to fund a dedicated user recovery pool.
Learn more 👇
English
@leoding0806x @Solana_zh @PhoenixTrade @ethtwit 😅 also affected by drift and want to shamelessly ask for help.
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
参与了 @Solana_zh 的内测，drift出事以后，@PhoenixTrade团队成员@ethtwit 也是第一时间慰问和支持。早上刷到补充的信息，链接账户发现收到了5000u空投，真的太感动了，这就是solana的社区文化，Only possible on solana
Phoenix@PhoenixTrade
The past two weeks have been tough for the Solana trading community. Some Phoenix users were directly impacted by the recent events on Drift. When our community is hurt, it matters to us. Today, we matched losses for eligible users, up to $5,000 each.
中文
@tracybbd Do you have any active channel(s) with someone from Drift replying to users/community/victims?
Do you still care about community?
English
No one from Drift is reaching out to community on X.
Please do not be scammed.
We’re working on updates, more to come soon.
SaumG@SaumG
@DriftProtocol @tracybbd Is @HyperLaura_ officially with drift? x.com/hyperlaura_?s=…
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
Solana was built for security. As the ecosystem scales, so does our investment in the tools, standards, and support.
Today that commitment deepens with a new security program, active monitoring, formal verification for top protocols, and a new crisis response network.
Learn more 👇
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
1/
We've spent the last ~16 hours conducting an independent forensic investigation into the @DriftProtocol exploit.
We are limited on what we can share publicly while we work alongside the Drift team and relevant authorities on the ongoing recovery effort.
Here's what we can say.
Built with @DivergSec
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
before the "timelocks reeeee" commenters find this, a misused timelock can fuck you just as bad. some operations need quick response and low coordination. there's no silver bullet. you actually have to do risk analysis and implement the appropriate things
trent.sol@trentdotsol
the lesson to learn from the drift hack is to design systems that are resilient to compromise. if one maliciously signed transaction gives an attacker full control over nearly all of the assets in your system, you probably have work to do
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
不在阿布扎比现场？
没关系！ 收看 Breakpoint 直播，一网打尽全部最新现场信息！
Solana@solana
LIVE from Solana Breakpoint 2025 x.com/i/broadcasts/1…
中文
@LordLochFergus @kevinkfyam Everyone is committed and doing their best, until such lackeys purge us for their own photo ops.
English
@kevinkfyam Can we like, find and care for the people first? Before we start doing the whole "the government is evil" thing?
English
Narratives of this (now) ongoing incident is running hot on Chinese language Facebook. It reflects a number of things:
1. The Hong Kong public does NOT trust its Government and its lackeys with supplies that are intended for victims. It reflects the fact that the years of distrust which culminated in the 2019 protests has not gone away despite 5 years of national security crackdown, media censorship and constant pro-Government propaganda.
2. The Hong Kong Government and its lackeys are not acting in good faith. If this was merely a case of them believing that they have the resources and logistics to do things on a larger scale and more efficiently, they could have chosen to work with the citizen-led cohorts of volunteers, rather than reporting the volunteers to the police for unlawful assembly. At best this is an act of revenge for Government lackeys having been shown up in the last day or so for being only interested in photo opportunities for performative purposes rather than actually helping victims. At worst this is yet another sign of the Government and its lackeys treating civic-minded ordinary Hong Kong people as enemies.
3. These moves to monopolise the narrative and the audio visuals (let’s face it these lackeys aren’t really into helping people) is yet another reminder for ordinary Hong Kong people that their city is now subject to Mainland Chinese official malpractice in the aftermath of disasters (ie all political and PR show all about self-benefit no real assistance to victims). In other words, even in times of disaster and grief, it is now made known to Hong Kong people in no uncertain terms than they are now subject to a bad faith colonial master.
Michael Mo@michaelmohk
[BREAKING] Sources from the ground and from different Tai Po FB Groups reported that the GONGO "caring teams" are reporting citizen-led volunteers to the police, citing them as having illegal assembly. From Kai Tak youth hostel to Tung Cheung St (Next to Wang Fuk Court). They're also taking over yet another gov shelter with loads of people donated stuff in the last few days, and only allow gov-allied Tung Wah Groups of Hostpitals in, pushing all other NGOs and citizens out. It's effectively STEALING!!! These pro-Beijing guys are trying to monopolise the effort AND THE NARRATIVE now. Stop donating to those shelters, and money to those gov-allied NGOs!
English
BenCrox ⌚️ SHOWTIME_WATCH 🇭🇰 🌅 🛠️ retweetledi
today, Solana changes forever
we've solved the biggest data/RPC problem that exists
solana historical/archival data — has now been redesigned
quick context:
today when you query historical data (getBlock/getTransaction/getSignaturesForAddress), it hits Google BigTable
this is i) slow, ii) expensive, iii) inflexible for queries
e.g., you physically can not get the first tx for a Solana address without looping back endlessly from the latest tx
for busy addresses, this can take thousands of RPC calls — extremely slow, expensive, and annoying
also, imagine you wanted to get the most recent 100 txs for an address, how do you do it?
you first hit getSignaturesForAddress to get all the tx signatures and then call getTransaction on each tx to get its details — this can take 1,001 RPC calls in the worst case
not anymore
we have built a new distributed archival storage system that is 1,000x faster, more flexible, and more scalable
the best part? we're introducing a new API method:
getTransactionsForAddress
with this method, you can now:
i) combine getSignaturesForAddress and getTransaction calls into just 1 call instead of 1,000
ii) you can search in reverse order without needing to traverse
iii) you can search historical transactions by time and slot ranges (e.g. get me all the txns from January 5th, 2025 until February 5th, 2025)
what's more:
- getBlock calls are now 10x faster
- getTransaction calls are now 10x faster
- getSignaturesForAddress calls are now 10x faster
10x lower latency, 100x fewer RPC calls, and 1000x less code
enjoy!
docs below
English
