津巴 Zimba 🔺

Heeaaaaaaaaated debate broke out in the ETHSecurity Community Telegram earlier today between LayerZero’s Bryan and security researchers. TLDR summary: - $3 billion+ of LZ OFTs were recently at risk of being compromised due to a default library contract that LZ Labs could upgrade instantly with no timelock to forge messages (like what happened with rsETH hack) -According to Banteg, major projects like Ethena and EtherFi were STILL using this default library contract as of a few weeks ago - There is still $178 million in value exposed to being compromised from projects using default library (look at quote tweet) - LZ Labs doesn’t need to be malicious for this be risk, they have history of poor opsec (in addition to being hacked by North Korea): - Onchain data shows LZ Labs multisig signers were engaging in non-multisig signing activity like trading memecoins, swapping on DEX, bridging. All major phishing risks as this mean production multisig keys were connected to websites, not just used for signing - LZ Labs handled private keys like a high schooler, trading memecoins on production multisig keys, no wonder they got targeted by North Korea, who knows what other poor opsec they have? THREAD BELOW

【Press Release】 We are launching a joint initiative by a "consortium of financial institutions and public blockchain-related companies" to develop an on-chain framework for Japanese Government Bond (JGB) repo transactions using stablecoins.

Bitwise CIO: Big Tech Stablecoin Tests Could Help Drive Supply to 4 Trillion USD by 2030 Bitwise CIO Matt Hougan said stablecoin payout tests by major tech companies, including DoorDash and Meta, could help drive stablecoin supply from about $300 billion today to $4 trillion by 2030. DoorDash is working with Stripe to test stablecoin payouts for 10 million Dashers in over 40 countries, while Meta is launching similar programs for creators in the Philippines and Colombia via Solana and Polygon. Hougan said stablecoins’ main advantage is simplifying global micropayments, rather than cost savings.

JUST IN: $WIF (dogwifhat) surges 25.4%, driven by its listing on Upbit.

san francisco in one picture

Full list of protocols & pool exploited in April ↓ Aftermath Finance: $ unkown Judao: $228,000 Singularity Finance: $413,000 ZetaChain: $300,000 Scallop Lend: $150,000 Purrlend: $1,500,000 Giddy: $1,300,000 Kipseli: $80,000 Volo Vault: $3,500,000 Thetanuts Finance: $50,000 Juicebox V3: $52,000 KelpDAO: $293,000,000 Grinex: $15,000,000 Rhea Lend: $18,400,000 Zerion Wallet: $100,000 MONA: $60,950 Dango: $410,000 SubQuery Network: $60,000 Hyperbridge: $2,500,000 Aethir: $423,000 BSC TMM/USDT: $1,665,000 Silo V2: $392,000 Drift: $285,000,000 LML/USDT staking protocol: $950,000 This is the 24th hack this month. More than $624,000,000 stolen in total. And it's not even the end of the month...

🚨 ALERT: Hong Kong Monetary Authority warns tokens using tickers “HKDAP” and “HSBC” are not issued or linked to licensed stablecoin issuers. No regulated stablecoins have been launched by the licensed entities as of April 28.

有个猜测： pumpfun 就是个洗钱机器 他们每天都有 1 亿美金以上的交易量，哪怕链上已经冷得像太平间 在跑某种机器人，每天疯狂发币、打包，然后在手续费上亏个 1%。这么一遍遍洗，脏钱就变成了 pump 赚来的干净钱 更骚的玩法是：提前告诉客户去冲某个 pumpcoin，然后你再往里面注入流动性，让他们在交易里赢一把，客户就能顺利套现 他们所有更新，核心都在于别让第三方分走钱，这样才能更高效地洗钱 这也解释了为什么他们根本不鸟用户群体，因为用户压根就不是他们的主要收入来源 当然，只是在猜测和理论推演而已 谁知道呢，哈哈哈哈

NEAR Intents users will not be affected. Any losses will be covered. The exposure for NEAR Intents is around $600k. We recommend all trading venues for LTC to audit the transactions and holdings. We see a lot of double spend transactions.