understand the power of a telegram group. Even a tele full of non-devs who can't even register a domain name. 🤫
Ffs I get some work done and it went from like 20 ppl without a token name or a domain name or a fucking clue to 600+ people begging for drops.
This is for sure the future of finance folks.
🤫
The F U T U R E of finance folks. 😂😂😂
If you're the type of person who sees a cashtag on twitter and immediately buys it I would strongly recommend burning your computer. It's far less proactively selfdestructive and will hurt less. 😳
lol im caught up in this entire mess because someone was trolling @AlexMasmej 😂😂😂😂😂
Okay seriously this was annoying the fuck out of me bc based on what I saw when I looked at the chat for like a literal minute around 2pm PT, there was no way this was or was going to be an actual thing.
Yet an hour later I'm blasted on all sides by outraged anon degen dudes.
The easy answer is frogs are salty cuz they missed out. But. In order to miss out...wait...how the fuck did this thing that maybe had a name, still had no url, no devs, how did it launch a token and give it to people and get it on uniswap and pump the price in an hour?
Everyone in the chat i know & most I've met irl like @AlexMasmej@defidude@sassal0x@Steven_McKie. Sure, some can get a bit defi shilly overly excitable, but never ill willed.
But shit doesn't pump on accident. So I got added to a group by some seriously schemey schemers???!
So I'm looking for this token thats pumping or whatever but I can't find shit. There's no uniswap links. Every uniswap mention is a joke.
Watch this tho. Here's the first 4 uniswap mentions. It's all faces and jokes.
11:45: chat starts
12:55: 50 people
12:58: jokes about $cashtags $antimeme
1:20: jokes. Oops we haz no url.
1:36: literally no one knows what's going on
1:46: no srsly wat is this?
1:58: did everyone get tokens? Everyone: no
2:26: wait how are more ppl joininh?
Now, watch how fucking fast this happens. At 2:30 there are still less than 100 people.
At 2:36 a flood of ppl enter from a link somewhere. And the entire chat is now faceless.
By 3:19, there are 579 people.
Now here's where it gets really weird. At 2:50 I was like "lol this is gunna blow up in my face bc of course it would"
Still no links to Uniswap or anything.
At 3:40 a string of tweets some at me fast with just straight shit talk.
Search again and now there's a link. Sort of.
From Jordan. Who saw it being blasted in the chat. And it's fake.
At 3:11.
And so fast forward and I'm going back trying to figure this all out and it's insane.
The outrage faceless dudes are not salty bc they missed out on something. Nothing ever happened.
They're pretending to be salty to create hype to shill their fake #few token in replies.
Every uni link share is like the above. Not like known folks making jokes.
Bull scammers are creative.
Theres nothing more powerful than greed and FOMO but theres nothing more sharable than outrage.
And y'all fell hard. Even I thought something pumped.
Here's zoom in on the transition from fucking around with friends to "uhhh what"
2:33 pm is earliest I can tell that a link got posted somewhere. 100 people is hit. And um. Yuck.
2:45pm
Fake FEW contract is created.
2:48pm
Fake few contract creator approves on uniswap
2:49
Fake few contract creator creates $15k worth of liquidity
So it took *4 minutes* to create a fake token and add liquidity (aka "get it listed on uniswap")
Interestingly, 5 hours after putting it on uniswap (7:29pm my time), contract creator registers an ENS name: fewfi.eth.
Which means he's still shilling this scam somewhere.
its NOT edited to remove non-scam tokens. there are some they use as pairs (e.g. tether, weth, uni, etc.)
shit and like random ass names dont always help so heres the token list with tx hash so you can find a scamcoin, visit the tx hash, and then explore from there.
okay but seriously i just legit bought these Astro tokens AND I DO NOT BUY TOKENS to get the full features and in 5 minutes it zelda sounded me abt a new listing and BAM LOOK WHO IT IS?!
Our buddy 0xebb4!!!!!!! Daamn @Astro_Tools serves my needs.
Okay so I'm now watching what I saw happen last night except now its in real time and happening right now and my gosh all you poor thirsty souls searching for a quick buck and getting rekt. 😭😭😭😭😭😭😭😭
TBH I feel like @Astro_Tools knows me or something. This is my jam.
So 0xebb4 is 7/9 new tokens on uni in the last HOUR.
LOL this other scammer 0xb13fe3ed1557359ebdf856278576bdb0c2de9df5 has created 4 separate fake ISN scams with the same-same-but-different-name in the last couple hours
At some point prior to July 2024 the actual hackers landed a backdoor onto something that gave them some access to the WazirX multisig signers and/or their signatures.
We don't know what or who was compromised and it doesn't really matter.
Initial toehold was likely gained by tricking someone at WazirX or Liminal into installing malware -> escalated from there.
This access allowed the hackers to intercept/insert invisible, malicious payloads for signing in a way where none of the 3+ signers were able to notice.
With the recent sophisticated hacks fresh on everyone's mind, there's been a lot of talk about ✨fancy stacks and setups.✨
Yes, you should evaluate how—and with what—you sign txns.
But building a custom UI for your LAN Qubes OS AWS KMS everyday is not really the answer 😅
Background on the referenced hacks (feel free to skip):
1. Funds were stolen from each org's multisig.
2. Keys themselves were not compromised.
3. In Radiant and WazirX and maybe DMM, the keys backing the multisig were actually only on hardware wallets + actually controlled by distinct parties.
DMM Bitcoin - $305m in May
The least amt is known about DMM, including whether keys were cold vs hot. Early theories said address poisoning. It def wasn't that. Attached is rampant speculation (likely all wrong)
See also: x.com/mononautical/s…
Also, note, any organization that can implement / enforce EDR, etc. should do so. Full stop. End of conversation.
However, the crypto industry generally considers this a non-starter for all sorts of philosophical + practical reasons.
Crypto folks (hopefully) already know that Lazarus is one of the most prevalent threat actors targeting this industry.
They rekt more people, companies, protocols than anyone else.
But it's good to know exactly how they get in. Bc another smart contract audit won't save you.
For example, one long-time fave method:
- Contact employee via social/messaging app
- Direct them to a Github for a job offer, "skills test," or to help with a bug
- Rekt individual's device
- Gain entry to company's AWS
- Rekt company (and their users)