🚨 How Binance lost about $6.3 billion in 20 minutes On October 29 someone drained 17 Binance hot wallets on at least nine blockchains, and most of the money left in about 20 minutes. Elliptic calls it almost certainly the largest theft of any kind on record. 🔑 Binance's own system signed it. On Ethereum the attacker sent one transaction with 50 signed EIP-7702 authorizations for Binance's busiest hot wallet, each guessing its next transaction number. One matched, and 3 minutes 24 seconds later about $2.53B left in a single transaction. 🧊 The stablecoin issuers moved first. Tether froze $971M of USDT and Circle froze $823M of USDC before Binance said a word. Binance now counts about $3B frozen and says it has set aside $6.34B to cover users. 💻 "One laptop" didn't last. Binance first blamed a compromised DevOps engineer's laptop, then said it found "additional points of breach". The root-cause report isn't out yet. 🇰🇵 The trail points to North Korea. TRM, Chainalysis and Elliptic tie it to TraderTraitor, the group behind Bybit. Its entry point is usually a fake job offer: Ronin ($625M) started with a PDF offer, DMM Bitcoin ($305M) with a "pre-employment test" on GitHub, Bybit ($1.5B) with one developer's Mac. If you write code for a living, you are the target. Never run a recruiter's test project or "install this for the call" on the machine that holds your keys or your work access. I went through the on-chain records, every Binance statement and the investigators' reports. The full investigation is here: https://youtu.be/8AW52ORuj1k NIKANDR'S APPS | YOUTUBE

🤖 A creator says his Grok Bot got him 1.5M impressions in 7 days, so I looked at what it really does duck says set up a Grok Bot on X and gave it the title "chief marketing officer". It drafts his posts, studies other creators, logs every post in Notion and sends him a weekly report. He still presses the post button himself. 🔍 The part that works is X research. Since October a bot can search and read all of public X for free, with no X account and no X API bill: posts with a minimum of likes, any account's posts and mentions, who quoted a post, trends. Real users have it read the replies under 20 AI accounts twice a day, or turn their X lists into a news page every hour. The catches: 💸 $30 a month, with a limit nobody publishes. Grok Bot starts with the $30 Premium tier of the X Subscription, and usage comes from one weekly pool shared with Grok and Cursor. He paid $40 in overage in one week, and another user's limits ran out in two days. 🚫 Posting is risky. The docs never say a bot can post. X's developer rules say browser automation means permanent suspension, and one user's account was frozen after his bot posted through a browser. 📈 He was already viral. One of his meme videos got 11.6M views in June, six weeks before Grok Bot launched. His followers went from 5K to 8.5K at about the same pace before and after the bot. My take: if you post on X every day, it's a really good research assistant for $30 a month. Let it draft, press the button yourself, and don't expect it to make you viral. NIKANDR'S APPS | YOUTUBE

🛡 Cloudflare's AI bug hunter is the #1 repo on GitHub today, and it runs inside your coding agent After this week's critical bugs in PHP and GitLab, this is the tool to point at your own bot or Mini App before someone else does. It's the skill that grew into Cloudflare's internal vulnerability harness. 🔍 maps your architecture and every input, then sends separate agents to hunt in each part ⚔️ hands every finding to a fresh agent that tries to disprove it 📄 writes a report: confirmed, needs validation, rejected On its own code, Cloudflare ended up with 7,245 actionable findings, each with a working test and a draft patch. Install: npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit, then ask your agent "security audit this codebase". 💡 Run it twice: one run found about half of what repeated runs did. Give it a sandbox without network, or it won't run your code to confirm findings. github.com/cloudflare/security-audit-skill NIKANDR'S APPS | YOUTUBE