Andrew Seb

This account is verified. Learn more

@AndrewSeb555

Head of Research @icmdotrun

Crypto Class of 2021 | On-Chain Sleuth | $ICM $SOL $BNB

t.me/Bullrun_Calls

International t.me/ICMBullrun Joined August 2021

1.7K Following 3.6K Followers 11K Posts

Latest posts 5

Pinned post

Andrew Seb @AndrewSeb555 Apr 11

For people who do not understand how bad the situation is, their most liquid pool is on ETH which has $2.8M. When this gets liquidated, selling this stake on that pool today gets you $2.8M (basically the whole pool).

@Dolomite_io has no way to liquidate this and come out as whole from this situation. The stablecoins that were borrowed belonged to people who people who deposited on Dolomite for earning yield. When they go to withdraw it, they will not be able to do so.

@CoreyCaplan3 is the founder of @Dolomite_io and the CTO of @worldlibertyfi. He has not commented so far but he seems to be in the right position to suggest this Dolomite rug. It is at the expense of depositors on Dolomite.

Andrew Seb Verified account @AndrewSeb555 Apr 10

🚨 $WLFI Team has now borrowed $150M worth of USDC against 5% of $WLFI supply. $WLFI has less than $10M in core assets all their DeFi pools on all chains combined.

@Dolomite_io is rugging. Their founder is the CTO of @worldlibertyfi so you know he's aware of this. Despite several alarms raise, he hasn't said anything on this topic.
View quoted post on X

Andrew Seb @AndrewSeb555 18h

The Keplr Google/Apple login drain is big.

On-chain, the unauthorized transfers all go to one address, the same key on five chains: Cosmos Hub, Osmosis, Celestia, Akash and dYdX. As of 11:14 UTC it holds about $4.1M:
- 1.73M ATOM, 1.30M of it taken out of staking
- About $1.04M of tokens on Osmosis
- 651K AKT, 540K TIA and 612K DYDX

More than 29,000 wallets were emptied on Osmosis alone, one transfer each. It's still receiving funds, and nothing has moved out yet.

If you created your @keplrwallet with Google or Apple:
- Move your liquid funds to a new wallet with a fresh recovery phrase or a hardware wallet
- If you have staked ATOM, disable stake tokenizing (LSM) on that account so it can't be converted and moved

Receiving addresses:
osmo1atuap9kfnt6y8ykvn3437e7j3z8qffh3gsqtcw
cosmos1atuap9kfnt6y8ykvn3437e7j3z8qffh3qtnmwu
celestia1atuap9kfnt6y8ykvn3437e7j3z8qffh33pzt53
akash1atuap9kfnt6y8ykvn3437e7j3z8qffh3ds7uhx
dydx1atuap9kfnt6y8ykvn3437e7j3z8qffh3fjalwt

The whole point of self-custody is that you do not support someone else having the ability to interact with or control your funds. As a rule, avoid using these QoL Web2 features.

Keplr Wallet @keplrwallet 1d

We have received reports of unauthorized transactions on some Keplr accounts created with Google or Apple login. We flagged this to the @Web3Auth team and have been working with them on the investigation since.

Based on our initial assessment: if you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected.

If you created your Keplr account with Google or Apple login, your account may be affected. While we investigate:
– Do not send new funds to that account.
– Do not re-import or recreate it anywhere.
– Google/Apple login is paused for now.
– Trust updates only from this account. Ignore DMs or links offering “recovery”.

We will share verified details and next steps here as soon as we have them.
View quoted post on X

Andrew Seb @AndrewSeb555 20h

Update: @Loopscale has frozen what was left of the attacker's position.

After the Nov 5 attack, the attacker still held 57,861 shares of Loopscale's $USDC vault (worth about $64.5K).

These shares were found yesterday and flagged privately to the Team, so the attacker wouldn't get a warning to move them. I held this until they were frozen.

Today, at 05:02 UTC, it froze the attacker's share account. Those shares can no longer be moved or redeemed, saving $64.5k.

Andrew Seb Verified account @AndrewSeb555 3d

Today, 06:09 UTC: 586k $USDC was pulled from the USDC Genesis Vault for 465 shares, right after a 65,000 USDC deposit. About $520K net.

As of 11:50 UTC, nothing has gone back into the USDC vault. Its USDC account is still 586,000 lower.

The users are yet to make whole and I wonder why they broke their silence on this after 4 days.
View quoted post on X

Andrew Seb @AndrewSeb555 2d

Stay safe out there 🫥

Andrew Seb @AndrewSeb555 3d

Today, 06:09 UTC: 586k $USDC was pulled from the USDC Genesis Vault for 465 shares, right after a 65,000 USDC deposit. About $520K net.

As of 11:50 UTC, nothing has gone back into the USDC vault. Its USDC account is still 586,000 lower.

The users are yet to make whole and I wonder why they broke their silence on this after 4 days.

Andrew Seb Verified account @AndrewSeb555 5d

It looks like @Loopscale, a Solana lending protocol, lost 4,597 SOL (~$431K) to an exploit on Nov 1. I couldn't find them acknowledging or confirming it yet.

How: the attacker bought 1 kySOL for about $123 and deposited it as collateral, labelled as zBTC. Loopscale priced it as bitcoin. Read with zBTC's 8 decimals instead of kySOL's 9, that 1 kySOL counted as 10 zBTC, about $777K.

In the same transaction the attacker took a 1-day loan of 4,597 SOL from a Loopscale SOL vault. It fell due at 19:41 UTC on Nov 2 and wasn't repaid. The only collateral behind it is that 1 kySOL.

The loss sits in that vault, about 8% of its ~55,600 SOL, unless Loopscale covers it.

CC: @Luketruitt @marygooneratne

View quoted post on X