zostaff's banner
zostaff's profile picture

zostaff

@zostaff • 17,248 subscribers

phd holder/quant researcher/HFT system dev: @chartcultfun

Shorts

SOMEONE BORROWED $1.9M, BOUGHT A DAO'S GOVERNMENT WITH IT, VOTED TO HAND HIMSELF THE TREASURY, AND PAID THE LOAN BACK IN THE SAME TRANSACTION. $4.85M GONE. TOKEN -96%. I TRACED WHERE IT WENT IN 34 SECONDS this happened 3 days ago. the money moved again yesterday. I pasted one address into tracehound. 34 seconds later I was looking at the cleanest heist of the month. and the dumbest getaway. the "code is law" crowd will hate this. the "DAOs are decentralized" crowd will hate it more. let me show you how bad it is > THE GOVERNMENT HAD 3 SEATS X100 ran its treasury through a "Senate". three seats. majority wins. so the attacker took a flash loan of ~1.94M USDT from Aave, bought X, and spun up helper contracts. two of three seats. bought. in one transaction. democracy, speedrun edition. > THE "VOTE" with the majority, the treasury does what the Senate says. the Senate said: sell ~400,000 X into a pool the attacker built himself. an empty pool. his pool. the X token fell 96%. > HE PAID $50 FOR THE GETAWAY CAR 14:05:59 UTC: 0.021 ETH lands in the attacker wallet. about $50 of gas. from FixedFloat, an instant swap service. a $4.85M heist, started with a fifty. > 13 MINUTES 14:16:35: 4,749,726 USDT goes into a swap. it comes out as 2,022.86 ETH. 14:18:59: all of it moves to ONE new wallet, 0x8296…42e5. 13 minutes from gas to clean ETH. > THEN HE SPLIT IT LIKE A SPREADSHEET three wallets. 400.5 ETH. 400.5 ETH. 400.5 ETH. not 398. not 403. 400.5. three times. > 46 HOURS OF SILENCE then nothing. almost two days. he's waiting for the timeline to forget. > YESTERDAY: TORNADO 13:09 UTC. the main wallet starts feeding Tornado Cash. 20 deposits in 37 minutes. 420.8 ETH into the mixer. so let's recap: > borrowed the votes > voted himself the treasury > paid the loan back before the block ended > $50 of gas from an instant swap > 3 × 400.5 ETH > 46 hours of silence, then 20 Tornado deposits in 37 minutes now read this twice: A FLASH LOAN LETS YOU BORROW A MAJORITY. IT DOESN'T LET YOU BORROW A NEW TRAIL. the gas source. the split. the timing. the mixer. it's all on-chain. public. permanent. and it took 34 seconds to pull it out. 9 wallets. 8 flows. 3 findings. if your DAO votes with a token anyone can borrow for one block... who actually runs your DAO? that's tracehound. paste an address. watch them run. drop a hack from this week. I'll trace it live.

SOMEONE BORROWED $1.9M, BOUGHT A DAO'S GOVERNMENT WITH IT, VOTED TO HAND HIMSELF THE TREASURY, AND PAID THE LOAN BACK IN THE SAME TRANSACTION. $4.85M GONE. TOKEN -96%. I TRACED WHERE IT WENT IN 34 SECONDS this happened 3 days ago. the money moved again yesterday. I pasted one address into tracehound. 34 seconds later I was looking at the cleanest heist of the month. and the dumbest getaway. the "code is law" crowd will hate this. the "DAOs are decentralized" crowd will hate it more. let me show you how bad it is > THE GOVERNMENT HAD 3 SEATS X100 ran its treasury through a "Senate". three seats. majority wins. so the attacker took a flash loan of ~1.94M USDT from Aave, bought X, and spun up helper contracts. two of three seats. bought. in one transaction. democracy, speedrun edition. > THE "VOTE" with the majority, the treasury does what the Senate says. the Senate said: sell ~400,000 X into a pool the attacker built himself. an empty pool. his pool. the X token fell 96%. > HE PAID $50 FOR THE GETAWAY CAR 14:05:59 UTC: 0.021 ETH lands in the attacker wallet. about $50 of gas. from FixedFloat, an instant swap service. a $4.85M heist, started with a fifty. > 13 MINUTES 14:16:35: 4,749,726 USDT goes into a swap. it comes out as 2,022.86 ETH. 14:18:59: all of it moves to ONE new wallet, 0x8296…42e5. 13 minutes from gas to clean ETH. > THEN HE SPLIT IT LIKE A SPREADSHEET three wallets. 400.5 ETH. 400.5 ETH. 400.5 ETH. not 398. not 403. 400.5. three times. > 46 HOURS OF SILENCE then nothing. almost two days. he's waiting for the timeline to forget. > YESTERDAY: TORNADO 13:09 UTC. the main wallet starts feeding Tornado Cash. 20 deposits in 37 minutes. 420.8 ETH into the mixer. so let's recap: > borrowed the votes > voted himself the treasury > paid the loan back before the block ended > $50 of gas from an instant swap > 3 × 400.5 ETH > 46 hours of silence, then 20 Tornado deposits in 37 minutes now read this twice: A FLASH LOAN LETS YOU BORROW A MAJORITY. IT DOESN'T LET YOU BORROW A NEW TRAIL. the gas source. the split. the timing. the mixer. it's all on-chain. public. permanent. and it took 34 seconds to pull it out. 9 wallets. 8 flows. 3 findings. if your DAO votes with a token anyone can borrow for one block... who actually runs your DAO? that's tracehound. paste an address. watch them run. drop a hack from this week. I'll trace it live.

48,124 görüntüleme

2,400 MIROFISH AI AGENTS ARE TURNING MY $5K INTO $50K RIGHT NO there's an engine on GitHub called MiroFish - 22,000 stars, built by a 20-year-old Chinese student in 10 days got $4M in funding the next morning and right now my deposit on Polymarket is live and the equity curve is going up MiroFish does one thing: creates thousands of AI agents with unique memory and personality, drops them into a simulation and watches what happens i loaded 40 years of S&P 500 history into it and it generated 2,400 agents each with their own behavior: > panic sellers who dump on any red day > bulls who "buy every dip" institutions who "saw this in 2008" - retail who bought the top and is holding then i injected the current reality: rate 5.25%, inflation 3.2%, trump tariffs, war in the middle east, recession signals hit play: > 2,400 agents started arguing with each other,forming groups > opinion leaders pulled hundreds along > panic sellers triggered a cascade > bulls tried to buy the dip, 10 minutes later - consensus here's what MiroFish returned: Q1 closes negative - 79% of agents ATH before March - 4% of agents breaks below $6,400 - 34% of agents closes $6,500-$6,600 - 17% of agents quant models count numbers MiroFish counts people, my bot stacks both layers and finds where the crowd is wrong

2,400 MIROFISH AI AGENTS ARE TURNING MY $5K INTO $50K RIGHT NO there's an engine on GitHub called MiroFish - 22,000 stars, built by a 20-year-old Chinese student in 10 days got $4M in funding the next morning and right now my deposit on Polymarket is live and the equity curve is going up MiroFish does one thing: creates thousands of AI agents with unique memory and personality, drops them into a simulation and watches what happens i loaded 40 years of S&P 500 history into it and it generated 2,400 agents each with their own behavior: > panic sellers who dump on any red day > bulls who "buy every dip" institutions who "saw this in 2008" - retail who bought the top and is holding then i injected the current reality: rate 5.25%, inflation 3.2%, trump tariffs, war in the middle east, recession signals hit play: > 2,400 agents started arguing with each other,forming groups > opinion leaders pulled hundreds along > panic sellers triggered a cascade > bulls tried to buy the dip, 10 minutes later - consensus here's what MiroFish returned: Q1 closes negative - 79% of agents ATH before March - 4% of agents breaks below $6,400 - 34% of agents closes $6,500-$6,600 - 17% of agents quant models count numbers MiroFish counts people, my bot stacks both layers and finds where the crowd is wrong

59,253 görüntüleme

MY TRADING TERMINAL COSTS $0. IT'S GOOGLE SHEETS Bloomberg Terminal - $24,000 a year. My Google Sheet pulls the same data for prediction markets, free. Parses odds from Polymarket and Kalshi simultaneously. Same market - prices differ by 3-8%. The sheet catches discrepancies and highlights them. Monitors volume. Market was quiet for a week and suddenly $200K in an hour - someone knows something. The sheet flags anomalies. News feed. Parses headlines by keywords for each market. News drops - I see it before the price moves. Resolve history - how the last 20 similar contracts moved before closing. Pattern: 12 hours before resolution the price accelerates every time. Kelly calculator: I enter my probability, market price, bankroll - the sheet tells me how much to bet. AI forecasts, separate tab. Agent analyzes all the data and gives a recommendation with reasoning. Google Apps Script, free APIs, updates every hour. People pay $500/mo for signal groups with "95% win rate" and a negative balance. I open my spreadsheet.

MY TRADING TERMINAL COSTS $0. IT'S GOOGLE SHEETS Bloomberg Terminal - $24,000 a year. My Google Sheet pulls the same data for prediction markets, free. Parses odds from Polymarket and Kalshi simultaneously. Same market - prices differ by 3-8%. The sheet catches discrepancies and highlights them. Monitors volume. Market was quiet for a week and suddenly $200K in an hour - someone knows something. The sheet flags anomalies. News feed. Parses headlines by keywords for each market. News drops - I see it before the price moves. Resolve history - how the last 20 similar contracts moved before closing. Pattern: 12 hours before resolution the price accelerates every time. Kelly calculator: I enter my probability, market price, bankroll - the sheet tells me how much to bet. AI forecasts, separate tab. Agent analyzes all the data and gives a recommendation with reasoning. Google Apps Script, free APIs, updates every hour. People pay $500/mo for signal groups with "95% win rate" and a negative balance. I open my spreadsheet.

18,531 görüntüleme

Videos

zostaff's profile picture

THE WORLD'S MOST DANGEROUS HACKERS ARE F*CKING AMATEURS. I TRACED THEIR ENTIRE $625M HEIST IN 53 SECONDS the fucking Korean hacker group lazarus that the FSB was hunting for 4 years just sucked my dick I pasted one address into tracehound. 53 seconds later I was looking at the dumbest money trail I've ever seen. the "privacy maxis" will hate this. the "mixers make you anonymous" crowd will hate it more. let me show you how bad it is > THEY GOT CAUGHT BEFORE THEY EVEN STOLE ANYTHING the most feared hacking group on the planet needed gas money to rob a bridge. 1.06 ETH. guess where it came from. BINANCE. a withdrawal. from an exchange. that keeps logs of every account that requests one. the $625M heist started with a receipt. > THE WHOLE INDUSTRY WAS ASLEEP FOR 6 DAYS half a billion dollars walked out the door and NOBODY NOTICED. 6 days. not 6 minutes. 6 DAYS. "decentralized security" btw. > THEN THEY BUILT A MONEY SHREDDER 103,854 ETH -> 4 wallets 4 wallets -> 15 burners 15 burners -> TORNADO CASH looks smart right? looks professional? that's exactly what gave them away. > 300 DEPOSITS. IDENTICAL. LIKE A ROBOT. every single burner did EXACTLY 20 deposits into the mixer. not 19. not 21. TWENTY. fifteen times IN A ROW. $175,000,000 pushed through tornado by a script so predictable you could set your watch to it. you don't hide from a pattern by REPEATING IT 300 TIMES. > THEY COPY-PASTED THEIR OWN MISTAKE SIX TIMES 6 burners funded with EXACTLY 3,003.3 ETH. each one mixed EXACTLY 3,000. each one left EXACTLY 3.3 ETH sitting there. the same leftovers. six times. like signing your name at the crime scene. > THE SCARIEST HACKERS ON EARTH CLOCK OUT AT NIGHT across every flow I traced: ZERO moves between 18:00 and 02:00 UTC. they stole a fortune and still kept a 9-to-5. > THEY DIDN'T EVEN WAIT burner gets funded -> first deposit into the mixer -> MINUTES. no patience. no randomness. just a shift at work. so let's recap the "world's most dangerous hackers": > paid for the heist from a binance account > ran the same script 300 times > left the same 3.3 ETH behind six times > kept office hours amateurs. f*cking amateurs. now read this twice: TORNADO CASH HIDES WHERE THE MONEY GOES. IT DOES NOT HIDE HOW YOU MOVE IT. the gas source. the amounts. the leftovers. the rhythm. the sleep schedule. it's all on-chain. public. permanent. and it took 53 seconds to pull it out. 22 wallets. 35 flows. 4 findings. if a nation-state with unlimited budget can't stay invisible... what makes you think the guy who drained your wallet can? that's tracehound. paste an address. watch them run. the blockchain never forgets. it's just been waiting for someone to look. name the hack. I'll trace it live.

zostaff

163,027 görüntüleme • 6 gün önce

zostaff's profile picture

SOME GUY BUILT ABSOLUTE GOLD AND ALMOST NOBODY KNOWS ABOUT IT repo: gemsearch. a chrome extension that puts a spider right into your x feed. it scans posts in real time and finds emerging narratives while you sleep, eat or trade something else how it works inside: > the spider hooks into your feed and pulls every post into a local dashboard > jev module automatically groups posts by narrative. not by tickers but by meaning. if 40 people are posting about ai agents with wallets thats one cluster > site crawler visits project sites from posts and pulls context. docs, team, repo, what is actually built > 4 grok agents verify each narrative separately: first evaluates signal, second checks product, third looks for risks, fourth decides if theres enough data to enter > if all four give ok its a verified narrative > dashboard shows everything in json. export and build your own strategies on top but the real juice is what comes next > built in launcher fires a token by narrative through pumpfun in one action > https adapter connects to any solana launchpad if pump doesnt work for you > 5 attempts per day. 0.025 sol per launch. not spam but precision strikes on verified narratives connected via api to slimefamilyxyz which does big work in the era of narratives. slime finds growth and tracks the wave, gemsearch verifies through four groks and can launch a token by narrative in one action. together its a pipeline that does the work for you that is impossible to do by hand while everyone was looking for alpha in chats someone was building a tool that finds it on its own 🕷

zostaff

50,432 görüntüleme • 24 gün önce

zostaff's profile picture

10 repos that mass replace a $100,000/year football analytics department. all free. all open source. -> replaces Hawkeye and Second Spectrum YOLO tracks every player and ball from any broadcast. assigns teams by jersey color. calculates speed, distance, possession. from a TV feed. no sensors. -> replaces entire quant sports desk stacked ensemble: LightGBM + XGBoost + Neural Networks + Random Forest. scrapes FBRef automatically. ELO with dynamic K-factor. Poisson xG. MongoDB backend. the most complete open-source football prediction pipeline on GitHub. -> replaces paid prediction platforms ($30/mo) full GUI app. 7 ML algorithms. downloads data from football-data. co. uk. predicts upcoming fixtures. exports to Excel. one click. -> replaces manual feature engineering XGBoost with 354 hand-crafted features. works for any European league. data straight from football-data. co. uk. plug and predict. -> replaces value bet scanners ($50/mo) ELO + expected goals + offensive/defensive ratings. compares model probability vs Vegas lines. flags when you have edge. -> replaces bookmaker calibration tools Gradient Boosting tuned to output probabilities that match real bookmaker odds. not just accuracy - calibrated confidence. -> replaces StatsBomb xG subscription xG model from KU Leuven researchers. LogReg + XGBoost pipelines. supports Wyscout, StatsBomb, Opta data. academic grade. -> replaces xG analytics dashboards xG on StatsBomb open data. SHAP explanations for every prediction. proper calibration. tested on FIFA World Cup 2022. -> replaces basic prediction models Poisson distribution for goal simulation. the classical approach that still beats most ML models on draw prediction. -> replaces Premier League prediction services XGBoost + AdaBoost + SVM on EPL data. detailed EDA. confusion matrices. honest 56% accuracy - because football is hard. like + bookmark you'll need this when you build your first football prediction bot

zostaff

224,902 görüntüleme • 6 ay önce