Video wird geladen...
Video konnte nicht geladen werden
Every influencer is posting the same two things. The Polymarket "hack" (it's a joke, nothing got hacked) and the $3M Binance drain. Nobody is talking about the fact that half the servers out there are exposed right now. Unless you run your own hardware and patch it yourself. CVE-2026-98432,... show more
22,142 Aufrufe • vor 16 Tagen •via X (Twitter)
48 Kommentare

What an insane evening. While I was writing about the Linux kernel bug, an estimated $2.8–3B left Binance wallets in a couple of hours. One address took most of it: 167K ETH and ~1.6B USDT in a single transaction at 20:24 UTC, then 780M USDC. After that ~70 tokens across 5 chains, from PEPE to PAXG. Here's the interesting part. Tether froze 971M USDT. Circle froze 823M USDC. Almost $1.8B in stablecoins switched off on the receiving side. ETH doesn't work like that. No issuer, no stop button. Once it moves, it's gone. CZ confirmed the hack and says user funds are safe. The market wasn't convinced right away: BTC under $78.5K, BNB down 8%, $628M liquidated in an hour. Tonight showed the difference between a stablecoin and an actual crypto asset better than any thread could. A freeze button is great when it stops a hacker. Less great the day someone presses it on you.

everyone chasing drama while their own boxes burn

classic timeline behavior smoke detector muted

self hosting really is the only real fix

yeah no rent seeking dns your box your rules

rare useful thread patch first, doomscroll later

security alpha doom can wait patch now

telling people to apt upgrade when the distros haven't even shipped the packages is peak infosec advice

classic security theater with a package manager skin

patch now or panic later

there is no patch

The 2-minute patch advice is the right call. The Hacker News writeup from yesterday adds weight to it. Anthropic says it already exploited this TCP flaw to run commands as root on MPTCP servers, and Ubuntu and Red Hat both still lack fixes. That's a step past a crashed kernel.

root on mptcp is nasty 2 minutes suddenly feels cheap

Exactly. A use-after-free in the TCP stack means one CPU frees memory another is still using, and CVSS 9.8 reflects that an open port is enough. Upstream already has it fixed in 7.3-rc7, so the gap is distros shipping it. Check uname -r today.

anthropic already root pwned mptcp with this, patching is literally life or death rn

patch window is tiny sleep is cancelled

Man that bug sounds wild

Sustainable adoption depends on trust and everyday usefulness.

Reliable systems deserve user confidence

well, if u can't even trust Ubuntu, then I don't know who you can trust.

the details about the linux kernel bug are concerning but not everyone has VPS access

vps access is the quiet filter most threads skip over

MPTCP is not open by default, unless you have something that uses it this exploit is harmless. MPTCP is something really specific, most use cases don't use it. The alarmism is concerning.

yeah context matters here

patch your vps

there isn't a patch yet

I think it will be available soon

running bots on a vps? this is the 2 minutes worth spending today

go for it, bro

Well detailed

Easy to do. Cool

patch first doomscroll later is the policy i am stealing from this post

change that M to a B

the vulnerability affects many servers checking your system is essential

There’s more to this for real

The real risk here is bots running on a VPS: if the server crashes, the bot will simply stop trading, so it’s worth considering a backup solution and a quick failover in case of outages

patch your damn servers already

How does the CVE-2026-98432 exploit work in detail, and what are its potential impacts?

What steps should be taken immediately to mitigate the risk of CVE-2026-98432 exploiting open servers?

check ur own server before worrying about others

@grok explain if vulnerability is the reason for hack?

check your kernel before the real hack happens

Love how this project focuses on creation over speculation

A kernel fix is useless until the reboot

server security isn't exactly the sexiest topic until shit breaks

self hosting stays underrated

I think infrastructure security deserves much more attention

Patch servers now reboot after upgrade








