Morning Edition
Sun, Apr 5, 2026, 8:58 AM
Crypto Twitter is laser-focused on the $280M Drift long-con hack—North Korean actors spent six months building trust before exploiting a VSCode bug—while Nansen pushes wallet-tracking alpha and CT checks overall sentiment.
From Your Network
Nansen pitches wallet-copy alpha tool
Promotes free wallet-tracking to retail traders seeking to mirror profitable Solana addresses, reinforcing on-chain transparency as edge in current market.
The people beating you on Solana aren't smarter. They just know which wallets to watch. Sign up free. See exactly what they're buying.
Trending
Drift $280M hack was six-month con
North Korean actors built fake trading firm, deposited $1M, then exploited VSCode bug to drain $280M from Drift, exposing social-engineering risk for all DeFi teams.
The most insane long game hack of all time! North Korea built an entire trading firm Conference passes In-person meetings Multiple countries Half a year of Telegram messages and working sessions Even $1M of their own capital deposited to look legitimate Then when all the pieces were in place they stole $280M Drift just released the full incident background and it’s wild! Fall 2025: A "quant trading firm" approaches contributors of Drift at a major conference. They Follow up in person across multiple countries. Technically fluent. Verifiable backgrounds. Typical trust building stuff. December-March: They onboard a real Ecosystem Vault and attend working sessions They even deposit $1M to further build ‘trust’ The long con had set in and by early 2026, these weren't strangers anymore They had now built a 6-month working relationship Then they share some repos which is routine stuff The attack vector: a VSCode/Cursor vulnerability flagged by the security community throughout late 2025. Opening a file was enough. Silent code execution. No prompt. No warning. Nothing. The moment the exploit fired, every Telegram message and trace of malware was scrubbed clean No record or trace left Every team managing meaningful TVL is a target and no one is safe from professional jobs such as this Six months of infiltration and a trusted relationship, not just a sketchy email link The bug is patched but the real attack vector was the relationship and patience How do you protect against that? 🤯
DeFi’s biggest exploit began at conference
Highlights how the $280M Drift theft originated from casual conference networking, underscoring that personal trust is now a critical attack vector for protocols.
So, let me get this straight. The $280m Drift hack took six months of: - Attending crypto conferences. - Meeting the team in person. Multiple times. - Depositing $1M of their own capital to build trust. - Sharing a GitHub link. The biggest DeFi exploit of the year started at a networking event with complimentary drinks.
CT pulse check on market mood
Simple sentiment gauge shows traders searching for direction amid hack headlines and thin weekend liquidity.
crypto twitter pulse check
Kraken sponsors top trading YouTubers
Exchange backing credible influencers signals continued marketing spend and competition for retail flows despite bearish price action.
Cred and I have partnered with @krakenfx They'll be sponsoring our Youtube channel from now on We've assured them we'd do one video a week and they've assured us they'll keep us to the promise Good way to make the show more regular Thanks Kraken ❤️ https://t.co/1t8Kfxbtvd
McAfee drops Satoshi identity clues
Revives speculation by highlighting British spelling and double-space habits in white paper, fueling CT curiosity but no market impact yet.
John McAfee on Satoshi Nakamoto's identity: "Let me give you some clues." "In Satoshi's white paper, every word that has dual spellings for American and British English is British. It is all British." "Every sentence is followed by two spaces. Now that's a minority choice in most, but two spaces." "There are only two that can be accused who were British, and only one of those has two spaces in every one of his papers." "Figure it out, people. It'll take you 15 minutes."