My Worst SUPRA Prediction Came True

[00:00:00]Sup guys. So, the bad thing I was talking about for months now actually happened.

[00:00:09]So, today's video will all be about hacks. Let's start with a minor one. uh Joshua Topkins ex account got hacked and he hadn't access to the account and the hacker started to violently [ __ ] post about a new platform and people need to log in and post their wallet address and the cheapest of hacks. I'm very proud of the super community because they all [ __ ] on him as soon as the post landed.

[00:00:38]hundreds of posts warning to use these fake websites. And about a day later, Joshua Topkin had his account back and everything was fine and back to normal.

[00:00:50]But of course, this is not the worst hack that happened. Of course, I'm talking about the $9 million HAR hack.

[00:00:57]So, what happened? I'm going to explain it plain and simple. The attacker bought 250 source coins. Those were pretty worthless at that time. So, think about a few dollars. Then he used the Supra Oracle verifier on HAR and there the oracle falsely accepted a so-called [music] zeroed signature that it shouldn't have accepted and the hacker was able to inflate the price on the oracle. So, the source price in reality wasn't actually the source price on the Supra Oracle.

[00:01:37]And this bug helped the attacker to borrow $9 million in USDT and HAR as a collateral against the new inflated fake price. A few more facts to this. This was not a hack on the Hideera chain.

[00:01:55]This was a mistake on behalf of the Super Oracles. And this and the next one. And this makes me sad, but you only get the truth here. Super already fixed this bug on 11 other chains. And even Joshua Topkin admitted this was an obvious bug and everyone should have seen it, but it happened. $9 million gone. Bonsand, this was the platform it happened on. They paused and then apparently it's not set in stone yet.

[00:02:29]The users will get a compensation by the Hideera Foundation. So we talk about only $9 million in compensation.

[00:02:39]I guess it's not that much for the Hideera Foundation. [music] And there's also rumors that a white hacker returned 1 million of the 9 million stolen, but I don't know if that's true. But this is the state of the things. And of course, Joshua Tomkin promptly made a shout out on X to the hacker. And the first lines are, "Being a founder in DeFi can feel like your worst nightmare of showing up to school naked. Everyone laughing at you, pointing at how shriveled your dick is." Over and over again, except it's not a dream. It's Monday. He must feel terrible right now. And he continues to explain that this hack was obvious and everyone should have seen it but nobody did. But what he is actually doing now and I reposted it and said this is greatness because he is offering a job to the hacker. He can keep 100k and his other option is I have to scroll down. He said door one. Yeah, door one 100k gift charge is dropped. He's getting a job. He will sleep well at night. Build future change the world.

[00:03:53]And door two 100k bounty that pursues him growing each year and every turistication forever. And this offer is open for 72 hours. I don't know if there is an answer yet. So, right now, as we speak, the 72-hour window for the hacker to answer to Joshua Topkin has passed and there was not a single sound from the hacker. So, apparently now there is a bounty on his head and we will see where this is going. And to bring the ultimate fod into play, I think Joshua Topkin may have been involved in the Bonso Finance hack through the Oracle.

[00:04:37]He might even have done it himself. In my opinion, Josh is a disgusting scammer. I believe Hedera leadership should investigate this thoroughly.

[00:04:47]This is the thing I warned about and I talked about. Once you're laying on the ground, the people start stomping.

[00:04:58][groaning and screaming] And last but not least, not really a hack, but rather a security problem. And this time on my beloved Tandem wallets.

[00:05:06]Let's read into this and then I want to show you the offer from Tangum they are launching right now to compensate for this problem. Short and simple. Here's the post. Ledger laser attack can reset passwords on all Tangum cards. Ledger's security research team disclosed a laser fault injection attack that bypasses a security check on Tandem hardware wallet cards allowing password resets and potential fund theft. The attack needs physical access to the card plus 250,000 in specialized lab equipment. So far, uh guys, if you save your crypto on Tang, it is still safe. I don't really think that people have $2,000 in equipment to hack your Tang wallet.

[00:05:55]But what are they offering now? They offer now until the 20th of July $20 off for each Tangim card, $30 off on each Tangim ring, and you also get $20 in Bitcoin. And if you order via affiliate down in the video description, you pretty much only pay $40 for a hardware wallet, which is unbeatable right now.

[00:06:21]Guys, only bad news. I hope next week is going to be better. Enjoy the World Cup finals and I'm going to see you in the next one.