JingAn

A $0 cloud computer—I just got stuck at the login step.

Someone asked if you can still get a free Box from Simular.
I looked into it, and it really is free:
one cloud Linux desktop per account, $0, no credit card required, and credits refresh daily.

But it’s not a VPS.
It’s a sandbox computer for AI, connecting to tools like Claude and Cursor via MCP.
There’s no public inbound access, and it automatically goes to sleep after one hour of inactivity.

People in the comments have already warned: use it to run a node and you’ll get banned.
A free box can’t handle VPS workloads.

It’s fine to play around with as an Agent sandbox, but forget about using it to run a node.

Have you ever been lured in by a “free VPS” too?

#ScamAlert

The Keplr wallet that lets you log in with one tap using a Google account has leaked private keys.

A wallet that doesn’t require you to remember a seed phrase means the private keys aren’t really in your hands.
On November 6, Keplr suspended Google and Apple logins.
Today, the team confirmed that Web3Auth, its third-party login service, had a vulnerability that exposed the private keys of some accounts using social logins.

Accounts created with a seed phrase or hardware wallet are safe.
The affected users were the ones who chose convenience—the 12 words they skipped were exactly what could have protected them.

Keplr’s advice boils down to three points:
Don’t send any more funds to these accounts.
Move any assets you can still access to an account created with a seed phrase or hardware wallet as soon as possible.
Anyone who DMs you saying they can “help you recover your funds” is a scammer. Only trust official Keplr and Web3Auth accounts.

Here’s something counterintuitive:
A sudden zero balance doesn’t necessarily mean you’ve been hacked.
Web3Auth says they’re also using the same method to move funds that haven’t been stolen yet, in order to protect them.
The team hasn’t yet announced how many people were affected or how much money was lost. A list of recovery addresses will be shared later.

Did you create your wallet with a seed phrase, or by logging in with Google in one tap?

#WalletSecurity

Hong Kong hasn’t introduced a new tax.
But starting in 2027, every transaction you make on a Hong Kong platform will have to be recorded and reported.

On November 4, Hong Kong’s Legislative Council passed the CARF bill.
It takes effect on January 1, 2027, when platforms will start collecting users’ transaction data.
Starting in 2028, Hong Kong’s tax authority will begin exchanging information with tax authorities in partner jurisdictions.

What will be collected: who you are, your tax residency status, what coins you bought, how many, how much they cost, and how many transactions you made.
Fiat-to-crypto, crypto-to-crypto, and crypto-to-fiat transactions all count.

The key point: this is not a new tax.
Tax rates and tax rules haven’t changed at all.
What’s changed is visibility—platforms didn’t report this information before, but now they must.

For ordinary people, this means two things.
If you open an account and trade on a Hong Kong platform, you may be asked to submit a tax residency self-certification. Don’t panic when you see the form, and don’t fill it out carelessly.
The law applies to platforms, not your personal wallet. Self-custody wallets are not within the reporting scope.

Wait for the Hong Kong tax authority to publish the final list to see who the data will be shared with, and whether it will be shared with mainland China. Don’t scare yourself over it just yet.
Anyone who says they can “erase your transaction records for a fee” is a scammer. The records are held by the platform, not by an intermediary.

Do you keep track of your transactions?

#HongKongCryptoTax

They said $BTC would double as soon as the McRib came back.
11 days later, $BTC had fallen from 79,750 to around 75,950.
A drop of about $3,800.

Here’s how the meme started:
On October 22, someone posted that the McRib would return to select U.S. locations on October 27, and that $BTC had more than doubled every time it came back historically. Don’t tempt fate.
Then CoinShares crunched the numbers: out of 10 returns, $BTC rose significantly after only 3 of them.
The other 7 times, it often fell right after the return.
Someone at GSR put it more bluntly: there’s no causal link whatsoever—just a funny coincidence.

People share it everywhere when it gets it right, but no one brings it up when it gets it wrong.
What about you? Comment with a number:
1 Believed in the superstition and actually bought
2 Just here for the spectacle; never buy
3 Superstition? My superstition is not checking the charts

#CryptoSuperstition
$BTC

The upgrade has been delayed—and that’s a good thing.

On November 6, the Ethereum Foundation announced:
The Glamsterdam launch on the Hoodi testnet has been delayed.

What’s holding it up?
Two gas accounting changes: EIP-8037 and EIP-8038.
They could break assumptions made by 8 legacy contracts.
Auditor ChainSecurity flagged 13 real-world contracts that could genuinely be affected.

It was originally scheduled to go live on Hoodi on October 26, but there’s no new date yet.
The Sepolia testnet upgrade went live on October 6 and is unaffected.
The mainnet upgrade wasn’t scheduled in the first place.

If you’re an ordinary ETH holder, you don’t need to do anything.
A delayed upgrade doesn’t mean something went wrong—it means an issue was caught before launch.

One more thing:
Whenever an upgrade window approaches, fake “migration claim sites” start popping up.
The official team hasn’t asked anyone to migrate or claim tokens.
If you see a link like that, close it.

Which side are you on: should the upgrade go live on schedule, or only after everything has been checked?

#Ethereum
$ETH

The person who stole $6.3 billion has been getting nothing but $0.78 red envelopes in their wallet.

Elliptic update, Nov. 6: The hacker has converted about $124 million in stolen funds into 1,650 $BTC .
Most of it was stolen $XRP , swapped via THORChain.
But not a single one of the 18,270 directly stolen $BTC has been touched.
Another roughly $3.1 billion is sitting untouched in linked addresses.

The other side of this is surreal.

CoinDesk found that the 19 addresses holding the stolen $BTC
have been receiving 1,000 sats from strangers nonstop over the past few days—about $0.78.
The attached messages all beg for a handout: “Help me bro.”
Someone spent $46 to send it three times to every address.

On one side, billions in stolen funds are being shuffled across 16 chains and more than 20,000 wallets.
On the other, the wallets are stuffed with little $0.78 notes.

Over at Binance: about $2.85 billion has been frozen, users’ losses are fully covered, and withdrawals have gradually resumed.

I stared at these numbers for ages and came away with just one realization:
These days, even begging is happening on-chain.

#OnChainGossip

199,000 people were liquidated last night. I wasn’t one of them.

Not because I made the right call.
I just didn’t make a move.

Last night at 9:30 p.m., the nonfarm payrolls report came in as a huge surprise.
165,000 jobs were added, against a forecast of just 59,000.
$BTC fell to 75,600 overnight.

In 24 hours, $1.033 billion was liquidated across the market, affecting 199,000 people.
$880 million was liquidated in just four hours, and $819 million of that was from long positions betting on a rise.
The biggest single liquidation was on Binance: an ETHUSDT position worth $10.94 million, gone in one shot.

The only thing I did last night was nothing.
Four words in my journal: Watch first. Don’t move.
And I really didn’t move.

Everyone who stayed put won last night.

#CryptoLife

I struck gold, seriously.

There’s this thing in Muse called “Spaces.” I always thought it was just some lousy filing cabinet for documents, so I never gave it a second glance.

A while back, I asked it to look into which fingerprint browsers were worth using. It gathered a mountain of info, and I was bracing myself for a long read. But instead, it made me a whole page—prices, pros and cons, and comparisons for several options, all laid out right there. You can click around, filter, and compare. It’s like opening a little website.

My only thought at the time was: from now on, let whoever wants to read documents read them.

Later, I realized this is what the feature is really for: just describe the kind of page you want, and it’ll build one on the spot. Dashboards, checklists, progress trackers—whatever you want. Once it’s built, it stays there, ready whenever you want to open it.

In fact, I just had it build me a cross-chain meme-sniping dashboard. Before, all this stuff was scattered across chat logs, spreadsheets, and notes. Every time I needed something, I’d spend ages digging around. Just thinking about it gave me a headache.

Honestly, this feature is hidden way too well. Nobody around me had even mentioned it. I’ve been recommending it to everyone these past few days—it’s seriously that useful.

If you’ve got a pile of messy info or a bunch of progress to keep track of every day, go give it a try. Just say what you want, and it’ll take care of the rest.

Good things deserve to be shared.

#Muse

KAST farmers spent a year grinding points and waiting for the token launch, only for it to turn into KPU that you can’t sell.
Alpha’s airdrop is worth $350,000 today, but anyone with fewer than 200 points gets nothing.
Same lesson, two different approaches.

What’s the best way to play airdrops?
Option 1: Go all-in on one project.
Pick the winner and you hit it big. Pick wrong and all that effort goes to waste.

Option 2: Cast a wide net and get involved in a bit of everything.
Hope one of them pays off—but your points end up spread too thin to meet any of the thresholds.

I’ve taken both kinds of losses.
Comment 1 or 2, and tell us about a time you backed the wrong one.

#AirdropShowdown

$16 billion. Five years.
Yesterday, the U.S. Treasury kicked MEXC out of the U.S. financial system.

FinCEN's order is crystal clear:
MEXC has been designated an institution of "primary money laundering concern."
At least $16 billion in illicit funds flowed through it between May 2021 and May 2026.
Nearly $1.5 billion of that was linked to Russian sanctions evasion, and about $1 billion was directly connected to more than 40 Iranian exchanges.
This June, it was still doing business with Garantex, which has already been sanctioned by the U.S.

First, let's clear up the easiest thing to get wrong:
This is not a seizure of MEXC, nor does it freeze users' assets.
The ban targets U.S. financial institutions: they are prohibited from processing any fund transfers to or from MEXC.
And it hasn't taken effect yet: it will take effect 30 days after publication in the Federal Register. That publication hasn't happened yet, so the countdown hasn't started.

MEXC is operating as usual today, and trading hasn't stopped.
But when an exchange with over $1 billion in average daily trading volume, ranked among the world's top 20, is cut off from the U.S. financial system, its deposit and withdrawal channels will only get narrower.
The same goes for anyone holding $MX: the platform token is tied to the exchange's regulatory standing.

If you have funds on MEXC, do two things today:
Don't deposit any more money.
Test your withdrawal route in the MEXC app ahead of time. Don't wait until the channels really tighten to find out you can't withdraw.

If you use MEXC, are you taking action today?

#MEXC

After farming KAST points for a year, all I was waiting for was the token launch.
This week, the founder changed his tune: no token after all.

KAST is a stablecoin payment card.
Back in 2024, the official team said points were part of an airdrop program for early users.
As recently as September 2025, replies still mentioned “Token airdrop” and “TGE in 2026.”
In March 2026, the message was still 1 point for 1 token.

On November 2, founder Raagulan Pathy responded on X: there will be no platform token.
The points people earned will be converted into KAST Pioneer Units (KPU) in the first week of December.

What is KPU? Let's be clear:
It can't be sold or transferred. It isn't equity and carries no voting rights.
The official wording: there's no guarantee of how much it can be redeemed for.

The deadline for earning points is November 30.
In early December, you'll also need to confirm the conversion in the app.
The official FAQ says: miss the confirmation, and your KPU will be voided; your old points won't be credited back either.

After the community backlash, KAST added another 120,000 options.
Details on how they'll be allocated will be announced in the app in December.

If you're still farming KAST points, you can stop today.
If you've never used this card, keep scrolling—this has nothing to do with you.
I haven't used this card; I've only put this together based on the founder's exact words and the official FAQ.

How many points have you earned?

#AirdropAlert

Someone checks their wallet once a year and withdraws $98.11 million.

On November 6, an address that had been dormant for a year woke up.
Within 24 hours, it withdrew 1,286 $BTC from Binance in two transactions.
643 each—perfectly even, like copy and paste.

It withdrew and left without a word.
And it didn’t sell—the coins were moved to its own wallet, not put up for sale.

I check the market every day; they make a move once a year.
So who’s more like a crypto trader?

When did your wallet last make a move?

#Whale

The official site says just one thing: “The site is now closed.”
Every link on X claiming $GEN is “ready to claim” is fake.
I just opened the official site this morning: airdrop.genlayer.com.
The S1 snapshot was taken on October 25, and registration closed on October 26.
The official team still hasn’t announced the TGE date.
So any post now saying “click here to claim $GEN” is just trying to drain your wallet.
Before claiming an airdrop, do this 3-second check:
1. Only use links from the project’s official X pinned post or website.
Never click links in comments, DMs, or search ads.
2. Check the snapshot and registration dates first.
If the snapshot has been taken, registration is closed, and no TGE date has been announced, then claims that it’s ready to claim are fake.
3. If a page asks for your seed phrase, an unlock fee, or unlimited approvals, close it immediately.
These three rules apply to every project.
This morning, I checked the official website first, so I didn’t fall for the “ready to claim” bait.
#AirdropScamPrevention
$GEN

Today, November 6, is the distribution date for the first batch of $PREDICT airdrops.
The token still isn’t listed.

On October 30, the team announced that both the TGE and the first-season airdrop claim were postponed, in line with the pause in trading on Binance.
No new date has been announced yet.

Yesterday, Binance Wallet pushed an update: the five distribution dates remain unchanged.
Listing day, November 6, 13, 20, and 27.
Even if the listing is delayed, it’s no problem—the undistributed batches will be held and the first batch will be distributed after launch.
If you’ve already submitted the form, you don’t need to submit it again. Eligibility will be based on the deadline for your original batch.

The schedule is more punctual than the token itself.
Today’s batch is a case of “the date has arrived, but the token hasn’t.”

If you haven’t submitted the form, the final deadline is November 26 at 17:00.
Go to Assets → Prediction Account; in the wallet, go to Discover → Predict → Assets.

Did you choose to take 35% now, or lock it for a year and get the full amount?

#PREDICT