FT today: stablecoins are bad because tokenized bank deposits (which no one has been able to pull off, ever) are better. screw the current tech that works, let's invest in theoretical future tech
lots of sophisticated phishing attacks going around lately. all of these have been attempted on me. sadly seen a lot of cases where people did lose funds in these ways:
- real person (hacked) you've interacted before DMs you on TG and asks to catch up, send a zoom, looks like a real-ish zoom URL, asks you to download a client to "fix" audio, everything drained
- credible/real news org DMs you out of the blue on their official X account, asks for an interview, send you to a (fake) TG account, sends the (fake but real-looking) zoom link. this has happened to me with (major) news orgs that didn't even know they were hacked
- one of your "colleagues" asks for funds via email, email looks real, but headers are faked
- blitz of messages saying your coinbase has been hacked, yadda yadda, "support" calls and asks you to move your assets to a temporary address with some time pressure ("the "hackers" submitted the transaction but you still have time!")
general rules of thumb (not exhaustive) - use @CasaHODL - use @River for a custodial option - don't keep a ton of funds on browser wallets like m*tamask or ph*ntom - don't google crypto platforms and click the first link (hackers buy ads to put fake links in there) - secure everything, not just wallets. this includes google, telegram, icloud, etc. - don't answer phone calls from "support". hang up and call back on the official support line if you have to - don't trust anything you hear on the phone especially if you're being pressured to do something - don't answer calls from unknown numbers even if they seem like they're from "Google" or "Coinbase" - be suspicious of emails or DMs from your "colleagues". know that email headers can be faked (ask AI for help analyzing headers if youre suspicious) - double check that DMs from "friends" are real and they haven't been hacked - make sure you have physical 2fa + authy/google authenticator on everything - avoid SMS based 2fa wherever possible