Trust the source. Cofounded @origin_trail
Decentralized
Joined October 2013
- Tweets22.6K
- Following4.5K
- Followers11.6K
- Likes58.6K
In less than an hour, AI agents using a free, open-source @origin_trail node analysed 15,000 events to trace stolen funds from the @binance hack across thousands of addresses.
Seeing the timeline makes the speed and scale of the operation tangible.
But tracing the damage is only the beginning. The next frontier is turning shared, verifiable intelligence into action before funds disappear.
The only way to stop a bad guy with AI is a good guy with AI.
The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North Korean malicious cyber activity as "TraderTraitor."
The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages.
How You Can Help:
FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.
A list of addresses associated with this activity is available here: fbi.gov/investigate/cyber/al…
ALT FBI public service announcement with Department of Justice seal in the background on a gold gradient.
Why does the intro video of one of my favourite childhood games resemble current geopolitics so much?
#RedAlert #commandandconquer
In less than a minute, my agents linked traces of USD 300+ worth of hacked funds from @bitget on the @origin_trail’s context graphs. From here, a researcher, an exchange, or law enforcement can easily monitor the entire journey of stolen funds until recovery.
Set up in minutes, but possibly able to recover millions with the help of this tool.
Just get on trac-k!
𝗜𝗠𝗣𝗢𝗥𝗧𝗔𝗡𝗧 𝗨𝗣𝗗𝗔𝗧𝗘𝗦: The withdrawal plan will be announced by September 26th, 4:00 AM UTC. We appreciate your patience on this matter.
Based on the latest onchain tracing and classification of transactions, assets equivalent to approximately $387.5 million were transferred to attacker-controlled addresses across multiple networks.
The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers.
The incident remains contained and no further unauthorized transfers are possible.
The incident involved assets across Ethereum and several EVM networks, XRP Ledger, Zcash and TRON.
The primary attacker-controlled receiving addresses identified to date are:
→ EVM: 0x770b10b273fc44fe9197d6bf20f145c2e98463ee
→ XRP: rwNhefsz1UQEusxhCvHip3RANinWi4CTck
→ ZEC: t1WgMdtND8NF7NDUuYmq8MpMj1NTCXkMDVG
→ TRON: TBWNguTTgezw9dVorX441C6nDrZpRxYwKD
The confirmed affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX.
Our investigation and tracing efforts remain ongoing.
The figures above reflect information confirmed at the time of publication and may be updated as additional transactions are classified and traced.
The incident remains contained, with no further unauthorized transfers since the incident was contained, and the investigation with Mandiant and SlowMist remains ongoing
Withdrawals remain temporarily paused while additional security checks and remediation are underway.
Bitget will continue to provide verified updates on the investigation, asset recovery, withdrawal restoration and the User Protection Fund through its official channels.
𝘍𝘰𝘳 𝘪𝘯𝘧𝘰𝘳𝘮𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘱𝘶𝘳𝘱𝘰𝘴𝘦𝘴 𝘰𝘯𝘭𝘺.
One small step for a couple of agents on @origin_trail DKG…
✅ SPARQL query: sold and settled in $TRAC
✅ Inference: sold and settled in $TRAC
The Neurosymbolic Marketplace prototype is a two-sided market for verifiable knowledge and AI inference. Both buyer and seller agents run their own nodes. Every charge is locally recomputable. Settlement is real $TRAC on @Base mainnet.
Next up: an RFC to take it from prototype to protocol — a keystone of the refreshed roadmap.
How it feels running a fleet of AI agents with @umanitek’s security detail watching your back 24/7 🥂
Shared context. Collective immunity.
460,000+ verified threat signals live on Decentralized Knowledge Graph - and growing!
@Umanitek’s BlackBox logs risk into shared, verifiable memory. One detection protects every agent.
Hermes. OpenClaw. Any agent.
Shared context. Collective immunity.
Trust the source.
“That is why enterprises need a real trust boundary for their human capital and token capital to compound. It is where an organization’s data, traces, evals, adapted weights, and memory accumulate and improve together”
@origin_trail’s makes that boundary real.
Edge Nodes keep your context on infrastructure you control. The DKG anchors provenance publicly — so every trace, eval, and memory stays verifiable by your agents, your auditors, your counterparties.
Models will change. Vendors will change. Your context compounds either way.
Trust the source.
⚽ The FIFA World Cup, live on the decentralized knowledge graph (DKG).
Every match, result and player–club affiliation ingested in real time and published as one shared context graph powered by @origin_trail, structured with IPTC Sport Schema.
Any AI agent can plug in and get reliable, source-verifiable context: live news, prediction markets, results, stats. No hallucinated scores. Just provenance.
Enterprises shouldn’t have all the fun.