I made this post just 2 days ago, and now I'm seeing several respected voices in the industry beginning to ask the same question. Why does almost every major crypto hack get attributed to the Lazarus Group (North Korean hackers) so quickly? Sometimes, people start pointing fingers barely 30–50 minutes after an exploit happens. How much forensic investigation can realistically be completed within that timeframe? I'm not disputing the hacks that have been credibly linked to Lazarus. I'm questioning how quickly some people jump to conclusions before sufficient evidence is publicly available. There's a massive difference between having suspicions and establishing attribution through actual evidence. It's interesting to see more people beginning to question this pattern.

🇮🇱🇰🇵 ZachXBT has publicly acknowledged investigative cooperation with Cyvers, an Israeli blockchain security company, on multiple cases. CoinDCX: he credited Cyvers with flagging suspicious withdrawals, then said he independently identified the affected wallet. SBI Crypto: he credited Cyvers with helping investigate approximately $21 million in suspicious outflows. His post noted similarities to North Korean attacks. HashFlare: he credited Cyvers with first alerting him to movements of funds linked to the fraud case. What do we know about Cyvers? It’s an Israeli blockchain security company. Its co-founder and CEO, Deddy Lavid, says he worked on Israel’s Iron Dome system in 2015. He also says co-founder Meir Dolev served as a sergeant reporting to him when Lavid was an infantry company commander in the military reserves. Elron Ventures disclosed approximately 26% ownership of Cyvers as of June 2026, excluding additional convertible investments. Elron also has the right to appoint a Cyvers board member. And Elron has a longstanding partnership with Rafael Advanced Defense Systems through Rafael Development Corporation, RDC. Elron owns 50.1% of RDC. Rafael owns 49.9%. RDC has rights to commercialise Rafael’s military technologies for civilian markets. The distinction matters: Elron holds its Cyvers stake directly. These disclosures do not establish Rafael ownership of Cyvers. Lavid has also described working with EY and holding discussions with Israeli banks, including CBDC-related discussions. So the documented connections include military service, Iron Dome experience, financial-sector CBDC relationships and an investor with a Rafael joint venture. It’s important to understand the incentives behind the information that’s being fed through. Because they almost always say it’s North Korea.

Too late 😪

3/ Do you really want something? Then really work. Half-assing doesn't get you anywhere. Don't look for "system hacks," or whatever, just do it. You first need the baseline mentality of going all in, or nothing else matters

Why exactly was @itsover0x suspended? Is it just me, or has anyone else noticed how accounts linked to certain suspicions or controversies on X seem to get suspended before anyone even gets the chance to properly investigate what's going on? I'm not saying there's necessarily a connection, but the timing of some of these suspensions raises questions. How are people supposed to investigate allegations when potentially relevant accounts keep disappearing? Something feels fishy here.

While everyone is focused on the Binance Hack, there is another THREAT that may have more impact on many people that we have with Binance Few hours ago, Blockaid flagged 10 DeFi sites that are actively draining wallets - stonkfun/xyz, pickle/finance, echelon, origami, fluxbeam/xyz, stakepoint/app, supswap, longbow, shprd & apexdefi They earlier flagged kintsu, stonkbrokers/cash and flap/sh. These are apps we use on a daily basis and apparently, the backend was hit by DNS hijack serving wallet drainers. If you're connected to these sites; - go to revoke.cash - revoke access If you haven't, refrain from connecting to any of the sites ATM. Stay safe y'all RT for others

Absolute cinema 🧐

If I had a billion dollars worth of shares in someone's company and he starts dunking on me when my own company faces crisis instead of showing support, I will do thesame thing CZ did.

Absolute cinema. If your woman is not like this, it's not yet late to break up 😂🤝

What if some of the biggest crypto hacks blamed on North Korea weren't actually carried out by North Korean hackers? Sounds crazy, right? 😂 Here's a theory I've been thinking about, and to be clear, this is purely speculation. What if some S-tier hackers are deliberately disguising their operations as the Lazarus Group? Think about it. North Korea has become the default suspect whenever a major crypto exploit happens. And given Lazarus Group's history, it's understandable why. But what if other sophisticated hackers have figured out how to exploit that reputation? Imagine stealing hundreds of millions, deliberately leaving behind traces that resemble Lazarus operations, and watching investigators chase North Korean hackers while you quietly disappear. I'm not disputing the attacks that have been credibly attributed to Lazarus. I'm simply wondering how many other attackers might be using similar tactics to hide their identities. The perfect disguise might be making everyone believe they already know who you are. Again, just a theory. No evidence to establish how often, or even whether, this is happening in the cases we're discussing. But in an industry where hundreds of millions can disappear overnight, I think it's a possibility worth investigating.

Why is everyone ignoring this guy? I have followed him for years and i must admit that he is good at sleuthing. probably the best in CT. He saw all this coming.

After everything that happened with FTX, I know a lot of people still have serious issues with CZ. 😂 But then again, I don't see the point in continuously dunking on someone who's already down. As usual, I believe CZ will survive this one too. Bro is literally like a cat with nine lives. Somehow, he always finds a way to land on his feet. 💀 One thing I've noticed, though, is that I don't think some people will ever forgive CZ for what happened to FTX. Some genuinely believe he played a major role in accelerating FTX's collapse because he wanted to eliminate one of Binance's biggest competitors. Whether you agree with that narrative or not, it's clear that the resentment hasn't gone anywhere. Anyone remember this tweet below?

Elon is a troll lol 💀😂😂😂😂

🚨 BREAKING: Binance has reportedly suffered a massive security breach, with losses estimated at $5.6 BILLION. So far, approximately $2.4 billion in stablecoins has reportedly been frozen with the help of Tether and Circle. That leaves roughly $3.2 BILLION potentially still under the attacker's control. An absolutely staggering amount. 💀 The full extent of the breach and recoverable funds is still being verified.

The USDT and USDC stolen has been frozen. Roughly half of the stolen funds are Safe now.

Why is this happening just a day after this tweet?

Holy Mary!!! Please tell me it's not true 💀 What am I hearing about binance getting hacked?

Do you know why everyone on CT seems to be buying a new car except you? 😂 It's because there's a certain room/GC they're all in, and that room decides what pumps and what doesn't. That room doesn't invest in narratives or get involved in plays where they have no control over the outcome. They engineer the most diabolical pumps, extract millions of dollars from the market, and move on to the next play while the rest of us are busy looking for the next 100x. 😭 Now, before you start flooding my DMs asking me to plug you into this room or share some alpha... I don't own a car either, and I'm not in that room/GC. 💀 I'm just as clueless as you are. We're both helpless, sitting in the same boat, watching people drive past us in their brand-new cars. Please, don't ask me for the room. I'm also looking for the door. 😭😂