Web3 is Going Just Great

An investigation by OKHotshot has reported that Sierra rug pulled the NFT project, using project funds to wash trade her own NFTs before cashing out. In total, she withdrew 120 ETH (at the time worth around $316,000; today worth around $151,000). Throughout, Sierra claimed that "absolutely none of the funding has been taken by founders".

In addition to the allegations around her NFT project, OKHotshot identified other shady behavior by Sierra, such as pumping-and-dumping other NFTs she'd purchased, and placing lowball offers in $DAI on big-ticket NFTs, hoping that their owners would mistake them for ETH.

After OKHotshot published the thread, Sierra blocked them on Twitter, and deleted the NFT project's Twitter account and website.

Some of Digital Surge's customers reported having entrusted the company with hundreds of thousands of dollars from their superannuation funds (retirement pension). "I lost everything," said one customer who had put his entire superannuation of more than AU$150,000 (~US$102,000) into his Digital Surge account, where it is now frozen.

However, NFTs that had been minted on the FTX platform relied on metadata from an API at that domain, meaning that the NFTs are now pointing to broken links. Owners of these NFTs can still see that the NFT exists, but images no longer work—even when viewing the NFTs in their own wallets, or when listing them for sale on other platforms.

Other projects that rely on the FTX NFT platform's API, such as the Coachella NFT project, also broke: the Coachella NFT platform shows 0 NFTs in existence. Those NFTs still show up where they are listed on external NFT platforms, although the images and metadata are broken.

The layoffs were reportedly "terribly" executed, with days of uncertainty and employees receiving little or no notice before being fired.

Swyftx's CEO admitted the company had grown too fast. He attributed the decision to the continued downturn in the crypto market and shaken trust as a result of FTX, though Swyftx says they had no direct exposure to the bankrupt crypto exchange.

On December 3, Orthogonal Trading admitted to Maple that they were unable to meet loan repayments. The group was unable to repay a $10 million loan due the following day. The group has $36 million in liabilities across various loans on Maple's USDC and wETH pools.

Orthogonal Credit, a sister group to Orthogonal Trading, published a blog post distancing themselves, writing that they were "shocked and dismayed" by Trading's misrepresentation. "We are speechless by the extent of the exposure and liquidity position of Orthogonal Trading’s book of business," they wrote. They attributed the insolvency to FTX exposure.

In a Twitter thread, Bybit CEO attributed the layoffs to the "deepening bear market" and said the layoffs touch all departments.

"We are all saddened by the fact this reorganisation will impact many of our dear Bybuddies and some of our oldest friends," he wrote. On the bright side, they no longer have to be called "Bybuddies".

Gemini has formed a creditor committee to try to recoup funds from Genesis, as well as Genesis parent company DCG.

On November 28, the company's vice president for global marketing and communications acknowledged that he had resigned from the company, explaining on Twitter that "I did fight for the community but none of the initiatives we came up with were accepted."

Upon realizing that the exchange was unlikely to resume withdrawals, some customers have taken it upon themselves to try to find AAX's executives. Some showed up at the Hong Kong headquarters, only to find it deserted. Another user appeared at their Singaporean coworking space, also to find it empty. Users have been posting leaked personal identity documents of listed executives on Telegram, hoping to locate them.

The attacker, and possible subsequent copycat attackers, used a vulnerability in the project smart contract to mint quadrillions of aBNBc, which they then swapped to various other tokens.

Binance halted trading on aBNBc tokens, as well as on HAY tokens, a stablecoin project that was subsequently exploited. Ankr also tweeted that "We have been in touch with the [decentralized exchanges] and told them to block trading", although decentralized exchanges are typically not supposed to be able to "block trading".

Ankr later blamed the hack on an employee, who they say had inserted malicious code into the protocol that was used to exfiltrate the private key.

The idea was to use a private blockchain to "promote more efficient and secure global trade" by allowing shipping companies to share information including shipping container contents and tracking. However, it was apparently tough to convince these companies to actually adopt the project, and Maersk and IBM pulled the plug.

In total, Auros has 8,400 wETH (~$10.7 million) and $7.5 million in USDC in loans from M11 credit pools, plus another $2.4 million in loans from the Clearpool defi lending project, for a total of more than $20 million in unsecured loans.

The OFAC investigation was first revealed in July, in reporting from the New York Times.

The company didn't reveal how many employees were affected by the layoffs, but Portal do Bitcoin estimated that around 100 employees were let go — around 15–20% of the company's remaining staff. One employee wrote on LinkedIn that he was among "dozens" who were laid off.

Who could have predicted that people might balk when TBD then announced they would try to trademark the term? Apparently they saw no irony in their attempt as a single, powerful entity to gain control over the trademark.

The same was not true of the people who responded to the post, who wrote things like, "We need to make sure web 5 is truly open by copyrighting it", and simply "🤡🤡🤡🤡🤡".

Six hours later, the company tweeted, "we have heard the community and we are responding to their concerns". They issued a statement acknowledging that "we have heard loud voices in the community who are concerned about the potential for abuse of trademark law in ways that would undermine the mission of decentralization." Gee, you think?

And no, they still haven't explained what happened to web4.

Because of this dependency, it was no surprise when BlockFi announced they were once again in crisis following the FTX explosion. On November 15, the Wall Street Journal reported they were preparing for possible bankruptcy and considering layoffs.

On November 28, BlockFi filed for bankruptcy. Their filing estimates they have more than 100,000 creditors (the maximum option on the form), between $1–10 billion in assets, and between $1–10 billion in liabilities.

The group then delivered the sculpture to Tesla HQ in Austin, Texas, and is reportedly refusing to leave until he accepts the statue. Unfortunately he may be too busy burning Twitter to the ground to have noticed.

Despite receiving press coverage in outlets including the Wall Street Journal, Fox Business, and USA Today, the project has as of yet failed to achieve much of a pump, and the token is trading around where it was several months ago. I've not named the token here in the hopes of not contributing to the goals of their viral marketing stunt.

In a blog post outlining the $1 billion initiative, Binance also divulged that "we have already received around 150 applications from companies seeking support under the [Industry Recovery Initiative]" — only a week and a half after it was announced.

Lemon had closed a $44.1 million series A funding round earlier this year, which they kicked off in July 2021.

CoinList lost $35 million in the June Three Arrows blowup. Shortly after the FTX collapse, CoinList claimed to have "no material exposure to FTX, FTT, Alameda or any credit exposure to any affiliate of FTX". However, they stopped processing withdrawals shortly after.

Iris Energy's stock has plummeted to $1.66, down 93% from its $24.80 peak when the stock first began trading a year ago.

New York has been the home of some battles against crypto-miners who have set up shop at dormant fossil fuel plants. The Greenidge Bitcoin mining operation near Seneca Lake has been the locus of some particularly bitter battles against the industry: a dormant coal power plant that was converted to natural gas and devoted to Bitcoin mining in 2019, its permit renewals have been the focus of fierce protests. It will not be affected by this particular legislation, which only bans mining operations who have not already submitted applications for new or renewed permits.

The Wall Street Journal then reported that Genesis had been seeking a $1 billion emergency loan due to a "liquidity crunch due to certain illiquid assets on its balance sheet".

The halting of withdrawals from Genesis' lending business has already had major downstream impacts, as it is a major partner of other crypto lending services. Gemini and Coinhouse both followed Genesis in suspending withdrawals, as did other firms including Donut and GOPAX.

A Genesis bankruptcy would be a monumental event in crypto, with enormous downstream exposure.

This was not helped by Grayscale's response to those in crypto who were pushing Grayscale to follow suit with some other crypto platforms and publish proof of reserves. Grayscale announced that "due to security concerns, we do not make such on-chain wallet information and confirmation information publicly available through a cryptographic Proof-of-Reserve, or other advanced cryptographic accounting procedure". They did not elaborate on what these "security concerns" might be, and stoked fears in some that the company might not have the backing they ought to have.

Grayscale published a letter from Coinbase that basically said "we have Grayscale's assets, we promise", which did not seem to assuage the fears that have formed around centralized entities promising they have the assets they claim. This is understandable, given that FTX made similar promises, only to collapse.

Since then, there has been little communication and a series of shady activities. According to HOO CEO Rexy Wang on Twitter on July 15, Hoo employee and former Binance head of security Fang Wenbin (known as "Top") "took advantage of his position at Hoo to delete the company system privately, causing everyone in the company to be unable to access the system, resulting in a temporary failure of the main domain name". Top replied to allege that, "Rexy himself has transferred most of the assets from the platform. Employee salaries and platform users cannot withdraw coins".

At some point after that, Wang made his Twitter private. Hoo's social media channels have been inactive. On November 18, the exchange website was replaced with a post that identified the "Hoo de facto controller", Xu Tong Hua, and said: "Currently all permissions for Hoo's wallet and website programs are controlled by Mr Xu, so please contact the official email if you have any questions."

Meanwhile, customers have been active on social media complaining about the apparent fraud, and some have formed an informal group pushing for legal action against Hoo.

ASX will write off the AU$245–$255 million (US$164–$170M) they have poured into the project, and start again on designing a replacement for the CHESS system.

The suit alleges that the celebrities violated the anti-touting provisions of securities laws by failing to disclose the nature, scope, and amount they were compensated to promote the platform.

Nestcoin had nearly all of the funds remaining from their $6.45 million funding round locked in FTX — approximately $4 million.

The company said in a blog post that they were "working with the Genesis team" to restore withdrawals. Like Genesis, they tried to urge that the issue would not affect other Gemini products. However, a service outage that same day did little to strengthen trust in the company.

They urged in their announcement that the decision would not impact their trading or custody businesses — though if I was a user of their other services I might not be feeling so reassured given crypto companies' poor track record of segregating operations.

Genesis has about $2.8 billion in total active loans as of the end of September 2022.

This is not the first crisis for Genesis this year. The firm lost hundreds of millions due to exposure to the Three Arrows Capital collapse, and in August announced layoffs of 20% of their employees.

Ten of the NFTs in the collection came with lifetime passes to Coachella, and sold for six figures. Each year, the NFT holder has to go through the redemption process to obtain their festival pass.

Many of the token owners bought their NFTs with FTX and simply left them in their accounts on the platform. Some were able to transfer their tokens before FTX's NFT platform stopped operating, but many did not.

Now, the Wall Street Journal reports that BlockFi has been considering layoffs, and has been in talks with bankruptcy attorneys about a possible Chapter 11 filing.

Although BlockFi disputed reports that they had been custodying client assets at FTX, they acknowledged that they had "significant exposure to FTX and associated corporate entities that encompasses obligations owed to us by Alameda, assets held at FTX.com, and undrawn amounts from our credit line with FTX.US".

This not entirely unlike someone trying to sell you a house that is "otherwise sturdy, but in an engulfed-in-flames crisis".

He says the project is intended to reduce the "cascading negative effects of FTX", underscoring how nervous this whole debacle is making other players in the industry.

He announced that they would continue trading their remaining assets, and continue operating their venture fund. However, he said the future of the hedge fund was unclear, and likely to depend on what happens with FTX customer withdrawals.

"I'm pretty disgusted with the space as a whole and kinda humanity in general," he continued. "I'm at a loss for words at the depth & breadth of the pieces of shit that permeate crypto. So many fucking sociopaths were granted the opportunity to do so much damage. It's hard for me to imagine the space bouncing back quickly from this ordeal. Too many got burned too hard."

Users have been hesitant to believe this explanation, given the enormous shakeup in the industry lately, and the tendency for firms to be less-than-forthcoming when they are in major crisis.

Three days prior, the company had published a blog post claiming that AAX had no exposure to FTX and its affiliated companies, that AAX had stable reserves, and that user funds were never exposed to counterparty risk.

This serves as a good example of how theft amounts shouldn't be naively calculated based on the token price before the theft × the number of tokens stolen. $FLARE was priced at around $18.25 before the attack, and a naive calculation would place the theft amount at $71 billion. However, the lack of liquidity caused the token price to plummet to $0.0000018, and the attacker ultimately ended up with around $17 million.

The total funds stolen appear to be around $4.17 million, according to analysis by SlowMist.

Several users replied to the message in shock that their data was exposed, saying they'd never done anything wrong. The Tokensoft employee replied, "If you made it on the naughty list...yes, shame on you....I shared your info, better luck next time".

The project later deleted the link from the Discord server, then tried to claim that it had never been posted at all, then issued a statement that "information was mistakenly posted in Tokensoft's social media channels".

This contradicted FTX's previous statement that "Per our Bahamian HQ's regulation and regulators, we have begun to facilitate withdrawals of Bahamian funds." The announcement that they would be processing withdrawals for Bahamian customers led to a slew of non-Bahamian customers trying to find ways to withdraw their funds via bribes and shady NFT deals.

Some have viewed FTX's choice to enable Bahamian withdrawals as evidence that they were trying to allow FTX employees and family members to get access to their funds on the exchange, even when most customers had no such access.

Crypto.com's CEO, Kris Marszalek, replied: "It was supposed to be a move to a new cold storage address, but was sent to a whitelisted external exchange address. We worked with Gate team and the funds were subsequently returned to our cold storage." He later clarified that all of the funds were returned.

Twitter users, reasonably, reacted in horror at the revelation that the platform had accidentally sent such a substantial portion of their funds elsewhere in a careless mistake, and that such a monumental mistake was even possible. They were lucky that they erroneously sent the funds to another exchange, and one who agreed to return the funds.

This is not the first time Crypto.com has erroneously transferred funds; in August of this year, they sued a woman to whom they'd accidentally sent $7.2 million that wasn't hers.

An FTX account administrator wrote on the FTX support Telegram, "FTX has been hacked. FTX apps are malware. Delete them. Chat is open. Don't go on FTX site as it might download Trojans". The message was pinned by FTX General Counsel Ryne Miller.

Miller later wrote on Twitter, "Investigating abnormalities with wallet movements related to consolidation of ftx balances across exchanges - unclear facts as other movements not clear. Will share more info as soon as we have it."

A Telegram admin subsequently wrote, "Not all hope is lost. Engineers have managed to retrieve substantial amount of funds," but no details were provided beyond that. A later announcement by Miller claimed that FTX had "initiated precautionary steps to move all digital assets to cold storage", suggesting some of the transfers may have been a part of that effort.

Many speculated that the so-called hack had been coordinated by insiders.

FTX announced that it had filed for Chapter 11 bankruptcy in the United States. Sam Bankman-Fried resigned as CEO.

SBF had spoken about trying to raise additional funds. In leaked Slack messages, he had allegedly written that "One could maybe say, if they wanted to be optimistic, that we have a lot theoretically in and/or potentially for the raise". No one was actually saying this.

Analysis by the crypto security firm SlowMist attributed the theft to a compromise of Shen's seed phrase. Shen had been using the Trust Wallet software, though the theft does not appear to be related to security issues with the wallet software.

"Any FTX employees willing to change my accounts country of residence to Bahamas to facilitate withdrawal I am offering $1 million and unlimited legal fees", wrote one trader (who later claimed to be joking).

A popular crypto Twitter user named "Algod" offered $100,000 to any FTX employee who would process their KYC documents, allowing them to withdraw. He was subsequently seen to be successfully withdrawing over $2 million in assets from the platform. He also shared links to a Telegram group where his partner was offering to buy people's FTX accounts for 10¢ on the dollar, from customers who feared they may never see the money again, or would only regain access to a fraction of it after years of court proceedings. Algod later denied "erroneous and defamatory statements" that he'd bought discounted claims/assets", admitting that he'd considered it, but claiming he ultimately decided not to.

Some observers noticed over $21 million withdrawn via NFT trades, that appeared to be being used as a way to bypass the internal blocks on users transferring balances to one another. People with funds locked in FTX bought NFTs from Bahamas-based users, spending their full account balance on the NFT and thus enabling the Bahamian user to then withdraw the funds. "This appears to be the first recorded case of NFT utility in existence 👍", wrote Cobie.