Twelve days.

Twelve. Fucking. Days.

That’s the gap. Twelve days between Hyperbridge posting a fake hack as an April Fools joke, and Hyperbridge getting hacked so hard the joke filed for emancipation.

I need you to understand I have been staring at the number 12 for an hour now like it personally insulted my mother. Twelve days. Not twelve weeks. Not twelve months. Twelve. That isn’t karma. That isn’t irony. That is God Himself on His Samsung at 3am, scrolling, landing on the tweet, pushing His glasses down His nose, and going “oh. Oh we’re doing jokes now? Bet. Bet. Hold My fucking tea.”

They posted it. They laughed. Somebody in the team Slack sent the Leo-pointing-at-the-TV gif. Somebody replied with 💀. The intern got a heart react. Morale was high. Lunch was ordered. Emma from Comms said “omg you guys are SO bad” with a single crying-laughing emoji. Life was good.

And somewhere, in a room lit only by the sick blue glow of three monitors, a man with a recycled transaction receipt, an energy drink gone warm two hours ago, and the emotional regulation of a feral toddler at a wedding, read that tweet, cracked his knuckles so loud his cat left the room, opened the contracts in one tab, opened a stopwatch in another, and whispered (to no one, to God, to the void) the single most terrifying word in the English language:

bet.

I. Hyperbridge Told A Hacker To Get A Quantum Computer. The Hacker Said “Nah Mate, I’ve Got A Xerox.”

Hyperbridge built a cross-chain bridge. The pitch (stitched into the whitepaper, screamed from the keynotes, sweated into the marketing copy by a copywriter who was literally weeping as she typed) was cryptographic finality and full-node security equivalent to running your own node.

Full node security. Write that down. Tattoo it on your fucking forearm. It’s about to become deeply, personally, spiritually funny.

So when a known exploiter (flagged wallet, multiple priors, the kind of address that has its own dedicated folder on ZachXBT’s laptop labelled “the lads”) started publicly poking at the contracts in broad daylight, a member of the Hyperbridge team opened X, engaged thumb to glass, and as a fully conscious lifestyle decision posted the following sentence:

>

Bro.

Bro.

BRO.

I need everyone in this room to sit with “bro” for ten full fucking seconds. Breathe through your nose. Let it in. Let it metabolise. Let it settle in the marrow.

That isn’t confidence. That is a man leaning out of a burning building to tell the fire it’s not hot enough. That is a goalkeeper doing the fucking Macarena on his line while the penalty taker is mid-run-up. That is Caesar turning to Brutus like “nice knife bro, sharp enough? 😂💀”. That is, and I will die on this hill with a flag in my hand, the single most catastrophic tweet ever composed in the English language. And it was delivered with the serene, unbothered posture of a man who has never been wrong about anything in his entire life and is, within four business days, going to find out what being wrong feels like. All of it. At once. On the internet. Forever.

The hacker did not have a quantum computer.

The hacker had a library card and unresolved trauma.

Specifically: a Merkle Mountain Range replay attack. Which sounds like a mid-tier Tolkien villain but is actually the technique of submitting a previously-approved message as fresh, because the verification system forgot to check whether a proof was tied to its original request back when the tree only had a single entry in it. The cryptographic bouncer was checking stamps. The cryptographic bouncer did not know stamps could be fucking photocopied. The full node security heard a knock at the door, opened it wide, and the thing on the doorstep was a printout of a knock.

The printout walked in. The printout made itself a cup of tea. The printout put its feet on the coffee table. The printout asked where the wifi password was.

The attacker forged a message. The bridge, committed to the bit, accepted it. The attacker then made himself admin of the Polkadot token contract on Ethereum. A sentence that should require three signatures, a priest, and a small blood sacrifice, and instead required a Xerox and a dream.

And then.

And then, reader. Oh, and then.

He minted one billion DOT.

One. Billion. DOT. $1.2 billion dollars on paper. For one shimmering, suspended, hummingbird-heartbeat moment in the history of this entire stupid fucking industry, an anonymous wallet controlled by a man whose handle almost certainly ends in “420” was the single largest holder of bridged DOT that has ever existed. Richer than the Polkadot Foundation. Richer than every validator combined. Richer than Gavin Wood’s wildest imagination. Richer than the fucking sun.

He was, briefly, a god.

He cashed out $237,000.

I’ll wait while you process that.

Because there wasn’t enough liquidity.

The hack was self-limiting. The protocol was too poor to be properly robbed. He conjured a billion dollars into being and the market looked up from its phone, made unbroken eye contact, and said:

“Yeah we can do you two thirty-seven, mate. Cash or card. We’re closing in ten.”

He broke into the most secure vault in the building. The vault contained a Greggs loyalty card with four stamps on it, half a Freddo, an expired Subway voucher, and a single fucking button. He was a billionaire for four minutes. He is now a man with $237k and a story that is, genuinely, no word of a lie, going to haunt him at parties for the rest of his natural life. He is going to be seventy years old, sitting on a beach in a country without an extradition treaty, drinking something blue, and he is going to try to tell this story to his grandchildren and they are not going to fucking believe him.

That is not a hack. That is a tragedy in three acts. That is Icarus if Icarus had wax wings and the sun had no liquidity. That is winning the lottery and getting paid in Argentinian pesos. That is pulling Excalibur from the stone and it’s a fucking spork.

The Losses. Oh No. Oh Fuck. The Losses.

First number out the door: $237,000.

Revised number, four days later: $2.5 million.

Ten. Times. Higher.

Because it turned out the attacker had also drained incentive pools across Ethereum, Base, BNB Chain, and Arbitrum. Four entire blockchains the Hyperbridge team forgot to check. Forgot. Four. Chains. The post-hack forensics were conducted with approximately the same rigour as the pre-hack security, which is to say: vibes, a Google Sheet, one guy called Dave, and Dave going “nah we’re good.”

Picture calling the fire brigade. You tell them your kitchen is on fire. Four days later the fire brigade phones you back and goes:

“So. Right. Bit of an update. Turns out, also, the lounge. And the bathroom. And the garage. And (don’t hate us mate) your neighbour’s house. And, we checked, the shed. And look this might sound mental but we’re like 80% sure your car? We’ll circle back.”

The compensation plan is where this stops being a hack and starts being performance fucking art.

You get BRIDGE tokens (the native token of the protocol that just got disembowelled live on the internet, in broad daylight, in front of its mother) distributed over twelve months, if recovery “falls short.”

If.

They said if.

The compensation is IOUs denominated in the currency of the crime. The refund is a rain-check on a house fire. You lost real, actual, pay-your-rent money, and their plan is to hand you tokens from the same team that posted “hope you have a quantum computer bro” and then got publicly undone by a photocopy. In a year. Conditionally. 🙏 manifesting 🙏 wgmi 🙏 trust the process 🙏.

This isn’t a recovery plan. This is a car crash where the driver gets out, walks over to you bleeding on the tarmac, looks you dead in the eye, and hands you a 20% off coupon for the same fucking car.

Please. I’m Begging. The April Fools Thing.

I cannot let this go. I will not let this go. I will die holding this. They will lower me into the ground and the last thing I say will be “twelve days”.

Hyperbridge (a protocol whose entire reason to exist, whose whole sacred covenant with every single person who ever deposited a token, whose literal fucking job, is we keep your money safe) decided to celebrate April 1st by pretending to be hacked.

Let’s talk about that room. Let’s talk about that meeting. Because somebody at Hyperbridge sat in a real room, with real chairs, at a real whiteboard, drinking real bad coffee, and said (out loud, with their actual mouth, using air from their actual lungs):

“Guys. GUYS. For April Fools. What if we, like, pretended we got hacked. Lol.”

And nobody stopped them. Not Jeremy. Not Sanjay. Not Emma in Comms with her Master’s degree. Nobody stood up. Nobody raised a hand. Nobody slid a note across the table that said “mate the one and only thing we cannot joke about is the one and only thing we exist to prevent.” Somebody might (might) have half-raised a hand and muttered “guys, is this…”. That person is not at the company anymore. That person works at a garden centre now and they are thriving. They have a beard. They’ve learned about soil. They are at peace.

From the entire infinite possibility space of April Fools content they locked onto, with the terrifying precision of a fucking guided missile, the one joke that would nuke their credibility from orbit if it came true.

Twelve days later it came true.

That is not coincidence. That is the blockchain writing its own punchline directly into immutable storage, where it will sit, block by block, aeon by aeon, until the heat death of the universe. Stars will burn out. Civilisations will rise and fall. Alien anthropologists will one day sift through the ruins of our planet, and they will find this transaction, and they will go “oh. OH. These fucking idiots.”

When the actual hack happened, their official announcement opened with the words:

>

Bridge. Update.

Exclamation mark. EXCLAMATION MARK. Not a thread. Not a statement. Not even a lowercase apology. Bridge update! Firmware-patch energy. Like the building is on fire and they’re excited about the colour of the flames. Like the Titanic hit the iceberg and the captain got on the tannoy and went “funky little bump, everyone!! 💙”

That exclamation mark is a psychological event. That exclamation mark is a war crime. That exclamation mark is going to haunt some junior social media manager’s dreams until she is seventy years old in a care home, and the night staff are going to find her sitting bolt upright at 4am whispering “Bridge. Update.” over and over into the dark, and they will section her, and she will never recover. It was one exclamation mark. It broke her.

I have never respected and despised a piece of punctuation more in my life. It should be tried at The Hague. Build a tiny courtroom just for the exclamation mark. Find it guilty. Take it out the fucking back.

II. BlockDAG. Half A Billion Dollars. No Blockchain. A Secret Founder Whose Last Company Was Being Liquidated By A British Court While The “Final Chance” Emails Were Still Fucking Sending.

Right.

Right.

OK. I need a moment.

Let me crack my neck.

BlockDAG raised somewhere between $200 million and $452 million.

The range is that wide because the numbers cannot be verified on-chain.

The blockchain project’s fundraising. Cannot be verified. On. The. Fucking. Blockchain.

Go make a tea. Come back. Read it again. It will hit harder the second time, I promise you.

They launched December 2023. Promised a working mainnet by November 2024. No public team. No auditable code. No blockchain. Just a presale, a whitepaper that critics allege was stitched together from other people’s documents like a teenager’s GCSE art coursework, and the unshakeable, cultlike, genuinely unnerving conviction that you (yes you, reading this) should wire them money immediately before this once-in-a-generation opportunity evaporates.

Reader, the opportunity did not evaporate.

The opportunity persisted. For over two years. Like fucking damp.

Thirty-two presale batches. Thirty. Two. Daily “FINAL CHANCE” emails for eleven straight months. FINAL CHANCE. FINAL CHANCE. FINAL CHANCE. Rattling through inboxes like a notification from a period tracking app you installed in 2019 and cannot, for the life of you, remember the password to. The phrase final chance repeated so many times it atomised, lost semantic meaning, and became a kind of ambient crypto weather:

Tomorrow in London: cloudy, 14°C, 73% humidity, twelve final chances, light drizzle after three.

The presale ended February 2nd 2026. It ended the way a night out ends when the last person in the group finally accepts that the kebab shop has been closed for two hours and no amount of tapping on the shutter is going to change that. It didn’t stop because anyone decided to stop. It stopped because reality physically fucking intervened.

This Next Bit Is About A Man Called Will. We’ll Come Back To Will. Remember Will.

For the first eighteen months BlockDAG had no public team. None. Zero. For a year and a half they took hundreds of millions of dollars from real human beings and the “About Us” page was a stock photo of three hands pointing at a fucking laptop.

Then, July 2024, the big reveal. Drumroll please. Their CEO would be (ladies and gentlemen) Antony Turner. Proper LinkedIn. Fintech background. Doxxed. Legitimate. A human male. Two eyes. Has a face. Reassuring in exactly the way a seatbelt is reassuring seven-tenths of a second before impact.

Investors exhaled.

And here, reader (here is where Will comes in), in the middle of this circus, in the middle of the FINAL CHANCE emails and the glowing Sphere and the thirty-two presale batches, a real human being, with a real name, with $3,000 of his real money on the line, told a reporter, on the record, for publication, the following sentence:

>

Will.

Will.

My brother in Christ.

Will my guy. Will sweetheart. Sit down. Let’s have a chat. Let’s get you a blanket. Let’s get you a cup of tea with too much sugar in it.

Will, my beautiful trusting angel, being doxxed and being legitimate are not the same fucking noun. A man in a balaclava holding up a Shell garage can be doxxed. That does not make the robbery retail. Ted Bundy was doxxed. Did not improve his Yelp rating. Will. Will, I’m on your side here. I’m rooting for you. But Will. Will.

Because ZachXBT (a man who has, with his phone, for free, from what I can only assume is a beanbag, personally identified more crypto fraud than the entire SEC has managed in its institutional fucking lifetime) published a thread alleging Turner was a frontman. A hired face. A human press release with a pulse and a LinkedIn. The actual architect behind BlockDAG, according to ZachXBT and the journalism that followed, was one Gurhan Kiziloz: a British entrepreneur who stayed off-screen, off the website, off the marketing, and whose previous fintech venture, Lanistar, had been hit with an FCA warning for unauthorised financial activity and then:

Ordered into liquidation by the High Court of Justice in London. September 2025.

September. Of 2025.

While BlockDAG was mid-presale. While the FINAL CHANCE emails were still landing. While Will felt better about things. While the Las Vegas Sphere was (and I need you to physically picture this) literally fucking glowing with the BlockDAG logo over the Nevada desert, visible from planes, visible from space, visible from God.

The real founder’s last company was being wound up by a British court and the thirty-second “final” presale batch was being outlined in a Notion doc. This is not a red flag. This is a red flag factory, and the factory itself is on fire, and the fire is also a red flag, and the fire brigade that shows up is also on fire, and their hose is on fire, and the water coming out of the hose is somehow also red flags.

Kiziloz eventually appeared on an investor AMA. He described himself (and I need you to really taste this phrase, let it sit on the tongue) as:

>

A financial backer.

He attended multiple of these AMAs. He explained the protocol’s technical vision at length. With slides. He was, by the plain-English definition of every single verb in this paragraph, running the fucking company. But “a financial backer” has cleaner brand energy than “the guy ZachXBT outed whose previous venture was court-liquidated mid-fundraise”, so that’s the line they went with.

PR is a hell of a drug. It may, at this point in human history, be the only drug that actually works.

Turner left in December 2025. His replacement? Oh his replacement is funny. His replacement is genuinely, laugh-out-loud, spit-your-drink funny. His replacement is the Chief Marketing Officer.

The head of ads is now building the fucking blockchain.

The person whose job was making things look like they work is now in charge of making them actually work. I am supremely confident the consensus mechanism is in the safest possible hands with a man whose former core competencies were A/B testing subject lines. Godspeed, king. You’ll need more of it than has ever existed.

They Stiffed Two Football Clubs And Then Kept Using The Fucking Logos

The marketing playbook was: sign prestige partnerships, plaster the logos everywhere, pay literally nobody.

Borussia Dortmund. Premium partner. August 2024. By September 27th (six weeks, that’s not even a relationship, that’s a situationship) the club had issued a formal legal default letter stating BlockDAG owed them €2,007,444 and had paid precisely fuck all of it. BlockDAG told investors the partnership ended “because of European crypto regulations.” The letter does not fucking say that. The letter says €2,007,444 and “default” and “immediately”. The regulations did not invoice Borussia Dortmund. BlockDAG did. And then blamed Brussels. Which is the corporate equivalent of eating your flatmate’s yoghurt and going “sorry babe, the EU has strict new dairy laws.”

Inter Milan. Signed. Promoted. Logos in the emails. Terminated for non-payment. Inter’s lawyers issued a cease-and-desist telling BlockDAG to stop using the branding. BlockDAG’s investor emails then continued to feature Inter Milan’s logo after the termination.

Read that again. Slowly.

They got legally dumped. Served papers. Told, in writing, by actual Italian lawyers, to stop. And they kept sliding into investors’ inboxes with the ex’s logo in the header like “hey babe just thinking of you, also here’s our mutual friend Inter Milan, remember them? xoxo 💰🔥”

That is not a mistake. That is a whole personality disorder expressed through HTML email templates.

The Sphere. The $450,000-a-fucking-day Las Vegas Sphere. The giant glowing eyeball you can see from low earth orbit. BlockDAG’s name on that thing, bathing the Nevada desert in corporate light, while a two-million-euro invoice sat untouched in a Bundesliga accounts department in Dortmund.

They could not wire money to one of the most famous football clubs in Germany.

They could. Make. The Sphere. Fucking. Glow.

The Sphere got paid. The Sphere always gets paid. The lesson of BlockDAG is: be the fucking Sphere.

The Miners. Oh God. Oh Fuck. The Miners.

BlockDAG sold physical mining hardware (the X30 at $500, the X100 at $1,600) for a blockchain that has no working mainnet, no confirmed hashing algorithm, and a launch date that exists principally as emotional support for investors who have started, tentatively, to ask follow-up questions.

Total outstanding orders: over 4,800 units. Total value: over $5 million.

Total units actually delivered to the community: approximately twenty.

Twenty.

Out of 4,800.

Delivery rate: 0.4%.

That is not a business. That is a rounding error with a logo. That is not a mining hardware company, that is a mining hardware vibe. A mining hardware concept. A mining hardware intention shared between strangers on the internet at 2am. Schrödinger’s ASIC: it exists and it doesn’t exist, and the only way to find out is to wire them $1,600 and wait two years and, spoiler, you still fucking don’t know.

A US Army veteran named Reid Davis (a man who served his country, a man who deserves infinitely better than this paragraph and honestly better than this entire shitshow of an industry) became one of the project’s most vocal investor critics after taking personal responsibility for $100,000 of his friends’ and family’s money that he had vouched for.

Let that sit. Really sit with it. Take your time.

He trusted the whitepaper. He believed the roadmap. He told the people he loves most in this world (his mates, his family, the people who come to Christmas and know his kids’ names) to put their savings into this. And now he is on Discord at 2am asking where the fucking miners are.

Reid is not the villain of this story. Reid is its most devastating character. The villain is whoever looked at a $450,000-a-day advertising bill and signed it off before they had shipped unit twenty-one.

Selling miners before the blockchain exists is, historically, almost without exception, what people who are about to fuck off to a non-extradition jurisdiction on a private jet do. BlockDAG insists it’s a roadmap. Mainnet was due November 2024. Then June 2025. Then August 2025. Then January 2026. Token listed March 2026. Miners: incoming.

The miners are in the same courier network as Godot. They share a tracking number with your ex’s apology.

ZachXBT Posted And BlockDAG’s Response Was To Ctrl-Z Reality

Hours before the “Value Era” announcement (yes, “Value Era”, a real phrase, coined by a real human being, signed off by a real committee, sent to real investors in a real email with the word “Era” capitalised like they’re fucking Taylor Swift) ZachXBT dropped the thread. Full allegations. Paid frontman. Hidden founder. Presale funds. On-chain flows of nine figures going somewhere, in a fashion best described as “unusual” and at worst as “distinctly Monaco-shaped”.

BlockDAG’s response was not to deny it. Not to sue. Not to explain. Not to issue a statement. Not to do literally any of the things a real company would do.

BlockDAG’s response was to delete every comment naming the founder. Block every investigator. Scrub every Discord message that mentioned any of it. They built an entire moderation infrastructure specifically engineered to erase the name of their own founder from their own community.

That is not a denial. A denial is a set of words that say “this is false.”

What BlockDAG did is what you do when the words are true and you would just, quite honestly, prefer that fewer people saw them.

That is not defending your project. That is landscaping the fucking crime scene. Pulling up the caution tape. Planting some nice perennials. Putting a little fountain in where the body was. Febreezing the evidence. Hanging a framed print on the wall that says LIVE LAUGH LAUNDER directly over the spot where it happened.

So. Yeah. Here We Fucking Are.

Hyperbridge wrote a joke. The joke came true in twelve days. The hack minted a billion tokens, cashed out at the price of a used Toyota Yaris, undercounted the damage by a factor of ten, and the compensation plan is their own busted token, distributed over twelve months, conditionally, delivered with the psychotic cheerfulness of a man who has not yet fully registered what has happened to him.

BlockDAG raised half a billion dollars for a blockchain that does not fucking exist, installed a frontman while the real founder’s last company was being liquidated by a court, stiffed two football clubs on multi-million-euro invoices, lit up a $450k-a-day glowing desert eyeball, sold $5 million of miners and delivered twenty, ran thirty-two final final FUCKING FINAL presale batches, and whenever anyone asked a question they deleted the question.

Both of them announced their disasters with exclamation marks.

That’s it. That’s the whole pathology. That is the connective tissue of the entire grift. The exclamation mark. The psychotic cheerfulness. The congenital, structural, almost spiritual inability to be in a catastrophe without branding the catastrophe.

>

Everything a pivot. Everything an opportunity. The hack is a stress test. The default letter is “regulatory friction”. The twenty miners are “just the beginning”. The deleted comments are “community management”. The quantum computer tweet is “banter”. The Sphere is “a brand moment”. The court-liquidated founder is “a financial backer”.

Ser.

Ser.

The grass is going to be okay.

The grass has no Merkle Mountain Range vulnerability. The grass has never defaulted on a Bundesliga invoice. The grass does not have a Value Era. The grass has never, in its long green fucking history, been minted into existence by a man with a recycled proof and nothing to lose. The grass has never sent you a FINAL CHANCE email. The grass has never called itself “a financial backer”.

The grass is a full node.