Bloomberg, Qatar, Coinbase, Ethervista, Abstract Chain, Hamster Kombat, Doodles TV, Solano

This newsletter is proudly sponsored by Alphabot Premium the premier community for WEB3.

👀WHAT’S THE META..👀

GM, GA, or GN wherever you may be.

Want to stay ahead of the curve? Don't worry we got you. The market has been brewing, here's what's currently happening:

₿ BTC/ORDINALS ₿

Project Overview: BitAvatarz

Bitmap Studios is redefining the Metaverse with BitAvatarz, an avatar collection for the BitmapVerse. Powered by RandoMatrix technology, BitAvatarz ensures that each avatar is completely unique.

Key Components:

• RandoMatrix™ Technology: BitAvatarz uses a randomization process driven by Bitcoin blockchain data, making every avatar a one-of-a-kind creation. This non-arbitrary approach eliminates human influence, ensuring that each BitAvatar™ is generated purely from data.

• On-Chain Asset: Unlike traditional avatars, BitAvatarz exist entirely on-chain, guaranteeing security, permanence, and transparency. Every aspect of the avatar is stored on the Bitcoin blockchain.

• First 3D Avatar DMT Collection: BitAvatarz is classified as a DMT (Digital Matter Theory) collection, where each avatar is dynamically generated and interactive.

• Metaverse Compatibility: BitAvatarz will be fully compatible with leading Bitcoin metaverses and game environments.

• Future Developments: Bitmap Studios is working on future 3D models with varied and unique body structures, further pushing the limits of RandoMatrix technology.

Project Overview: Bitcoin Mages

Bitcoin Mages is a game where players become mages and explore, master skills, and earn Bitcoin (BTC) rewards. The game combines dungeon crawling, strategic magic crafting, and cooperative multiplayer gameplay in a richly detailed fantasy world.

Key Components:

• Mage Customization: Players can create their character, specializing in elemental magic like fire, ice, or lightning, and customizing abilities to suit their playstyle.

• Exploration and Questing: Embark on quests to uncover hidden treasures, solve puzzles, and battle powerful monsters.

• Skilling: Mages can master skills such as potion brewing, rune crafting, and enchanting. These allow players to create powerful elixirs, spells, and artifacts to aid in their adventures.

• Raids and Boss Battles: Team up with other players to conquer challenging raid encounters and defeat bosses. Success in these battles yields prestigious rewards.

• Player Economy and Trading: Engage in a player-driven marketplace where items, spells, and resources can be bought, sold, and traded using BTC. This feature enhances the community interaction and allows players to build wealth and power.

• Rewards: Every dungeon completion rewards players with gold, which can be used to upgrade skills or traded in the marketplace for real-world BTC, adding excitement and value to each dungeon run.

🪙CRYPTO DIGEST🪙

After the failure to maintain support at the Orange band on the FibMa, Bitcoin has gradually moved toward the Yellow band, which now serves as a crucial level. A back test of the Yellow band will be key to determining whether it will hold as support or if we could see a further continuation of the multi-month downtrend.

Looking at a broader view, Bitcoin has only experienced one brief recession, which occurred during the COVID crash when unemployment (Shown as a white line on the chart) spiked. Historically, Bitcoin has thrived during periods of declining unemployment. However, we are now in a cycle where unemployment has been on a multi-year uptrend. If a recession does materialize, it is highly probable that Bitcoin could test the Blue band on the longer weekly timeframe, currently sitting at $43,576. The reaction to this level could vary depending on whether we experience a soft, medium, or hard landing in the economy. It’s important to be prepared for different scenarios, as having a plan in place is crucial for navigating uncertain times.

ETH/BTC and the broader altcoin market, represented by Total3/BTC, and Others/BTC, remains near their current cycle lows. Clarity on the direction of these markets is expected in the coming months, with Bitcoin likely leading the way. Whether these levels hold or break will be pivotal in determining the next phase for altcoins.

Unemployment has been on an upward trajectory since March 2023, and the Sahm Rule, which has a 100% track record of predicting recessions, has been triggered. While some argue that this time might be different, it's essential to respect the data and have plans in place for various outcomes. The COVID crash caught many off guard, and it’s better to be prepared for potential negative outcomes, even if they don't materialize, than to be unprepared. While optimism is common, it's equally important to recognize downside risks and have a strategy that accommodates both scenarios.

🕵️SECURITY🕵️

Discord is an integral part of Web3 experience, but many servers get compromised or hacked daily from NFT projects to DeFi, Layer Protocols and even gamer communities, losing hundreds of thousands of dollars to scammers.

For teams it is important to prioritize security, to provide a safe platform for its users and their assets. Thus hiring a professional to do a security audit service is always recommended, as for regulars it is complicated to thoroughly check everything from role hierarchy, permissions and safely setting up bots, but here are permissions you shouldn’t have enabled in your discord but most likely are, and if they are your first action is get it audited by a professional.

But first you must know that a hacker/attacker wants mainly two things to successfully perform a scam/hack by doing everything they can to achieve the
1) Ability to Mass Mention
2) Ability to Post a link

So, what permissions do you need to look out for? And at the end of this article, I will mention tips to overcome these!

Permission: Manage Channels
Severity: Critical
Reason: It gives access to create/modify/delete channels, this is a dangerous permission encase of a hack, it can be used to Nuke the server, as in deleting every single category and channel created.

Permission: Manage Roles
Severity: Critical
Reason: Not only it allows giving roles, but allows editing them, adding or removing any role below the highest role, also allows channels permission changes to anyone who has access to the channel.

Permission: Manage Webhooks
Severity: Critical
Reason: It gives access to add/remove webhooks, this is a dangerous permission, as an attacker can use a webhook to spam malicious content with links to channels, especially with custom bots.

Permission: Manage Events
Severity: Critical
Reason: It gives access to create/modify/delete events in discord, in which it can have mass mention ping and link, an attacker can use it to announce scam links/hack links.

Permission: Create Private/Public Threads/Send Messages in Threads
Severity: Critical
Reason: Not many moderators/admins have the eyes to take care of it, it can be used by an attacker to post malicious links without mods/admins noticing.

Permission: Ban, Kick Commands Natively
Severity: Critical
Reason: It allows mass kick, ban and prunes, without being logged and stopped, resulting in server members wiped.

Permission: Mention (@here @everyone role and others)
Severity: Critical
Reason: It gives the ability to mass ping/mention.

Permission: Administrator
Severity: Shooting your leg!
Reason: It gives the ability to do everything and anything other than delete the server, it can do all above and more! You should never use it on any account you use on a day to day basis.

More security issues:

• Anyone is able to post random links in chats.

• Anyone is able to do non limited / (slash) app commands.

• No log channels to watch out and monitor what is happening in the server.

• Impersonations & advertising in names and messages.

• Losing your vanity custom link by losing your server Level 3 Boost.

Okay so how to run your server if all these permissions are locked you might ask?

By changing server role hierarchy and using security bots it allows you to overcome these critical risks.

• Use a cold admin server setup for both admin account and server owner account to be an account used on mobile/tablet or pc that you don’t use for your normal activities nor logged into from other devices only to be used in server changes roles/channels/etc. To avoid account breach.

• Using custom monitored commands to give out “specific roles”.

• Using Good Knight Bot for AntiLink and 2FA posting & pinging, webhook protection and giving temp permission roles by 2FA. (goodknightbot.com)

• Use Wick Bot (https://wickbot.com/) to enable moderation monitoring, spams, impersonations, locks, commands monitoring (Kick,Ban) etc.

• Get a security auditor to leave no stone unturned & train your team on security best practices and social engineering tactics.

Finally, remember that a discord Audit/Security check is

1. Keeping your community safe

2. Protecting High-Value Assets

3. Preventing Phishing Attacks

4. Building Trust

5. Staying Ahead of Vulnerabilities

🤑AIRDROPS🤑

Airdrop Updates - Week of 1 Sep

100+ Airdrop Opportunities in my Notion Airdrop Tracker: https://bit.ly/droptime

Solana ID Priority Pass
Solana ID is set to become the future of Identity Technology that will solve Founders’ Dilemma and reward real users. Below is a full guide to minting your priority pass and open the door to Solana ID Airdrop as well as other rewards from other projects in the future:

https://x.com/cruzcontrol660/status/1829171989887721950

Or simply dive in and mint yours here: https://pass.solana.id/?referrer=3RsH6O-lWgIp1rlNVMsJz

Solayer’s sSOL is whitelisted on SAVE
A Guide to qualifying for 3 airdrops at once with Solayer’s restaked SOL ($sSOL) now that it is whitelisted as a collateral asset on SAVE (formerly Solend), via interactions with Solayer, SAVE, PYUSD (Paypal’s stablecoin) and Lulo, or simply loop your sSOL to multiply your points:

https://x.com/cruzcontrol660/status/1828098534677356783

Here’s a referral link to join the Solana Restaking revolution: https://app.solayer.org/invite/77CVAQ

Soneium Testnet is Live
Sony Block Solutions Labs has launched the Soneium Minato Testnet which is a Ethereum layer-2 solution. Here are the steps to interact with the Testnet (for now):

• Acquire Ethereum Sepolia ETH (Testnet): https://www.alchemy.com/faucets/ethereum-sepolia

• Bridge Sepolia ETH to Soneium Minato Testnet (0.1+ ETH will suffice): https://bridge.soneium.org/en/testnet

• Optional: Verify these tasks on Layer3 and Join Discord: https://app.layer3.xyz/quests/the-soneium-minato-testnet?ref=charmaine.eth

That's all for now, as there are no dApps to interact with yet. This will be updated as more tasks become available.

Ethena Labs announces Season 2 Snapshot and Season 3 Details

A full thread here: https://x.com/cruzcontrol660/status/1830794262562382323

If you want in on Season 3, join via this link: app.ethena.fi/join/x0h99

Spider Sensei: Alpha before it’s Alpha
Using Social Sentiment to curate new coins, NFTs, & protocols—before they trend. X / Discord