One of the most egregious fantasies promoted by liberals over the past several decades is the worshipful image of the desperate and grateful third world asylum seeker.  We see it constantly in movies television and popular media; the narrative of the "huddled masses, yearning to breathe free..."  This narrative has become so ingrained in western culture that it is absolutely world shattering when people find out how entitled and arrogant most migrants really are.

The flood of over 60,000 Muslim migrants from Morocco to the Spanish enclave of Ceuta has dashed a lot of progressive delusions in the past week, with migrants fresh from the beaches already looting businesses, raiding homes, attacking locals and setting fires.  European officials are reluctantly admitting that the invasion is a problem that must be corrected.   

The video evidence on social media is a crushing blow to the multicultural agenda, so much so that Ursula von der Leyen, head of the European Commission, complained about the optics of the images coming out of Ceuta on social media. 

The images coming from Ceuta are unacceptable.

We cannot allow anyone to come to our Union without abiding by our rules.

Dangerous crossings must stop immediately. Smuggling networks must be dismantled. And returns must be swift, as our rules allow.

I tasked two Commissioners…

Spanish officials have attacked the negative response of some European leaders as "selfish" and "prejudiced", stating that the European Union would be harmed by the "polarizing" rhetoric.  

But isn't this migrant horde exactly what European elites have been enabling for the past decade?  Yes, it is, but the Cueta incident is happening too quickly and gaining far too much public attention.  They usually prefer a "frog in a boiling pot" strategy over blatant barbarian pillaging plastered all over international news. 

But it gets much worse for the multicultural cabal, because interviews with these migrants are hitting the mainstream.  What these people have to say about their stay in Ceuta so far is mind blowing.  The entitlement is unprecedented.  Third worlders thought they were marching into a free buffet with easy access to amenities, jobs and westerners bowing at their feet. 

Instead, the illegals were met with closed businesses (for safety), prices they could not afford, no jobs and hostility from other migrants who came to Ceuta legally.  

People being beaten or killed (if the claims are true) is unfortunate, but then again, it seems to have worked.  Large numbers of migrants are reportedly leaving Ceuta on their own because they fear backlash from the locals.  There's an important lesson that could be learned her by populations across the western world:

If governments are not going to do their duty and secure national borders from invaders, then the public still has the power to make those invaders leave simply by making the lives of illegal migrants miserable.  If their experiences in the west are worse than their experiences in their home country, they will go back.

Of course, the entitlement of migrants is amplified by progressive leaders in the west.  Foreigners have been regaled with stories from western media about a land of plenty and a life of ease.  All they have to do is make the crossing and the streets will be paved with riches for the taking.  It is clear that the majority of migrants entering Ceuta were under the impression that they would be welcomed with open arms and lavished with subsidies.

Instead, the Spanish military is escorting thousands of them out of the enclave.  Or, at the very least, the military is making a good show of trying to remove the migrants from the area.  Meanwhile, the locals are doing the job that the government should have been doing from the beginning, which is making Ceuta so inhospitable to migrants that they will never want to go back.  

Update (1030ET): A third wave of thefts against Bitcoin wallets built on flawed Coldcard firmware ran through Saturday morning, lifting observed losses to roughly 1,367 BTC - close to $89 million - drained from 4,585 addresses since Thursday.

As Cyberkendra.com reports, the size is not the interesting part. The third wave is the first one designed to be hard to follow, and that shift tells self-custody holders more about what happens next than any dollar figure does.

Galaxy Research published the wave-three findings early Sunday. Between 12:23 UTC on July 31 and 06:42 UTC on August 1, across blocks 960,396 to 960,471, another 207.73 BTC left 1,912 addresses. That is roughly a tenth of a coin per victim.

Wave one, which opened at 01:10 UTC on July 30 and closed 41 minutes later, took 1,082.65 BTC from 1,195 addresses — nearly a full coin each.

Wave two, on July 31, collected just 76.16 BTC from 1,478 addresses.

Median losses tell the same story more bluntly: 0.270 BTC in wave one, 0.010 in wave two, 0.013 in wave three. The operator is now emptying wallets worth a few thousand dollars apiece and still finding enough of them to spend ten hours sweeping.

Waves one and two were easy to map because the attacker made them easy.

Both funneled coins through a handful of shared collector addresses into P2WPKH holding wallets (pay-to-witness-public-key-hash — plain single-key SegWit outputs, fully visible on chain).

Wave three abandoned that.

Each victim's coins went to their own destination, and the proceeds now sit in 293 separate P2WSH vaults (pay-to-witness-script-hash, a format that keeps its spending conditions hidden until the first time the coins move). The sweeper also batched an average of 6.37 victims per transaction, where wave one took exactly one at a time, and scanned only the default derivation path instead of testing several branches per seed. Even the fee constant changed — 30 sat/vB in wave one, 50 and 10 in wave two, roughly 200 then exactly 10 in wave three.

That is either the same crew rebuilding after being enumerated in public, or a second crew grinding the same broken key space on its own.

The falling average haul suggests the profitable end of the vulnerable key space is picked over. That is cold comfort. Wave three's median take of 0.013 BTC is the clearest evidence yet that no balance is now small enough to be beneath the scanner's notice — and the sweeping had not stopped three days in.

* * *

As Decrypt.co detailed earlier, Binance founder Changpeng "CZ" Zhao is warning crypto owners not to place blind faith in hardware wallets, following an exploit that drained tens of millions of dollars in Bitcoin from Coldcard devices.

In a Saturday post on X, Zhao cautioned that even hardware wallets can carry bugs, and that older wallets with long histories are not immune.

“Nothing is 100%,” he posted.

He suggested holders consider spreading their funds across several wallets as one way to reduce exposure, while acknowledging the approach carries its own trade-offs and that no setup is entirely foolproof.

CZ closed with his familiar refrain urging users to stay informed and keep their funds safe: “Stay SAFU!”

His comments followed the discovery of a flaw in Coldcard devices made by manufacturer Coinkite.

As Decrypt reported, a build error caused seeds on affected units to be drawn from a software fallback rather than the device's hardware random-number generator, leaving the private keys far easier to guess than intended.

The problem traced back to firmware shipped in March 2021, and updating the firmware does not fix a seed already created on a compromised device.

The scope of the theft has grown considerably since the first estimates.

Early reporting pegged losses at roughly 594 BTC, or about $38 million, drained from around 500 wallets.

According to a report from Galaxy Research, which mapped the flow of funds based on a pattern identified by engineers at Jack Dorsey’s Block, the toll is now put at 1,196 addresses drained for about 1,082.65 BTC, or roughly $70.2 million, in a 41-minute window on July 30.

That is nearly double the initial figure.

Galaxy said every sweep paid an identical hardcoded fee and left no change output, a signature it described as consistent with an automated tool spending keys it already held rather than owners moving their own funds.

“The pattern tells us these were all the same attacker — it does not capture the attack itself, which looks the same as if a coin owner chose to move coins,” Galaxy Research said, adding that Bitcoiners should move funds out of single-signature Coldcard addresses and into secure custody.

The victims spanned native SegWit and older address types, pointing to multi-path key scanning.

The stolen Bitcoin was consolidated within minutes into a handful of addresses and, per Galaxy, has not moved since.

Coinkite co-founder Rodolfo Novak said in an X post on Friday that the company takes responsibility for the firmware bug and has shipped emergency hotfixes.

Novak also warned that the update does not protect seeds generated on vulnerable firmware.

He advised users who generated seeds on vulnerable firmware to move their funds to a new seed.