Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)

@stackframe MARKET 💼 · 2026 vulnerability research & exploit code targeting Web3, DeFi and dApp surfaces. each release ships as working source. pay for my research with exclusive private use of whatever I find. if a "MM" is wanted that's completely reasonable. for paid research requests (e.g., VMs, vulns, contracts, etc) / purchase inquiries | @moschata

(price wise)

Google Voice Autodialer | t.me/stackframe 😀 Processes Google Voice (or SIP trunk) calls sequentially, one at a time. Categorises each call within 1.5 seconds as ringback, pickup, human, voicemail, or silent, acting on each instance with maximum efficiency. Upon human response, the selected prompt is activated (e.g., Ledger, Trezor, Coinbase, Kraken, etc.). Upon voicemail detection, the call is terminated (configurable). The microphone remains silent by default; no audio is transmitted unless explicitly scripted. As per the standard process. * Ringback and voicemail beep detection utilizing Goertzel algorithm plus streaming whisper transcripts. * Press-1 detection via dual-band Goertzel algorithm with a minimum 40 ms tone duration. * Per-call WAV recording with webhook notification upon outcome. * Live transcripts available in the web console. * Interfaces include Telegram bot, command-line interface, and operator console (bot/CLI/web). * Stealth configuration via Patchright and residential proxy rotation (if required). * SIP trunk capability: Twilio, Telnyx, Signalwire, Asterisk, etc. * Deployment on a domain behind basic authentication and Caddy. * Cross-platform compatibility: macOS, Linux, Windows. * No voicemail is left; operator audio is never leaked. * On average you can expect ~3-6 calls per total on-line minute, depending on connection, call status, and vic (data quality in general). Nothing special as it's heavily dependant on you and your data. Sorry for the cut-off in the video too (both video time and the CLI & Web interface windows). I don't know why OBS decided to ignore the rest of the content. $1,000 for source | @moschata I'm not running any P1 myself. You will have to manage/buy routes yourself. I will only ever respond to inquiries for purchase, feature requests, bugs, or usage. Because of this there is no "$$-$$$ or % per 1k lines". Most people seem to prefer outright purchasing the sourc

Bitstamp VM | t.me/stackframe VM for Bitstamp. hCaptcha solver & proxies required. * 500-2,000 CPM * Multi-captcha platform integration * Caching to avoid running same line twice $1,000 | @moschata

OneKey VM | t.me/stackframe VM for OneKey. Accurately report valid OneKey accounts (cloud backup, keyless, prime subscription, etc) from a list of emails. This VM sort of requires rotating proxies. No captcha solver or credentials needed. * Definite registered / unregistered verdict per email, written to a results file. * ~6,000-25,000+ CPM, scales with worker count (64-256+ workers for example). * Caching, avoid running the same line twice. * Live TUI. $1,300 | @moschata

Stansberry VM | t.me/stackframe VM for Stansberry. Accurately report valid accounts from a list of emails, captchaless, browser-native WAF, no solver or creds needed. Target is never emailed. Works best with rotating residential proxies. However it scales hard on worker count. * Definite registered / unregistered verdict per email * ~3k (single, no proxies) - 15k–20k+ CPM multi-worker + proxy * Session cache, avoid running the same line twice * Auto-retry on any errors * Existing emails show live in registered panel * Live TUI, themes, masked output, peak CPM frozen on completion — s run/stop · p settings · t theme · q quit $1,500 | @moschata

Funnel | t.me/stackframe Local desktop sweeper, 4 families. Paste seed(s)/key(s), see balances on 10 chains, funnel to wallet(s) in one pass. no ENS/emails/exchange, seeds + raw keys only, public nodes wired, private RPC optional. * Auto-family: one hex key maps to EVM + Tron + BTC + SOL * 3 EVM paths, slip-10 SOL, bip84/44 BTC, Tron * Batch import: paste or file .txt/.csv/.key/.json * Multicall3 EVM + tokens, SPL, BTC utxo, trc20 USDT * Gas ferry: gas-poor wallets refueled from donors * Multi-output, weighted split, per-chain outputs * Dry-run first, txs key-recovered, spike caps, csv export * Multi-profile: outputs, history, address book * ETH | Polygon | BNB | Arb | Base | OP | Avax | SOL | BTC | TRX — all supported $900 | @moschata

@Module & @Stackframe | Ledger Wallet 0day (In-App) — $x,xxx Hello everyone, we're releasing a Ledger Wallet 0day that renders a full recovery flow natively inside the application. The target remains within Ledger Wallet for the duration of the session. * Features: — In-app execution via Ledger Wallet — Source code included (non-obfuscated) — Custom overlay templates available on request * Requirements: — Public host or tunnel for overlay delivery NOTE: The target must accept a deeplink popup to open Ledger Live, the recovery flow then runs in-app from there. No further detail will be provided on this point. * → Screenshots attached are for demonstration only, the overlay shown is a sample template, not the only layout available. Custom templates are available upon request. Open to a test before purchase once a deposit is placed with a trusted MM (@scrizon/@cupid). For more information, join @module or PM @lmaowtf17 | @moschata

Trezor Signer Spoofer (In-App / Web) | t.me/stackframe FULL signer impersonation kit for Trezor Suite. VIC's wallet displays your identity with a green "Verified Service" badge. They confirm on device because every trust signal checks out. * Sign arbitrary messages, transactions with your to/value/data, EIP-712 typed data for permits * Account addresses and device model, firmware, PIN state pulled on page visit * Panel with per-VIC-session fire buttons and brand switcher: Trezor, MetaMask, Ledger, Uniswap, Pegasus, Custom * Delivery via trezor.io, address bar never leaves their domain * Fresh pairing per visitor click, no manual URIs * Each victim auto-logged: Device Name, VIC #, IP, Agent, Device, Firmware, PIN Addresses * Cross-chain: ETH, BTC, SOL, XLM, TRX NOTE: This DOES NOT require system access at all unlike other current Trezor Suite SE kits. Not a signing bypass. Hardware-enforced user interaction needed still. Identity & badge are forged. $3,000 | @moschata

@Module | Hardware Wallet Exploit AIO Panel — $x,xxx Hello everyone, we're releasing a unified hardware wallet exploit panel covering Trezor, Ledger, SafePal, and OneKey. Single operator dashboard, four independent delivery lanes, fully customizable presentation per target service. * Features: — Trezor Suite in-app signer takeover (1-click OR 0-click) — Trezor silent device dossier: zero-prompt bridge enumeration on page load (model, device ID, firmware, label, xpubs + balance tiering in operator panel, no Connect permission popup) — Ledger Wallet in-app signer takeover (1-click) — SafePal browser extension identity spoof lane (1-click) — OneKey WC hardware wallet handoff (1-click) — Live operator panel: session control, release gate, waiting-stage progression, redirect routing, per-victim Trezor dossier view — Per-template identity editor (service name, URL, icon) with verified presets where supported — Customizable pre-confirmation layers (branding, copy, icons) per exploit lane — Source included (readable, non-obfuscated) * Requirements: — Public host or tunnel for panel delivery NOTE(1): Each lane delivers into the native wallet/app confirmation flow. The target must accept a deeplink popup, BUT (for trezor specifically): no deeplink needed when triggering the exploit on the web version of trezor (trezor[.]suite[.]io). Trezor device dossier collection is separate: silent, no popup. NOTE(2): Each exploit is also available as a standalone single-lane panel (Trezor-only, Ledger-only, SafePal-only, OneKey-only). DM for individual pricing. Open to a test before purchase once a deposit is placed with a trusted MM (@scrizon/@cupid). For more information, join @module or PM @lmaowtf17