Joined October 2020
744 Photos and videos
Jun 12
USDT freezes $72M in relation to a large laundering operation An unknown entity received $120M and began laundering operation by sending funds to KuCoin and BTC. Moreover, according to @zachxbt, this entity created XMR orders which changed the price $330 -> $420. Address linked to this entity was later banned.
6
756
Jun 12
White Hat Hacker Unlocks $2 Million in ETH Today we cover some good news (finally!) -- @0xFlorent_ unlocked an old ICO contract holding $2M of ETH. There are 48 original investors from Hong Kong eligible for funds recovery. Link to the recovery will be shared in the replies.
1
2
8
717
Jun 12

Replying to @0xFlorent_
If you're one of the 48 original HongCoin investors or if you know any of them, feel free to reach out. Happy to help you sign your refund if needed. You can also follow this guide to do so on your own List of eligible addresses and guide : rentry.co/hongcoin-recovery-…
100
Jun 11
A small portion of the funds, however, was moved. That's where the attacker made a mistake, because when doing so, he exposed his IP address. Combined with the broader OSINT analysis we established the attacker’s real identity and compiled a complete dossier.
1
46
Jun 11
The dossier was handed to the client and to law enforcement. It now runs in parallel with the Tether recovery process: while the frozen funds work their way back through legal channels, investigators have a named suspect to pursue.
38
Jun 10
Attacker has drained old Raydium pools for ~810 ETH All stolen funds were deposited to Tornado Cash, with 7 ETH deposited to FixedFloat
4
3
18
1,782
Jun 10
Attacker responsible for this 56 ETH exploit was funded by changeHero's hot wallet 0x016606acc6b0cfe537acc221e3bf1bb44b4049ee
Jun 10
🚨 Our monitoring flagged a flash-loan exploit on ETH mainnet. Attacker walked away with ~56.73 ETH from the $NOVA reward system (NovaBox) , no reentrancy, no overflow, pure economic design flaw. 99.86% of the pool gone in one tx. Full root-cause forensics 🧵👇
1
1
17
3,520
Jun 10
Tracing Humanity hacker showed he ended up with 19,475 ETH profit All H token on Mainnet was swapped via Uniswap and then sent to separate addresses. We are actively monitoring for new transactions and will sent updates as soon as attacker strart withdrawing the funds
1
6
1,231
AMLBot retweeted
in may, Taylor Hornby (@DefuseSec) used claude opus 4.8 to find a counterfeiting bug in zcash's orchard pool: one missing constraint = unlimited undetectable ZEC. TronZ (@trondao) shielded USDT is "based on zcash", ~$1.02M in the pool. cooked too? spent a day checking. thread
1
2
4
406
May 30
It appears that @gravity_bridge has fallen victim to an exploit leading to at least $5M in damages. Attacker has now laundered the funds via ChengeNOW, Binance and Kucoin and is still holding most of the funds on his address. Moreover, the Binance deposit address he used was active a year before the exploit.
2
10
1,132
May 28
$500k stolen, 297 wallets were drained across several EVM chains. Our tracing shows stolen funds were consolidated at address 0x43D49AeF7aAf0Dcf015b20057C5364E092D66615 and then sent directly to FixedFloat.
3
20
2,201
May 28
Joe Agent was exploited today via reentrancy leading to $190k damage Attacker utilized a reentrancy vulnerability, which is rare in current security landscape, and extracted 302 BNB. After that they were deposited to Tornado Cash.
6
661
May 27
5 trillion $vsdCRV was maliciously minted today on Arbitrum, which led to $90k of damages. Attacker at first minted the tokens using compromised private key, then bridged everything to ETH Mainnet. We are now monitoring the address and additionally flagged it as malicious.
1
387
May 26
⚡️JUST IN: New UK Sanctions Hit Huobi, Bitpapa, and Exmo According to the official press release, UK is rampling up pressure on Russia's crypto network and A7A5 token, providing sanctions evasion capabilities. Provided list of designators shows Huobi, Bitpapa and other companies and individuals, mostly Russia- and Kyrgyzstan-based. Full list will be posted in the reply👇
1
1
2
506
May 26
BTC linked to Mt.Gox were recently sent to BTC burn address More than a 100 BTC were sent to 1111111111111111111114oLvT2 that is used as a burn address. Most of the addresses involved were receiving funds linked to Mt.Gox. The address on the screenshot got 20 BTC and was slowly offloading them to Kraken, until yesterday burning all funds left -- 1.42 BTC.
1
2
9
1,617
May 26
SquidRouterModule was not affiliated with @squidrouter, but with New Market Trading. According to their website, company uses non- custodial technology to connect investors to the onchain economy. Recent onchain message sent to exploiter's address and firm's connection to Safe technological solution seems to confirm that data.
4
709
May 25
Another exploit, $3 million lost, unusual laundering tools used. SquidRouterModule has fallen victim to an Access Control attack that is being on the rise on the last few months. What is unique here is the usage of attacker-controlled Uniswap pools for swapping funds to DAI, a token that can never be blocklisted. Despite going to external cross-chain bridges for transfer funds to Mainnet (yellow and red), a lot of Mainnet rare ERCs were swapped to DAI by his own infrastructure.
5
30
3,376