⚠️PUBLIC ANNOUNCEMENT: Hello everyone, this is a public warning that the service @privrdp is actively ratting its users.

The owner, who also runs TheCommNews, previously exit-scammed $20k from the former owner of @poor before Cupid acquired it. After the scam, he shut down the exchange and deleted his account.

He has now launched an RDP service that is installing rats on user machines and draining connected crypto wallets.

@scammed / @DWCusers

⚠️UPDATE: He has now deleted all redirects to his RDP channel after being caught ratting users.

We advise everyone to be extremely cautious when dealing with the owner of “TheCommNews” as this is the second project he has used to exit scam his audience.

He previously scammed the former owner of @poor out of $20k during a ETH>XMR swap and deleted the channel shortly after.

@scammed @DWCusers

⚠️JUST IN: ZeroBaseZK’s frontend has been compromised and hackers are actively stealing funds from users, with more than $240K drained from over 300 victims.

Hackers took control of the site’s frontend and made it look like the official ZEROBASE interface, tricking users into signing phishing USDT approvals.

@scammed @DWCusers

⚠️JUST IN: Ribon Finance has been exploited, with attackers stealing $2.7M in total.

The exploiter stole 2.5 BTC ($230k) and more than 600 ETH ($2M) before laundering the funds through more than fifteen wallets.

@scammed @DWCusers

🎅Hello everyone, hope you’re all having a great weekend and enjoying the holiday season.

We’re hosting a $1,000 giveaway for Christmas and New Year’s, ending shortly. Be sure to join while it’s still live.

Join the $1,000 giveaway: HERE

⚠️BREAKING: 21 year old son of a Ukrainian deputy mayor was murdered in an IRL attack allegedly linked to his cryptocurrency holdings.

According to investigators, the suspects reportedly demanded access to cryptocurrency and a ransom. When this was not provided, the situation escalated. The case remains under investigation.

@scammed / @DWCusers

⚠️JUST IN: A crypto whale’s private key was compromised, resulting in over $1.1M drained.

The attacker stole approximately $1.1M in ETH assets and immediately routed the funds through Tornado Cash in batches of 100 ETH (≈$300K) and 10 ETH (≈$30K).

@scammed / @DWCusers

⚠️JUST IN: A crypto whale was drained for $550k after signing a malicious phishing contract.

The victim attempted to convert assets to USDT due to the crypto crash and interacted with a fake exchange website. All funds were subsequently drained, totaling $550k+.

@scammed / @DWCusers

⚠️JUST IN: YearnFinance V1 has suffered an exploit, resulting in losses of ~$300K.

The exploiter swapped the stolen funds into 103 ETH ($304K), which are currently held in a newly created wallet.

@scammed / @DWCusers

⚠️JUST IN: A crypto whale’s multisig was drained of $27.3M following a private key compromise.

The victim’s private keys were compromised during and after the creation of the wallet. Shortly after depositing $27M+, all funds were drained and laundered through Tornado Cash in 100 ETH ($311K) batches.

@scammed / @DWCusers

⚠️UPDATE: The drainer has laundered $12.6M (4,100 ETH) via Tornado Cash and still retains roughly $2M in liquid assets.

The drainer also maintains control of the victim’s multisig, which currently holds a leveraged long position on Aave, with $25M in ETH supplied against $12.3M DAI borrowed.

@scammed / @DWCusers

⚠️JUST IN: North Korean state linked hackers stole over $2B in Bitcoin and crypto this year.

DPRK linked actors accounted for 76% of all service level compromises in 2025, the highest share ever recorded. The largest single incident was the $1.4B Bybit hack.

@scammed / @DWCusers

⚠️JUST IN: On Dec 18, three suspects invaded the home of a cryptocurrency investor in La Rochelle, France at around 5:00 AM, stealing €8M in cryptocurrency.

The investor and his partner were held hostage and threatened before being forced to transfer their cryptocurrency to the attackers. French authorities have opened an investigation and no arrests have been made yet.

@scammed / @DWCusers

⚠️BREAKING: A victim lost $50M in Ethereum assets due to address poisoning.

The victim first sent a $50 test transaction. Shortly after, a lookalike poisoning address appeared in their transaction history. When preparing to move the full $50M, the victim copied the wrong wallet address and transferred all funds to the attacker.

@scammed / @DWCusers

⚠️BREAKING: Coinbase posted on X that Ron has been charged for stealing $16M+ through social engineering as Coinbase Support.

This appears to be the first time Coinbase has publicly acknowledged a specific threat actor who social engineered victims to steal cryptocurrency, sharing details of his arrest and an official press release.

@scammed / @DWCusers