⚠️JUST IN: ZachXBT has received a $150K USDT bounty from BC Game for identifying an exploiter.

ZachXBT submitted a detailed report along with an on-chain graph tracing the attacker’s wallet responsible for stealing ~$4.3M through a third-party game exploit.

@scammed / @DWCusers

⚠️JUST IN: Ledger identified an exploit in Android phones that lets attackers extract crypto wallet seed phrases and PINs.

Ledger’s security team identified a vulnerability in devices running MediaTek processors. An attacker with physical access can connect the phone via USB and extract all crypto wallet seeds within a minute.

@scammed / @DWCusers

⚠️JUST IN: A victim lost $50.3M after swapping $50.4M USDT for just 327 aAAVE (~$35.9K).

The victim attempted to swap $50.4M USDT for aAAVE via CoW Protocol, but the trade executed with extremely low liquidity, resulting in only $35K received.

@scammed / @DWCusers

⚠️JUST IN: Telus confirms a major data breach linked to the ShinyHunters group.

Reports indicate ~700TB to 1PB of data was stolen, including client data tied to over 30 high-profile companies serviced through Telus.

@scammed / @DWCusers

⚠️ JUST IN: The FBI is investigating crypto wallet drainer malware being distributed through games on Steam.

Authorities warn users not to download small or unknown indie games on Steam, as they can contain malware that automatically drains crypto wallets on victims’ PCs.

@scammed / @DWCusers

⚠️JUST IN: The Ethereum Foundation has privately sold 5,000 ETH (~$10M) to BitMNR via an OTC deal.

Per the Ethereum Foundation, the sale will fund core operations including Ethereum development, ecosystem growth, community grants, and other ongoing work.

@scammed / @DWCusers

⚠️ JUST IN: Venus Protocol has been exploited again, marking its 6th exploit this year.

Venus Protocol has now suffered six separate exploits in the last year, which have resulted in millions stolen and making it one of the lowest security crypto platforms.

@scammed / @DWCusers

⚠️UPDATE: $3.75M+ has been stolen in the most recent venus exploit.

Venus Protocol continues to be exploited, with over $10M stolen by hackers throughout 2025 alone, making it one of the most targeted crypto platforms.

@scammed / @DWCusers

⚠️JUST IN: A WhiteHat hacker says an exchange refused to pay a $500K bounty after he helped secure ~$500M in on-chain assets.

The researcher discovered a critical vulnerability that allowed any user to directly drain accounts on the chain without special permissions.

Despite previously promising a $500K reward, the exchange allegedly only offered $50K

@scammed / @DWCusers

⚠️JUST IN: A victim lost 736 ETH (~$1.75M+ ) after interacting with a malicious site.

The attacker gained access after the victim signed a Permit signature, allowing unauthorized transfers.

Funds were drained shortly after and split across three wallets.

@scammed / @DWCusers

⚠️ JUST IN: A UK crypto whale claims he was robbed by his wife for 2,323 BTC (~$172M)

The victim claims his wife used home CCTV footage to obtain his Trezor seed phrase and PIN, then transferred the funds out of his wallet without his knowledge.

@scammed / @DWCusers

⚠️ JUST IN: Bitrefill confirms a data breach exposing 18,500 purchase records.

The company says an employee device was compromised, leading to attackers gaining access to internal databases and certain crypto wallets.

It is worth noting Bitrefill data has previously contributed to arrests of notorious fraudsters in ZachXBT investigations.

@scammed / @DWCusers

⚠️JUST IN: A victim lost $143K+ USDT after sending funds to a fake lookalike address

Address poisoning remains one of the biggest causes of crypto theft, with victims consistently losing six figures on a weekly basis.

@scammed / @DWCusers

⚠️JUST IN: Google’s threat team flags “DarkSword” exploit targeting crypto wallets on iOS devices.

Researchers disclosed a new iPhone exploit called “DarkSword” capable of extracting crypto wallet data, passwords, and other sensitive information from compromised devices.

Users are urged to update to iOS 26.3 immediately to avoid risk.

@scammed / @DWCusers

⚠️JUST IN: A victim lost ~$100K after signing a phishing approval

The attackers have stolen ~55 ETH (~$115K) across 6 victims in the past 27 days, with today marking their largest theft.

@scammed / @DWCusers