⚠️ JUST IN: Per ZachXBT, a Kraken user just lost ~$18.2M to a social engineering scam

One hour ago, a whale was social engineered out of $18M+ in ETH and BTC. The threat actors have already begun laundering the stolen funds.

@scammed / @DWCusers

⚠️JUST IN: Cryptocurrency exchange compromised via social engineering, resulting in ~$8.8M stolen

Threat actors targeted an employee with access to the exchange’s private keys, ultimately gaining control over reserve funds.

Shortly after the compromise, over $8M was stolen, including ~15 BTC.

@scammed / @DWCusers

⚠️ JUST IN: Drift Protocol exploited for over $200M in ETH and SOL

Attackers have withdrawn $200M+ in cryptocurrencies over the past hour, marking one of the largest crypto thefts so far in 2026.

@scammed / @DWCusers

⚠️ UPDATE: Another ~$70M+ has been stolen, bringing total losses to ~$280M+

An admin with access to the ~$285M was social engineered and provided private keys to the attackers, ultimately leading to the theft.

@scammed / @DWCusers

⚠️ JUST IN: Trust Wallet Discord vanity URL stolen, per ZachXBT

Attackers have taken control of the official vanity link and redirected it to a phishing server which prompts users to connect their wallet.

Trust Wallet social media accounts still have the malicious vanity URL linked, so avoid joining for now.

@scammed / @DWCusers

⚠️ UPDATE: Drift confirms the $280M theft was caused by a sophisticated social engineering attack

An admin with access to private keys controlling ~$280M in Solana was targeted via a phone call and ultimately handed access to the attackers, leading to the theft.

@scammed / @DWCusers

⚠️ JUST IN: FBI recovers ~$600K in crypto tied to a social engineering scam targeting Ledger users

Law enforcement traced the flow of funds and seized ~$600K in USDT linked to the attack.

The victims entered their seed phrase into a fake Ledger phishing site, leading to the theft.

@scammed / @DWCusers

⚠️JUST IN: ZachXBT releases “USDC Files” after ~$420M was stolen since 2022

Per ZachXBT, the USDC contract includes a freeze/blacklist function, yet funds tied to exploits have never been frozen over the past 4 years.

Over $400M+ in USDC was successfully laundered as a result of them not freezing theft funds.

@scammed / @DWCusers

⚠️JUST IN: Drift releases findings on $280M theft and how it occurred

Per Drift, their employees were approached at a crypto conference by attackers using highly sophisticated social engineering.

This led to a Telegram group being formed between the attackers and employees. After ~6 months of establishing trust, the attackers compromised Drift’s wallet by sending malicious files and a fake crypto wallet.

@scammed / @DWCusers

⚠️ JUST IN: Threat actors lose 59+ BTC (~$4M+) after attempting to launder all of it at once

Threat actors attempting to launder stolen funds were impacted by withdrawal limits, with the platform only allowing ~$50K per transaction.

As a result, over $4M+ remains effectively locked on the exchange.

@scammed / @DWCusers

⚠️ JUST IN: March 2026 records 46 exploits totaling ~$39.8M in losses (excluding phishing)

Investigators say AI is being used to find code vulnerabilities and enable exploits across multiple exchanges.

Per CertiK, this marks the highest number of exploits recorded since November 2024.

@scammed / @DWCusers

⚠️ JUST IN: FBI confirms Americans lost a record ~$11.36B to crypto-related fraud in 2025

Per the FBI, social engineering and customer support impersonation were among the most effective methods used for theft, with $2B+ in crypto stolen throughout the year

@scammed / @DWCusers

⚠️JUST IN: New MetaMask drainer steals ~$200K from a victim

The attack is triggered after interacting with a malicious approval, granting attackers access and enabling funds to be drained from the victim’s wallet.

If you use MetaMask, be careful interacting with unknown sites or approvals.

@scammed / @DWCusers

⚠️ JUST IN: ZachXBT exposes North Korea-linked hackers generating ~$1M/month by stealing from exchanges

The threat actors exploit crypto exchanges and services, withdrawing and laundering stolen funds, with over $3.5M laundered in the past year.

Stolen funds were used to purchase luxury vehicles and other high-end goods.

@scammed / @DWCusers

⚠️ JUST IN: Victim lost ~$385K after copying the wrong wallet address

A crypto whale was exchanging ~$749K and sent the first portion (~$380K) successfully.

Shortly after, the wallet was targeted with an address poisoning attack, causing the victim to copy a lookalike address and send the remaining ~$385K to the attacker.

@scammed / @DWCusers

⚠️JUST IN: Per ZachXBT, threat actors stole 50.9 BTC (~$3.6M) from BitcoinDepot (BTM)

An employee was likely social engineered, giving attackers access to the wallet, where ~50 BTC was withdrawn and laundered across 18 wallets.

The company stated the cause of the theft may change as the investigation continues.

@scammed / @DWCusers

⚠️ JUST IN: Privacy messenger app "Session" warns it may shut down after July 8

The privacy-focused platform says it no longer has sufficient funding to continue operations.

Session stated it only has enough funding to keep the app running for ~90 more days.

@scammed / @DWCusers