⚠️ JUST IN: Solana trading bots compromised with $850K+ stolen

An attacker gained access to private keys used by Solana trading bots and manually drained multiple wallets, resulting in over $850K+ stolen.

@scammed / @DWCusers

⚠️ JUST IN: Trading protocol exploited for $380K+ via owner impersonation

A threat actor impersonated the protocol owner, gained unauthorized access to vault assets, and withdrew funds, draining over $380K.

@scammed / @DWCusers

⚠️JUST IN: Crypto wallet holding 10K ETH ($22M) has just been accessed after ~10 years of inactivity

The wallet’s first activity in nearly 4,000 days occurred ~10 minutes ago, with a $10 test transaction sent to a new wallet.

It is currently unknown whether the wallet was compromised or if the original owner still has access after all this time.

@scammed / @DWCusers

⚠️JUST IN: Sweat Wallet compromised with ~$3.4M stolen

The exploiter used a custom drainer allowing him to drain all funds within 30 seconds, stealing over $3.4M

@scammed / @DWCusers

⚠️JUST IN: The FBI has arrested 276 threat actors tied to scam center operations targeting American investors.

According to the FBI, these groups used social engineering tactics to manipulate victims into handing over assets, with millions of dollars in cryptocurrency stolen through the schemes.

@scammed / @DWCusers

⚠️JUST IN: Wasabi Protocol exploited for $5M+ after an employee was social engineered.

An employee handed over the private keys to a vault holding $5M, allowing the attackers to drain the funds.

@scammed / @DWCusers

⚠️JUST IN: Hundreds of inactive crypto wallets appear to have been drained by the same address.

The affected wallets had been inactive for 7+ years before suddenly being drained by a phishing address flagged on Etherscan.

Over $1M has been stolen across hundreds of victims.

@scammed / @DWCusers

⚠️UPDATE: A crypto wallet appears to have suffered a seed phrase leak.

The affected wallet provider has not been confirmed yet, but seed phrases tied to older wallets were accessed and drained, with losses estimated at around 10 BTC ( $760K+).

@scammed / @DWCusers

⚠️JUST IN: Over $630M stolen from crypto exchanges during April.

Throughout the month, there was at least one major exploit targeting crypto exchanges nearly every day, resulting in $600M+ in stolen from the platforms.

@scammed / @DWCusers

⚠️JUST IN: FBI arrests 25 hackers targeting business emails, resulting in $215M stolen.

The group used social engineering tactics to access corporate emails and send fraudulent payment requests.

Authorities seized 3 luxury watches and $1.2M in cryptocurrency.

@scammed / @DWCusers

⚠️JUST IN: A Ledger user lost $200K after receiving a fake letter impersonating Ledger support.

The letter redirected the victim to a phishing site, where they entered their seed phrase, giving the attacker access to their cold wallet and allowing them to drain the funds.

@scammed / @DWCusers

⚠️JUST IN: A decentralized Bitcoin exchange was exploited for 11 BTC (~$826K).

The attacker appears to have abused the platform’s fee mechanism, forcing users making trades to pay the maximum fee, with those fees being sent directly to the attacker’s wallet.

@scammed / @DWCusers

⚠️JUST IN: Grok AI was exploited for $200,000.

A threat actor manipulated the AI into executing an on-chain transaction, withdrawing funds from its wallet and sending them directly to the attacker’s wallet.

@scammed / @DWCusers

⚠️JUST IN: Binance has added Withdraw Protection to help protect users from social engineering and physical attacks.

The feature will lock on-chain withdrawals for 1–7 days, giving users time to cancel suspicious withdrawal attempts before funds leave the exchange.

@scammed / @DWCusers

⚠️JUST IN: A victim lost $100K+ to an address poisoning scam.

The victim copied a lookalike wallet address from his transaction history and accidentally sent $100K in USDC to the attacker’s wallet.

@scammed / @DWCusers

⚠️JUST IN: Ekubo’s extension was compromised, with over 17 BTC (~$1.3M+) stolen.

Victims were tricked into signing a malicious contract that granted attackers permission to transfer tokens out of their wallets.

@scammed / @DWCusers

⚠️JUST IN: A victim lost $640K after sending funds to a lookalike wallet.

They received $10 from a lookalike wallet, then hours later copied the spoofed address from their tx history and sent the attacker all the funds.

@scammed / @DWCusers