⚠️JUST IN: European stablecoin issuer StablR appears to have been exploited for ~$10M.

The team was asleep during the attack, giving the exploiter a 3+ hour window to continue draining funds.

@scammed / @DWCusers

⚠️JUST IN: The same Kraken victim has lost an additional 10 BTC (~$1M).

The victim believed they were speaking with legitimate Kraken support and was instructed to withdraw BTC from Kraken to another wallet. Shortly after, the funds were stolen.

This single victim has now lost 61+ BTC (~$5.4M) to a social engineering scam in under 48 hours.

@scammed / @DWCusers

⚠️JUST IN: A website impersonating Uniswap has drained over $400K.

Over the past 24 hours, more than $400K has been drained from hundreds of victims who accidentally connected their wallets to the fake site.

The fake site is currently appearing as the top Google search result and has a wallet drainer connected.

@scammed / @DWCusers

⚠️JUST IN: Another website impersonating a crypto exchange has drained over $2.5M+.

It appears these sites are using the infamous “Inferno Drainer,” one of crypto’s most well-known drainers, which has been linked to over eight figures in thefts throughout the past few years.

@scammed / @DWCusers

⚠️JUST IN: Tether has frozen $1.5M connected to funds stolen through a fake website.

While the frozen funds are now locked, the threat actors still managed to walk away with six figures, including $500K withdrawn to wallets under their control.

@scammed / @DWCusers

⚠️JUST IN: Multiple victims have lost $500K+ after signing malicious phishing approvals.

Over $500K was drained from victim wallets after they unknowingly signed phishing approvals, granting attackers permission to access and steal their funds.

@scammed / @DWCusers

⚠️BREAKING: The FBI has seized 127,000 BTC (~$8B), marking what appears to be the largest forfeiture in U.S. government history.

Authorities also arrested 300 workers tied to social engineering attacks, online scams, and Bitcoin theft targeting American crypto holders.

@scammed / @DWCusers

⚠️JUST IN: Gravity exploited with $5.4M+ stolen

11 employees were social engineered into signing a malicious signature, which gave the attackers withdrawal access and allowed them to drain the funds.

@scammed / @DWCusers

⚠️JUST IN: Exolix has suffered a major data breach, exposing 355K+ swaps tied to $40M+ in volume.

The leaked data includes deposit addresses, withdrawal addresses, TXIDs, and other swap information. Notably, 9 of the top 11 trading pairs involve Monero (XMR).

Exolix has long been viewed as a popular no-KYC swap route for moving funds linked to hacks, thefts, and other illicit activity.

@scammed / @DWCusers

⚠️WARNING: A massive Instagram exploit is currently being abused, allowing users to claim usernames they do not own.

High-value usernames are being targeted, and the exploit is being used by practically everyone at this point. Many rare usernames have already been stolen.

This appears to be connected to recent changes at Meta, where they fired a large number of employees and replaced them with AI.

@scammed / @DWCusers

⚠️JUST IN: Instagram has patched the username exploit.

The exploit remained active for several days, during which some users were able to profit by selling affected usernames in exchange for cryptocurrency.

There are currently no reports of Instagram pulling back exploited usernames, and it is unclear whether users will be able to keep them.

@scammed / @DWCusers

⚠️JUST IN: Radiant Capital is shutting down after failing to recover from a $50M exploit.

The team says it spent 18 months tracing the attacker, but after failing to recover the stolen funds, Radiant is now closing the project and giving up on the investigation.

@scammed / @DWCusers

⚠️BREAKING: Multiple 1L Instagram usernames appear to have been claimed via an exploit.

Around 10 minutes ago, both @e and @f on Instagram were claimed through an active exploit.

Previous one letter Instagram handles have sold for $100K+.

@scammed / @DWCusers

⚠️WARNING: Any “method” being sold or leaked for claiming 1L usernames is a scam.

Only @e, @f, and a few other 1L usernames were claimed and secured through an unknown employee. There is no public method, exploit, or process to obtain them.

Anyone claiming they have a working method is lying to your face and trying to scam you.

@scammed / @DWCusers

⚠️JUST IN: A victim lost ~$310K after connecting their wallet to a fake crypto exchange

The malicious site tricked them into connecting their wallet, which allowed the attacker to drain the funds shortly after.

@scammed / @DWCusers

⚠️JUST IN: Instagram appears to be reverting usernames that were claimed through an exploit.

Multiple handles obtained via the PATCHED exploit are currently being returned to their rightful owners.

@scammed / @DWCusers

⚠️JUST IN: Meta and Coinbase are directly working with the FBI to arrest online scammers.

So far, law enforcement has arrested 60+ suspected threat actors, Coinbase has seized over $3M in stolen crypto, and Meta has disabled more than 1.4M accounts linked to scam activity.

@scammed / @DWCusers

⚠️JUST IN: A crypto bot accidentally tipped a random user 167 ETH (~$300K+)

The bot’s developers have since contacted the user and offered a reward in exchange for returning the funds. However, the user has refused to return the ETH.

@scammed / @DWCusers