⚠️JUST IN: Multiple victims have lost $500K+ after signing malicious phishing approvals.

Over $500K was drained from victim wallets after they unknowingly signed phishing approvals, granting attackers permission to access and steal their funds.

@scammed / @DWCusers

⚠️BREAKING: The FBI has seized 127,000 BTC (~$8B), marking what appears to be the largest forfeiture in U.S. government history.

Authorities also arrested 300 workers tied to social engineering attacks, online scams, and Bitcoin theft targeting American crypto holders.

@scammed / @DWCusers

⚠️JUST IN: Gravity exploited with $5.4M+ stolen

11 employees were social engineered into signing a malicious signature, which gave the attackers withdrawal access and allowed them to drain the funds.

@scammed / @DWCusers

⚠️JUST IN: Exolix has suffered a major data breach, exposing 355K+ swaps tied to $40M+ in volume.

The leaked data includes deposit addresses, withdrawal addresses, TXIDs, and other swap information. Notably, 9 of the top 11 trading pairs involve Monero (XMR).

Exolix has long been viewed as a popular no-KYC swap route for moving funds linked to hacks, thefts, and other illicit activity.

@scammed / @DWCusers

⚠️WARNING: A massive Instagram exploit is currently being abused, allowing users to claim usernames they do not own.

High-value usernames are being targeted, and the exploit is being used by practically everyone at this point. Many rare usernames have already been stolen.

This appears to be connected to recent changes at Meta, where they fired a large number of employees and replaced them with AI.

@scammed / @DWCusers

⚠️JUST IN: Instagram has patched the username exploit.

The exploit remained active for several days, during which some users were able to profit by selling affected usernames in exchange for cryptocurrency.

There are currently no reports of Instagram pulling back exploited usernames, and it is unclear whether users will be able to keep them.

@scammed / @DWCusers

⚠️JUST IN: Radiant Capital is shutting down after failing to recover from a $50M exploit.

The team says it spent 18 months tracing the attacker, but after failing to recover the stolen funds, Radiant is now closing the project and giving up on the investigation.

@scammed / @DWCusers

⚠️BREAKING: Multiple 1L Instagram usernames appear to have been claimed via an exploit.

Around 10 minutes ago, both @e and @f on Instagram were claimed through an active exploit.

Previous one letter Instagram handles have sold for $100K+.

@scammed / @DWCusers

⚠️WARNING: Any “method” being sold or leaked for claiming 1L usernames is a scam.

Only @e, @f, and a few other 1L usernames were claimed and secured through an unknown employee. There is no public method, exploit, or process to obtain them.

Anyone claiming they have a working method is lying to your face and trying to scam you.

@scammed / @DWCusers

⚠️JUST IN: A victim lost ~$310K after connecting their wallet to a fake crypto exchange

The malicious site tricked them into connecting their wallet, which allowed the attacker to drain the funds shortly after.

@scammed / @DWCusers

⚠️JUST IN: Instagram appears to be reverting usernames that were claimed through an exploit.

Multiple handles obtained via the PATCHED exploit are currently being returned to their rightful owners.

@scammed / @DWCusers

⚠️JUST IN: Meta and Coinbase are directly working with the FBI to arrest online scammers.

So far, law enforcement has arrested 60+ suspected threat actors, Coinbase has seized over $3M in stolen crypto, and Meta has disabled more than 1.4M accounts linked to scam activity.

@scammed / @DWCusers

⚠️JUST IN: A crypto bot accidentally tipped a random user 167 ETH (~$300K+)

The bot’s developers have since contacted the user and offered a reward in exchange for returning the funds. However, the user has refused to return the ETH.

@scammed / @DWCusers

⚠️JUST IN: A victim lost 427 ETH (~$667K) to a social engineering scam.

After the theft, the victim offered the threat actors a $60K reward to return the stolen funds. As expected, they refused the deal.

@scammed / @DWCusers

⚠️JUST IN: A crypto whale was just drained of $4.5M across 13 wallets.

The victim’s wallets were accessed with ~$9M in total. ~$4.5M was stolen, while the victim managed to withdraw the remaining funds before the attackers could take them.

@scammed / @DWCusers

⚠️JUST IN: One of Roblox’s richest players has been hacked.

The attackers stole several of the rarest Roblox limiteds, including Dominus Empyreus, Dominus Frigidus, Dominus Astra, Dominus Infernus, and other high-value Roblox hats

All of the stolen limiteds were then sold for 99 Robux each, despite being worth millions of dollars in cryptocurrency.

@scammed / @DWCusers

⚠️JUST IN: HumanityProt has been exploited, with over $5M drained so far.

All wallets that have interacted with the protocol are being drained, with 17+ victims already drained of their crypto assets.

@scammed / @DWCusers

⚠️UPDATE: $33M+ has been stolen after an employee’s device was compromised via a fake Zoom link.

The link installed a RAT on the employee’s device, which led to a seed phrase leak. Shortly after, over $30M in cryptocurrency was stolen.

@scammed / @DWCusers