⚠️ JUST IN: Bot steals exploit to drain Safe wallet
A competing bot copied an attacker exploit and executed it first, draining $7.45 million from a Safe wallet on Avalanche. The victim wallet had previously authorized an empty address to spend its tokens, enabling deployed malicious code to drain the funds.
Following direct negotiations between the parties, around $7 million was returned to the wallet owner. Meanwhile, roughly $370,000 was retained as an agreed bounty for the recovery.
A competing bot copied an attacker exploit and executed it first, draining $7.45 million from a Safe wallet on Avalanche. The victim wallet had previously authorized an empty address to spend its tokens, enabling deployed malicious code to drain the funds.
Following direct negotiations between the parties, around $7 million was returned to the wallet owner. Meanwhile, roughly $370,000 was retained as an agreed bounty for the recovery.
6🔥1
This media is not supported in your browser
VIEW IN TELEGRAM
⚠️ JUST IN: Telegram ios update patches fake gift button vulnerability
Telegram for iOS 13.1.1 has been released to patch a vulnerability that allowed scammers to send fraudulent gift offers through inline keyboard buttons. Following the update, these interactive buttons are no longer displayed immediately.
Users are now required to reply to the sender before the buttons become visible on screen. This change is designed to help individuals distinguish legitimate offers from potential scam attempts.
Telegram for iOS 13.1.1 has been released to patch a vulnerability that allowed scammers to send fraudulent gift offers through inline keyboard buttons. Following the update, these interactive buttons are no longer displayed immediately.
Users are now required to reply to the sender before the buttons become visible on screen. This change is designed to help individuals distinguish legitimate offers from potential scam attempts.
❤1
⚠️ JUST IN: Hacker trades stolen millions on Hyperliquid
An attacker who seized $40 million last year is actively day trading those stolen assets on Hyperliquid according to the post.
The operator sits on a $6 million gain from a 20x ETH long position while 5 out of 6 trades since August have yielded profits.
An attacker who seized $40 million last year is actively day trading those stolen assets on Hyperliquid according to the post.
The operator sits on a $6 million gain from a 20x ETH long position while 5 out of 6 trades since August have yielded profits.
⚠️ BREAKING: Coinbase suffers major data breach
Coinbase has suffered a data breach after hackers obtained the personal information of 70,000 users.
Security researchers have confirmed the incident, while Coinbase has not yet publicly commented on the breach.
Coinbase has suffered a data breach after hackers obtained the personal information of 70,000 users.
Security researchers have confirmed the incident, while Coinbase has not yet publicly commented on the breach.
⚠️ JUST IN: ETHEREUM USER LOSES $50K TO ADDRESS POISONING
An Ethereum user recently lost $50K in USDT during an address poisoning attack. The fraudulent destination address successfully mirrored the first 4 and last 6 characters of the legitimate wallet address.
This incident follows an earlier theft of $12,000 USDC resulting from one identical scam method.
An Ethereum user recently lost $50K in USDT during an address poisoning attack. The fraudulent destination address successfully mirrored the first 4 and last 6 characters of the legitimate wallet address.
This incident follows an earlier theft of $12,000 USDC resulting from one identical scam method.
⚠️ JUST IN: TELEGRAM STICKERS HIT BY ZERO-CLICK BUGS
Researcher Saifeldeen Aziz discovered zero-click bugs within Telegram stickers. He reportedly chained these vulnerabilities to execute arbitrary code on iOS devices.
Aziz also states he bypassed Telegram server-side checks, pointing out that the flawed code remains present in current app versions.
Researcher Saifeldeen Aziz discovered zero-click bugs within Telegram stickers. He reportedly chained these vulnerabilities to execute arbitrary code on iOS devices.
Aziz also states he bypassed Telegram server-side checks, pointing out that the flawed code remains present in current app versions.
⚠️ JUST IN: US SANCTIONS ENTITIES OVER IDENTITY THEFT FRAUD
Financial penalties have been imposed by the US against eight North Korean nationals, two Russians, and a Russia-based enterprise due to an employment fraud scheme utilizing stolen identities to target American businesses.
Operations conducted by the Russian participants laundered close to $5.5M in cryptocurrency to support North Korean networks, while IT personnel from North Korea stole corporate data, installed malware, and blackmailed employers to finance weapons development.
Financial penalties have been imposed by the US against eight North Korean nationals, two Russians, and a Russia-based enterprise due to an employment fraud scheme utilizing stolen identities to target American businesses.
Operations conducted by the Russian participants laundered close to $5.5M in cryptocurrency to support North Korean networks, while IT personnel from North Korea stole corporate data, installed malware, and blackmailed employers to finance weapons development.
❤1
⚠️ JUST IN: Crypto Scammer Trenton Sentenced Following Discord Bragging
Trenton (@winter) has received a prison term of 25 months following the theft of $13 million in Bitcoin. The SENTENCING came after the individual boasted about the crypto heist and displayed methods on Discord.
Federal authorities apprehended the offender riding in a Rolls-Royce after funds were spent on Lamborghinis, private jets, jewelry, and Miami nightlife.
Trenton (@winter) has received a prison term of 25 months following the theft of $13 million in Bitcoin. The SENTENCING came after the individual boasted about the crypto heist and displayed methods on Discord.
Federal authorities apprehended the offender riding in a Rolls-Royce after funds were spent on Lamborghinis, private jets, jewelry, and Miami nightlife.
⚠️ JUST IN: MAN SENTENCED OVER BITCOIN THEFT RELATED KIDNAPPING
A 23-year-old man named Saif Faiq received a four year prison sentence for coordinating the kidnapping of Veer Chetal’s parents in Connecticut. The attackers targeted the parents to recover portions of a roughly $245M Bitcoin theft involving Chetal and Malone Lam.
Faiq helped monitor the victims and recruited participants for the plot. Meanwhile, his brother, known as the crypto Godfather Adam Iza, previously secured a 15 years prison term for his involvement in the scheme.
A 23-year-old man named Saif Faiq received a four year prison sentence for coordinating the kidnapping of Veer Chetal’s parents in Connecticut. The attackers targeted the parents to recover portions of a roughly $245M Bitcoin theft involving Chetal and Malone Lam.
Faiq helped monitor the victims and recruited participants for the plot. Meanwhile, his brother, known as the crypto Godfather Adam Iza, previously secured a 15 years prison term for his involvement in the scheme.
❤1
⚠️ JUST IN: WAGYU CONFIRMS DATA LEAK AFTER EXTORTION DEMAND
Monero exchange Wagyu.xyz has confirmed a 3 month data breach following a $5M extortion demand. The leak exposes 4,580 orders reportedly connecting public cryptocurrency deposits to Monero addresses and associated IP addresses.
The platform also maintains 4,002 orders that users previously flagged as deleted. The source notes that the identity of the extortionist remains undisclosed.
Monero exchange Wagyu.xyz has confirmed a 3 month data breach following a $5M extortion demand. The leak exposes 4,580 orders reportedly connecting public cryptocurrency deposits to Monero addresses and associated IP addresses.
The platform also maintains 4,002 orders that users previously flagged as deleted. The source notes that the identity of the extortionist remains undisclosed.
⚠️ JUST IN: AXIS Robotics insiders dump tokens as price plunges
Axis Robotics insiders reportedly received 76M+ AXIS valued at $12M+ from a multisig wallet before transferring tokens to Bitget and selling via DEX, sending the price down 40% over 24 hours following its October 21, 2026 launch.
Data indicates a single insider currently holds 5.04M+ USDC across 8 wallets resulting from the 42M AXIS sold today.
Axis Robotics insiders reportedly received 76M+ AXIS valued at $12M+ from a multisig wallet before transferring tokens to Bitget and selling via DEX, sending the price down 40% over 24 hours following its October 21, 2026 launch.
Data indicates a single insider currently holds 5.04M+ USDC across 8 wallets resulting from the 42M AXIS sold today.
❤2
⚠️ JUST IN: US OFFICIALS BELIEVE NVIDIA CEO IS CHINESE SPY PLOT TARGET
US officials reportedly believe Nvidia CEO Jensen Huang is the target of a Chinese spy plot. They suspect that Megaspeed executive Alice Huang, who was seen at his side in Taiwan, is a Chinese intelligence asset.
President Trump has reportedly been briefed about the matter by officials according to the source.
US officials reportedly believe Nvidia CEO Jensen Huang is the target of a Chinese spy plot. They suspect that Megaspeed executive Alice Huang, who was seen at his side in Taiwan, is a Chinese intelligence asset.
President Trump has reportedly been briefed about the matter by officials according to the source.
⚠️ BREAKING: Polymarket frontend compromised as users report fund drains
According to the source, Polymarket's frontend has reportedly been compromised, resulting in numerous user accounts being drained.
According to the source, Polymarket's frontend has reportedly been compromised, resulting in numerous user accounts being drained.
⚠️ JUST IN: Tether freezes funds linked to Binance hack
Tether has frozen $971 million $USDT linked to a suspected Binance hack, while Binance has not yet issued any official statement on the matter.
Tether has frozen $971 million $USDT linked to a suspected Binance hack, while Binance has not yet issued any official statement on the matter.
⚠️ JUST IN: Reports indicate 2 billion frozen now
Reports indicate that 2 billion has been frozen now.
Reports indicate that 2 billion has been frozen now.
⚠️ UPDATE: Tracked wallets show $5.78B in assets
Tracked wallets currently hold approximately $5.78B in assets according to the source. Track the attacker’s wallets live on the dashboard.
The source notes that if the $5.78B is confirmed stolen, it could become the largest single heist ever recorded.
Tracked wallets currently hold approximately $5.78B in assets according to the source. Track the attacker’s wallets live on the dashboard.
The source notes that if the $5.78B is confirmed stolen, it could become the largest single heist ever recorded.