🚨JUST IN: ZachXBT has released an investigation into Circle and USDC

ZachXBT published a detailed thread accusing Circle of over $420M in compliance failures since 2022 across 15 major cases, where USDC from hacks was not frozen despite the company's blacklist capabilities and US regulatory status.

Specific incidents include the $280M Drift Protocol exploit, and other cases involving Cetus Protocol, SwapNet, Nomad, Ledger, and Lazarus Group-linked hacks, totaling over $420M stolen.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

😭 8 Years in Prison Over 100 Telegram Stars

Another criminal case has been opened over Telegram Stars.

A 56 Year-Old woman from the Moscow region is accused of financing terrorism after allegedly sending 100 Stars as paid reactions to a post in the “Freedom of Russia Legion” channel, which is banned and designated as a terrorist organization in Russia.

Her lawyer claims her Telegram account had been hacked twice, and the transactions were made while it was under someone else’s control.

She now faces 8 to 15 years in prison under terrorism financing laws.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚨 North Korean Hackers Hit a Record $2.2 Billion in Crypto Theft in 2025

According to ChainAnalysis, North Korean hackers stole $2.02 billion in crypto in 2025, a 51% year-over-year increase, bringing their all-time total to $6.75 billion.

The DPRK has begun embedding IT workers within crypto firms and is using advanced impersonation tactics, similar to the Drift Protocol incident.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🔥 Top 10 Sales of the Week

• @easy - 30,000 TON ($37,500)
• @trash - 25,510 TON ($31,887)
• @boys - 23,000 TON ($28,750)
• @cheetah - 15,000 TON ($18,750)
• @orca - 13,414 TON ($16,767)
• @laicai - 10,295 TON ($12,868)
• @medusa - 8,915 TON ($11,143)
• @rely - 7,777 TON ($9,721)
• @roam - 7,777 TON ($9,721)
• @foid - 7,777 TON ($9,721)

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️JUST IN: Scammers Sending Fake Hardware Wallets to Steal Funds

Per Cointelegraph, attackers are actively sending and selling fake crypto hardware wallets with tampered components and pre-set recovery phrases to steal users' funds right after they activate the wallet.

• These wallets are commonly found on global marketplaces like Amazon, eBay, and local classifieds, especially on platforms with a large number of third-party sellers.

⬇️ Would you ever buy a hardware wallet from a third-party seller?

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

👀 Fragment Testing USDT Payments for Stars

Recent test server changes show Fragment is preparing a new payment flow using USDT (ERC20). The update includes a separate payment interface, ERC20 popup, and QR-based top-up system, replacing the standard Wallet.sendTransaction method.

This points to a possible future where USDT is used alongside TON for buying Stars, usernames, and other assets, though nothing is confirmed yet.

💬 Would it be over for TON?

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️ JUST IN: ByBit Blocks a $1 Billion Fake Deposit Attack

Bybit’s risk control team announced that they detected and stopped coordinated fake deposit attacks across multiple blockchains, preventing over $1 billion in potential $DOT losses. All attempts were blocked in real time, and reports indicate that no funds were credited and no users were impacted.

The attackers reportedly used advanced methods to trick deposit systems into recognizing funds that were never actually sent.

💬 Could this be a second attack by North Korean hackers? 👀

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚨 ZachXBT Releases a New Investigation on North Korean IT Workers

Leaked data from an internal payment server exposed 390 accounts, chat logs, and crypto transactions linked to DPRK IT operations, revealing a coordinated scheme generating around $1M per month.

➡️ Some of the most interesting findings from the investigation:

• Several users on the site luckyguys[.]site used the simple password “123456.”

• A DPRK IT worker’s device was compromised via an infostealer, exposing IPMsg chat logs, fake identities, and browser history.

• In the chats, they joked about KYC procedures in India, saying: “KYC is not a problem, we have strong Indian.”

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️UPDATE: The TON Sub-Second Update Has Officially Been Released

Pavel Durov confirmed that the update has been implemented, and the TON blockchain is now up to 10× faster. He also stated that this upgrade is just 1 of 7 planned steps to further improve the TON network.

In the next update, transaction fees are expected to be reduced by 6× 👀

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚨JUST IN: Binance Helps to Freeze Over $12M in Cryptocurrency

Binance says it partnered with the UK National Crime Agency during Operation Atlantic, assisting over 20,000 victims in a single week and helping freeze more than $12M in cryptocurrency.

The operation was reportedly run by the US Secret Service, Ontario Provincial Police, and NCA, focusing on helping victims who fell for crypto approval phishing scams.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚨 Fragment Removed KYC for Buying & Selling!

Fragment.com has removed KYC for the following:
• Minting, buying & selling gifts
• Buying, bidding on & selling usernames
• Buying, bidding on & selling anonymous numbers

KYC may still apply to other actions on the site such as purchasing Stars, Telegram Premium, or converting a non-NFT username to an NFT.

No word yet on whether this is permanent.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚨 Instant Unban Scam Alert

Scammers are actively running a fake "instant unban" service, typically offering lower than usual prices ranging from $500 - $700 to lure buyers in.

The method: During the deal, the scammer subtly alters the IG username by swapping a couple of characters, gets the buyer to confirm the fake link in the MM group, then simply claims that username on an account they control and presents it as a successful unban.

For example:
instagram.com/alex_vazovsky → instagram.com/alex_vasozsky

A similar case happened with @wave as the middleman (See Images), but the scam was identified and the buyer was safely refunded.

Read the full breakdown and example here:
→ t.me/newscamexample

⚠ Stay cautious and avoid unverified providers.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️ Pavel Durov Claims 95% of WhatsApp Messages Are Not Encrypted

Pavel Durov has called out WhatsApp’s “end-to-end encryption by default” as a “giant consumer fraud.”

According to Durov, ~95% of private WhatsApp messages end up stored in plain text on Apple iCloud or Google Drive servers completely unencrypted.

WhatsApp’s cloud backups are not end-to-end encrypted by default, meaning they can be easily accessed by authorities or by Apple and Google if requested.

⬇️Do you personally use WhatsApp?

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️JUST IN: Polkadot Bridge Has Been Exploited for 1 Billion $DOT

The Polkadot bridge vulnerability has been exploited, allowing attackers to mint 1 billion $DOT ($1.1 Billion) on Ethereum.

However, due to massive slippage, the attacker was only able to walk away with ~$237,000 (108.2 ETH) after dumping all the minted tokens in a single transaction on platforms like Odos.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚫 Telegram Banned 8 NFT Usernames Linked to Fake Memecoin Trading Bots

Telegram has banned eight NFT usernames for scam activity and impersonating popular trading bots @Maestro and @Trojan.

@maes
@maestr
@mastro
@meastro
@torjan
@troj
@troja
@trojans

• The usernames had been converted into bots and were allegedly used to mislead users by impersonating legitimate services.

• All of the usernames were purchased less than a month ago, with total losses now estimated at 21,139 TON ($29,600).

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🚨 Fake Ledger App on App Store Drains $9.5M from 50+ Victims

Per ZachXBT, A fake Ledger Live app on the Apple App Store has been linked to $9.5M stolen from over 50 suspected victims between April 7–13. The stolen funds were reportedly laundered via 150+ KuCoin deposit addresses.

The malicious app was removed by Apple yesterday. The three largest victims each lost seven-figure amounts during the incident.

• April 9 - $3.23M
• April 11 - $2.08M
• April 8 - $1.95M

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️UPDATE: KuCoin Responds to Money Laundering Allegations on X

After ZachXBT publicly called out KuCoin for enabling the laundering of $9.5M+, KuCoin started replying to users on X with this standard support message:

“We’re very sorry to hear about your frustrating experience. Please share your UID & Ticket Number so we can look into this for you.”

As of now, KuCoin has not issued any full, detailed public statement addressing the $9.5M incident, the use of their deposit addresses for laundering, or any actions taken regarding the traced funds.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

🔒 Tether Launches Tether.Wallet with @tether.me Usernames

Tether has officially launched Tether Wallet, a new self-custodial wallet that lets you store USD₮, BTC, and XAU₮.

A key new feature allows Tether Wallet users to claim a username in the format username@tether.me. This enables receiving funds within the app by sharing just the username instead of long blockchain addresses, similar to .eth and .ton domains.

⬇️ Are we getting @tether.me usernames?

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️ JUST IN: Telegram has banned the account of a well-known middleman in the Indian community — @Thon

The ban has also affected his vouches channel, which is now inaccessible. As of now, the exact reason for the ban remains unknown.

👀 Many people are speculating that this could be an exit scam and that he actually deleted the account himself. What do you think? ⬇️

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️ JUST IN: 15-Year-Old Scams User Out of Galaxy Plush Pepe Worth $20,000

A 15-year-old teenager scammed a user out of a Pink Galaxy Plush Pepe worth over $20,000 by using a fake middleman. The victim transferred the NFT without realizing it was a scam 🤦‍♂️

This same scammer is also known for scamming user @slim out of a Plush Pepe Pink Latex worth 50,000 TON (~$79,131) back in January.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert

⚠️ JUST IN: Lending Protocol Rhea Finance Exploited for $7.6M

According to the CertiK, the NEAR-based DeFi protocol Rhea Finance suffered an exploit with estimated losses of at least ~$7.6 million.

The attacker reportedly created fake token contracts and added liquidity to new pools, which misled the protocol’s oracle and validation layer and allowed the attacker to drain at least $7.6 million.

➖➖➖➖➖➖➖
💧 Sponsored by @rainbetcom — rainbet.com

🔔 Subscribe: @alert