⚠️ JUST IN: Term Labs has suffered an estimated $8.5 million governance exploit after an attacker gained majority voting power over its DAO.

*⃣ The attacker allegedly used malicious governance proposals to drain approximately 2,843 ETH and $1.68M in DAI from Term Vaults. Term Labs says the incident is under investigation, while the stolen assets remain in the attacker-controlled wallet.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: A Telegram user has reportedly lost assets worth around 20,000 Stars (~$30,000) after their account was deleted due to prolonged inactivity.

👻 The account @neglect reportedly contained four valuable Plush Pepe gifts, which were lost following the account deletion: #179, #425, #1216, and #1375.

The following gifts were lost:
🎁 Plush Pepe #179
🎁 Plush Pepe #425
🎁 Plush Pepe #1216
🎁 Plush Pepe #1375

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Rockstar Games has addressed the recent GTA VI gameplay leaks, calling the situation “heartbreaking” for the team and apologizing to fans who have been waiting for the game.

😠 Rockstar says the game is nearly finished and confirmed that an extended look at GTA VI 🔥 will be released tomorrow. The studio also reaffirmed the game’s November 19 release date.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: DeFi lending protocol Moonwell has reportedly been exploited for around $8.8 million on Base.

🌐 The attacker allegedly manipulated the price of MAMO, making it appear significantly more valuable as collateral. This allowed them to borrow real assets, including cbBTC and USDC, draining millions from the protocol.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Solana-based crypto neobank Avici has reportedly been exploited for over $1 million, with attackers draining funds from roughly 1,100 user collateral accounts.

👨‍💻 The attacker allegedly gained admin-level control over the affected accounts and withdrew user balances. The stolen USDC was reportedly converted into around 418 ETH, with the funds subsequently sent through Tornado Cash.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: A crypto user has reportedly lost $2.5 million after connecting their wallet to a fake cryptocurrency exchange.

👻 The phishing site allegedly contained a hidden wallet drainer, which immediately transferred the victim’s funds to an attacker-controlled wallet. The incident highlights the risks of connecting wallets to unverified platforms.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Cronos has reportedly halted its blockchain following an estimated $75 million exploit targeting DeFi lender Tectonic.

💥 The attacker allegedly manipulated the price of TONIC nearly 100x, using the inflated value as collateral to borrow real assets. Cronos halted the network before most of the funds could be moved, with around $6M reportedly bridged to Ethereum while the remaining funds are trapped on-chain.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Gram Wallet 💎 on Telegram is now live and available to a select group of users, with Telegram planning to gradually roll it out to its billion+ users over the next few weeks.

📩 Telegram says the wallet is designed to make non-custodial wallets 🪙 easier to use. Thanks to the smart contract approved by validators, future wallet upgrades won’t require users to go through migrations, making the experience smoother as new features are introduced.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Coinbase is warning older users about a rise in phone-based crypto scams, with fraudsters impersonating Coinbase Support to manipulate victims through social engineering.

💸 Coinbase reminds users that it will never ask for passwords, 2FA codes, or seed phrases, nor instruct them to move funds to a “safe” wallet. Users should be especially cautious of unexpected calls claiming to be from Coinbase.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Ledger is facing a $500M class-action lawsuit over allegations surrounding multiple customer data breaches.

😎 The lawsuit was filed by a Ledger user who claims he lost nearly $2M after criminals allegedly used leaked personal data to target him. The case accuses Ledger of failing to adequately protect customer information and of not taking sufficient steps after the 2020 and 2023 breaches. The lawsuit seeks at least $500M in damages, potentially reaching billions.

🌐 @ComDigest | @PayToPosts for more!

⚠️ UPDATE: Hackers behind the theft of approximately 4,000 BTC 🪙 (~$320M) have reportedly offered to return the stolen funds.

👩‍💻 The attackers told the protocol to fix all identified vulnerabilities first and contact them once the issues were resolved. The protocol says the bugs have now been fixed, but no BTC 🪙 has been returned yet.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Telegram 💙 is experiencing a partial outage across parts of Asia, with users reporting connection issues, failed messages, and the app getting stuck on “Updating.”

🇮🇳India
👍 Singapore
🇮🇩Indonesia
🇲🇾Malaysia
🥲Philippines
🇻🇳Vietnam
🇹🇭Thailand
🇰🇭Cambodia
🇦🇺Australia

The cause has not been officially confirmed, while services appear to be gradually recovering in some regions. Claims of a DDoS attack remain unverified.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: At least 5 winners of Durov-sponsored competitions have reportedly lost their valuable prizes to scams.

AlgorithmCup #9 — fake Binance market
AlgorithmCup #52 — fake marketplace support
AlgorithmCup #61 — fake USDT transfer
AlgorithmCup #80 — fake MRKT support link
IntelligenceCup #201 — screen sharing scam during a video call, no 2FA active. Sent to MRKT and sold for 1.67 GRAM.

The prizes were reportedly rare Telegram gifts, making the incidents especially costly for the winners.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Legacy Flamincome contracts linked to Flamingo Finance have reportedly been exploited on Ethereum, with the attacker making approximately $345,900.

The attacker reportedly used an $18M Morpho flash loan to manipulate the NAV/share price of the VaultYUSDT strategy, allowing them to redeem inflated shares for real assets. The $18M was flash-loan liquidity used during the attack, not the amount lost; the reported protocol loss is approximately $346K.

🌐 @ComDigest | @PayToPosts for more!

⚠️ JUST IN: Two men have reportedly been sentenced to 12 years in prison each over their involvement in laundering a Bitcoin ransom linked to a 2018 kidnapping.

William Creighton was kidnapped in Costa Rica, and his family reportedly paid around 148 BTC, worth roughly $1 million at the time, for his release. Creighton was later killed despite the ransom payment. Eight years later, blockchain tracing linked wallets that received part of the ransom to the two men, who were convicted of money laundering.

🌐 @ComDigest | @PayToPosts for more!

🙂 JUST IN: THE “NO-KYC” CRYPTO CARD PROMISE COMES WITH A CATCH

A growing number of crypto cards now advertise spending without ID checks, but the setup behind them can be far less private than the marketing suggests.

Users may still be linked to card issuers, payment processors or corporate programs, while some providers charge hefty top-up and maintenance fees.

No ID check doesn’t automatically mean anonymous.

🙂 @ComDigest | @PayToPosts for more!

🙂 Streamer Clavicular Charged With Rape in Massachusetts

Streamer Clavicular, whose real name is Braden Peters, has been charged in Massachusetts with rape, drugging a person for sexual intercourse, and providing alcohol to someone under 21.

The charges were filed on September 8 over an alleged incident from May 23, 2025. Peters is scheduled to be arraigned on October 14.

The criminal case appears to overlap with allegations made in a separate civil lawsuit involving a woman who was 16 at the time. She alleges that Peters provided her with alcohol and had sex with her while she was too intoxicated to consent.

Peters denies the allegations, while his representative disputes how the case has been characterized.

⚖️ The charges are allegations, and Peters has not been convicted.

🙂 @ComDigest | @PayToPosts for more!

🙂 JUST IN: Malicious iOS App Linked to $580K Crypto Theft

A malicious app called FomoPeek has reportedly been linked to nearly $580,000 in stolen crypto, according to security firm SlowMist.

The app allegedly exploited iOS vulnerabilities to access sensitive data from other apps, including crypto wallets such as MetaMask, Trust Wallet and OKX Wallet.

🙂 Users who installed affected versions are advised to consider their wallet credentials compromised and move funds to a new wallet.

🙂 @ComDigest | @PayToPosts for more!

🙂 BREAKING: Bitget 💙 Confirms $351.6M Security Breach

Bitget 💙 has confirmed unauthorized transfers from some of its hot and warm wallets, involving approximately $351.6M in assets.

The exchange says cold wallets remain secure and user balances are unaffected. Withdrawals have been temporarily suspended as a precaution, while deposits and trading remain active.

Bitget 💙 says the affected funds are covered by its $464M+ User Protection Fund. A full incident report is expected within 24 hours.

🙂 @ComDigest | @PayToPosts for more!

🙂 EXPLOIT UPDATE: Bitget 💙 Hacker Moves $83M in Stolen XRP

Around 54M XRP (~$83M) linked to the Bitget 💙 hack has been moved from the attacker’s wallets.

Since native XRP transactions can’t be frozen or reversed by Ripple, any recovery now largely depends on exchanges detecting and blocking the stolen funds if they arrive on their platforms.

On-chain movements are still being tracked.

🙂 @ComDigest | @PayToPosts for more!

🙂 FAKE GIWA MAINNET SCAM DRAINS $2M

A fake website posing as GIWA Mainnet reportedly tricked users into bridging ETH through a fraudulent network.

Attackers drained around 766 ETH (~$2 million) from approximately 1,335 wallets.

GIWA clarified that its official mainnet had not launched, warning users about the fake deployment.

🙂 Users are advised to avoid interacting with unofficial GIWA links or contracts.

🙂 @ComDigest | @PayToPosts for more!