New findings show attackers had compromised systems linked to Bitget as early as August 31, nearly a month before the $387.5M theft.
The attackers later used custom software to fake withdrawal requests and move the funds, without stealing Bitgetβs private keys.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
1π±7π5π€―2
A former UK National Crime Agency officer has been ordered to repay Β£1.8M ($2.4M) after stealing 50 BTC from a seized Silk Road 2.0 wallet he was helping investigate.
He moved the coins through Bitcoin Fog to hide the trail, while investigators initially believed the Silk Road operator had moved them himself.
The officer was arrested in 2022 and jailed for 5Β½ years in 2025.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π7π±5π€―3β€1
U.S. authorities sanctioned a Tren de Aragua-linked network accused of using Ploutus malware to make ATMs spit out cash, causing $40.73M in losses across 1,500+ attacks.
Crews allegedly opened ATMs and used Raspberry Pis to install the malware, which could delete itself after dispensing the cash.
The alleged mastermind, Anibal βPrometheusβ Aguirre, is on the FBIβs Ten Most Wanted list. Authorities say the stolen money was laundered through crypto, with seven linked addresses now sanctioned.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π€―5π±5π3 2
The crypto industry suffered 55 major hacks in September, with total losses reaching around $766.5 million, up roughly 462% from Augustβs $136.3 million.
The biggest incidents were Bitget at ~$387M and Liquid Network at ~$320M, although around $285M from the Liquid incident was later returned.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π±4π₯3π€―2β€1
NEAR Intents has suffered a $3.8M+ hot wallet compromise on BNB Chain, forcing the wallet to stop processing transactions.
ZachXBT says the stolen funds were quickly moved through KuCoin and bridged into Bitcoin.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯6π±4π4β€1
An attacker stole around 114 ETH ($305K) from two crypto wallets by exploiting a flaw in a tool connected to their Aave positions.
The bug let them create a fake Safe that pretended it had permission, tricking the system into treating it as trusted.
That access was then used to unlock collateral and drain the real wallets. Aave itself was not hacked.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
1π6π₯5 4β€3π±1
ZachXBT says UPay, a crypto card and payments provider, may have let sanctioned marketplace Xinbi white-label its Visa cards.
Xinbi has been linked to scams, money laundering and human trafficking, with TRM estimating $36B+ in volume.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
13π€―5π±4π₯3 3π2
This media is not supported in your browser
VIEW IN TELEGRAM
A man has described how three armed attackers stormed his home in Solihull, England, last December and threatened to kill his pregnant wife unless he handed over his crypto.
He says the ordeal lasted 45 minutes, with a fourth person directing the gang over a video call. The attackers escaped with cryptocurrency and luxury watches.
Police are appealing for information after releasing CCTV of the raid.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
11 6π±4β€2π€―2
After allegedly hacking the FBI and giving it an ultimatum, ShinyHunters now says it wants βno further escalation,β with the group telling Reuters its message could be interpreted as βbacking down completely.β
The shift comes as alleged member Rey (t.me/medusa) reportedly walks investigators through his devices and communications to help track down other members.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
1π11π€―3π±3β€2
A flaw in Bitcoin wallet Blink let an attacker take over customer accounts and steal 6.61 BTC.
Blink has reimbursed victims and put up a 3.3 BTC bounty.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
1π₯5π±5 3
Google Gemini reportedly told a user that a fake TRON energy-rental site was the official website and appeared safe.
The scam allegedly stole nearly $70K from around 80 victims using malicious USDT approvals.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π€―9π8π₯3β€1
An attacker found an old Ethereum contract that had been sitting with around 200 WETH inside since 2020.
The contract had originally been used to buy liquidated ETH through MakerDAO, but a missing permission check let the attacker withdraw the funds, stealing roughly $538K.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
β€6π3 3π₯2π€―2
ASOS users received a notification through the official app claiming attackers had βfully compromisedβ its Snowflake database and would leak the data unless ASOS responded.
The message directed ASOS to Telegram, where the group later claimed payment information was not affected.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
2π€―5π3π±2β€1π₯1
A US man has been jailed for 18 months and ordered to forfeit $8M after running a massive fake-streaming scheme.
He used hundreds of thousands of AI-generated songs and up to 10,000 bot accounts to generate billions of fake streams across Spotify, Apple Music, Amazon Music and YouTube Music, pulling in more than $8M in fraudulent royalties.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯6π6 3β€1 1
The U.S. is offering up to $10 million for information leading to suspected Chinese hacker Zhang Yu, accused of helping carry out major cyberattacks against American organisations.
Authorities say the hacking campaign compromised more than 12,700 U.S. organisations, while Zhang remains at large.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π6π€―5π±4
Michael Edwards, known on Telegram as βOnly1Giela,β has been sentenced to 8 years in prison for leading a ring that stole checks from mailboxes, altered them and sold them online.
The scheme involved more than 2,600 stolen checks worth over $55 million in attempted fraud. Of that, more than $18 million in fraudulent checks were deposited into accounts controlled by the group.
Edwards was also ordered to forfeit $18.84 million and pay restitution.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π€―7π±5 3π2π₯1
An attacker gained control of a privileged 79Vault wallet and used it to pull tokens directly from its PancakeSwap liquidity pool.
The stolen tokens were dumped back into the pool, draining roughly $12.5 million before the compromised permissions were revoked.
Join @Defraud
Please open Telegram to view this post
VIEW IN TELEGRAM
π±4π3π₯1 1 1