🚨 $7.9M DRAINED FROM COINSBUY WALLETS

More than $7.9 million has reportedly been drained from wallets linked to crypto payment processor Coinsbuy across Ethereum and TRON.

The attacker quickly began swapping the stolen funds into Monero, while ChangeNOW reportedly froze a six-figure portion before it could be laundered.

@Defraud 😀

🚨 ZACHXBT EXPOSES $5M CRYPTO THEFT

On-chain investigator ZachXBT has identified Tiffany Milanovich as an alleged US-based caller linked to at least $5 million in crypto thefts.

His investigation links her to a $1.2 million Trezor theft in June and a separate $500,000 Coinbase drain, alongside recordings allegedly showing her taunting victims after their funds were stolen.

ZachXBT also published chats, wallet activity and videos allegedly showing Milanovich flaunting crypto, luxury purchases and gambling with stolen funds.

@Defraud 😀

⚠️ 3 GANGS TARGET WRONG COUPLE FOR €1M IN CRYPTO

A French couple who don’t own any crypto were targeted three times after buying the former home of wealthy crypto holders whose address had leaked onto the dark web. Criminals believed around €1 million in crypto was still linked to the address.

The first crew was scared off by the couple’s dogs. A second broke in, tied up one homeowner and beat the other before realising they had the wrong people. A third crew later returned but fled after triggering a newly installed alarm.

France accounted for 33 of 52 verified physical crypto attacks worldwide in the first half of 2026.

@Defraud 😀

🚨 CEO JAILED FOR 15 YEARS OVER $50M FRAUD

Jeong Sang-ho, CEO of South Korean crypto lender Delio, has been sentenced to 15 years in prison for defrauding around 1,100 customers of $50 million.

The court found Delio used customer deposits to pay returns while hiding losses.

@Defraud 😀

🚨 HACKER EXTORTS SOFTWARE FIRM FOR $2.5M

Former Brightly Software contractor Cameron Curry stole sensitive employee data and sent more than 60 extortion emails, demanding $2.5 million in crypto under the alias “Loot.”

Brightly reportedly paid him just $7,541 in Bitcoin. Investigators later traced the scheme back to Curry through personal information and family debit cards linked to the ransom setup.

Curry has now been sentenced to 2 years in federal prison.

@Defraud 😀

🚨 $116M STOLEN, 53K CUSTOMERS EXPOSED

On July 15, ZachXBT warned against relying on hardware wallets. Since then, around $116 million in Bitcoin has been stolen through the COLDCARD flaw, while separate data breaches exposed 13,689 Trezor customers and 39,798 SafePal customers.

Do you still trust hardware wallets?

@Defraud 😀

🚨 SAFEPAL CUSTOMER DATA PUT UP FOR SALE

A threat actor is now advertising data allegedly stolen from SafePal on a cybercrime forum, claiming records tied to the same 39,798 customers affected in the breach.

The exposed data includes names, emails, phone numbers, shipping addresses and exact purchase details, potentially identifying thousands of hardware-wallet owners and where they live.

@Defraud 😀

🚨 BINANCE GAVE RUSSIA USER DATA OVER $700 UKRAINE DONATION

Binance gave Russian investigators the transaction history, home address, phone number, passport details and ID copies of Russian IT specialist Yuri Belenkiy after he sent more than $700 in crypto to Ukrainian military-linked fundraisers.

The records were used to charge him with terrorism financing in 2025, two years after Binance announced it had fully exited Russia. Investigators also asked Binance to identify other users who donated to the same wallet.

@Defraud 😀

🚨 $165M CRYPTO PONZI MASTERMIND DEPORTED FROM FIJI

Edward Zimbardi, 59, from Georgia, has been deported from Fiji back to the US to face federal charges over his alleged crypto investment scheme, “The Crypto Program.”

Prosecutors say thousands of investors sent more than $165 million after being promised guaranteed returns of 25% per month. Zimbardi allegedly used new investor funds to pay earlier victims while spending at least $10 million on himself.

@Defraud 😀

🚨 MAYA PROTOCOL EXPLOITED FOR $1.7M

MAYA Protocol has confirmed an exploit resulting in around $1.7 million in stolen crypto, including roughly 20 BTC worth $1.34 million.

The protocol was globally halted following the attack while the team investigates and works on a recovery plan.

@Defraud 😀

🚨 764 MEMBER SENTENCED TO 77 YEARS IN PRISON

Kyle William Spitze, 27, an original member of 764, has been sentenced to 77 years in federal prison after coercing minors into producing sexual abuse material through threats and blackmail.

Spitze also helped run HarmNation, part of the 764 online extremist network. He pleaded guilty to producing and possessing child sexual abuse material, as well as helping distribute animal-cruelty videos.

The DOJ says the 77-year sentence is the longest ever imposed in the U.S. for this type of violent online extremism.

@Defraud 😀

🚨 VICTIM LOSES $2M AFTER COPYING POISONED ADDRESS

A wallet labelled Bofur Capital has lost around $2 million after allegedly copying a fake address from its transaction history.

The scammer had sent just 0.0002 USDC from a lookalike wallet to poison the address history before the larger transfer was made.

@Defraud 😀

🚨 $7M IN CRYPTO SEIZED LINKED TO SINALOA CARTEL

Cambodian authorities say they seized around $7 million in cryptocurrency from a network accused of laundering money for Mexico’s Sinaloa Cartel, following a joint investigation involving the U.S. DEA.

The operation also led to multiple arrests, with authorities seizing more than 200kg of drugs, drug labs and over a tonne of precursor chemicals.

@Defraud 😀

🚨 TERM FINANCE DRAINED FOR $8.5M

Term Finance was exploited for around $8.5 million after an attacker cheaply acquired enough of its governance token to gain majority voting power.

The attacker then allegedly passed malicious proposals that gave them control over Term’s vaults, allowing the funds to be drained on Ethereum.

@Defraud 😀