🚨 $116M STOLEN, 53K CUSTOMERS EXPOSED

On July 15, ZachXBT warned against relying on hardware wallets. Since then, around $116 million in Bitcoin has been stolen through the COLDCARD flaw, while separate data breaches exposed 13,689 Trezor customers and 39,798 SafePal customers.

Do you still trust hardware wallets?

@Defraud 😀

🚨 SAFEPAL CUSTOMER DATA PUT UP FOR SALE

A threat actor is now advertising data allegedly stolen from SafePal on a cybercrime forum, claiming records tied to the same 39,798 customers affected in the breach.

The exposed data includes names, emails, phone numbers, shipping addresses and exact purchase details, potentially identifying thousands of hardware-wallet owners and where they live.

@Defraud 😀

🚨 BINANCE GAVE RUSSIA USER DATA OVER $700 UKRAINE DONATION

Binance gave Russian investigators the transaction history, home address, phone number, passport details and ID copies of Russian IT specialist Yuri Belenkiy after he sent more than $700 in crypto to Ukrainian military-linked fundraisers.

The records were used to charge him with terrorism financing in 2025, two years after Binance announced it had fully exited Russia. Investigators also asked Binance to identify other users who donated to the same wallet.

@Defraud 😀

🚨 $165M CRYPTO PONZI MASTERMIND DEPORTED FROM FIJI

Edward Zimbardi, 59, from Georgia, has been deported from Fiji back to the US to face federal charges over his alleged crypto investment scheme, “The Crypto Program.”

Prosecutors say thousands of investors sent more than $165 million after being promised guaranteed returns of 25% per month. Zimbardi allegedly used new investor funds to pay earlier victims while spending at least $10 million on himself.

@Defraud 😀

🚨 MAYA PROTOCOL EXPLOITED FOR $1.7M

MAYA Protocol has confirmed an exploit resulting in around $1.7 million in stolen crypto, including roughly 20 BTC worth $1.34 million.

The protocol was globally halted following the attack while the team investigates and works on a recovery plan.

@Defraud 😀

🚨 764 MEMBER SENTENCED TO 77 YEARS IN PRISON

Kyle William Spitze, 27, an original member of 764, has been sentenced to 77 years in federal prison after coercing minors into producing sexual abuse material through threats and blackmail.

Spitze also helped run HarmNation, part of the 764 online extremist network. He pleaded guilty to producing and possessing child sexual abuse material, as well as helping distribute animal-cruelty videos.

The DOJ says the 77-year sentence is the longest ever imposed in the U.S. for this type of violent online extremism.

@Defraud 😀

🚨 VICTIM LOSES $2M AFTER COPYING POISONED ADDRESS

A wallet labelled Bofur Capital has lost around $2 million after allegedly copying a fake address from its transaction history.

The scammer had sent just 0.0002 USDC from a lookalike wallet to poison the address history before the larger transfer was made.

@Defraud 😀

🚨 $7M IN CRYPTO SEIZED LINKED TO SINALOA CARTEL

Cambodian authorities say they seized around $7 million in cryptocurrency from a network accused of laundering money for Mexico’s Sinaloa Cartel, following a joint investigation involving the U.S. DEA.

The operation also led to multiple arrests, with authorities seizing more than 200kg of drugs, drug labs and over a tonne of precursor chemicals.

@Defraud 😀

🚨 TERM FINANCE DRAINED FOR $8.5M

Term Finance was exploited for around $8.5 million after an attacker cheaply acquired enough of its governance token to gain majority voting power.

The attacker then allegedly passed malicious proposals that gave them control over Term’s vaults, allowing the funds to be drained on Ethereum.

@Defraud 😀

🚨 U.S. BLACKLISTS 30 CRYPTO WALLETS TIED TO IRANIAN HACKERS

The U.S. Treasury has blacklisted 30 crypto addresses tied to alleged members of the Mabna Institute, an Iran-linked hacking group.

The wallets have received around $16.8 million in crypto.

@Defraud 😀

🚨 $23M IN STOLEN BTC SWAPPED INTO MONERO ON VIDEO

New footage allegedly shows French threat actors converting 300 BTC, worth around $23 million, into more than 53,000 XMR after a social engineering heist.

@Defraud 😀

🚨 MOONWELL DRAINED OF $5.7M

DeFi lending protocol Moonwell has been exploited for around $5.7 million after an attacker manipulated the price of MAMO from roughly $0.01 to $0.09.

The inflated price made the attacker’s collateral appear far more valuable, allowing them to repeatedly borrow and drain 71.36 cbBTC from the protocol.

@Defraud 😀

🚨 100+ TECH GIANTS WARN AI CYBERATTACKS ARE ABOUT TO EXPLODE

OpenAI, Anthropic, Microsoft, Google and Amazon are among more than 100 organisations that have signed a joint open letter calling for an urgent global push to strengthen cyber defenses.

The letter calls on governments, AI companies and cybersecurity firms to urgently strengthen critical infrastructure before AI-powered attacks become more capable.

@Defraud 😀

🚨 AVICI USERS DRAINED OF $1M+

Solana-based crypto banking app Avici is being exploited, with attackers draining more than $1 million from user card collateral accounts.

The attacker is allegedly abusing Avici’s permissions system to gain control of affected accounts and withdraw funds.

@Defraud 😀

🚨 HACKER STEALS 400M FOGO TOKENS WORTH $3M

The Fogo Foundation says it was compromised by an unknown attacker who stole around 400 million FOGO tokens worth roughly $3 million.

The stolen tokens represent more than 10% of FOGO’s circulating supply, with the token falling around 20% following the disclosure.

@Defraud 😀

🚨 ENTIRE BLOCKCHAIN SHUT DOWN AFTER $75M HACK

A hacker drained an estimated $75 million from Tectonic, a crypto lender built on the Cronos blockchain, after pumping its token price roughly 100x and borrowing real assets against the fake value.

Cronos then shut down the entire network to stop the attacker moving the stolen funds, with only around $6 million reaching Ethereum before the halt.

@Defraud 😀