❗️JUST IN: APOLLO HAS JUST EXIT'ED FOR $23 000 ⚠️

Link - https://oguser.com/Thread-poor-fag-scams-21k

OP sent $21 000 in Monero to @/Cortisol (apollo rank, 667 reputation, 129 deals, 2020 reg date) to exchange for a wire transfer, @/Cortisol received it and immediately blocked and cleared chat with OP. |

Another scam instance involves @/Cortisol receiving $1750 zelle on an exchange and scamming out right after.

$22 750 total scammed

❗️Be careful, @/Cortisol is likely exiting on more people as of this moment ⚠️

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️ It seems a new instagram exploit just came up with @e and @f being claimed around 20 minutes ago

SOURCE @FEDS

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️WARNING: Any “method” being sold or leaked for claiming 1L usernames is a scam.

Only @e, @f, and a few other 1L usernames were claimed and secured through an unknown employee. There is no public method, exploit, or process to obtain them.

Anyone claiming they have a working method is lying to your face and trying to scam you.
SOURCE @DWCusers

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

❗️JUST IN: VERIFIED @/R5 BANNED OVER $1250 ( AGAIN ) 🇮🇳

Link - https://oguser.com/Thread-VERIFIED-R5-EXITS-FOR-1250-IG-CLAIM

Staff member @/bevo made a good job by throwing thrash out

❗️If @/R5 gets unbanned and still remains verified, I will make a petition for /bossed to get unbanned as well 🤡

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️JUST IN: A victim lost ~$310K after connecting their wallet to a fake crypto exchange

The malicious site tricked them into connecting their wallet, which allowed the attacker to drain the funds shortly after.

SOURCE @DWCcove

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

📢 JUST IN: UK FCA: Football Clubs Face Legal and Money Laundering Risks From Unauthorized Crypto Sponsors

Reuters reported that the UK Financial Conduct Authority warned Premier League and other football clubs that sponsorship deals with unauthorized crypto firms and trading platforms could expose them to legal liability, money laundering risks and reputational damage. The FCA said some unauthorized firms may be using high-profile club sponsorships to promote products to football fans despite not being allowed to operate in the UK, and has urged clubs to strengthen checks on their partners.

Source：

via x.com/WuBlockchain

Zero trophies, zero FCA registration, but somehow still on the sleeve. 🦺 The FCA is reminding Premier League clubs that "they paid us well" is not a compliance framework, and that laundering money through a stadium sponsorship is still laundering money. Turns out due diligence doesn't care how many followers your shirt sponsor has.

❗️JUST IN: EARLY APOLLO ABOUT TO EXIT FOR $1300 BTC ⚠️

LINK - https://oguser.com/Thread-Ghosted-from-Hawk

OP sent $1.3k btc to @/Hawk (early apollo rank, 327 reputation, 33 deals) to buy some twitchcon cape codes. @/Hawk confirmed the payment and started immediately stalling. It's been 5 days with @/Hawk being active on tele, but ghosting.

❗️ go first to an early apollo in 2026 huh?

❗️DWC, @/Hawk is likely exiting on more people as of this moment  ⚠️

⚠️JUST IN: Instagram appears to be reverting usernames that were claimed through an exploit.

Multiple handles obtained via the PATCHED exploit are currently being returned to their rightful owners.

SOURCE / @DWCusers

⚠️JUST IN: Meta and Coinbase are directly working with the FBI to arrest online scammers.

So far, law enforcement has arrested 60+ suspected threat actors, Coinbase has seized over $3M in stolen crypto, and Meta has disabled more than 1.4M accounts linked to scam activity.

SOURCE @DWCusers

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

🚨 SlowMist TI Alert 🚨

A new Rust-based supply-chain malware campaign, IronWorm, actively targeting developer environments and Web3/crypto ecosystems via malicious npm packages.

Potential attacker actions include credential theft, wallet seed and password theft, GitHub repository tampering, malicious package publishing, CI/CD secret exfiltration, Tor-based command-and-control, and stealth via an eBPF rootkit.

Security teams should audit repositories for backdated commits, suspicious branches, unexpected build hooks, and commits attributed to automation-like identities such as claude, dependabot, renovate, or github-actions. Remove or deprecate affected package versions, publish clean releases, rotate all exposed secrets and tokens, review GitHub Actions artifacts, and rebuild potentially compromised developer or CI systems from clean images.

Thanks to @JFrogSecurity for the discovery…

via x.com/SlowMist_Team

Devs really said "let's build the financial system of the future" and left the door unlocked, the windows open, and a welcome mat that says npm install trust-me. IronWorm doesn't need to be clever, it just needs you to not check your build hooks. Rotate your secrets, or don't, the malware already has them.

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

Just in⚠️: A verified member + @Major staff (@side) has scammed @ton4life for 5000💲!

All proofs of him scamming can be found here:
https://t.me/khaosdwc.

DO NOT DEAL WITH HIM until everything is figured out.

SOURCE @OGULounge!

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

🚨SlowMist TI Alert🚨

💸 Loss: 14.411518807585587 ETH

🔍 Root Cause: Storage slot collision between ATOHook.rewards mapping slot and Solady ReentrancyGuard fixed slot (0x02215292eb9609279094554c6e223f800950648ddfa3da30329838d6c170928d). The nonReentrant modifier in getReward() writes sentinel value 0xffffffffffffff to the guard slot, which is simultaneously read as rewards[attackContract] due to the collision. This inflated reward is paid as ETH each call, allowing 200 repeated claims.

📌 Attacker (EOA): 0x2d2aafc193c24e59bd16139056ac9b4df4d37ad0
📌 Victim Contract: 0xa10de71ddb4e0d51938ef6e0118822e157a62888
📌 Attack Contract: 0x2441e480f62bf609a08da09143e4baf8a817d757

Storage collision between reward accounting and reentrancy guard enables unlimited reward drainage.

Powered by #SlowMist.AI

via x.com/SlowMist_Team

The reentrancy guard was literally paying the attacker to trigger it, 200 times.

💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.