⚠️ JUST IN: Authorities dismantled the SocksEscort proxy network, seizing servers, domains, and $3.5M in crypto.

At the same time, INTERPOL’s Operation Synergia III took down 45,000 malicious IPs across 72 countries, leading to 94 arrests.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

😂 FUN FACT: Bitcoin drone show in Switzerland 🇨🇭

A Bitcoin-themed drone show in Switzerland featured BTC depicted as Pac-Man eating fiat currencies, highlighting the growing cultural presence of Bitcoin.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: $720K lost in phishing approval

A wallet lost $720,108 in valBUSD and valTUSD after signing malicious increaseAllowance phishing signatures.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: Russia fines Telegram $432K over banned content

A Russian court has fined Telegram about $432,000 (35 million rubles) for failing to remove content deemed illegal by authorities.

Officials say the platform did not comply with requests to delete banned material, while Telegram has previously argued that the pressure is part of attempts to restrict the service in Russia.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: Wife accused of stealing $176M in crypto

A UK court heard that a woman allegedly used CCTV footage to capture her husband’s seed phrase, allowing her to access and transfer around $176M in crypto assets.

The case highlights how physical surveillance and poor seed phrase security can lead to massive losses.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: 277K wallet drain linked to known attacker

Another wallet has been drained for $277K, linked to the same attacker identified in a previous incident.

Funds were stolen via a malicious adapter contract, with assets split across multiple wallets.

Victim: 0xb20d4cd049b1a65bc0475d29060fe54fa0981607

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: Keom Protocol exploited for $94K

Keom Protocol on Polygon zkEVM was exploited for around $94K due to a logic error in the redeem function.

The bug allowed an attacker to mint a small amount of tokens and drain the protocol’s available funds.

Attacker: 0xb343fe12f86f785a88918599b29b690c4a5da6d5

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: Vietnam bans Telegram over illegal activity concerns

Vietnam has reportedly banned Telegram, claiming that nearly 70% of channels on the platform are linked to illegal activities, including drug trafficking.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: Alien speculation rises after domain purchase and $150K bet

CISA reportedly purchased the domain “aliens.gov,” fueling speculation about potential future use.

Previously, a Polymarket trader placed a $150K bet that the U.S. will confirm the existence of aliens before 2027, despite low odds.

🔔 @observer • 💬 Join community • 🎁 Join giveaway

⚠️ JUST IN: Visa launches CLI tool for AI-powered payments

Visa Crypto Labs introduced “Visa CLI,” a command-line tool that allows AI agents to make secure card payments directly while coding, without relying on external APIs.

🔔 @observer • 💬 Join community

⚠️ JUST IN: Bitcoin quantum-resistant upgrade testnet goes live

A testnet for Bitcoin Improvement Proposal 360 has been deployed, aiming to strengthen Bitcoin’s security against potential quantum computing threats.

🔔 @observer • 💬 Join community

⚠️ JUST IN: FBI warns of Iran using Telegram to spread malware

The FBI issued a FLASH alert warning that Iranian cyber actors are using Telegram as command-and-control (C2) infrastructure to deliver malware to targeted victims.

The campaign targets dissidents, journalists, and opposition groups, enabling data theft, surveillance, and remote access to infected devices.

🤖 Indicators

KeePass.exe 7402F2F9263782A4C469570035843510
MicDriver.dll F8B5554808428291ACC65D1FD2EFE01C
MicDriver.exe D70EBF20E3D697897BAD5BEBF72EA271
MsCache.exe 3E7A2FCEF1D038D05B20148C573A6499
Pictory_premium_ver9.0.4.exe 1E6B601F733BC40EAA58916986BFC5B9
rantom.txt A3394EF7FFA7E88B2E7EFAEE4617FE04
rantom.txt 2965817D063F1E8F9889F9126443D631
RuntimeSSH.exe EBDD9595B79B39F53909D862499DBC94
RuntimeSSH.exe E51FF37FB431767DCDEC0B5E6D2A786A
smqdservice.exe 7E23FFADB664B0E53D821478A249D84C
Telegram_Authenticator.exe B9086413E7B6A0C6A11C25D14C22615F
winappx.exe 481C5B5E69A08C3DF206C59FD8DDC0DC

🔔 @observer • 💬 Join community

⚠️ JUST IN: ATM Token exploited for $99K via predictable RNG flaw

A BlindBox gambling contract (0x1F8336aEF584795E282FECe8DE356BaBD7734c59) was exploited due to weak randomness using blockhash, allowing an attacker to selectively settle only winning bets.

By batching thousands of bets in the same block and checking outcomes off-chain, the attacker achieved a near 100% win rate, draining ~13M ATM tokens and later dumping them on PancakeSwap.

🔔 @observer • 💬 Join community

⚠️ JUST IN: Hungary law pushes crypto exchanges out

Hungary introduced a new “crypto-asset validation” licensing law, creating major uncertainty due to unclear rules and potential criminal penalties, forcing exchanges to exit the market.

https://stopkriptovalidacio.hu/

🔔 @observer • 💬 Join community

⚠️ JUST IN: Hong Kong retiree loses $840K in multi-scam crypto fraud

A retiree in Hong Kong lost $840K after falling victim to multiple scams involving fake crypto experts, who convinced them to invest through fraudulent platforms.

🔔 @observer • 💬 Join community

⚠️ JUST IN: Whale buys @fuck for 219K TON ($275K)

A crypto whale purchased the @fuck username on Telegram for $275K after 3 years of inactivity, marking one of the most notable recent handle sales.

🔔 @observer • 💬 Join community • 🎁@qgiftingbot

⚠️ JUST IN: Resolv USR stablecoin was exploited resulting in a $25M loss.

The attacker compromised Resolv's SERVICE_ROLE private key (a single unprotected EOA) and used it to call completeSwap() with a massively inflated mint amount, exploiting the fact that the contract never validated the output against the actual collateral deposited. Two calls turned ~$200k of USDC into ~80M USR, which was dumped for ~$25M before the protocol paused.

🔔 @observer • 💬 Join community • 🎁@qgiftingbot

⚠️ JUST IN: Samourai Wallet domain hijacked in scam attack

The official Samourai Wallet domain was hijacked and replaced with a malicious phishing site, targeting Bitcoin users to steal funds and sensitive data.

🔔 @observer • 💬 Join community • 🎁@qgiftingbot