🛡 EXPLOIT: Dormant Wallets Drained and Syndicate Labs Exploit

Hundreds of crypto wallets inactive for 7+ years were suddenly drained by a single phishing address flagged on Etherscan, stealing over $X'XXX'XXX across hundreds of victims.

Separately, a compromised private key allowed an attacker to silently upgrade Syndicate Labs' bridge contracts, moving 18.5M $SYND (~$330K) and ~$50K in customer tokens. All affected Syndicate users will be fully refunded.

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

📊 APRIL 2026 RECAP: $651M Lost to Crypto Exploits

April 2026 goes down as the worst month for crypto losses since March 2022 (excluding Feb 2025, Bybit). CertiK confirmed ~$651M drained across all incidents, with ~$3.5M from phishing alone. Here's what we covered on Observer:

• Drift Protocol - $270M
• Kelp DAO - $292M
• Grinex Exchange - $13.7M
• Fake Ledger App - $9.5M
• Rhea Finance - $7.6M
• Hyperbridge - $2.5M
• Dormant Wallets - $1M+
• Giddy Finance - $1.3M
• Aftermath Finance - $900K
• Syndicate Labs - $380K
• Phishing Drainer - $585K
• Thetanuts Finance - $46K

Is 2026 shaping up to be the worst year for DeFi security ever? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

😂 FUN FACT: When Google Bought YouTube for $1.65B

Google acquired YouTube in 2006 for $1.65B. It now generates that same amount every 15 days, with $40B in annual ad revenue and 2.7B monthly users.

Best acquisition ever? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: 25 Convicted in $215M Business Email Compromise Scam

The FBI reported a Nigerian-linked fraud network defrauded 1,000+ victims across 47 US states and 19 countries. The group hacked business emails, studied communications, then sent convincing fake payment requests. Authorities seized:

• $1.2M in crypto, checks and cash
• Patek Philippe Nautilus - $45K
• Audemars Piguet Royal Oak - $30K
• Richard Mille Felipe Massa - $140K
• 4,423 sqft residence in Georgia

Business email compromise remains one of the most financially damaging cyber threats globally. Stay vigilant. 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: Telegram Mini Apps Used to Deliver Crypto Scams and Android Malware

Per BleepingComputer, threat actors are abusing Telegram Mini Apps to push crypto scams and deliver Android malware directly to users. The apps mimic legitimate services to steal funds and compromise devices without ever leaving Telegram.

Are you careful about which Mini Apps you open? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: Telegram Bans Username @solana after $41K Sale

A user bought the non-NFT username @solana for $41K, only for Telegram to ban it before they could mint it. No official explanation from Telegram yet.

$41K gone just like that. Who's liable? 👇

🔔 @Observer • 💬 Join community

⚠️ JUST IN: ZachXBT Declares War on Tokenlon and ImToken

ZachXBT is publicly calling out Tokenlon and ImToken for allegedly facilitating pig butchering, human trafficking, investment fraud and Chinese illicit marketplace activity.

ZachXBT stated he plans to initiate attacks against both protocols and called for co-founder @beenhero to face prison time.

Is ZachXBT going too far, or not far enough? 👇

🔔 @Observer • 💬 Join community

⚠️ JUST IN: Binance has rolled out Withdraw Protection, letting users lock their withdrawals for up to 7 days. Designed specifically to protect against wrench attacks, where victims are physically forced to send funds.

Given the 41 kidnappings in France alone this year, is this the right move? 👇

🔔 @Observer • 💬 Join community

😂 FUN FACT: North Korea Denies All Crypto Hack Allegations

North Korea has officially called hacking allegations "unfounded."

This is the same country the FBI and UN have repeatedly linked to billions in stolen crypto including the $1.4B Bybit hack.

Believable? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

🛡 SCAM: $102K Lost to Address Poisoning Attack

A victim sent $102K in USDC to a fake wallet that shared the same first and last characters as the real one. The attacker planted a small fake transaction in the victim's history, waited for them to copy the wrong address, and collected the funds.

Victim: 0x0328…1080

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: TON Pumps 36% as Telegram announces MTONGA step 3/7

$TON hit a 4-month high of $1.80, up 36% in 24 hours after Durov announced step 3 of 7 of MTONGA. Telegram replaces the TON Foundation as the main ecosystem driver and becomes its largest validator.

New ton.org, new dev tools and performance upgrades expected within 2-3 weeks.

Are steps 4-7 going to send it even higher? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: Coinbase Sued for Withholding $55M Hack Funds After Freezing Them

A Puerto Rican victim of a $55M DAI phishing hack is suing Coinbase for refusing to return frozen funds despite sworn proof of ownership. The victim clicked a fake DefiSaver link in August 2024, unknowingly granting attackers wallet control. Investigators traced the funds to a Coinbase retail account, Coinbase froze them, but then demanded a court order before returning anything.

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: Germany's .de Internet is Down

DENIC, the registry managing all .de domains, broke a critical security signature on the entire .de zone tonight. Amazon.de Google.de, Telekom.de and thousands of sites are unreachable globally.

DENIC confirmed the disruption on their status page. Started around 9:40 PM Berlin time.

EXPLANATION:
Every .de domain has a digital signature that proves it's legitimate. DENIC accidentally invalidated that signature for the entire .de zone, so most DNS servers worldwide are refusing to load any .de site as a security precaution. It's not a hack, someone just pushed a broken update.

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: Australia Seizes 52.3 BTC in one of country's biggest crypto seizure

NSW Police raided a suburban home in Ingleburn on May 4, seizing 52.3 BTC (~$5.7M) linked to darknet activity. Two men, aged 39 and 41, were identified as wallet holders. A previous raid in May 2025 had already netted $47K in crypto and cocaine. One of the biggest cryptocurrency seizures in Australian history.

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

😂 FUN FACT: Revolut Listed Bitcoin at $0.02 While It Was Trading at $80K

A technical glitch on Revolut briefly showed Bitcoin at $0.02, a 99.999% discount from the real price. No, you could not buy it.

Would you have tried? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ JUST IN: Telegram Adds Native TON Gambling for Level 5+ Users

Telegram users with a level 📛 or higher account can now send a dice emoji in any chat to gamble their TON directly inside the app. No third-party casino needed.

Is Telegram becoming a crypto casino? 👇

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC

⚠️ UPDATE: Telegram casino only lets you spend your profits on gifts and posts but won’t let you withdraw😂

🔔 @Observer • 💬 Join community • 🌟 HighQuality OTC