🥷 5 meses y medio trabajando como analista onchain He investigado un total de 77 casos y aquí van los números: ⚔️ Total sustraido: 6.337.297 € ⚔️ Media por caso: 82.302,56 € ⚔️ Caso mas grande: 668.183 € ¿Cual es el tipo de caso que mas me encuentro? Falsa plataforma de inversión + falsa recuperación de fondos Otros casos que hemos tenido: - Drain - Engaños amorosos 💖 - Un exploit en contratos En situaciones de máximo estrés he estado gestionando 12 casos al tiempo, pero lo normal está entre 5 y 6 casos 🎩 La traza mas grande es la que adjunto en la imagen del post, que apenas se puede entender desde fuera, tienes que estar en la herramienta y da gracias. ¿Te resulta interesante? Mira el primer comentario : )

Detective seems to be right, there's something going on with @predictdotfun as multiple accts are being drained The funds are being bridged to Ethereum & then forwarded to Tornado Cash I've identified 19 victims who have been drained of a total of 105 ETH (~$260K). There are likely more victims If you still have any funds there, bridge them out

❗️ Crypto mixer Railgun ignored a US lawsuit claiming it laundered North Korea's stolen crypto, and is now in default. The plaintiffs are victims and families holding $865M in US terrorism judgments against North Korea. Courts found it abducted a US permanent resident pastor in China in 2000 and tortured him to death, and backed Hezbollah's 2006 rocket attacks on Israel. They say Railgun should have frozen North Korea's funds so they could seize them. The FBI says North Korean hackers laundered $60M+ through Railgun in January 2023. The suit claims ~70% of the money it handled was North Korea's.

Withdraw all funds from CoinDCX if you value your assets. Its co-founders are clowns running a circus. They publicly and privately denied a theft of its assets occurred meaning they straight up lied or are negligently incompetent. Later they disclosed the $16M theft and wasted everyone’s time instead of being transparent with the public initially. Not the first time CoinDCX has done it. Indian CEXs like CoinDCX, WazirX, BitBNS are all the same. (I still helped freeze 6 figures for CoinDCX)

zachxbt just proved monero's thesis again: he tracked $20M of stolen funds moving through hyperliquid, traced the swap operator's 3,000 deposits to kucoin, and the moment it converted into native xmr, the trail completely vanished. - influencers: "govs found ways to deanonymize xmr!" - reality: 87% of inflows into freedomxmr were ransomware and exploit loot trying desperately to buy native monero to kill the trail. govs and zachxbt didn't trace monero; they traced an off-the-shelf swap bot on a transparent evm. chainalysis doesn't crack ringct; they just wait at the transparent counter hoping the operator deposits to kucoin without a vpn. you can delist xmr from every regulated cex on earth, yet you can't delist pure cryptographic utility, meanwhile xmr is up 69%. market always knows what real privacy is.

oh my god this is worse than we thought here's @Ledger $86M exploits explained > cryptobilis was a reputable and authorized Ledger/Trezor/OneKey dealer for over 4 years > they decided to sell the company to a Chinese guy (most likely patsy for DPRK) from northern China in MARCH 2026 > the "Chinese guy" modded the devices within the supply chain itself (physical), namely Nano X devices, to contain an implant module > ledger validity/genuineness check CANNOT detect this because hw wasn't actually tampered with, just spied on > quoting @MagicalTux: " implant just monitors what's shown on the screen, will take note of the seed as it's shown to you, then transmits it to 3rd party" > former owner chimes in on X (pic below) to say that "they were under a NDA" to not mention anything to anyone for 6 months > they obviously didn't alert any of their partners that they were authorized to sell devices of... because NDA, duh!! its in the name! > conveniently, funds start getting siphoned a few weeks before this magical NDA due date, and being laundered across all blockchains

El gap de formación de los agentes, la mía y la de los estafadores es ABISMAL No solo a nivel de formación, si no además a nivel de herramientas! Siempre estoy dispuesto a reunirme con todos los agentes posibles, pero se necesitan destinar muchisimos mas recursos a la formación de todos los agentes españoles, no solo de unos pocos He tenido que invertir mucho tiempo en redactar informes de 90-200 cuando con un informe de 50-60 sreviría para agilizar miles de tramites Incluso generando nuevos anexos o teniendo llamadas adicionales solo para explicar como funcionan los CEX a un nivel muy basico Estoy siempre dispuesto a reunirme con nuevos agentes y cuerpos gratuitamente para poder ayudarnos en todo lo posible y avanzar conjuntamente

En una videollamada con un equipo de agentes para congelar fondos en Kucoin Me han felicitado por el trabajo realizado y se han quedado sorprendidos Una plataforma falsa de inversión que se hizo con 370.000$ de una sola persona. Ten cuidado ahí fuera!

Today video 📹

I spent about 13 minutes reading this, and I must say, this is incredible. Just imagine the amount of risk involved and the money spent throughout this investigation. I hope Jimmy gets what he deserves, and that his fat-reducing meals are served with plenty of water in prison. Great job, ser. 👏

1/ How I infiltrated a Chinese organized crime syndicate that has laundered $1B+ across multiple exploits for Lazarus Group. Posing as a client, I gathered intel that helped action freezes for the Feb 2025 Bybit exploit and attribute illicit activity onchain.

Security Update: We are responding to a security incident affecting part of our infrastructure. At this time, we have identified no immediate threat to MetaMask wallets. As a precaution, we are proactively exiting affected validators within our non-custodial staking operations, in coordination with clients, partners and security advisors. We’ll share further updates as appropriate. metamask.io/news/user-update…

AVISO A TODOS!!!!!!! 5 MINUTOS LO CAMBIAN TODO! Configurad alertas en vuestras carteras principales con @arkham Si en algún momento os vacian la billetera, esto puede hacer que os deis cuenta al momento y podáis tomar medidas. Además podréis avisar a un investigador para que se ponga con el caso lo antes posible Algunos casos me llegan cuando ha pasado 1 mes de lo sucedido, algunos porque no saben donde acudir y otros por que no se han dado cuenta Por favor, configurad alertas por si acaso!

@bitget has engaged SlowMist’s security team to investigate the September 25 hot wallet asset theft. As of September 29, our investigation has identified malicious activity involving certain third-party security products and a wallet application host, as well as a highly customized withdrawal tool used by the attacker. 🔎 Key findings include: 1. Malicious activity on a certain third-party product involving exploitation of a zero-day vulnerability. 2. Unauthorized access to a certain third-party products management platform on September 25 using an internal employee identity. 3. Recovery of a customized withdrawal tool designed to interact with the wallet system’s withdrawal logic. 4. On-chain activity begins at 02:31 on September 25, with transfers across multiple blockchains over approximately 2 hours and 52 minutes. 5. Subsequent attempts to manipulate withdrawal records and trigger additional BTC withdrawals. We are continuing to investigate how the attacker moved between the affected systems. All date references are to UTC+8. 📄 Read the details of the investigation: github.com/slowmist/Knowledg…

Managed to work with @circle (🤯) to help coordinate another $201k of @bitget proceeds being frozen. The launderers were trying to shift funds between EVM and Noble, but CCTP has limits on the amount which can be bridged out of Noble. One of their transfers hit the cap and sat pending in the bridge. That gave a window to get Circle to blacklist the destination address before the limit reset. The transfers can't settle, so $201k is now stuck between Noble and Ethereum, which could provide a path to recovery through legal process.

I also contributed to freezing of 173k XRP ($257K) via near intents (yet to be awarded to me) Thanks to near team for swift action

It’s a nested service that uses Binance for liquidity, not a real KYC Binance account Not sure the source (yet)

@THORChain is actually halted on BTC right now - not because most of the volume is just @bitget stolen funds, but instead because one of the XRP->BTC swaps from the money launderers caused a technical issue. Don't worry though, Devs working hard to resume laundering ASAP!

Star they literally pause and coordinate secret updates basically on a daily basis. It’s a total joke. They also have an arbitrary rug & ban functionality in the protocol since 2019 which they used at least once in 2026 to take money for themselves. That’s separate from the single master admin key that was used to rug all their loyal fucking users in 2025. Also, they were offline for months following their hack bc they have no security people and didn’t know how the attack worked lol. They still haven’t disclosed it actually. Or done a post-mortem. Or fully revealed the various censorship steps they took after their hack.🤫