Cryptoforensic Investigators

Blockchain forensics, investigations and expert witness
@cfinvestigators.bsky.social

[Cryptoforensic Investigators @CFInvestigators]

🚩💸 Top 5 Red Flags For Crypto Recovery Services 💸🚩

The only thing worse than being a victim to a NFT rug pull, a crypto investment scheme or pig butchering is to spend money on a recovery services, that DOESN'T actually recover your crypto.

[Cryptoforensic Investigators @CFInvestigators]

Would encourage project teams to seriously take note of the details here or you could become the next case study.

6 months of patience and persistence from the DPRK threat actors in this case, resulting in a devastatingly high value theft of almost $280 Million.

[Drift @DriftProtocol]

https://t.co/qYBMCup9i6

[SlowMist @SlowMist_Team]

🚨 SlowMist TI Alert 🚨

The @Truebitprotocol has suffered a security incident. Its smart contract 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 was maliciously exploited, resulting in the theft of 8,535 $ETH (~$26.44M).

⚠️ Do NOT interact with this contract. Stay alert and follow official updates.

https://t.co/xSbXYBpZFL

[ZachXBT @zachxbt]

Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information).

Earlier today customers received the email below.

[harsh @hpatel]

Hey all,

My hot wallet was drained across Hyperliquid and EVM chains for millions on 27th Sep.

I’m in touch with the FBI, USSS, @_SEAL_Org, @trmlabs, @CFInvestigators, and major exchanges who are now all aware of the stolen assets, their locations & movements (address ending in dHjFY). All are taking the investigation seriously. All have been incredibly responsive. Thank you.

I’d be happy to pay a bounty to whitehats or anyone with onchain or IRL information that leads to the recovery of the assets. Please DM me for details 🙏.

To the attacker: if you return 80% of the funds, all law enforcement, legal and exchange action will be dropped immediately, and you can keep the remaining 20% as a legitimate whitehat bounty that can be legally offramped and spent. Return 80% here: 2evt4TTjHw6BZjnaaq3UcSnmBrqzJjJnTsWi65yYpLbT

Thanks to the @_SEAL_Org members for their first-hand response and initial guidance.

[ⱤɄ₲ ₱ɄⱠⱠ ₣ł₦ĐɆⱤ @rugpullfinder]

🚨 The Biggest Crypto Scam You’ve Never Heard Of!

💰 A Chinese "goddess of wealth" fooled 128,000+ people, stole billions, and vanished with 61,000 Bitcoin! 😱 Want to know how it all unraveled? Let’s dive into this wild story! 🧵👇

[🚨 Cyvers Alerts 🚨 @CyversAlerts]

Our system has detected a hack into @CoinDCX centralized exchange 20 hours ago.
Here's what we know:
- The hacker stole around $44.2M in USDC/USDT from one of the exchange's operational wallets on Solana.
- The hacker funded the hack with 1 ETH from Tornado Cash.
- Part of the funds ($15.8M) were moved to Ethereum via a bridge.
Thanks to @zachxbt for identifying that it's CoinDCX and for the shoutout to Cyvers!

[ZachXBT @zachxbt]

A recent cyberattack on the Central Bank of Brazil services provider C&M resulted in a breach to the reserve accounts of six financial institutions where attackers converted stolen fiat to crypto.

I began working on an initiative that has helped freeze ~$5M across multiple exchanges and blockchains.

A special thanks goes to @tether , @Binance Security Team, @Bitso, @Bybit_Official Compliance Team, & @CFInvestigators.

Collaboration within the private sector is the most effective way to combat illicit activity and push our industry forward.

[ZachXBT @zachxbt]

1/ An investigation into how the New York based social engineering scammer Daytwo/PawsOnHips (Christian Nieves) stole $4M+ from Coinbase users by impersonating customer support, bought luxury goods, and lost most of the funds gambling at casinos.

[Cryptoforensic Investigators @CFInvestigators]

The scam industry has evolved in the past years, the groups behind it are larger, more organized and frequently linked to transnational enterprises such as Chinese crime syndicates, or, in the case of North Korea, state-sponsored schemes. 🥷
#cryptocurrency #scam #ATMs https://t.co/zgzvgHPmpO

[Cryptoforensic Investigators @CFInvestigators]

They come from video games, and then they bring their high scores into the real world. 🎮💀https://t.co/4AMQcsSxnw

[Cryptoforensic Investigators @CFInvestigators]

Crypto kidnappings: the new crypto crime wave https://t.co/l7G31bdWb4 via @CrystalPlatform

[Cryptoforensic Investigators @CFInvestigators]

Behind the Coinbase data breach and phishing attacks -- why they have been so effective, and what are the characteristics? We discuss https://t.co/ITyQPEpIrZ

[MistTrack🕵️ @MistTrack_io]

🚨 The official driver provided by this printer carries a backdoor program. It will hijack the wallet address in the user's clipboard and replace it with the attacker's address: 1BQZKqdp2CV3QV5nUEsqSg1ygegLmqRygj

🕵️ According to @MistTrack_io, the attacker has stolen 9.3086 $BTC. Active since Apr 22, 2016, last seen Mar 14, 2024, with links to multiple exchanges.

🔗https://t.co/C3uL3J0SSo

[Cryptoforensic Investigators @CFInvestigators]

@tayvano_

[Cryptoforensic Investigators @CFInvestigators]

Data leaks are a threat on multiple levels, data is not only ransomed but also sold on hacking platforms to individuals who use it to for scams and theft🕷️🕷️🕸️ https://t.co/KMUnfA99HW
#DataLeak #hacks #SIMswap #ScatteredSpider

[ZachXBT @zachxbt]

Update: So far $7M+ has been frozen with the help of @CFInvestigators, @tanuki42_, Binance Security team, and myself.

[Scam Sniffer | Web3 Anti-Scam @realScamSniffer]

🚨 ALERT: Fake "Solscan" ads top Google search results right now!

⚠️ These phishing ads are designed to drain your wallet through malicious transaction signatures.

[Cryptoforensic Investigators @CFInvestigators]

Whac-a-Mole is the name of the game, the stakes are a bit higher tho and the moles craftier 😅🕹️https://t.co/iI4xGFWN7r