Greattech🛡

#Scam Detection, Asset #recovery guru, Reimbursing stolen and lost crypto, serving justice to victims.

[Greattech🛡 @Greattech__]

🚨THREAD #nft #BTC #ETH #BNB #SOL

HOW TO SPOT SCAMS 🧵.

The best way to protect yourself from fraud, scams, and theft is to learn to spot them.

Here are 4 common scams and how to spot them: 👇

[Greattech🛡 @Greattech__]

@DawnF628630 You have to be very careful not to fall into the wrong hands
I will advise you base on safety on here to only get In touch with this recovery agent, @OnChainRscue they will guide you through and recover your lost.

[Greattech🛡 @Greattech__]

@veg_davi You have to be very careful not to fall into the wrong hands
I will advise you base on safety on here to only get In touch with this recovery agent, @OnChainRscue they will guide you through and recover your lost.

[Greattech🛡 @Greattech__]

I understand how you feel, I too was sc*mmed by an elon imposter, my lawyer recommended me to @OnChainRscue for their deploying back services they were of big help to me tracking my sc*mmed money and got me refunded you should

[Greattech🛡 @Greattech__]

I understand how you feel, I too was sc*mmed by an elon imposter, my lawyer recommended me to @OnChainRscue for their deploying back services they were of big help to me tracking my sc*mmed money and got me refunded you should

[RockSteady @Edsweet45]

Fuck I think I’ve been scammed , all my eth was transferred out last night … can anyone help fam ?

[Blckhv @blckhv]

🚨$7.6M gone from @rhea_finance

Attacker deployed fake tokens, added liquidity to fresh pools, and fooled the oracle layer.

~$470M stolen YTD.
We as whitehats aren't doing enough.

[BlockSec Phalcon @Phalcon_xyz]

ALERT! Our system detected a series of suspicious transactions targeting one victim address (0xaCc0c1f672B03B9a5fED4535f840f09B85f40E98) across Arbitrum, BSC, Avalanche, Optimism, and Base, with estimated total losses of about $517K.

The victim had pre-existing MAX_UINT approvals to a SquidMulticall-related contract deployed at the same address across all affected chains (0xaD6Cea45f98444a922a2b4fE96b8C90F0862D2F4); the attacker leveraged these approvals through the permissionless run() entrypoint, executing crafted multicalls with transferFrom payloads to transfer tokens directly from the victim.

🟦 Found by #PhalconSecurity, 🟦 Analyzed via #PhalconExplorer.

[Pyro @0x3b33]

❗️Zoo Finance got hacked for ~27k

The bug was in @ZooFinanceIO custom hook built on UniswapV4, using a custom `ln()` price curve

The hook approximated execution price with a simple midpoint average instead of integrating properly, creating a directional bias where:

1. ATH to vATH - slightly overpay the swapper

2. vATH to ATH - slightly underpay the pool

The attacker chained 20+ alternating swaps inside a single `unlock()` callback, each round trip netting a small profit.

[BlockSec Phalcon @Phalcon_xyz]

Weekly Web3 Security Incident Roundup | Mar 16 – Mar 22, 2026

During the past week, BlockSec detected and analyzed seven attack incidents, with total estimated losses of ~$82.7M.

🟦 Detected by #PhalconSecurity, 📷 Analyzed via #PhalconExplorer.

[SlowMist @SlowMist_Team]

🚨 SlowMist TI Alert: LiteLLM Supply Chain Attack

The widely used LLM routing library #LiteLLM (~97M monthly downloads) was recently reported to be affected by a PyPI supply chain attack. A suspected malicious version (1.82.8) may lead to sensitive data exposure upon installation.

⚠️ Potential impact includes:
• SSH keys
• Cloud credentials (AWS / GCP / Azure)
• Kubernetes configs
• Git credentials & API keys
• Shell history, database passwords, crypto wallets, etc.

Notably, the risk may be triggered automatically via a .pth mechanism during Python startup, meaning no explicit function call is required in certain cases.

💥 Potentially affected scenarios:
• Direct installation of LiteLLM
• Projects depending on LiteLLM
• Indirect dependencies (e.g. AI tooling ecosystems)
• Shared environments or containers

🔍 Suggested check:
pip show litellm
If version = 1.82.8, further investigation is recommended.

There are reports suggesting possible large-scale data exposure and credential leakage, though the full scope is still being assessed.

🛑 Recommended actions:
• Remove or replace the affected version
• Rotate relevant credentials as a precaution
• Review logs, access records, and sensitive data usage

Stay vigilant!

[BlockSec Phalcon @Phalcon_xyz]

ALERT! Our system detected a suspicious transaction targeting a PancakeSwap pool (BCE–USDT) on #BSC hours ago, resulting in ~$679K in losses.

The root cause appears to be a flawed burn mechanism in the BCE token. The attacker deployed two malicious contracts to bypass buy/sell restrictions and trigger token burns within the pool.

This manipulation skewed the pool reserves, allowing the attacker to drain the BCE–USDT pool for ~$679K in profit.

The attack Tx: https://t.co/1JqoWCpaA2

🟦 Found by #PhalconSecurity, 🟦 Analyzed via #PhalconExplorer.

[PeckShield Inc. @peckshield]

Hi @Cyrus_finance You may want to take a look

https://t.co/lf7JuNXB3w

[Scam Sniffer | Web3 Anti-Scam @realScamSniffer]

🚨 Someone lost ~$1.77M USDC after signing a phishing permit (gasless approval) signature on Ethereum. 🎣⚠️

[SlowMist @SlowMist_Team]

⚠️ With crypto adoption growing and stablecoins accelerating cross-border fund flows, VASPs face increasingly complex #AML & #KYT challenges.

🎉🎉🎉We're thrilled to announce our new product: SlowMist KYT, transforming years of blockchain intelligence into a full-lifecycle compliance system

👋For more detailed industry insights and AML trends, read our latest report:
https://t.co/eIQdrvnPe6

[Greattech🛡 @Greattech__]

@Jayne825675 Kindly follow and send a direct message for recovery assistance

[SlowMist @SlowMist_Team]

🚨 AI Agents like #openclaw are evolving into high-privilege operators across AI and Web3 environments.

To address these risks, we introduce a comprehensive security Solution for #AI and #Web3 Agents — designed to make autonomous systems observable, controllable, and auditable.✨

🛡️ The architecture forms a five-layer “Digital Fortress” around AI Agents:

🔹 MistEye serves as the retina (threat perception)
🔹 MistTrack as the immune system (on-chain risk control)
🔹 OpenClaw security practices as the skeleton (behavioral constraints)
🔹 MistAgent as the brain (deep analysis and auditing)
🔹 ADSS as the armor (full lifecycle protection)

🔗 Read the Full Security Solution:
https://t.co/c6achBBAwp

[BlockSec Phalcon @Phalcon_xyz]

ALERT! Our system detected a suspicious transaction targeting the MT–WBNB pool on #BSC hours ago, resulting in an estimated loss of ~$242K. The root cause stems from a flawed buyer-limitation mechanism: in deflation mode normal buys revert while router/pair are whitelisted, allowing the attacker to bypass restrictions via router swaps and liquidity removal to obtain MT from the pair.

The attacker then sold MT to accumulate pendingBurnAmount and called distributeFees() to burn MT directly from the pair, artificially pumping the price before swapping MT back to WBNB for profit. Additionally, a referral rule allowing the first 0.2 MT transfer to bypass buyer limits enabled the attacker to bootstrap the attack.

Attack TX: https://t.co/yuLpgYkRky

🟦 Found by #PhalconSecurity, 🟦 Analyzed via #PhalconExplorer.

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert The attacker who drained $24M worth of $aEthUSDC from @sillytuna has swapped ~$2M worth of $DAI & $ETH for 6,174.4 $XMR, which is currently held on #Hyperliquid.
Additionally, they have deposited ~6.5M $USDC & $USDT into CEXs including OKX, MEXC, & Bitkan, and laundered 375 $ETH via #TornadoCash.

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert A @sillytuna (0xd2e8...ca41)-related address has been drained of ~$24M worth of $aEthUSDC in an address poisoning attack.

~$20M in $DAI is currently sitting in 2 attacker-controlled staging wallets (not yet mixed):

-0xdCA9...c9C4 (~$10M)
-0xd0c2...dd3e (~$10M)

The attacker has already begun bridging small amounts to #Arbitrum.

[Greattech🛡 @Greattech__]

@Shnatrix Yes kindly send a direct messege

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert In Feb. 2026, the crypto space saw 15 main hacks totaling $26.5M, representing a 98.2% YoY decrease compared to Feb. 2025 ($1.5B, including the $1.4B #Bybit drain) and a notable 69.2% MoM decrease from Jan. 2026 ($86.01M in losses).

#Top5 Hacks :
YieldBlox[.]finance: $10M
IoTeX[.]io Bridge (@iotex_io): $8.8M
@crosscurvefi: $3M
@FOOMCASH: $2.26M
Moonwell: $1.8M