← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,422
Relationships
32,516
Potential duplicates
0
Filter by kind
Entities (event)
↯0cfc9fc8
Summer.fi announced wind-down of operations, stating the exploit had depleted the company's financial runway. The application was confirmed to remain live through August 31, 2026. The team stated it had explored alternatives but concluded cessation was the only viable option.(2026-07-15:summer-finance-summer-fi)event
↯9e7298d2
Reporting linked the July 6 exploit to the November 2025 Stream Finance collapse via the stale Silo Varlamore vault tokens.(2026-07-08:summer-finance-summer-fi)event
↯e373a611
At 05:44 UTC BA Labs identified the exploit. At 06:37 UTC deposits on affected fleets were paused. At 06:46–06:47 UTC deposit caps were zeroed across all remaining fleets. Blockaid, PeckShield, and CertiK all flagged the incident publicly on the same day. Summer.fi paused all Lazy Summer Protocol vaults.(2026-07-06:summer-finance-summer-fi)event
↯ab183526
Attacker wallets funded through a common path; attacker begins accumulating impaired Silo Varlamore USDC Growth tokens over subsequent weeks.(2026-04-06:summer-finance-summer-fi)event
↯f3a0fc43
SUMR governance token began trading.(2026-01-21:summer-finance-summer-fi)event
↯1db38a8e
Lazy Summer Protocol launched SUMR Staking V2, enabling SUMR holders to earn staking rewards and USDC revenue distributions.(2025-12-10:summer-finance-summer-fi)event
↯2b994d81
Stream Finance disclosed a $93 million loss from an external fund manager; its xUSD token dropped 77%, freezing approximately $160 million in user deposits. Silo 'Varlamore USDC Growth' vault tokens, held by Lazy Summer's SiloV2 Ark, became economically impaired but retained stale on-chain valuations.(2025-11-04:summer-finance-summer-fi)event
↯939c674e
Oasis.app rebranded to Summer.fi to reflect expansion beyond MakerDAO vaults into a multi-protocol DeFi ecosystem.(2023-06-01:summer-finance-summer-fi)event
↯535e9643
Following dissolution of the Maker Foundation, Oasis.app development moved to an independent entity.(2021-06-01:summer-finance-summer-fi)event
↯8625e449
Crypto Times publishes additional reporting on the alleged connection between Peter Gray and the switck pseudonym, framing unresolved governance questions about whether Coinkite's own CTO authored and then dismissed warnings about the vulnerable dependency.(2026-08-09:coinkite-coldcard)event
↯066909d6
Thomas Braziel of 117 Partners announces outreach to Canadian law firms on behalf of victims, creating an intake form for affected users. Toronto law firm WeirFoulds assesses potential litigation.(2026-08-07:coinkite-coldcard)event
↯020b9c52
Coinkite announces suspension of its standard 120-day customer data deletion policy, citing legal obligations and 'anticipated legal proceedings.' WeirFoulds LLP publishes legal analysis outlining two potential recovery routes for victims.(2026-08-06:coinkite-coldcard)event
↯55076933
One 64.9 BTC Wasabi deposit and 200 ETH bridged to Tornado Cash observed in on-chain data, representing initial laundering activity. Approximately 90% of stolen funds remain unmoved.(2026-08-04:coinkite-coldcard)event
↯eff25fd3
Fortune reports cumulative losses at approximately 1,816 BTC ($116 million) from 5,200+ addresses. TRM Labs publishes detailed on-chain analysis. Bloomberg reports on the attack.(2026-08-03:coinkite-coldcard)event
↯66dab0f5
Cumulative losses reported at over 1,367 BTC (~$88.6 million) from 4,500+ addresses across three waves, per Blockhead.(2026-08-02:coinkite-coldcard)event
↯a8d6a823
Second attack wave: approximately 594 BTC (~$38 million) drained in 25 minutes from ~500 wallets. Coinkite releases emergency firmware patches (v4.2.0 for Mk2/Mk3; v5.6.0 for Mk4/Mk5; v1.5.0Q for Q model).(2026-07-31:coinkite-coldcard)event
↯492de99e
First attack wave: approximately 1,083 BTC (~$70.2 million) drained from 1,196 addresses in 41 minutes. Coinkite publicly discloses the firmware flaw the same day.(2026-07-30:coinkite-coldcard)event
↯07646a81
Bitcoin developer James O'Beirne reportedly warned Coinkite about the flawed RNG implementation in libngu and recommended migrating away from the library. According to O'Beirne, Coinkite dismissed the concern, citing absence of prior discovery as evidence of safety. Coinkite has not confirmed the specifics of this exchange.(2025-05-01:coinkite-coldcard)event
↯cdd6b21d
Coldcard firmware version 4.0.0 officially released, shipping the entropy flaw to all affected device lines.(2021-03-17:coinkite-coldcard)event
↯31b3aa1e
Vulnerable commit introduced into libngu library, replacing hardware RNG calls with weak software PRNG (Yasmarang). The flaw entered the codebase under the pseudonymous account 'switck.'(2021-03-01:coinkite-coldcard)event
↯31b103b1
Crypto Times weekly security roundup reported the Oraichain incident alongside other exploits totaling more than $37 million in confirmed losses for the week of August 9–15, 2026. No formal Oraichain post-mortem had been published.(2026-08-16:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯ae667830
Harmony Protocol suffered a separate but structurally similar unauthorized minting exploit, with approximately 4 billion ONE tokens minted via a quorum verification flaw.(2026-08-12:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯419c0c1c
Oraichain network reported to have come back online following patching and reconciliation efforts.(2026-08-11:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯cba7d7df
Oraichain issued follow-up statement confirming exploit path had been identified and addressed, and announcing plans to burn unauthorized minted balances to restore canonical supply.(2026-08-10:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯0ae39636
MEXC temporarily suspended ORAI deposits and withdrawals at the request of the Oraichain project team.(2026-08-09:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯44d4ec4e
As of this date, no funds from the August 2026 attack have been returned. No law enforcement action has been announced. Total confirmed crypto losses for the week of August 9–15 exceeded $37 million across multiple incidents.(2026-08-16:crypto-whale-repeat-phishing-drain-august-2026)event
↯631117bd
The same wallet was drained of approximately $25.6 million in a second malicious token approval phishing attack. Stolen assets included aWBTC, WBTC, DAI, ETH, cbBTC, USDS, LDO, and CRV. The attacker consolidated proceeds into approximately 20 million DAI and 3,000 ETH across four addresses. On-chain investigator Specter identified attacker address 0x8fEB...F95Ae.(2026-08-12:crypto-whale-repeat-phishing-drain-august-2026)event
↯5c7960bd
The 2023 attacker voluntarily returned approximately 90% of the stolen funds — roughly $21.8 million — to the victim wallet.(2023-09:crypto-whale-repeat-phishing-drain-august-2026)event
↯4760159c
The victim wallet (address prefix 0x13e382) lost approximately $24.23 million in rETH and stETH after signing malicious 'increaseAllowance' transactions granting the attacker token spending approval. Stolen assets were converted to approximately 13,785 ETH and 1.64 million DAI.(2023-09-06:crypto-whale-repeat-phishing-drain-august-2026)event
↯2cd6bf79
No law enforcement action, sanctions designation, or indictment against Jewelbug operators confirmed as of this date.(2026-08-16:jewelbug-apt)event
↯872ca905
TechTimes and TechNadu publish follow-up analysis of the 15-ministry government webmail compromise and the shared XG-Web panel infrastructure.(2026-08-15:jewelbug-apt)event
↯15c4d963
BleepingComputer, The Hacker News, Crypto Briefing, The Cryptonomist, SC Media, and Infosecurity Magazine publish coverage of the Symantec Jewelbug attribution report.(2026-08-13:jewelbug-apt)event
↯4eba4e0a
Group attributed to a five-month intrusion targeting a Russian IT service provider to deliver malware interfering with security tool functionality.(2025-10-01:jewelbug-apt)event
↯fa9fbba5
Sustained operational activity confirmed from at least Q2 2023, including espionage and cryptocurrency fraud campaigns.(2023-04-01:jewelbug-apt)event
↯fcc21f13
Earliest malware samples linked to Jewelbug infrastructure traced to this period, per Symantec analysis.(2013-01-01:jewelbug-apt)event
↯c4c2ae60
Additional coverage by The Coin Republic, CryptoNews.net, and Decrypt confirms scope details including 7-figure USDT wallet targeting and the AML-violation threat framing.(2026-03-21:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯91b7c6c1
Major crypto media outlets including Yahoo Finance, Unchained Crypto, Invezz, and Cryptopolitan publish coverage of the FBI warning, amplifying the alert to the broader crypto community.(2026-03-20:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯f0ed6602
FBI New York Field Office issues official public warning on X (@NewYorkFBI), confirming the fake token campaign and instructing users not to submit identifying information to any associated website. At least 728 wallets are confirmed holding the token at this time.(2026-03-19:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯11f88680
Airdrop campaign begins; attacker executes approximately 920 transactions distributing fake FBI tokens to targeted Tron wallets at a reported cost of roughly $40 in TRX fees.(2026-03-11:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯97d55c04
CoinSpectator publishes an aggregated report citing a Reddit post by user /u/_clickfix_ and linking to a Dark Marc Substack analysis, confirming an active phishing campaign abusing Crypto.com's email infrastructure via SendGrid tracking-domain redirect. One documented victim reports a loss of $50,000 in Bitcoin.(2026-08-10:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯cc64569c
Crypto.com's phishing warning circulates further; GridinSoft and other security outlets document the specific lure types (fake bank-account additions, unrecognized-login alerts, identity-verification demands) being used against Crypto.com customers.(2026-07-31:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯09343553
Crypto.com posts a public warning on X (Twitter) alerting users to 'an increase in targeted industry-wide phishing attacks' and listing protective measures including the Anti-Phishing Code and the Crypto.com Verify tool. One user comments the warning appears to have arrived twelve hours after some fraudulent emails were already received.(2026-07-30:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯0b43e2b5
CoinTracking discloses a structurally identical attack: an unauthorized actor accessed its SendGrid marketing account and sent phishing emails from the company's own verified domain to approximately 128,000 external addresses.(2024-11-04:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯3e2331d6
Crypto Times reports that over 100 crypto projects shut down in H1 2026, citing RootData data, listing Leap Wallet among the closures and attributing the broader wave to financial exhaustion rather than fraud.(2026-08-04:leap-wallet)event
↯0e4c824e
All Leap Wallet products permanently cease operation. The leapwallet.io domain displays a farewell page. Users who have not exported recovery phrases by this date must retain their seed phrase to recover funds via a compatible wallet.(2026-05-28:leap-wallet)event
↯4cce4e26
Leap Wallet announces permanent shutdown of all products effective May 28, 2026. Affected products include the browser extension, iOS and Android apps, Compass Wallet, Swapfast, the Leap Cosmos Hub validator, and Leap Cosmos Snaps. No specific reason disclosed.(2026-04-03:leap-wallet)event
↯23bea4dc
Leap begins building on the Cosmos interchain. Within approximately one year, the team reports over 300,000 users across its product suite.(2022-07-01:leap-wallet)event
↯67ecb25f
Terra blockchain collapses. Terraform Labs — an investor in Leap — fails. Leap begins pivoting to the broader Cosmos ecosystem.(2022-05-01:leap-wallet)event
↯687f522d
Leap announces $3.2 million private token sale co-led by CoinFund and Pantera Capital, with participation from Arrington Capital, Accel, and Terraform Labs. Implied valuation approximately $40 million.(2022-04-05:leap-wallet)event
↯37b32f26
Leap Wallet founded by Sanjeev Rao in Vancouver, British Columbia, with a $50,000 grant from Terraform Labs. Initial product is a Terra ecosystem browser extension.(2021-11-01:leap-wallet)event
Data refreshes within about 10 minutes · All metrics derived from Supabase