← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,475
Relationships
32,557
Potential duplicates
0
Filter by kind
Entities (event)
↯b16e179a
Brokerage-1 Investment Group scheme ends; DeSalvo has lost approximately $17,000 through speculation and misappropriated remaining investor funds for personal use.(2021-05-01:blazar-token-john-a-desalvo)event
↯ee50772e
DeSalvo begins operating 'Brokerage-1 Investment Group,' raising approximately $95,000-$100,000 from roughly 17-20 investors through false claims of extraordinary trading returns.(2021-01-01:blazar-token-john-a-desalvo)event
↯44619430
Ongoing coverage; no CVE number assigned; technical details of exact exploit path still withheld by BTCPay Server.(2026-08-09:btcpay-server-lightning-lnd-macaroon-exploit-august-2026)event
↯38051f20
BTCPay Server confirmed stolen macaroon files remain valid after patching and emphasized mandatory three-step remediation beyond the software update.(2026-08-08:btcpay-server-lightning-lnd-macaroon-exploit-august-2026)event
↯f84bde23
BTCPay Server issued public emergency advisory disclosing active exploitation. Foundation and Citadel21 nodes had already been drained before the advisory was published. BTCPay Server v2.4.2 released as emergency patch.(2026-08-07:btcpay-server-lightning-lnd-macaroon-exploit-august-2026)event
↯8f08b586
TOTP two-factor authentication bypass in BTCPay Server Greenfield API reportedly fixed internally (later included in v2.4.2 changelog).(2026-08-04:btcpay-server-lightning-lnd-macaroon-exploit-august-2026)event
↯629eb40f
UpGuard and other security monitoring services publish analysis of the Bitrefill breach as part of broader enterprise risk tracking.(2026-03-20:bitrefill)event
↯ae5c3d5d
French court expected to rule on John Daghita's extradition to the United States. Daghita held at Bastia detention center; had agreed to principle of extradition.(2026-05-28:dean-daghita-cmdss-command-services-and-support)event
↯894f35e8
Forbes publishes investigation concluding that while John Daghita's case is resolved, the underlying structural failures in the USMS custody system — four prior procurement restarts, ignored OIG warnings — remain unaddressed.(2026-04-12:dean-daghita-cmdss-command-services-and-support)event
↯752bf2dc
A federal grand jury in Alexandria, Virginia (Eastern District of Virginia) returns a 15-count indictment against John Daghita, charging wire fraud, theft of public money, money laundering, and unlawful monetary transactions.(2026-03-26:dean-daghita-cmdss-command-services-and-support)event
↯4a1785b7
French Gendarmerie, in coordination with the FBI, arrests John Daghita at Villa Sun Reset on the island of Saint Martin. Authorities seize $239,348 in cash, a Rolex GMT Master, and multiple hardware wallets.(2026-03-04:dean-daghita-cmdss-command-services-and-support)event
↯30c5bb6a
CMDSS corporate website, X/Twitter account, and LinkedIn page are taken offline following public exposure of the theft allegations.(2026-02-01:dean-daghita-cmdss-command-services-and-support)event
↯85356267
Wave Digital Assets formally requests the DOJ Office of Inspector General open a comprehensive investigation into USMS cryptocurrency asset management and the CMDSS contract award.(2026-01-27:dean-daghita-cmdss-command-services-and-support)event
↯5c27fe8e
ZachXBT publicly identifies John Daghita as the son of CMDSS president Dean Daghita and reports findings to law enforcement. CoinDesk reports the USMS has opened an investigation.(2026-01-26:dean-daghita-cmdss-command-services-and-support)event
↯ae1e4bfb
ZachXBT observes John Daghita (alias 'Lick') screen-sharing a wallet holding tens of millions in government-linked crypto during a Telegram 'band-for-band' exchange, initiating the public investigation.(2026-01-23:dean-daghita-cmdss-command-services-and-support)event
↯b5b8aea5
Per the federal indictment, John Daghita allegedly begins transferring seized digital assets from USMS-controlled CMDSS wallets into wallets under his personal control.(2025-12-15:dean-daghita-cmdss-command-services-and-support)event
↯efc4431f
USMS awards CMDSS a contract to manage and dispose of Class 2-4 seized cryptocurrency, reported at approximately $7.8 million covering 2024-2026.(2024-10-01:dean-daghita-cmdss-command-services-and-support)event
↯f75a44aa
DOJ Office of Inspector General publishes audit (Report 22-082) identifying critical deficiencies in USMS seized cryptocurrency management, including spreadsheet reliance and absent policies.(2022-06-01:dean-daghita-cmdss-command-services-and-support)event
↯df87b2eb
CMDSS (Command Services and Support, Inc.) founded in Virginia as a Service-Disabled Veteran-Owned Small Business.(2011-01-01:dean-daghita-cmdss-command-services-and-support)event
↯178d67a8
2026 FIFA World Cup tournament begins; scam infrastructure already fully operational across all documented vectors(2026-06-11:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯a893ba05
WCUP (World Cup PvP) memecoin launches; reaches approximately $50 million market cap on day one following alleged undisclosed paid promotions by crypto influencers on X(2026-06-10:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯9a1ed1fb
Arctic Wolf Labs publishes research on adversary-in-the-middle (AiTM) phishing kit defeating all FIFA account MFA methods in real time(2026-06-09:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯68a26c04
Help Net Security reports Intel 471 assessment that 2026 FIFA World Cup represents 'the largest and most complex cyberattack surface in sporting history'; total domain count cited at 19,000+(2026-06-08:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯0ab81528
FBI IC3 issues PSA I-052726-PSA formally warning consumers about FIFA website spoofing and identifying at least 36 fraudulent domains(2026-05-27:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯87abbf49
Single-day peak: 30 fraudulent FIFA domain registrations observed in one day(2026-04-29:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯f6e1626b
Threat actor claiming ShinyHunters affiliation publishes alleged AFC and Al Nassr FC database containing 150,000+ passport records and player contracts on a cybercrime forum(2026-04-27:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯2675690a
TRM Labs-tracked Polygon wallet address receives approximately $1,562 from fake ticketing scam victims(2026-04-01:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯3b4727fd
Second major GHOST STADIUM domain registration wave, March 20-31; 78 domain registrations recorded in March overall(2026-03-20:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯3208c758
FortiGuard Labs begins observing rapid accumulation of World Cup-themed domain registrations; count reaches 13,000+ by May(2026-01-01:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯e62f21da
First major GHOST STADIUM domain registration wave identified by Hunt.io infrastructure analysis(2025-11-17:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯fdb207a6
GHOST STADIUM begins registering fraudulent FIFA domains; Group-IB first observes the threat actor cluster(2025-08-01:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯e09ce911
Solido Money protocol suffers a separate exploit involving SUPRA token pricing errors in its Solido Cash product; approximately 293.7 million SUPRA tokens stolen (~$900,000 at time of attack).(2026-07-23:supra-oracle-bonzo-lend-attack-vector)event
↯70086198
Supra CEO Joshua Tobkin publicly addresses the attacker, acknowledges two-year on-chain exposure of the vulnerable code, cites AI-assisted hacking as likely exploit vector, and offers $100,000 bounty + immunity + job offer for fund return. No funds recovered from Wallet A as of reporting.(2026-07-13:supra-oracle-bonzo-lend-attack-vector)event
↯28fdc661
Hedera network DeFi TVL falls ~40% within 24 hours to ~$25.7 million. Bonzo Lend TVL falls 77%.(2026-07-11:supra-oracle-bonzo-lend-attack-vector)event
↯e672923f
Supra patches oracle verifier on Polygon. At least 11 chains total receive the fix between June 29 and July 3, 2026. Hedera deployment is not patched.(2026-07-03:supra-oracle-bonzo-lend-attack-vector)event
↯e607e094
Supra deploys patched SupraSValueFeedVerifier to Base network — earliest confirmed patch in the pre-exploit rollout.(2026-06-29:supra-oracle-bonzo-lend-attack-vector)event
↯2221b526
Bonzo Finance migrates from Chainlink to Supra oracles on Hedera, citing Chainlink's absence from the network.(2024-03-01:supra-oracle-bonzo-lend-attack-vector)event
↯7ce494f1
Final operational date for the Summer.fi application and support channels. Lazy Summer Protocol smart contracts remain deployed on-chain under DAO governance.(2026-08-31:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯ce719687
Lazy Summer DAO completes offboarding cleanup across all networks via governance proposals SIP1.7, SIP1.8, SIP1.9, SIP2.59.1-12, and SIP7.3.1-2; all Lazy Summer Vaults reopened for withdrawal, with affected vault users directed to Merkl distribution contracts.(2026-07-30:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯d2dd46ad
Summer.fi Labs publishes formal shutdown announcement, stating the company has 'no viable path forward other than to wind down operations.' The application is to remain live until August 31, 2026.(2026-07-15:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯832b4ac5
Attacker begins laundering stolen funds through Tornado Cash; approximately $1.35 million in DAI has been converted to ETH and deposited into the mixer in batches of 10 ETH or larger.(2026-07-09:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯be4bff1e
SUMR token declines more than 18% following public disclosure of the exploit.(2026-07-06:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯c62e58fc
Attacker begins funding multiple wallets and systematically accumulating stale Silo Varlamore tokens in preparation for the exploit, approximately three months before execution.(2026-04-06:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯03589cb8
Stream Finance collapses following a $93 million loss disclosed by an external fund manager; xUSD token crashes 77%, leaving Silo Varlamore USDC Growth tokens with stale inflated on-chain valuations.(2025-11:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯81f63fd5
Major crypto news outlets and blockchain analytics firms including Chainalysis and TRM Labs publish analyses of the Shelbit designation. Shelbit's website is reported non-functional; the associated gambling network continues to operate.(2026-08-08:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯8fb6f82c
OFAC personally designates Siavash Kayvanpour under Executive Order 13224, alongside five corporate entities (SHPS Shelbit, Shelbit General Trading LLC, Shelbit Technologies Ltd, Crypto Home DMCC, NFT Home DMCC). Aban Tether is simultaneously designated under Executive Order 13902. The action is coordinated with IRS Criminal Investigation.(2026-08-07:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯f0dfab1b
Reuters publishes an investigative report identifying Shelbit as the hub of a USD 4 billion Iranian sanctions-evasion scheme and naming Siavash Kayvanpour as its founder. The report traces connections to the IRGC, Iran's central bank, and an illegal gambling network of over 2,000 websites.(2026-07-31:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯9201856f
Dubai's VARA issues a second enforcement action against Shelbit, ordering a complete halt to unlicensed virtual-asset operations.(2026-07-24:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯06aa5ab7
OFAC designates Nobitex, Iran's largest cryptocurrency exchange, under the Economic Fury campaign. Kayvanpour's wallets had previously sent over USD 2 million to Nobitex.(2026-06-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯2bcada15
Shelbit states it ceased operations. OFAC separately designates Zedcex and Zedxion under the 'Economic Fury' Iran sanctions campaign.(2026-01-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
Data refreshes within about 10 minutes · All metrics derived from Supabase