← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,475
Relationships
32,557
Potential duplicates
0
Filter by kind
Entities (event)
↯0a797285
AVA token launches on Pump.fun on the Solana blockchain. Alleged insider cluster of 23 wallets linked to the deployer executes automated purchases, accumulating approximately 40% of the total supply at launch.(2024-11-13:holoworld-ai-ava-token-insider-bundling-scheme)event
↯baf3343d
Hologram Labs raises $6.5 million seed round led by Polychain Capital, with co-investors including Nascent, Arthur Hayes, and Mike Shinoda.(2022-07-14:holoworld-ai-ava-token-insider-bundling-scheme)event
↯46011edb
Hologram Labs founded by Tong Pow and Hongzi Mao in San Francisco.(2021-01-01:holoworld-ai-ava-token-insider-bundling-scheme)event
↯a6d43591
No arrests or law enforcement actions against campaign operators publicly announced as of this date. Investigation is ongoing per IRS-CI guidance.(2026-08-07:irs-fake-digital-asset-compliance-portal-letter-campaign-2026)event
↯b73f669e
Help Net Security and Bitdefender publish extended technical analyses of the multi-stage attack flow and phishing infrastructure.(2026-08-04:irs-fake-digital-asset-compliance-portal-letter-campaign-2026)event
↯a5d9ce71
CPA Practice Advisor publishes detailed breakdown of campaign mechanics and victim guidance, citing IRS-CI and DarkTower findings.(2026-08-03:irs-fake-digital-asset-compliance-portal-letter-campaign-2026)event
↯8c63e97e
Multiple outlets including Accounting Today, CryptoTimes, and The Star (Malaysia) report on the IRS-CI warning. IRSnews official X account posts alert.(2026-07-31:irs-fake-digital-asset-compliance-portal-letter-campaign-2026)event
↯8d707041
IRS Criminal Investigation issues formal public warning, confirming no 'Digital Asset Compliance Portal' exists and that the letters are fraudulent. IRS-CI Chief Jarod Koopman issues statement.(2026-07-30:irs-fake-digital-asset-compliance-portal-letter-campaign-2026)event
↯041c51c2
Coinbase and threat intelligence firm DarkTower release a consumer alert identifying the fake IRS 'Digital Asset Compliance Portal' letter campaign after a customer report triggered investigation.(2026-07-28:irs-fake-digital-asset-compliance-portal-letter-campaign-2026)event
↯ec301454
Group-IB Threat Intelligence reports ClickLock Stealer, a related modular macOS stealer distributed via ClickFix phishing pages, targeting 100+ victims across 33 countries — indicating diffusion of Mach-O Man-style techniques into broader criminal activity.(2026-06-09:lazarus-group-mach-o-man-macos-campaign-2026)event
↯49dae23f
Multiple security outlets — CyberSecurityNews, GBHackers, Dark Reading, Cryptopolitan, Bitcoin News, and BanklessTimes — independently publish coverage of the Mach-O Man campaign with technical indicators.(2026-04-22:lazarus-group-mach-o-man-macos-campaign-2026)event
↯9d577d13
Bitso Quetzal Team researcher Mauro Eldritch, collaborating with ANY.RUN sandbox, publicly discloses the Mach-O Man macOS malware kit and the broader 'North Korea's Safari' campaign cluster.(2026-04-21:lazarus-group-mach-o-man-macos-campaign-2026)event
↯3c13625d
KelpDAO suffers a $290–$292 million bridge exploit attributed to Lazarus Group / TraderTraitor by LayerZero and Chainalysis. The attack targeted off-chain RPC infrastructure rather than smart contracts.(2026-04-18:lazarus-group-mach-o-man-macos-campaign-2026)event
↯ac3c06cd
Drift Protocol suffers an alleged $285 million exploit attributed to the Lazarus Group's TraderTraitor sub-unit, occurring in the same operational window as the Mach-O Man campaign.(2026-04-01:lazarus-group-mach-o-man-macos-campaign-2026)event
↯1a184f5d
OFAC places Lazarus Group on the Specially Designated Nationals (SDN) list under North Korea Sanctions Regulations section 510.214.(2022-04-14:lazarus-group-mach-o-man-macos-campaign-2026)event
↯4466eaf6
Garden Finance issued a public statement confirming the breach was limited to the solver layer, that HTLC smart contracts were not compromised, and that no user funds were at risk. The team stated it was still verifying the total amount lost and provided no timeline for service restoration.(2026-07-27:garden-finance-cross-chain-bridge-july-2026-solver-database-exploit)event
↯4b9bb943
Garden Finance took its application offline as a precaution and confirmed the exploit originated from the compromise of an independent solver's off-chain database. The team engaged zeroShadow, Quantstamp, and Blockaid to assist with asset tracing and recovery.(2026-07-26:garden-finance-cross-chain-bridge-july-2026-solver-database-exploit)event
↯1bf363e5
ZachXBT published analysis on X alleging that over 80% of Garden Finance's recent fee revenue — 38.86 BTC collected over 12 days — derived from laundering funds stolen in the February 2025 Bybit hack, attributed to the Lazarus Group. Co-founder Jaz Gulati disputed the claim.(2026-06-02:garden-finance-cross-chain-bridge-july-2026-solver-database-exploit)event
↯98f39091
Garden Finance publicly disclosed the October 2025 breach, temporarily shut down its application, and offered a 10% bounty to the attacker for return of funds.(2025-10-31:garden-finance-cross-chain-bridge-july-2026-solver-database-exploit)event
↯8cce4112
An attacker gained unauthorized access to the operating environment of one of Garden Finance's largest independent solvers, draining approximately $11.4 million in crypto assets. EY forensic investigation later confirmed suspicious SSH access from IP addresses in Japan and China. ZachXBT attributed the attack to the DPRK-affiliated DangerousPassword group.(2025-10-30:garden-finance-cross-chain-bridge-july-2026-solver-database-exploit)event
↯ffc06666
Garden Finance launched as a cross-chain atomic swap protocol, developed by former RenBTC team members including co-founder Jaz Gulati.(2023-12-01:garden-finance-cross-chain-bridge-july-2026-solver-database-exploit)event
↯e6664754
Cyber Security Agency of Singapore issues advisory AD-2026-009 covering the ongoing attack on keyv and related packages.(2026-08-05:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯3c06516a
Microsoft Security Blog publishes 'ChainDrop supply chain compromise: Anatomy of a self-propagating worm.'(2026-08-04:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯792ab9ea
Shai-Hulud worm variant infects Red Hat npm packages downloaded approximately 80,000 times per week, reported by The Register.(2026-06-01:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯5f4a2d10
ChainDrop C2 infrastructure is deployed by attacker, approximately two weeks before the main attack wave.(2026-05-22:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯ccebf1fb
A Shai-Hulud copycat worm infects at least one additional npm package, reported by The Register.(2026-05-18:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯71359a3b
Microsoft Security Research identifies a new Mini Shai-Hulud resurgence compromising over 170 npm packages and two PyPI packages across 404 malicious versions.(2026-05-11:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯8dc2ca62
Microsoft Security Research publishes Shai-Hulud 2.0 guidance, documenting an earlier wave of the Shai-Hulud npm supply-chain campaign.(2025-12-09:chaindrop-shai-hulud-npm-worm-august-2026-crypto-credential-harvester)event
↯483393e7
Major crypto news outlets (Decrypt, CoinTelegraph, The Block, Crypto Times, Cryptopolitan) report on coordinated ESMA, AMF, and AFM warnings about the post-MiCA impersonation scam cluster. AMF official Stéphane Pontoizeau characterizes the moment as 'an opportunity for scammers more than usual.'(2026-08-06:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯d5d73155
ESMA updates its interim register; 320+ entities authorized. ESMA confirms it is aware of fraudulent activity misusing its logo and identity.(2026-08-05:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯fb389c39
ESMA's interim MiCA register lists 338 authorized crypto companies. Post-deadline impersonation scam reports continue to accumulate across multiple EU member states.(2026-07-31:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯49024a35
Belgium's FSMA formally adds six unauthorized entities — Aurum Foundation, Bank Bit, Bithf Pro, Dxago, Global Dynamic Trade, and ZeriaFunding — to its fraudulent crypto-asset service provider list.(2026-07-06:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯4b508299
MiCA transitional period expires. All unlicensed CASPs required to cease EU operations. Binance suspends services for EU users. Estimated 1,700+ entities must wind down or restrict services.(2026-07-01:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯1ed1bf2e
Binance withdraws its MiCA license application in Greece.(2026-06-24:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯b6dad8c2
ESMA issues public statement calling on unauthorized CASPs to wind down operations in an orderly manner; AMF publishes guidance warning retail investors to verify provider authorization.(2026-06-23:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯78c5e54e
Approximately 194 companies have secured MiCA approval; more than 1,700 providers remain unlicensed with the July 1 deadline approaching.(2026-05:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯3a0e53fe
ESMA issues statement on the end of transitional periods under MiCA, warning investors that not all current service providers will be authorized after July 1, 2026.(2026-04:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯1863a363
MiCA Regulation's core provisions enter into force across the EU. Crypto-asset service providers begin applying for authorization under the new framework.(2024-12:mica-post-deadline-impersonation-scam-cluster-esma-amf-warning-august-2026)event
↯dc690d3b
Coverage of the Tarsha indictment spreads across crypto and mainstream press; around this period, an unverified tweet attributed to @0xd_eth alleges Tarsha 'launched' a Playsomo token and tags Animoca Brands and Yat Siu — a claim this investigation could not independently corroborate.(2026-08-06:playsomo)event
↯327efeb4
SDNY unseals indictment charging Taj Tarsha with securities fraud and wire fraud in connection with Few and Far Limited; DOJ press release does not name Playsomo, SOMO, or Animoca Brands.(2026-08-05:playsomo)event
↯682dbdec
Taj Tarsha arrested on fraud-related charges tied to Few and Far.(2026-06-06:playsomo)event
↯51aa3fc0
Animoca Brands announces completed acquisition of SOMO (Playsomo).(2026-01-14:playsomo)event
↯83a2c38e
FAR token launches, later loses approximately 99% of its value and stops trading.(2024-05-01:playsomo)event
↯25ca06d7
Internal audit at Few and Far allegedly uncovers missing investor funds.(2023-06-01:playsomo)event
↯8b22a11b
Taj Tarsha's Few and Far Limited allegedly begins selling SAFTs for future FAR tokens (separate entity from Playsomo).(2022-02-01:playsomo)event
↯caec0aaa
SOMO (Playsomo) reportedly founded in Tortola, British Virgin Islands, per startup database Tracxn (exact date not specified in source).(2021-01-01:playsomo)event
↯cb3bfd83
South Korean prosecutors bring the first DEX rug-pull prosecution under the Virtual Asset User Protection Act, charging five individuals over CATFI meme coin launched on Pump.fun in February 2025. Losses: approximately 900 million KRW ($600,000) across 256 investors.(2026-02-01:rug-republic-coordinated-pump-fun-solana-bundle-rug-cluster)event
↯e4885822
Second amended consolidated class-action complaint filed in SDNY.(2026-01-07:rug-republic-coordinated-pump-fun-solana-bundle-rug-cluster)event
↯4742835b
Judge McMahon grants plaintiffs leave to file a second amended complaint, incorporating whistleblower-submitted chat logs. Over 5,000 alleged internal messages entered as evidence.(2025-12-16:rug-republic-coordinated-pump-fun-solana-bundle-rug-cluster)event
Data refreshes within about 10 minutes · All metrics derived from Supabase