← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,475
Relationships
32,557
Potential duplicates
0
Filter by kind
Entities (event)
↯97fa3cc3
Jared Wray confirms via X that his GitHub account was compromised, reports using OIDC with npm and one-time codes, and says he regained access at about 20:00 UTC.(2026-08-04:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯339d45df
@antv ecosystem attack: 639 malicious versions across 323 packages published in under 30 minutes via a stolen maintainer account; Socket detects most within 6.7 minutes.(2026-05-19:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯48d0625f
TeamPCP open-sources the Shai-Hulud worm under an MIT License ('Shai-Hulud: Open Sourcing The Carnage' per Akamai; 'A Gift From TeamPCP' per Pluto Security) and announces a $1,000 contest for the largest supply-chain attack using the code.(2026-05-12:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯5a84ba25
TanStack attack: 84 malicious versions across 42 @tanstack/* packages published in about six minutes via OIDC token theft; CVE-2026-45321 (CVSS 9.6) assigned.(2026-05-11:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯484924db
Mini Shai-Hulud (fourth generation) begins operations, introducing SLSA provenance attestation forgery, OIDC token extraction from runner memory, and AI agent persistence hooks.(2026-04-01:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯5e30adf4
SANDWORM_MODE iteration of the worm introduced.(2026-03-01:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯55060d1a
SHA1-Hulud variant introduced with enhanced capabilities.(2025-11-01:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯f45fc90e
Original Shai-Hulud worm debuts, attributed to TeamPCP (UNC6780); marks start of systematic npm/PyPI supply chain campaign.(2025-09-01:chaindrop-mini-shai-hulud-npm-supply-chain-worm-august-2026)event
↯7edb4a79
LayerZero publishes full incident report. Mandiant, CrowdStrike, and independent researchers are cited confirming attribution to TraderTraitor (UNC4899). Chainalysis updates its analysis with additional findings.(2026-05-18:layerzero)event
↯ed9f5b1b
Chainalysis publishes detailed on-chain analysis of the KelpDAO bridge exploit. OpenZeppelin publishes post-mortem confirming zero smart contract vulnerabilities; failure attributed entirely to off-chain infrastructure and configuration policy.(2026-04-23:layerzero)event
↯6c71ef4b
LayerZero publishes an incident statement attributing the exploit to KelpDAO's 1-of-1 DVN configuration, asserting it 'directly contradicts' recommended multi-DVN best practices. LayerZero attributes the attack with preliminary confidence to North Korea's Lazarus Group (TraderTraitor/UNC4899).(2026-04-19:layerzero)event
↯3e098c73
LayerZero CEO Bryan Pellegrino alleges KelpDAO manually downgraded its DVN configuration from a multi-DVN setup (LayerZero Labs + Google) to a 1-of-1 configuration, citing on-chain evidence. KelpDAO disputes this account.(2024-04-01:layerzero)event
↯44b26875
KelpDAO and LayerZero enter partnership. KelpDAO alleges LayerZero personnel explicitly confirmed the 1-of-1 DVN default configuration was appropriate during initial L2 expansion discussions.(2024-01-01:layerzero)event
↯3d8a8d38
A second attacker exploits the same submitImports entry path and bug class, draining approximately $7.54 million in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from the bridge. Assets consolidated to approximately 3,916 ETH and partially routed through Tornado Cash. Attacker EOA: 0xBda71b58cEc0b1C20A8f87cCD52FA0679747855c.(2026-07-23:verus-protocol-vrsc)event
↯5110cf2f
Bridge reserves are redeposited, effectively reopening the Verus-Ethereum Bridge to user funds. No confirmed full patch or independent audit had been publicly announced prior to this reopening.(2026-07-08:verus-protocol-vrsc)event
↯c9bc5616
After public on-chain negotiation by the Verus team, the May attacker returns 4,052 ETH (approximately $8.5 million) and retains 1,350 ETH (approximately $2.8 million) as a white-hat bounty — representing approximately 75% recovery.(2026-05-22:verus-protocol-vrsc)event
↯e4b77bba
Attacker exploits missing source-amount validation in the Verus-Ethereum Bridge's checkCCEValues function, draining 1,625 ETH, 103.57 tBTC, and 147,000 USDC — a total of approximately $11.58 million. Assets consolidated into 5,402 ETH at wallet 0x65Cb8b128Bf6e690761044CCECA422bb239C25F9.(2026-05-18:verus-protocol-vrsc)event
↯b484e2cb
Verus Protocol (VRSC) launches with a fair launch — no ICO, no premine, no developer fees. Founded by Michael J. Toutonghi and co-founders.(2018-05-01:verus-protocol-vrsc)event
↯946c9bdd
Sentencing hearing scheduled before U.S. District Judge Gregory A. Presnell at Orlando Federal Courthouse, Courtroom 5A. Delgado faces potential maximum sentence of up to 50 years.(2026-10-21:goliath-ventures-christopher-delgado)event
↯3fe8c411
Christopher Alexander Delgado pleads guilty in federal court in Orlando to conspiracy to commit wire fraud, wire fraud, and money laundering. Admits to at least $250 million in investor losses.(2026-06-30:goliath-ventures-christopher-delgado)event
↯2da9c753
Goliath Ventures files for Chapter 11 bankruptcy protection in U.S. Bankruptcy Court for the Southern District of Florida, reporting $1M-$10M in assets against $100M-$500M in liabilities.(2026-03-16:goliath-ventures-christopher-delgado)event
↯bb74bce4
Investors file proposed class action lawsuit against JPMorgan Chase in U.S. District Court for the Northern District of California, alleging the bank processed approximately $253 million in Goliath-linked deposits while ignoring fraud indicators.(2026-03-12:goliath-ventures-christopher-delgado)event
↯340432cf
Federal authorities begin seizing assets traceable to the Goliath Ventures fraud scheme, including an Isleworth mansion.(2026-02:goliath-ventures-christopher-delgado)event
↯9a31835f
Christopher Alexander Delgado arrested on federal charges of wire fraud and money laundering. IRS-CI and Homeland Security Investigations are lead agencies. U.S. Attorney Gregory W. Kehoe announces charges.(2026-02-24:goliath-ventures-christopher-delgado)event
↯2cfdc728
Goliath Ventures ceases operations; scheme collapses.(2026-01:goliath-ventures-christopher-delgado)event
↯69be4831
Investigative journalist Danny de Hek begins publishing articles and videos alleging Goliath Ventures is a Ponzi scheme.(2025-09:goliath-ventures-christopher-delgado)event
↯edf43a40
Goliath Ventures (formerly Gen-Z Venture Firm) begins soliciting investors under false promises of monthly cryptocurrency liquidity pool returns, per DOJ and IRS-CI.(2023-01:goliath-ventures-christopher-delgado)event
↯9c7ae9b8
Alleged domain registrations for both Goliath Ventures and My Liquidity Partner entities within 20 days of each other, per independent investigative reporting.(2021-10:goliath-ventures-christopher-delgado)event
↯f13e3d78
CASP Tracker records 167 entities in the ESMA non-compliant entity register, with MEXC identified as the most widely recognised named exchange on the list.(2026-08-05:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯fe90b4b6
ESMA CASP register reaches 321 to 322 active entries. ESMA non-compliant entity register (NCASP) records 167 flagged entities, with 165 submissions from Italy's CONSOB and 2 from other regulators (Netherlands AFM, Slovakia NBS). FinTelegram publishes MiCA Month One analysis documenting continued enforcement gaps.(2026-07-31:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯98bcf693
AscendEX layoffs reported, consistent with cessation of exchange operations.(2026-07-10:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯0d4921e4
On-chain analysis of AscendEX-labelled wallets finds approximately $13.45 million in assets, with over $12 million in the illiquid ASD and UNITE tokens, indicating the exchange's liquid reserves were insufficient to cover withdrawal demand.(2026-07-08:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯2b6346e3
AscendEX issues public notice — five days after halting operations — confirming withdrawal freeze, manual review for all outstanding withdrawals with no guaranteed timeline or amounts, and warning of potential insolvency proceedings.(2026-07-06:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯0e3cf304
FinTelegram undercover test: successfully registers and completes advanced KYC on MEXC as an EU resident on MiCA Day One, with no restriction notice or regulatory disclosure presented during onboarding.(2026-07-01:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯ee7561b2
Binance notifies approximately 40 million EU users that it will suspend services from July 1 due to missing the MiCA licensing deadline. The company states user funds remain safe and accessible.(2026-06-26:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯98f6afe1
Binance withdraws its MiCA CASP licence application with Greece's Hellenic Capital Market Commission, one day before notifying EU users of service suspension.(2026-06-24:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯4c099336
On-chain analysis identifies a reserve drop of more than $240 million from an AscendEX-labelled wallet address, approximately 10 days before the exchange's shutdown.(2026-06-20:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯3712cf30
ESMA publishes formal statement confirming that MiCA transitional periods for CASPs will end on July 1, 2026, and that any firm serving EU clients without authorisation after that date will be in breach of EU law.(2026-04-01:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯9f90e053
Austria's FMA bans KuCoin EU from taking on new customers due to alleged failures in anti-money laundering and counter-terrorism financing compliance.(2026-02-01:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯edf34bf8
Dutch AFM publishes public consumer warning against MEXC, noting the exchange was actively marketing to Dutch consumers including through conference sponsorships, while holding no required EU registration.(2025-09-24:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯af353f38
Dutch AFM flags MEXC in the ESMA non-compliant entity register for providing crypto-asset services in the Netherlands without MiCAR authorisation.(2025-09-16:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯7552caa8
MiCA stablecoin provisions (Title III and IV, covering asset-referenced tokens and e-money tokens) entered full application.(2024-06-30:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯73d5adb6
MiCA (Regulation EU 2023/1114) published in the Official Journal of the European Union, setting out the legislative framework for crypto-asset service provider authorisation across the EEA.(2023-06-09:mica-non-compliant-exchange-risk-cluster-post-july-1-2026)event
↯0372d63c
OWASP releases 2026 LLM Top 10. Prompt injection retains the number-one position for the third consecutive year. Excessive agency rises to third place. For the first time, rankings incorporate real-world incident data from 6,639 documented incidents.(2026-08-06:ai-agent-prompt-injection-crypto-attack-class-2026)event
↯69472b97
Blockaid publishes H1 2026 security report documenting 212 on-chain exploits totaling $1.1 billion — a record — and identifying AI agent prompt injection as an emerging and growing attack sub-category. Blockaid projects AI agent deployments growing 10x annually and forecasts multiple additional AI agent incidents in H2 2026.(2026-07-29:ai-agent-prompt-injection-crypto-attack-class-2026)event
↯3b7c9670
Ledger announces Agent Stack, a hardware-enforced human-in-the-loop signing architecture for AI crypto agents, directly referencing the prompt injection threat class as motivation.(2026-07-16:ai-agent-prompt-injection-crypto-attack-class-2026)event
↯ecbe2e31
TechTimes covers active campaign in which hidden webpage instructions are confirmed to be causing AI agents to pay hackers in live deployments, corroborating Zscaler findings.(2026-07-09:ai-agent-prompt-injection-crypto-attack-class-2026)event
↯9a57e355
SecurityWeek reports Zscaler's discovery of two active indirect prompt injection campaigns using SEO poisoning and hidden HTML to make AI agents transfer cryptocurrency to attacker-controlled wallets. Testing confirms four of 26 LLMs execute unauthorized payments after reading a malicious webpage.(2026-07-06:ai-agent-prompt-injection-crypto-attack-class-2026)event
↯e94ef94c
OWASP publishes findings that prompt injection drives most agentic AI security failures in production. Help Net Security reports prompt injection attacks surged 340% in 2026.(2026-06-11:ai-agent-prompt-injection-crypto-attack-class-2026)event
↯a73d9834
Bankr/Grok prompt injection attack on Base chain. Attacker airdrops a 'Bankr Club Membership' NFT to Grok's wallet to escalate permissions, then posts a Morse-code-encoded transfer instruction on X. Grok decodes the message; Bankr executes the transfer. Approximately 3 billion DRB tokens ($155,000-$175,000) are drained. Around 80% recovered after community doxxing.(2026-05-04:ai-agent-prompt-injection-crypto-attack-class-2026)event
Data refreshes within about 10 minutes · All metrics derived from Supabase