← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,475
Relationships
32,557
Potential duplicates
0
Filter by kind
Entities (event)
↯d9a58e1b
Lucifer DaaS documentation domain hosted on Google Firebase is suspended, reportedly following security research disclosures. Operators migrate documentation to IPFS, citing decentralization as a resilience measure against future takedowns.(2025-11-01:lucifer-daas)event
↯64750fad
Telegram bans Lucifer DaaS bots. Operators instruct affiliates to create new bots and grant them administrative privileges, restoring operational capability without extended downtime.(2025-08-01:lucifer-daas)event
↯58e1c80d
Lucifer channel posts confirm the operation does not sell or lease the software, only splitting '20% per hit.' Platform continues recruiting affiliates through underground communities.(2025-05-01:lucifer-daas)event
↯3e8d2d18
Lucifer operators announce version 6.6.6, introducing ERC20 support, Permit2 abuse, off-chain signatures, Telegram notifications, wallet-security bypasses, and multichain functionality. Announcement reiterates the software is not for sale and confirms 20% operator commission.(2025-03-01:lucifer-daas)event
↯1573c6fa
Earliest posts in Flare's analyzed dataset: Lucifer DaaS Telegram channel and underground forum activity begins the period analyzed by researchers. Approximate start date based on the January 2025 to early 2026 collection window.(2025-01-01:lucifer-daas)event
↯890ce0dd
Dango's Layer 1 blockchain permanently shuts down. Any user assets not withdrawn prior to this date automatically revert to users' original Ethereum deposit addresses.(2026-08-13:dango)event
↯0bf3f6c6
Dango halts all perpetual DEX trading at 12:00 pm UTC. Open positions are settled at oracle prices and LP vault deposits unlock for withdrawal. At the time of halt, open interest stands at approximately $391,000.(2026-07-29:dango)event
↯238ee4c2
Dango announces wind-down of all operations, citing cash shortages, legal compliance delays, team member departures, and unfavorable market conditions. Founder Larry Engineer states there is 'no viable path to a lasting commercial success.'(2026-07-25:dango)event
↯40d2e27a
Dango's total value locked peaks at approximately $4.5 million.(2026-05-01:dango)event
↯077aa924
Dango launches its mainnet perpetual DEX, built on a proprietary Layer 1 blockchain (Cosmos AppChain), approximately 17 months after seed funding.(2026-04-01:dango)event
↯7dd05df0
Redzepagic appears in Hartford federal court, pleads not guilty to all 21 counts, and is released on $500,000 bond.(2026-02-12:elmin-redzepagic)event
↯33e3e7a3
Federal grand jury in New Haven, Connecticut returns a 21-count indictment against Redzepagic charging wire fraud (7 counts), international money laundering (11 counts), and false statements to IRS agents (3 counts).(2026-01-20:elmin-redzepagic)event
↯7d0f0cb8
Alleged scheme ends. Total victim losses reach approximately $950,000 across multiple victims over the course of the scheme.(2025-03-01:elmin-redzepagic)event
↯924e696a
Redzepagic is interviewed by IRS Criminal Investigation agents. He allegedly makes three false statements: claiming he no longer uses an offshore gambling platform, denying knowledge of a scheme-linked phone in his name, and claiming a person named 'Greg' doubled investors' money.(2023-09-01:elmin-redzepagic)event
↯975930da
Redzepagic departs SCSU without completing his degree after playing through the 2022-2023 season.(2023-01-01:elmin-redzepagic)event
↯27aadf0e
Alleged scheme begins. Redzepagic allegedly begins soliciting victims with promises of high cryptocurrency investment returns, collecting Bitcoin into wallets he controlled.(2021-05-01:elmin-redzepagic)event
↯34f3261c
Elmin Redzepagic begins playing men's basketball at Southern Connecticut State University (SCSU), where he will appear in 31 games through 2023.(2019-01-01:elmin-redzepagic)event
↯710079ed
Ctrl Wallet permanently ceases operations. All transfer, swap, and dApp functions disabled. Recovery phrase export functionality retained temporarily. App fully removed from Apple App Store, Google Play, and browser extension stores.(2026-08-03:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯bba557a3
SecondFi and EMURGO publish compensation plan developed alongside Input Output Group and the Cardano Foundation, centered on a zero-knowledge proof recovery portal.(2026-07-27:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯1575ecb8
SecondFi publicly details the cryptographic flaw. Groom Lake's forensic report cites two distinct attackers; Attacker A flagged with possible DPRK/Lazarus Group indicators. SecondFi and Yoroi Wallet announce permanent shutdown.(2026-07-22:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯6db0a516
Ctrl Wallet announces permanent shutdown effective August 3, 2026. New downloads halted immediately. App removal from stores begins.(2026-07-09:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯728799f0
Root cause of the cryptographic signing flaw identified and patched in the developer codebase. Final balance snapshot captured on June 26.(2026-06-25:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯37fdfa0a
CoinDesk reports the exploit publicly. SecondFi team states approximately 129 million ADA has been secured via emergency containment and transferred to an independent third-party custodian. SlowMist estimates total exposure could have exceeded $20 million.(2026-06-24:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯035110cd
Ctrl Wallet publicly discloses a security vulnerability affecting Cardano-linked wallets. Additional attack waves continue. Total theft reaches approximately 16.1 million ADA across 374 addresses.(2026-06-23:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯7324ee16
SecondFi detects the breach and activates emergency response protocols. Platform placed in maintenance mode.(2026-06-22:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯00df96ce
First wave of coordinated attacks begins against SecondFi Cardano wallets, exploiting a cryptographic signing flaw to reconstruct private keys from public transaction data.(2026-06-21:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯deb8c20a
EMURGO, commercial arm of Cardano, acquires Ctrl Wallet's technology infrastructure. The $CTRL token is explicitly excluded from the deal. EMURGO simultaneously rebrands Yoroi Wallet to SecondFi.(2026-04-29:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯9fd76216
Ctrl Wallet initiates $XDEFI to $CTRL token migration at a 1:1 ratio, with the $XDEFI token scheduled to deprecate September 25, 2025.(2024-10-17:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯fff0adbc
XDEFI Wallet publicly rebrands to Ctrl Wallet, announcing enhanced multichain features and new user onboarding focus.(2024-07-17:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯64def702
XDEFI Wallet founded as a multi-chain self-custodial wallet.(2020-01-01:ctrl-wallet-security-exploit-and-forced-shutdown)event
↯c8da4a91
As of this date, no law enforcement action, OFAC designation, or independent on-chain confirmation of Sector Drainer attributed thefts has been identified in publicly available sources.(2026-08-04:sector-drainer-daas-wallet-drainer-with-phantom-0-day-bypass)event
↯f72c14e2
Dark Web Informer article last modified, indicating continued monitoring or updates to the Sector Drainer report.(2026-03-21:sector-drainer-daas-wallet-drainer-with-phantom-0-day-bypass)event
↯2452dea0
Dark Web Informer publishes the first indexed public report on Sector Drainer, followed by a Brinztech breach alert the same day.(2026-03-18:sector-drainer-daas-wallet-drainer-with-phantom-0-day-bypass)event
↯704b2d29
Europol-led coalition dismantles Tycoon 2FA phishing-as-a-service platform, reflecting broader law enforcement pressure on the phishing-as-a-service and DaaS ecosystem during the same period Sector Drainer surfaced.(2026-03-04:sector-drainer-daas-wallet-drainer-with-phantom-0-day-bypass)event
↯e7459b81
SectorD registers on underground cybercrime forums (including crdworld.biz and carder.market) and posts the Sector Drainer DaaS advertisement listing a Phantom 0-day bypass, hidden drain, autowithdraw, and free hosting.(2026-03-01:sector-drainer-daas-wallet-drainer-with-phantom-0-day-bypass)event
↯321559cd
Sector Drainer operator (SectorD) claims the service began operating, though this assertion is unverified and comes exclusively from the operator's own advertising copy.(2024-01-01:sector-drainer-daas-wallet-drainer-with-phantom-0-day-bypass)event
↯08a7e07f
Galaxy Research estimated potential losses could reach 2,055 BTC ($130 million) as a suspected fourth exploitation wave was under investigation. The Coldcard exploit and secondary phishing campaign together represented one of the largest self-custody security incidents in Bitcoin's history.(2026-08-04:coldcard-fake-hardware-audit-phishing-campaign)event
↯68ed8072
Proofpoint documented the fake hardware audit phishing campaign, reporting that attackers had launched spoofed Coinkite emails directing victims to a cloned Coldcard website where a 'Start Hardware Audit' button delivered a GitHub-hosted batch file installing ScreenConnect remote-access software. A live human chat operator was observed guiding victims through the process.(2026-08-03:coldcard-fake-hardware-audit-phishing-campaign)event
↯4dac37fa
Coinkite dispatched security advisory emails to all reachable customer addresses using its store and newsletter subscription systems, reaching addresses retained from purchases beginning in 2019. This prompted public criticism over data retention practices inconsistent with prior company statements.(2026-08-02:coldcard-fake-hardware-audit-phishing-campaign)event
↯9359d7bf
Galaxy Research tracked two additional waves of on-chain exploitation bringing total losses to 1,367 BTC (approximately $88.6 million) across 4,585 victim addresses, with at least 15 separate attackers identified.(2026-08-01:coldcard-fake-hardware-audit-phishing-campaign)event
↯8bfce694
Coinkite released emergency patched firmware (4.2.0+ for Mk3; 5.6.0+ for Mk4/Mk5; 1.5.0Q+ for Q) and advised all users on affected firmware versions to generate new seeds and migrate funds. Coinkite confirmed the vulnerability in a formal blog announcement.(2026-07-31:coldcard-fake-hardware-audit-phishing-campaign)event
↯b5d1de33
Block and independent researchers identified active exploitation of the Coldcard firmware RNG flaw. Coinkite published a preliminary vulnerability disclosure. An attacker drained 594 BTC ($38 million) from approximately 500 single-signature wallets in a 25-minute window.(2026-07-30:coldcard-fake-hardware-audit-phishing-campaign)event
↯731159bb
Coldcard firmware version 4.0.0 shipped with a coding error that routed seed generation to a deterministic software PRNG (Yasmarang) instead of the STM32 hardware RNG, reducing effective entropy to approximately 40 bits on Mk3 devices.(2021-03-01:coldcard-fake-hardware-audit-phishing-campaign)event
↯377d19e3
Bloomberg reports Yaroch turned himself in. Additional reporting confirms approximately $925,426 in total assets recovered. The adversarial nation is identified as Russia by NBC News sources. Yaroch is held in custody in Alexandria, Virginia.(2026-08-04:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯11c7bebc
Yaroch makes his first court appearance. U.S. Magistrate Judge Lindsey R. Vaala orders temporary detention. The FBI publicly confirms his termination. The case is widely reported across major news outlets including NBC News, CNN, Bloomberg, and CoinDesk.(2026-08-03:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯23d5e30f
Criminal complaint filed in the U.S. District Court for the Eastern District of Virginia (Case No. 602203), charging Yaroch with interstate transportation of stolen goods (18 U.S.C. § 2314) and receipt of stolen goods (18 U.S.C. § 2315).(2026-08-01:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯f2ae5fdd
Yaroch is arrested following execution of a search warrant. Investigators recover a Trezor hardware wallet, handwritten seed phrases, three passports, and an iPhone containing ChatGPT conversation logs and travel documents including a Portuguese power-of-attorney. A Kraken exchange account containing approximately $188,570 is identified.(2026-07-31:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯6dc1ad73
FBI interviews Yaroch at headquarters. His personal cryptocurrency wallet valued at approximately $1 million is identified. FBI agents collect property from his Ashburn, Virginia, residence. Yaroch subsequently withdraws his consent to a search of his cryptocurrency wallets.(2026-07-28:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯73aa6190
Yaroch moves approximately $1.02 million in cryptocurrency to Suilend, a decentralized lending protocol on the Sui blockchain, accessed via the Slush wallet application. He allegedly selects Suilend partly because he likes its water-droplet logo and intends to generate yield on idle assets.(2026-07-23:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯00947029
Yaroch queries ChatGPT about how someone with approximately $1 million could leave the United States and obtain residency or citizenship in an EU country. Follow-on queries include Turkish transit visa requirements and employment prospects in Greece.(2026-06-04:patrick-steven-yaroch-fbi-agent-crypto-theft)event
Data refreshes within about 10 minutes · All metrics derived from Supabase