← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,511
Relationships
32,585
Potential duplicates
0
Filter by kind
Entities (event)
↯18a9df69
Second exploit: attacker (EOA 0x6952...8e97f, funded with 0.134 ETH from HitBTC) drained approximately $2.21 million (1,158 ETH, 150,000 DAI, 0.4696 renBTC) from the deprecated Aztec Private Rollup Bridge RollupProcessor contract (0x737901bea3eeb88459df9ef1be8ff3ae1b42a2ba) by exploiting the unauthenticated escapeHatch() function.(2026-06-17:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯9c354ce8
BlockSec, CertiK, and SlowMist publish analyses of the first exploit. SlowMist reports stolen funds remain unmoved in attacker's wallet.(2026-06-15:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯5daf4067
Aztec Foundation posts official statement on X confirming the exploit and disavowing any connection to the current Aztec network or AZTEC ERC-20 token.(2026-06-14:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯c8c298d4
Aztec Connect off-chain sequencer fully shut down. On-chain RollupProcessor contract continued to hold residual user funds.(2024-03-31:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯243b3f9e
Aztec Labs deprecated Aztec Connect, halting new deposits. Admin keys had been renounced; the contract remained immutable and unupgradeable.(2023-03-31:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯c4576260
Aztec Connect launched as a privacy-focused zk-rollup bridge on Ethereum, allowing private DeFi transactions.(2022-07-01:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯4c271aea
Aztec Private Rollup Bridge officially closed. Smart contracts remained live and immutable on-chain.(2022-01-01:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯448539dc
Aztec's original Private Rollup Bridge (the product later exploited in the second June 2026 incident) launched on Ethereum mainnet.(2021-01-01:aztec-connect-deprecated-bridge-exploits-june-2026)event
↯ef4b9f6b
CryptoRank reports the 5 billion SYS token recovery and burn as completed. Team states that no other assets or user funds were compromised beyond the bridge's unauthorized minting event.(2026-06-16:syscoin-bridge-exploit-june-2026)event
↯0935ad32
Syscoin publishes full technical postmortem. Recovered tokens permanently burned via OP_RETURN transaction on Syscoin's block explorer. Bridge remains paused pending final validation of the patch.(2026-06-15:syscoin-bridge-exploit-june-2026)event
↯bee3288f
Syscoin notifies exchanges that native SYS deposits and withdrawals can safely resume. Attacker has returned all 5 billion SYS tokens to the designated recovery address by this date.(2026-06-10:syscoin-bridge-exploit-june-2026)event
↯5daaf1d9
Syscoin posts recovery address on-chain and makes contact with the attacker, warning of exchange escalation and legal action if tokens are not returned.(2026-06-09:syscoin-bridge-exploit-june-2026)event
↯4019b126
Miasma worm propagates to 73 Microsoft GitHub repositories across Azure, Azure-Samples, Microsoft, and MicrosoftDocs organizations using previously stolen contributor credentials. GitHub disables affected repositories in a 105-second automated sweep.(2026-06-05:phantom-gyp-npm-supply-chain-attack-june-2026)event
↯bd127217
Vapi learns of StepSecurity's public disclosure of the broader Miasma attack connecting the @vapi-ai incident to the wider Phantom Gyp campaign.(2026-06-04:phantom-gyp-npm-supply-chain-attack-june-2026)event
↯60fd6baa
At approximately 19:20 PT (02:20 UTC June 4), Vapi removes the four malicious @vapi-ai/server-sdk versions and rolls back compromised repository changes. Zero downloads confirmed for the affected versions.(2026-06-03:phantom-gyp-npm-supply-chain-attack-june-2026)event
↯75a51e9c
Miasma worm compromises 32 packages across 96 malicious versions in the @redhat-cloud-services npm namespace within 72 seconds. Combined weekly downloads approximately 116,991.(2026-06-01:phantom-gyp-npm-supply-chain-attack-june-2026)event
↯fa12aa28
TeamPCP publishes full Mini Shai-Hulud worm source code to GitHub alongside BreachForums posts encouraging independent campaigns, open-sourcing the attack toolkit.(2026-05-12:phantom-gyp-npm-supply-chain-attack-june-2026)event
↯a6c6538c
First Shai-Hulud self-replicating npm worm observed; associated with threat actor group TeamPCP.(2025-09:phantom-gyp-npm-supply-chain-attack-june-2026)event
↯f819cb93
Co-promoter Rodney Burton ('Bitcoin Rodney') pleads guilty to conspiracy to operate an unlicensed money transmitting business in U.S. District Court in Maryland; sentencing set for July 23, 2026.(2026-06-15:xue-sam-lee-hyperfund-co-founder)event
↯f1afc32b
An Australian federal court bars Ryan Xu from leaving Australia until December 20, 2025, following ASIC proceedings related to Blockchain Global.(2025-10-01:xue-sam-lee-hyperfund-co-founder)event
↯105f0b7f
Bloomberg publishes a video interview with Lee in which he denies the charges and claims any misuse of funds was conducted by others.(2025-03-10:xue-sam-lee-hyperfund-co-founder)event
↯9f0972c7
Lee is released from Dubai detention after approximately 60 days; extradition to the U.S. does not occur due to the absence of a U.S.-UAE extradition treaty.(2024-12-01:xue-sam-lee-hyperfund-co-founder)event
↯2c6c38af
SEC successfully serves Lee with the civil fraud complaint while he is imprisoned in Dubai.(2024-11-05:xue-sam-lee-hyperfund-co-founder)event
↯4e6cc239
UAE authorities detain Sam Lee at Dubai's Al Aweer Central Prison following an Interpol Red Notice.(2024-10-01:xue-sam-lee-hyperfund-co-founder)event
↯806d159f
DOJ unseals criminal indictment against Sam Lee (Case No. 24-CR-21) and SEC files parallel civil fraud complaint; Brenda Chunga simultaneously enters a guilty plea.(2024-01-29:xue-sam-lee-hyperfund-co-founder)event
↯b0bf62e4
Chainalysis publishes 2022 crypto scam report ranking HyperVerse as the largest cryptocurrency scam of 2022 with approximately $1.3 billion in investor losses.(2023-01-01:xue-sam-lee-hyperfund-co-founder)event
↯375fb8f9
HyperFund/HyperVerse scheme effectively collapses; investor withdrawals fully halted.(2022-11-01:xue-sam-lee-hyperfund-co-founder)event
↯8199fd74
HyperVerse rebrands again as HyperNation as the scheme nears collapse.(2022-05-01:xue-sam-lee-hyperfund-co-founder)event
↯fe5d27b4
HyperFund rebrands as HyperVerse at a global launch event. A fictional CEO 'Steven Reece Lewis,' portrayed by British actor Stephen Harrison, is presented to investors.(2021-12-01:xue-sam-lee-hyperfund-co-founder)event
↯936d4a10
Blockchain Global enters voluntary administration in Australia owing creditors approximately AUD $58 million.(2021-10-01:xue-sam-lee-hyperfund-co-founder)event
↯ec0d7e35
HyperFund begins blocking investor withdrawal requests, according to DOJ court filings.(2021-07-01:xue-sam-lee-hyperfund-co-founder)event
↯f874cb83
HyperFund launches, offering investors 0.5%–1% daily returns allegedly backed by crypto mining operations.(2020-06-01:xue-sam-lee-hyperfund-co-founder)event
↯b73ae314
Sam Lee and Ryan Xu co-found Bitcoin Group in Australia, later rebranded as Blockchain Global in 2016.(2014-01-01:xue-sam-lee-hyperfund-co-founder)event
↯39163790
Sentencing hearing scheduled before U.S. District Judge Richard D. Bennett; Burton faces up to five years in federal prison.(2026-07-23:rodney-burton-bitcoin-rodney)event
↯6f6c4598
Burton pleads guilty to one count of conspiracy to operate an unlicensed money transmitting business before U.S. District Judge Richard D. Bennett in Maryland.(2026-06-15:rodney-burton-bitcoin-rodney)event
↯f279e00a
Superseding indictment filed against Burton adding conspiracy to commit wire fraud, two wire fraud counts, and seven money laundering counts to original charges.(2025-01-01:rodney-burton-bitcoin-rodney)event
↯b24d9b40
Federal judge denies bail for Burton, labeling him an extreme flight risk; pretrial detention upheld on appeal.(2024-01-01:rodney-burton-bitcoin-rodney)event
↯b0bc8115
DOJ unseals charges against Sam Lee (indictment) and Brenda Chunga (guilty plea) in the HyperFund case; SEC files parallel civil action. Burton faces criminal complaint charging unlicensed money transmitting.(2024-01-29:rodney-burton-bitcoin-rodney)event
↯087371b9
Burton arrested at Miami International Airport carrying a one-way ticket to the United Arab Emirates.(2024-01-04:rodney-burton-bitcoin-rodney)event
↯fdcba757
HyperFund scheme winds down; Burton's promotional activity for the scheme ends around this period per prosecutors.(2022-01-01:rodney-burton-bitcoin-rodney)event
↯468c6f90
HyperFund begins blocking investor withdrawals, according to federal prosecutors.(2021-07-01:rodney-burton-bitcoin-rodney)event
↯a127d8ff
Burton hosts 'Reinvent Yourself With Crypto' conference in Miami featuring Akon, Daymond John, Jordan Belfort, and Tiffany Haddish.(2021-01-01:rodney-burton-bitcoin-rodney)event
↯4781253a
HyperFund begins operations; Burton begins promoting the scheme to investors, according to federal prosecutors.(2020-06-01:rodney-burton-bitcoin-rodney)event
↯466ad202
Burton promoted EyeLine Trading, another alleged crypto Ponzi scheme.(2018-01-01:rodney-burton-bitcoin-rodney)event
↯eded4df8
Burton promoted USI-Tech, an automated forex and cryptocurrency Ponzi scheme that later attracted FBI scrutiny.(2017-01-01:rodney-burton-bitcoin-rodney)event
↯116201a5
Burton identified as a promoter of uFun Club, a Thailand-based MLM crypto scheme.(2015-01-01:rodney-burton-bitcoin-rodney)event
↯2041602e
Burton released from federal prison after serving approximately five years for conspiracy to distribute cocaine (21 U.S.C. § 846).(2010-08-04:rodney-burton-bitcoin-rodney)event
↯b367d4b7
Burton alleged to have participated as a 'net winner' in ZeekRewards, a $600 million Ponzi scheme later shut down by the SEC.(2012-01-01:rodney-burton-bitcoin-rodney)event
↯69d26bac
Socket formally reports all 34+ identified malicious packages to npm, PyPI, and Crates.io registries for removal.(2026-05-29:trapdoor-supply-chain-attack)event
↯3c405a72
SlowMist characterizes TrapDoor as 'one of the largest cross-platform supply chain attacks seen in 2026', citing coordinated infrastructure across npm, PyPI, and Crates.io.(2026-05-28:trapdoor-supply-chain-attack)event
Data refreshes within about 10 minutes · All metrics derived from Supabase