← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,540
Relationships
32,609
Potential duplicates
0
Filter by kind
Entities (event)
↯33389c5d
Tudou Guarantee USDT refund outflows peak at approximately $18.1 million in a single day, according to Bitrace on-chain data.(2026-01-05:tudou-guarantee-telegram-marketplace)event
↯34a910ab
Tudou Guarantee begins returning merchant deposits. Bitrace records approximately $3.7 million in USDT refunds on this date, marking the start of the coordinated wind-down.(2026-01-01:tudou-guarantee-telegram-marketplace)event
↯ed3aa2a9
Singapore Police arrest Nigel Tang Wan Bao Nabil (32) on money laundering charges linked to Prince Holding Group upon his return from Cambodia.(2025-12-11:tudou-guarantee-telegram-marketplace)event
↯9646a257
Singapore Police arrest Tan Yew Kiat (49) on money laundering charges linked to the Prince Holding Group network. Assets including vehicles are subject to prohibition of disposal orders.(2025-11-20:tudou-guarantee-telegram-marketplace)event
↯cb905f89
FinCEN issues final rule severing Huione Group from the U.S. financial system, prohibiting correspondent banking relationships.(2025-10-16:tudou-guarantee-telegram-marketplace)event
↯fa94c467
OFAC and UK FCDO designate Prince Group as a Transnational Criminal Organization, sanctioning 146 associated entities and individuals including Chen Zhi. DOJ simultaneously unseals criminal indictment against Chen Zhi in the Eastern District of New York.(2025-10-14:tudou-guarantee-telegram-marketplace)event
↯2e3979ad
Tudou Guarantee's user base more than doubles following Huione merchant migration. Cryptocurrency inflows reach approximately equal levels to those Huione received prior to its shutdown.(2025-07-01:tudou-guarantee-telegram-marketplace)event
↯d4eaf988
Telegram shuts down Huione Guarantee's public channels. Huione formally directs its merchant network to migrate to Tudou Guarantee. Tudou experiences a 70-fold increase in daily USDT inflows.(2025-05-11:tudou-guarantee-telegram-marketplace)event
↯55efb431
FinCEN finds Huione Group to be a foreign financial institution of primary money laundering concern and proposes a special measure under Section 311 of the USA PATRIOT Act.(2025-05-01:tudou-guarantee-telegram-marketplace)event
↯d9a45209
Huione Guarantee acquires a 30% stake in Tudou Guarantee, positioning Tudou as an operational successor should Huione face enforcement action.(2024-12-01:tudou-guarantee-telegram-marketplace)event
↯7e3d5363
Tudou Guarantee launches on Telegram as a Chinese-language illicit guarantee marketplace. Exact launch date is not publicly documented; 2023 is the reported year of inception.(2023-01-01:tudou-guarantee-telegram-marketplace)event
↯0ee462c1
ReversingLabs documents campaign respawn under Blockmerce and Bridgers Finance personas, with new C2 domain huvaret[.]art and shift to GitHub release artifact delivery.(2026-04-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯535ff597
ReversingLabs publicly discloses the graphalgo campaign; widespread coverage by The Hacker News, Security Affairs, GBHackers, SC Media, and others.(2026-02-15:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯e19c5fe0
Malicious bigmathutils version 1.1.0 published; package had exceeded 10,000 cumulative downloads. Malicious version subsequently removed and package marked deprecated.(2026-02-11:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯d8af98c5
VBS payload variant identified by researchers.(2026-02-04:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯6e9c049b
bigmathutils accumulates over 4,200 weekly downloads; no malicious payload present in published versions yet.(2026-01-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯c594ccde
'Big'-prefixed PyPI package wave begins.(2025-12-09:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯aa531fef
'Big'-prefixed npm package wave begins, starting with bignumx and bignum.(2025-11-17:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯52c55873
Backup domain veltrixcapital[.]ai registered.(2025-09-21:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯89e91591
Blocmerce LLC registered as a real Florida LLC with fake CEO 'Alexandre Miller', pre-positioning for the campaign's next persona phase.(2025-08-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯de8a3109
First malicious PyPI package, graphalgo, published to the Python Package Index.(2025-06-13:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯a96b22a9
Alleged start of recruitment outreach via LinkedIn, Facebook, and Reddit under Veltrix Capital persona.(2025-05-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯f6387afc
First malicious npm package, graphalgo version 2.2.6, published to the npm registry.(2025-05-02:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯3f2a0643
Domain veltrixcap[.]org registered, establishing fake Veltrix Capital infrastructure.(2025-04-04:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯157b7827
FinCEN issues alert to financial institutions on IRGC money laundering through front companies, financial facilitators, and digital assets, explicitly naming Zedcex and Zedxion and identifying 14 red flags including six crypto-specific indicators.(2026-05-11:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯63a19433
Israel's NBCTF adds Zedcex Exchange Ltd. to its sanctions designations.(2026-03-25:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯8adf1eec
UK Companies House issues first gazette notice for compulsory strike-off of Zedxion Exchange Ltd. under Section 1002A of the Companies Act 2006, citing misleading, false, or deceptive incorporation filings.(2026-03-20:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯ddc3301b
Federal Register publishes notice of OFAC sanctions action against Zedcex, Zedxion, and Babak Morteza Zanjani.(2026-02-04:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯c91ffda4
OFAC designates Zedcex Exchange Ltd., Zedxion Exchange Ltd., and Babak Morteza Zanjani in the first-ever U.S. sanctions action targeting IRGC-linked digital asset exchanges. Seven TRON addresses designated.(2026-01-30:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯0afbbcd0
TRM Labs publishes detailed blockchain analysis identifying approximately $1 billion in IRGC-linked flows through Zedcex and Zedxion between 2023 and 2025.(2026-01-09:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯e7b83b06
Israel's National Bureau for Counter Terror Financing issues Administrative Seizure Order ASO-43/25, listing 187 crypto addresses affiliated with the IRGC, including Zedcex-attributed wallets.(2025-09-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯311ca298
Tether blacklists at least one Zedcex-attributed TRON address.(2025-06-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯0ebbd692
Over $10 million in USDT transferred directly from Zedcex/IRGC-attributed wallets to addresses controlled by Sa'id Ahmad Muhammad al-Jamal, a sanctioned Houthi financier, with no intermediary routing.(2024-12-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯f13a13e9
IRGC-linked transaction flows through Zedcex/Zedxion peak at $619.1 million, representing 87% of all exchange activity for the year.(2024-01-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯1c7769e0
Iran's Supreme Court commutes Zanjani's death sentence to 20 years of imprisonment after he returns approximately $2.1 billion in assets.(2024-04-30:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯38f36881
Babak Morteza resigns as Zedxion director. Zedcex Exchange Ltd. incorporated days later (Companies House number 14311274, registered address 71-75 Shelton Street, London WC2H 9JQ).(2022-08-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯34c7c548
Babak Morteza (identifying details matching Zanjani) listed as director and Person with Significant Control of Zedxion Exchange Ltd.(2021-10-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯a640a5b0
Zedxion Exchange Ltd. incorporated in England and Wales (Companies House number 13404089).(2021-05-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯bd22f8df
OFAC removes Zanjani from the SDN list as part of JCPOA-related delisting. Iranian court sentences him to death for corruption.(2016-01-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯da783993
Babak Morteza Zanjani arrested in Iran on allegations of embezzling approximately $2.7 billion from Iran's National Oil Company.(2013-01-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯d06cbfb6
OFAC first designates Babak Morteza Zanjani under Executive Order 13382 for acting as a financial facilitator for the IRGC, moving billions in Iranian oil revenue.(2013-04-11:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
↯fca9279d
Resolv Labs reports over $77 million redeemed for allowlisted pre-exploit USR holders, representing more than 90% of that group, completing phase one of recovery. Vault Street institutional RWA product line announced.(2026-05-27:resolv-usr-stablecoin-minting-exploit-march-2026)event
↯66126f64
Resolv Foundation announces tiered compensation plan. Pre-incident USR holders eligible for 1:1 USDC exchange; post-incident holders receive 1:0.5; RLP holders receive 0.71 USDC per token plus RESOLV tokens. Claims window: May 26 – August 26, 2026.(2026-05-26:resolv-usr-stablecoin-minting-exploit-march-2026)event
↯64034f5d
Resolv Labs publicly confirms the exploit. Protocol burns approximately 9 million USR from the attacker's account. Protocol reports functional insolvency: $95M assets vs $173M liabilities.(2026-03-23:resolv-usr-stablecoin-minting-exploit-march-2026)event
↯03ce6274
Resolv Labs pauses all protocol functions. Fluid/Instadapp records $300M+ in outflows and $10M+ in bad debt. Euler, Venus, Lista DAO, and Inverse Finance pause USR markets. 15 Morpho vaults affected. Gauntlet vaults lose approximately $6 million in USDC to secondary hardcoded-oracle exploit.(2026-03-22:resolv-usr-stablecoin-minting-exploit-march-2026)event
↯b91e2e8b
Venus governance publishes bad-debt repayment proposal for $2,203,024 across 19 affected assets, proposing use of Venus Treasury transfers (CAKE, THE) and Risk Fund transfers (USDT, BNB). Community vote pending. Code-level fix replacing getCashPrior() direct balance read with internalCash state variable is committed.(2026-03-19:venus-protocol-the-token-flash-loan-exploit-march-2026)event
↯2a060def
Venus Protocol publishes official incident post-mortem on the community forum, disclosing attacker addresses, Tornado Cash funding chain, nine-month preparation timeline, and three root-cause factors: supply cap bypass via donation mechanic, price manipulation via thin liquidity, and illiquid collateral concentration risk. Allez Labs announces post-incident risk review.(2026-03-17:venus-protocol-the-token-flash-loan-exploit-march-2026)event
↯7ea57e2d
Emergency governance proposal to freeze approximately $3 million in assets still controlled by the attacker passes, contributing to the attacker's estimated net on-chain loss of $4.71 million.(2026-03-15:venus-protocol-the-token-flash-loan-exploit-march-2026)event
↯fae6127c
Gradual accumulation of THE tokens on open markets begins across multiple attacker-controlled addresses. Over nine months the position grows to approximately 12.2 million vTHE tokens, representing 84% of Venus Protocol's 14.5 million THE supply cap.(2025-06-01:venus-protocol-the-token-flash-loan-exploit-march-2026)event
↯8a4ffe78
Donation attack exploits Venus Protocol's zkSync deployment, targeting the wUSDM market. Venus absorbs approximately $716,789 in net bad debt. The identical supply-cap bypass mechanism is used. The specific market is patched but no systemic fix is applied across all Venus deployments.(2025-02-27:venus-protocol-the-token-flash-loan-exploit-march-2026)event
Data refreshes within about 10 minutes · All metrics derived from Supabase