← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,540
Relationships
32,609
Potential duplicates
0
Filter by kind
Entities (event)
↯a3302502
Code4rena audit of Venus Protocol Isolated Pools documents the donation-attack supply cap bypass as finding M-10, including a working proof of concept. Venus Protocol team dismisses the finding, stating donations are 'supported behavior with no negative side effects.'(2023-05-01:venus-protocol-the-token-flash-loan-exploit-march-2026)event
↯88b8b1a9
Attacker moves 100 ETH to Tornado Cash (tx 0xdc082828a2358ccb33b3837b49bfe678c31259aad59c39c76916a53f8c73853b), signaling intent to launder rather than return funds.(2026-02-27:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
↯52eb4bd6
Attacker consolidates approximately 380 ETH and bridges funds cross-chain between 09:17 and 09:26 UTC. Attacker does not respond to bounty offer before 72-hour deadline.(2026-02-23:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
↯10b588bc
YieldBlox Security Council sends on-chain bounty message offering 10% white-hat incentive with 72-hour deadline in exchange for return of frozen funds and cessation of legal pursuit.(2026-02-22:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
↯cc62a3ca
At 23:35 UTC, attacker creates SDEX manipulation burner account (GCNF5GNRIT6VWYZ7LXUZ33Q3SR2NUGO32F5X65VVKAEWWIQCKGYN75HB) with 15 XLM. At 23:38 UTC, attacker places inflated sell offer for USTRY at 107 USDC per USTRY, approximately 100-fold fair value.(2026-02-21:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
↯64c0429d
Attacker's primary Stellar reconnaissance wallet created, seeded with 56.32 XLM, eight days before the exploit.(2026-02-14:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
↯969e8f28
Blend V2 Code4rena competitive audit with Certora Formal Verification launched, with a $125,000 USDC prize pool. Reported as the first Rust/Soroban formal verification contest in DeFi.(2025-02-24:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
↯4a094008
On-chain analyst b-block posts a public warning identifying two attacker wallets holding 146 ETH (~$306,000) linked to the ongoing fake Uniswap Google Ads campaign. Multiple outlets report cumulative losses of at least $400,000 from this campaign wave. SEAL confirms Uniswap accounts for 41% of all detected malicious DeFi phishing sites.(2026-05-25:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯2cd32425
Cloud Security Alliance publishes analysis of 1Campaign, a cloaking platform used to serve malicious crypto drainer pages through Google Ads while hiding content from reviewers. Platform operator identified by handle DuppyMeister; tool maintained for over three years.(2026-03-23:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯10f32e08
Security Alliance (SEAL) documents the start of a significant escalation in Google Search phishing campaigns targeting multiple DeFi protocols including Uniswap. Over March 13–30, 2026, SEAL attributes $1.27 million in losses across this campaign cluster.(2026-03-13:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯0b759444
Polymarket trader @ika_xbt loses a mid-six-figure sum (described as their entire net worth) after clicking a fraudulent Google Ad for Uniswap. AngelFerno drainer toolkit attributed. Uniswap's founder publicly condemns the ad ecosystem.(2026-02-20:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯02a5273b
Security Alliance publishes State of Drainers Vol. 1, documenting that Uniswap accounts for 41% of all DeFi phishing sites and identifying Inferno, Rublevka, Eleven, and Vanilla Drainer as the primary DaaS families. SEAL simultaneously launches a global real-time phishing defense network with MetaMask, WalletConnect, Backpack, and Phantom.(2025-10-01:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯4f166b8a
A DeFi user loses approximately $1.2 million through a fraudulent Uniswap Google Ad in an incident described as nearly identical to the 2026 campaigns.(2025-07-01:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯6d764423
Wallet drainer malware collectively steals approximately $494 million from 332,000 addresses across all DeFi impersonation campaigns during 2024, a 67% year-over-year increase. Inferno Drainer holds 40-45% market share.(2024-01-01:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯4abd02be
A fraudster posing as a Uniswap Foundation representative convinces multiple crypto media outlets including DailyCoin and CryptoNews to publish articles about a fabricated $10 million UNI V4 airdrop. CryptoSlate declines after identifying post-publication redirect link manipulation. No confirmed reader financial losses reported.(2024-02-16:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯13693c11
Inferno Drainer, a dominant DaaS platform used in Uniswap impersonation campaigns, announces shutdown after stealing over $80 million from more than 100 impersonated crypto brands. Subsequent research shows operations continued.(2023-11-01:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯0dc10d9d
Attackers airdrop a fraudulent ERC-20 token to 73,399 Uniswap V3 LP holders, directing them to uniswaplp[.]com where a masked 'setApprovalForAll' call drains 7,574 ETH (~$8 million). Funds moved to Tornado Cash.(2022-07-11:fake-uniswap-v4-airdrop-phishing-network-2026)event
↯7fc9db71
SEAL begins tracking a wave of malicious Google Ads campaigns deploying Vanilla Drainer and Inferno Drainer payloads impersonating Uniswap (41% of URLs), Morpho Finance (31%), and other DeFi protocols.(2026-03-13:vanilla-drainer-daas)event
↯08dfa882
Security Alliance (SEAL) Radar published 'The State of Drainers Vol. 1,' identifying Vanilla Drainer as one of four major active drainer families under ongoing tracking alongside Inferno, Rublevka, and Eleven.(2025-10-01:vanilla-drainer-daas)event
↯1cde85f5
CoinTelegraph and multiple outlets published coverage of the Vanilla Drainer investigation, reporting the $5.27 million total linked to the service.(2025-08-25:vanilla-drainer-daas)event
↯c6997f74
Darkbit publishes thread on X attributing $5.27 million in thefts to Vanilla Drainer and identifying fee wallet 0x9d3...E710d holding approximately $2.23 million.(2025-08-05:vanilla-drainer-daas)event
↯b7563fa2
Blockchain investigator Darkbit (@darkbitweb) published a public thread on X identifying Vanilla Drainer and attributing multiple large six- and seven-figure thefts to it.(2025-07-24:vanilla-drainer-daas)event
↯a713e59f
Start of the confirmed three-week window during which Darkbit tracked at least $5.27 million in thefts attributed to Vanilla Drainer across four major incidents.(2025-07-15:vanilla-drainer-daas)event
↯a6f02dcb
Vanilla Drainer's first known public advertisement posted on underground forums, claiming an 'advanced algorithm' capable of bypassing Blockaid fraud detection. The advertisement has since been removed.(2024-12-08:vanilla-drainer-daas)event
↯d7be09ec
Earliest thefts attributed to Vanilla Drainer infrastructure observed on-chain according to Darkbit's retrospective analysis.(2024-10-01:vanilla-drainer-daas)event
↯3f160bef
Chen Zhi arrested in Cambodia. Cambodia revokes his Cambodian citizenship and cancels his passport. He is extradited to China — not to the United States — following joint China-Cambodia investigative cooperation.(2026-01-06:chen-zhi-prince-holding-group)event
↯c877c75a
South Korea imposes independent sanctions on 15 individuals and 132 entities tied to Prince Group, described as South Korea's largest single sanction measure in history.(2025-11-28:chen-zhi-prince-holding-group)event
↯6b1ed295
Singapore Police Force seizes over SGD 150 million (~$115 million USD) in assets linked to Prince Group.(2025-11-01:chen-zhi-prince-holding-group)event
↯adcb6932
FinCEN finalizes rule under Section 311 of the USA PATRIOT Act to cut Huione Group — a connected Cambodian financial conglomerate — off from the U.S. financial system.(2025-10-14:chen-zhi-prince-holding-group)event
↯829b368d
DOJ seizure operations begin; blockchain activity resumes in the previously dormant 127,271 BTC wallet cluster.(2024-06-01:chen-zhi-prince-holding-group)event
↯c09cb7e6
Chen Zhi allegedly travels to the United States despite an ongoing federal investigation.(2023-04-01:chen-zhi-prince-holding-group)event
↯ffafaa66
FBI takedown of a Chinese money laundering network in New York identifies 259 U.S. persons who collectively lost $18 million to scammers operating within Prince Group's network.(2022-01-01:chen-zhi-prince-holding-group)event
↯7ea49b91
Approximately 127,271 BTC allegedly moved to dormant unhosted wallets following a suspected internal event (referred to in blockchain analysis as the 'Lubian Hack' or insider transfer). Assets remain largely inactive for approximately four years.(2020-12-01:chen-zhi-prince-holding-group)event
↯544097ba
Prince Group is alleged to be earning more than $30 million per day from fraudulent cryptocurrency investment schemes and related criminal activities.(2018-01-01:chen-zhi-prince-holding-group)event
↯2140f0b8
Chen Zhi allegedly begins operating forced-labor cryptocurrency fraud compounds across Cambodia under Prince Group.(2015-01-01:chen-zhi-prince-holding-group)event
↯62cd8b9f
Drift Protocol publishes a recovery plan for affected users following the $285–295 million DPRK-linked exploit.(2026-05-05:mach-o-man-lazarus-chollima-macos-malware)event
↯ab264e4f
Arbitrum reportedly freezes $71 million in funds linked to the KelpDAO exploit.(2026-04-22:mach-o-man-lazarus-chollima-macos-malware)event
↯12ce92e2
Researchers at Bitso's Quetzal Team and ANY.RUN (analyst: Mauro Eldritch) publicly disclose the Mach-O Man malware kit, publishing full technical analysis including binary names, IOCs, and four-stage attack chain.(2026-04-21:mach-o-man-lazarus-chollima-macos-malware)event
↯e8142073
KelpDAO bridge exploited for approximately $290–293 million (116,500 rsETH) via compromised RPC nodes and a single-point-of-failure DVN configuration. LayerZero and Chainalysis attribute the attack to Lazarus Group.(2026-04-18:mach-o-man-lazarus-chollima-macos-malware)event
↯c6c80336
Drift Protocol exploited for approximately $285–295 million via social engineering and durable nonce manipulation. Attributed with medium confidence to UNC4736 (Citrine Sleet / Golden Chollima), a DPRK-linked cluster.(2026-04-01:mach-o-man-lazarus-chollima-macos-malware)event
↯396c336e
Alleged start of six-month social engineering operation targeting Drift Protocol, with DPRK-linked operatives attending conferences and building relationships with contributors (approximate date per reporting).(2025-09-01:mach-o-man-lazarus-chollima-macos-malware)event
↯99c6c754
Chainalysis estimates DPRK-linked actors stole $2.02 billion during 2025, a 51% year-over-year increase, per its 2026 crypto crime report.(2025-01-01:mach-o-man-lazarus-chollima-macos-malware)event
↯da33d97a
OFAC issues first-ever sanctions on a virtual currency mixer (Tornado Cash) citing its use to launder DPRK-linked proceeds.(2022-05-06:mach-o-man-lazarus-chollima-macos-malware)event
↯485fb793
U.S. DOJ files complaint seeking forfeiture of 280 cryptocurrency addresses linked to North Korean exchange hackers, supported by Chainalysis tracing.(2020-08-01:mach-o-man-lazarus-chollima-macos-malware)event
↯1189317d
OFAC sanctions two Chinese nationals for laundering cryptocurrency on behalf of Lazarus Group.(2020-03-02:mach-o-man-lazarus-chollima-macos-malware)event
↯b06fdc6f
OFAC designates Lazarus Group, Bluenoroff, and Andariel as SDNs under Executive Order 13722, prohibiting U.S. persons from transacting with them.(2019-09-13:mach-o-man-lazarus-chollima-macos-malware)event
↯5e5b462f
Lazarus Group established by the North Korean government, subordinate to the 110th Research Center, 3rd Bureau of the RGB, according to U.S. Treasury.(2007-01-01:mach-o-man-lazarus-chollima-macos-malware)event
↯b15600a6
Morpho's MORPHO token falls approximately 6% amid market concern about Apyx-related contagion risk.(2026-06-04:apyx-finance)event
↯c41fad6c
Apyx TVL crosses $16 million, per protocol blog post. As of this date Apyx Finance held approximately 288,888 STRC shares valued at $29 million.(2026-03-01:apyx-finance)event
↯6f20803b
Certora publishes security assessment of apxUSD, identifying 11 issues including one high-severity vulnerability. The high-severity issue is confirmed resolved.(2026-03-02:apyx-finance)event
Data refreshes within about 10 minutes · All metrics derived from Supabase