← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
28,727
Relationships
31,920
Potential duplicates
6
Filter by kind
Potential Duplicates
Entities with similar names that may refer to the same thing. Use the merge API to combine them.
substring match↯ Payy publishes its official post-mortem attributing the exploit to the missing A(1) = 0 boundary check in Barretenberg's small-subgroup IPA verifier. No user compensation plan is announced.↔↯ Payy published a technical post-mortem attributing the exploit's root cause to a proving-system vulnerability in the Noir/Barretenberg verifier developed by Aztec.fffd976d / be2c4658
substring match↯ Payy Network halts all operations including deposits, withdrawals, transfers, and card transactions. The company confirms stolen funds were users' non-custodial deposits and rules out compromised keys and social engineering.↔↯ Payy stated it had completed initial root-cause analysis, ruled out a compromised key, social engineering, and off-chain infrastructure breach, and engaged a third-party audit firm to validate findings before publishing a full report.180de1c4 / 08fd86c3
substring match↯ Aztec ships the IPA verifier fix in Barretenberg v5.0.0 stable release. Payy remains on its older pinned version.↔↯ The Barretenberg fix was shipped in release v5.0.0; Payy's deployment, pinned to an older version, reportedly did not receive the patch and was not notified.a620d739 / 84e0ffb8
substring match↯ Aztec patches the Barretenberg IPA verifier boundary check flaw (missing A(1) = 0) in commit 58bf73a. Payy is not notified and does not update its dependency.↔↯ Aztec reportedly fixed a missing boundary-opening check (A(1) = 0) in Barretenberg's small-subgroup IPA verifier, per Payy's post-mortem as summarized by a secondary source.f9e0999f / 530d08dc
substring match↯ X suspends the @clippymsftcto impersonator account. The @ClippyMSFT account continues promoting the $CLIPPY token.↔↯ The impersonator account @clippymsftcto, which the hijacked Microsoft account had followed and reposted, is suspended by X.287b5d7c / 72ecef6f
substring match↯ NEAR token fell approximately 7.5–8.93%, reaching a low of roughly $4.76.↔↯ NEAR Intents states the contract-side vulnerability has been patched, pledges full reimbursement, and reports the incident to law enforcement; deposits and withdrawals on 11 networks remain paused for roughly 12 additional hours.5ad350e2 / 45fd7698
Merge instructions
curl -X POST /api/graph/merge \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"keepId": "<entity-to-keep>", "mergeId": "<entity-to-remove>"}'Entities (event)
↯400b9b6b
TrueUSD (TUSD) stablecoin launched, marketed as fully USD-backed with third-party escrow.(2018-03-01:archblock-trueusd-trusttoken-truecoin)event
↯0ee19f9c
TrustToken Inc. founded in San Francisco by Rafael Cosman, Danny An, Stephen Kade, and Tory Reiss.(2017-01-01:archblock-trueusd-trusttoken-truecoin)event
↯f7d22669
As of this report's date, Payy Network remains halted. No reimbursement plan, restart timeline, or number of affected users has been publicly disclosed.(2026-10-02:payy-network)event
↯fffd976d
Payy publishes its official post-mortem attributing the exploit to the missing A(1) = 0 boundary check in Barretenberg's small-subgroup IPA verifier. No user compensation plan is announced.(2026-09-29:payy-network)event
↯180de1c4
Payy Network halts all operations including deposits, withdrawals, transfers, and card transactions. The company confirms stolen funds were users' non-custodial deposits and rules out compromised keys and social engineering.(2026-09-25:payy-network)event
↯deb8ec31
The attacker's address conducts reconnaissance activity — depositing and withdrawing small amounts from the Payy bridge — two days before the exploit.(2026-09-22:payy-network)event
↯a620d739
Aztec ships the IPA verifier fix in Barretenberg v5.0.0 stable release. Payy remains on its older pinned version.(2026-07-13:payy-network)event
↯f9e0999f
Aztec patches the Barretenberg IPA verifier boundary check flaw (missing A(1) = 0) in commit 58bf73a. Payy is not notified and does not update its dependency.(2026-05-14:payy-network)event
↯3325ecc0
Payy Network announces $6 million seed funding round led by FirstMark Capital, with Robot Ventures and DBA Crypto participating.(2026-03-26:payy-network)event
↯101e4146
Payy Network's Barretenberg dependency pinned to version 3.0.0-manual.20251030, the version that would remain in production through the exploit.(2025-10-30:payy-network)event
↯762c4fe2
Archblock LLC, TrustToken Inc., TrueCoin LLC, Archblock (Cayman), TrueCoin II LLC, and TrueTrading 1 GP LLC file voluntary Chapter 11 petitions in U.S. Bankruptcy Court, District of Delaware (Case No. 26-10152); automatic stay halts Celsius lawsuit.(2026-02-06:archblock-trueusd-trusttoken-truecoin)event
↯c77a01c7
Celsius Network estate files fraud, conversion, and breach-of-contract lawsuit (Case No. 3:25-cv-08966, N.D. Cal.) against Archblock, TrustToken, and TrueCoin alleging ~$12.9 million in unrecoverable stablecoins and misappropriation of customer deposits.(2025-10-17:archblock-trueusd-trusttoken-truecoin)event
↯d0cf8dc9
SEC announces settled charges against TrueCoin LLC and TrustToken Inc. for unregistered investment contracts and misrepresented TUSD reserves; companies pay approximately $700,000 total without admitting or denying allegations.(2024-09-24:archblock-trueusd-trusttoken-truecoin)event
↯3f73ddbb
Techteryx assumes full operational control of TUSD reserve management as redemption failures from the Aria Commodity Finance Fund mount; Justin Sun reportedly extends emergency liquidity support.(2023-07:archblock-trueusd-trusttoken-truecoin)event
↯70bb193c
Escrow partner Prime Trust is ordered to halt withdrawals amid state regulatory action; TUSD briefly depegs to roughly $0.80 on Binance.US after disclosure that a portion of its reserves sat at the affected depository.(2023-06:archblock-trueusd-trusttoken-truecoin)event
↯7dd411a7
TrustToken rebrands as Archblock, shifting focus to institutional DeFi infrastructure under CEO Ryan Christensen.(2022-09:archblock-trueusd-trusttoken-truecoin)event
↯a61c3cb2
TrustToken/Archblock sells TrueUSD to Techteryx, a company reported to be linked to Justin Sun, for approximately $28 million, while retaining a revenue-sharing services agreement.(2020-12:archblock-trueusd-trusttoken-truecoin)event
↯0fc83e8e
TrueUSD (TUSD), developed by TrustToken, launches as an early fully-collateralized, audited dollar-pegged stablecoin.(2018:archblock-trueusd-trusttoken-truecoin)event
↯287b5d7c
X suspends the @clippymsftcto impersonator account. The @ClippyMSFT account continues promoting the $CLIPPY token.(2026-10-02:clippy-token-clippy-microsoft-x-account-hijack)event
↯afded645
An older Clippy-themed Solana token (Clippy PFP Cult, contract: 7eMJmn1bYWSQEwxAX7CyngBzGNGu1cT582asKxxRpump) reaches an all-time high market cap of approximately $36.6 million.(2025-08-11:clippy-token-clippy-microsoft-x-account-hijack)event
↯5b4425dc
A Solana token named 'Microsoft Mascot' with symbol CLIPPY (contract: GyGYxT6XVwtAuEEVSn2V6YZ7bgkCxkjVzyWt8ogtpump) is created on the Solana blockchain via Pump.fun.(2024-10-29:clippy-token-clippy-microsoft-x-account-hijack)event
↯6936df80
Microsoft India's verified X account is compromised in a SIM-swapping attack. Attackers impersonate investor Keith Gill to promote a fraudulent GameStop crypto presale and direct followers to a wallet-draining phishing site.(2024-06-04:clippy-token-clippy-microsoft-x-account-hijack)event
↯be2c4658
Payy published a technical post-mortem attributing the exploit's root cause to a proving-system vulnerability in the Noir/Barretenberg verifier developed by Aztec.(2026-09-29:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯3a7baf1a
A GitHub security advisory and CVE (CVE-2026-48100) describing a soundness flaw in Payy's agg_agg aggregation circuit, patched in version 1.3.0, was published.(2026-09-28:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯08fd86c3
Payy stated it had completed initial root-cause analysis, ruled out a compromised key, social engineering, and off-chain infrastructure breach, and engaged a third-party audit firm to validate findings before publishing a full report.(2026-09-25:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯58c38d73
A second transaction several hours after the first drained a further approximately 90,202 USDC to the same receiving address, bringing the combined total to roughly $1.92 million.(2026-09-24:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯84e0ffb8
The Barretenberg fix was shipped in release v5.0.0; Payy's deployment, pinned to an older version, reportedly did not receive the patch and was not notified.(2026-07-13:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯530d08dc
Aztec reportedly fixed a missing boundary-opening check (A(1) = 0) in Barretenberg's small-subgroup IPA verifier, per Payy's post-mortem as summarized by a secondary source.(2026-05-14:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯01208f8a
Scammers deploy a counterfeit GIWA Layer 2 network using chain ID 9134, including a fraudulent cross-chain bridge. DYORSwap lists the fraudulent network. Approximately 767.65 ETH begins flowing in from roughly 1,335 addresses.(2026-09-26:dyorswap)event
↯d0c1c2d8
DYORSwap begins public activity; @DYORSWAPDEX Twitter/X account launches. Approximate date based on account activity records.(2024-01-01:dyorswap)event
↯72ecef6f
The impersonator account @clippymsftcto, which the hijacked Microsoft account had followed and reposted, is suspended by X.(2026-10-02:clippy-token-clippy-microsoft-x-account-hijack-pump-and-dump)event
↯477a8098
CNBC published CEO Gracy Chen interview stating Bitget was 'not expecting to recover a lot' of the stolen funds. Full withdrawal resumption including P2P completed.(2026-10-02:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯81eb923f
DYORSWAP reports over 200 ETH paid out to affected users. A 40% compensation ratio is applied for addresses that bridged under 5 ETH; addresses over 5 ETH flagged for separate review. Official compensation address published: 0xdf25f88aa6cde9937fdcfcf10fa349528c79dbf9.(2026-09-28:dyorswap)event
↯4ff22b1d
GIWA publicly confirms its mainnet has not launched. DYORSwap issues an alert identifying the fake GIWA mainnet as fraudulent, confirms approximately 766.25 ETH (~$2 million) was drained from 1,335 addresses, and announces plans to compensate affected users from treasury funds.(2026-09-27:dyorswap)event
↯cd8c945e
DYORSWAP publishes a tiered compensation plan: a 40% reimbursement ratio for users who bridged less than 5 ETH, with larger amounts subject to individual review.(2026-09:dyorswap)event
↯468bb51a
NEAR Intents confirmed full recovery of the $3.8 million in stolen funds; declared the incident resolved and halted further investigation.(2026-10-02:near-intents-omni-exploit-october-2026-3-8m)event
↯5ad350e2
NEAR token fell approximately 7.5–8.93%, reaching a low of roughly $4.76.(2026-10-01:near-intents-omni-exploit-october-2026-3-8m)event
↯dd582798
NEAR Intents blocked a $50 million swap attempt linked to the suspected Bitget hack perpetrators, freezing approximately $503,000.(2026-09-29:near-intents-omni-exploit-october-2026-3-8m)event
↯4630c780
Bitget confirmed publicly that a zero-day in unnamed third-party security products was the root cause; vendor identity remained undisclosed, and CEO Gracy Chen told CNBC the exchange was 'not expecting to recover a lot' of the stolen funds.(2026-10:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯decde71e
Bitget confirmed final loss figure of approximately $387.5 million after additional transaction reconciliation. Protection Fund replenished above $300 million. P2P withdrawals scheduled to resume October 2.(2026-09-30:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯406f12aa
Insurance Journal reported North Korea's 2026 crypto theft total surpassed $1 billion as a result of the Bitget hack.(2026-09-29:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯80a1bfa6
CEO disclosed attack details publicly, including that attackers used legitimate credentials and disguised activity as routine operations. ZachXBT published analysis identifying five alleged launderers. Phased withdrawal resumption began.(2026-09-28:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯cb1e0660
Bitget publicly disclosed the breach; initial loss estimate of $351.6 million reported. CEO Gracy Chen disclosed North Korea was 'very likely' responsible. Mandiant and SlowMist engaged for independent investigation.(2026-09-25:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯a9830718
19:05 UTC: Bitget's risk-control system automatically blocked withdrawals. 19:14 UTC: Highest-level emergency response activated.(2026-09-24:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯6861dd77
Similar hidden-script activity observed on two additional Product A nodes, according to SlowMist forensic timeline.(2026-09-23:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯0f4e0701
Earliest malicious activity identified in logs: a service on a Product A node was reportedly compromised via a zero-day vulnerability, allowing attacker access to environment variables including database credentials.(2026-08-31:bitget-hack-third-party-zero-day-vendor-unidentified-october-2026)event
↯b7f24adc
Multiple crypto news outlets publish full coverage. Incident is categorized as a third-party module exploit, not an Aave v3 or Safe infrastructure breach.(2026-10-02:flashloopadapter-aave-v3-safe-module-exploit)event
↯5773ac06
SlowMist issues public alert identifying the access control vulnerability and publishing attacker and contract addresses.(2026-10-01:flashloopadapter-aave-v3-safe-module-exploit)event
↯3ce2f90c
On-chain investigator ZachXBT reports the stolen funds were sent to KuCoin and bridged to Bitcoin; attacker identity remains unconfirmed.(2026-10:near-intents-omni-exploit-october-2026)event
↯45fd7698
NEAR Intents states the contract-side vulnerability has been patched, pledges full reimbursement, and reports the incident to law enforcement; deposits and withdrawals on 11 networks remain paused for roughly 12 additional hours.(2026-10-01:near-intents-omni-exploit-october-2026)event
Data refreshes every 5 minutes · All metrics derived from Supabase