← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,559
Relationships
32,624
Potential duplicates
0
Filter by kind
Entities (event)
↯18844e06
Multiple crypto outlets including CoinAlert News and Coinfomania published amplified coverage of Wind's May 23 warning, reaching broader audiences.(2026-05-25:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯8fb89fdb
Wietse Wind posted on X: 'THERE IS NO DESKTOP WALLET! NO AIRDROP! STAY VIGILANT!' Wind confirmed 20+ fake X accounts and 10+ fake domains created daily impersonating Xaman, and disclosed the team spent entire weekends fighting the campaign.(2026-05-23:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯7aefb986
David Schwartz, Ripple CTO Emeritus, issued a public scam alert: 'SCAM ALERT: There has been a huge escalation lately in airdrop and giveaway scams targetting XRPL users lately.' Schwartz warned that impersonation accounts for him existed on Instagram, Telegram, and other platforms.(2026-05-14:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯938c6dcb
Wietse Wind warned XRP users: 'There is NO browser plugin. There is NO desktop wallet.' A fraudulent Chrome extension falsely claiming to be Xaman's web version was identified, requesting unusual wallet permissions.(2026-03-05:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯0b313645
Reports published of scammers sending unsolicited NFTs to random XRP Ledger addresses, luring recipients to malicious sites claiming to distribute exclusive Xaman 'beta access pass' NFTs.(2026-03-01:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯f4ab3226
Wietse Wind issued a detailed coordinated-scam warning covering fake sign requests, fraudulent NFTs, counterfeit desktop wallets, fake support DMs, and phishing emails, as reported by KuCoin news.(2026-02-16:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯aee4f924
Wietse Wind warned publicly: 'Scammers are sending emails about interruptions and Xaman desktop clients. THIS IS FAKE! THIS IS SCAM!' — indicating fake desktop-client phishing emails were circulating by at least August 2025.(2025-08-11:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯783ec1e6
Wietse Wind issued an earlier warning (approximate date) that impersonation accounts were sending direct messages promoting fake Xaman web wallets and browser extensions, indicating the campaign predates 2026.(2025-04-01:xaman-wallet-impersonation-xrp-airdrop-phishing-2026)event
↯6a61ba66
Drift Protocol publishes attribution findings linking the exploit to North Korean state actor UNC4736/AppleJeus, describing the operation as a six-month intelligence campaign.(2026-04-05:solana-blinks-durable-nonce-drainer-kits-2026)event
↯891afd07
UNC4736 executes the Drift Protocol durable-nonce exploit: two pre-signed transactions submitted four blockchain slots apart drain approximately $270–$286 million in under one minute, the largest DeFi hack of 2026.(2026-04-01:solana-blinks-durable-nonce-drainer-kits-2026)event
↯58e03028
UNC4736 creates four durable nonce accounts on-chain in preparation for the Drift Protocol exploit, two of which are attacker-controlled.(2026-03-23:solana-blinks-durable-nonce-drainer-kits-2026)event
↯ee945358
Bonk.fun Solana memecoin launchpad has its domain hijacked; attacker injects a drainer and displays a fake terms-of-service prompt. Losses estimated at approximately $30,000; users refunded at 110%.(2026-03-12:solana-blinks-durable-nonce-drainer-kits-2026)event
↯bb73d8b6
Recorded Future (Insikt Group) publishes CTA-2026-0204 documenting the Rublevka Team operation: Russian-attributed SaaS drainer supporting 90+ Solana wallets, $10.9 million total theft.(2026-02-04:solana-blinks-durable-nonce-drainer-kits-2026)event
↯861a6d24
SlowMist documents a $3 million loss via Solana assign-instruction phishing, in which a victim signed a transaction containing a hidden assign instruction that transferred account ownership to an attacker program with no visible balance change in simulation.(2025-12-03:solana-blinks-durable-nonce-drainer-kits-2026)event
↯3915eff0
UNC4736 (North Korea/AppleJeus) begins a six-month infiltration of Drift Protocol, posing as a quantitative trading firm and depositing over $1 million into an Ecosystem Vault.(2025-10-01:solana-blinks-durable-nonce-drainer-kits-2026)event
↯108b0932
Kerberus reports Solana users lost approximately $90 million to phishing in H1 2025, representing 15% of all Web3 phishing losses in the period.(2025-06-30:solana-blinks-durable-nonce-drainer-kits-2026)event
↯202b8f55
Rublevka Team pivots from TON to Solana, launching a campaign that ultimately generates approximately $8.2 million from Solana victims.(2025-01-01:solana-blinks-durable-nonce-drainer-kits-2026)event
↯8c1c6654
Advertisements for drainer kits claiming to bypass all transaction simulations appear in underground markets, with pricing up to 10 ETH (~$30,000) for premium scripts.(2024-02-20:solana-blinks-durable-nonce-drainer-kits-2026)event
↯b68c18ad
Blowfish discloses Aqua and Vanish drainers employing bitflip attacks on Solana — the first documented simulation-bypass technique on the network.(2024-02-09:solana-blinks-durable-nonce-drainer-kits-2026)event
↯cf2c5afc
Chainalysis reports a Solana wallet-draining community with over 6,000 members on private forums and Telegram channels.(2024-01-01:solana-blinks-durable-nonce-drainer-kits-2026)event
↯2d8f31a6
CoW DAO passes CIP-86, authorizing compensation for users who lost funds in the April 14 DNS hijack. No comparable compensation proposal recorded for the Neutrl incident, consistent with reports of no confirmed user losses.(2026-05-12:neutrl-dns-hijack-march-2026)event
↯3e03b47d
Web3SecNews publishes "The .fi Files" field report characterizing the Neutrl, HypurrFi, CoW Swap, and Steakhouse incidents as a coordinated campaign rather than isolated events.(2026-04-15:neutrl-dns-hijack-march-2026)event
↯77d04c82
CoW Swap's cow.fi domain is hijacked at 14:54 UTC via social engineering of registrar Gandi through Traficom (Finland's .fi TLD authority). Approximately $1.2 million in user losses reported.(2026-04-14:neutrl-dns-hijack-march-2026)event
↯64b608c3
HypurrFi reports a domain hijack of hypurr.fi attributed to social engineering at registrar Openprovider — the second confirmed event in the 2026 DeFi frontend hijack cluster.(2026-04-03:neutrl-dns-hijack-march-2026)event
↯4307bc2d
Neutrl completes DNS migration to new domain (neutrl.finance / app.neutrl.finance), switches to a new DNS provider, unsuspends smart contracts, and confirms all user funds are safe. Original domain (neutrl.fi) begins gradual phase-out.(2026-03-21:neutrl-dns-hijack-march-2026)event
↯76729f1c
Neutrl DeFi detects a malicious event affecting its frontend, attributed to a suspected DNS hijack via social engineering of the protocol's DNS provider. Smart contracts are paused as a precaution. Users warned not to interact with the website. Investigation launched with external collaborator 0xGroomLake. Malicious contract addresses 0x23f2741EaA0045038e9b52100CdcC890163dE53F and 0xa0Adf074056E41dfB892aFC69881E15073b384b9 flagged publicly.(2026-03-19:neutrl-dns-hijack-march-2026)event
↯ffe05020
Neutrl opens to the public following completion of a $75 million pre-deposit vault campaign; NUSD becomes broadly accessible.(2025-11-01:neutrl-dns-hijack-march-2026)event
↯678a9ad7
Neutrl raises $5 million in seed funding led by STIX and Accomplice, with participation from Amber Group, SCB Limited, Figment Capital, Nascent, Guy Young (Ethena founder), and Joshua Lim (Arbelos Markets).(2025-04-16:neutrl-dns-hijack-march-2026)event
↯fee72cd0
Scheduled closure of HypurrFi legacy markets per wind-down plan.(2026-07-15:hypurrfi-domain-hijack-april-2026)event
↯a8c65910
HypurrFi Discord support access ends per wind-down timeline.(2026-05-28:hypurrfi-domain-hijack-april-2026)event
↯1e654205
HypurrFi announces planned wind-down of operations. Euler Finance assumes maintenance of Mewler contract stack on HyperEVM. Team states the decision is 'strategic instead of reactive' and explicitly not related to the April domain compromise.(2026-05-15:hypurrfi-domain-hijack-april-2026)event
↯2662b039
SEC files civil complaint (LR-26530; case no. 1:26-cv-02293, EDNY) against Donald G. Basile, GIBF GP, Inc., and Monsoon Blockchain Corporation, alleging a $16 million SAFT fraud involving fabricated insurance coverage, a phantom asset-backed trust, and personal misappropriation of investor funds. Relief sought includes permanent injunctions, disgorgement, civil penalties, and an officer-and-director bar.(2026-04-17:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯d45e81c0
CoW DAO passes CIP-86 to begin compensation for victims of the April 14 cow.fi hijack, with claims deadline of May 14.(2026-05-12:hypurrfi-domain-hijack-april-2026)event
↯7ebb36c4
U.S. Court of Appeals for the Sixth Circuit affirms denial of GIBF GP's motion to compel arbitration in the Michigan investor fraud case (No. 24-1537), ruling that the plaintiffs had not consented to an arbitration clause and that Bitcoin Latinum had waived its arbitration right through prolonged litigation.(2025-05-14:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯e59c23bf
Web3SecNews publishes field report characterizing the Neutrl, HypurrFi, CoW Swap, and Steakhouse/cow.fi incidents as a coordinated campaign with common social engineering methodology at the registrar level.(2026-04-15:hypurrfi-domain-hijack-april-2026)event
↯e4e990f1
GIBF GP, Inc. files defamation suits in Delaware Court of Chancery against Forbes journalist Cyrus Farivar and Poker.org journalist Haley Hintze over articles reporting on Bitcoin Latinum fraud lawsuits. Legal observers characterize the suits as SLAPPs with multiple procedural defects.(2024-02-07:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯9fb4e012
CoW Swap's cow.fi domain is hijacked via social engineering against registrar Gandi SAS (allegedly involving falsified identity documents submitted to Traficom, Finland's .fi TLD registry). Phishing frontend drains approximately $1.2 million in user assets over 4.5 hours. Third major incident in the DeFi registrar attack cluster.(2026-04-14:hypurrfi-domain-hijack-april-2026)event
↯3c99f3ef
HypurrFi team confirms recovery of hypurr.fi domain control via registrar; DNS propagation expected to take up to 24 hours. No user funds confirmed drained. Incident widely covered in crypto press.(2026-04-04:hypurrfi-domain-hijack-april-2026)event
↯333f3232
Forbes journalist Cyrus Farivar publishes article titled 'A Cryptocurrency Named After The Fictional Money In Star Trek Is Worthless,' reporting on the Assofi lawsuit.(2022-11-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯e3aba54f
HypurrFi detects unauthorized DNS changes to hypurr.fi attributed to social engineering at registrar Openprovider. Founder androolloyd posts urgent warning on X. Team migrates frontend to hypurrfi.com.(2026-04-03:hypurrfi-domain-hijack-april-2026)event
↯9c31e66c
Civil lawsuit filed in U.S. District Court, Eastern District of Michigan (case no. 22-10208) by Raymond Jonna, Simon Jonna, and Farid Jamardov against Bitcoin Latinum, Kevin Jonna, and GIBF GP, Inc., alleging securities fraud, wire fraud, and fraudulent conversion involving approximately $500,000.(2022-02-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯65526d81
Neutrl DeFi protocol experiences a suspected DNS frontend hijack; team pauses smart contracts and initiates investigation with security firm 0xGroomLake. First incident in the documented six-week DeFi registrar attack cluster.(2026-03-19:hypurrfi-domain-hijack-april-2026)event
↯04b3df81
Bitcoin Latinum announces plans for 2022 exchange listings, claiming to trade on approximately ten exchanges and targeting twenty more. LTNM price has fallen below $16, a decline exceeding 90% from its October 2021 peak.(2022-01-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯ae6ec4be
HypurrFi launches on Hyperliquid EVM mainnet, reaching initial supply caps of approximately $4.42 million within one hour.(2025-03-01:hypurrfi-domain-hijack-april-2026)event
↯aa66d894
SAFT offering closes. Approximately $16 million raised from hundreds of U.S. investors over the course of the offering.(2021-12-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯a98d910d
LTNM listed on overseas cryptocurrency exchanges. Token price reported at approximately $200 at launch.(2021-10-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯b7996621
At a fundraising meeting, Basile allegedly told investor Arshad Assofi that Bitcoin Latinum had received $20 million from the producers of Star Trek, that a Dubai investor would contribute $100 million, and that the token launch would occur in early-to-mid November 2021 with no lockup.(2021-06-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯c7ebc616
SAFT offering commences. Basile, through GIBF GP, Inc. and Monsoon Blockchain Corporation, begins selling Simple Agreements for Future Tokens to U.S. investors, according to the SEC complaint.(2021-03-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯289817e1
Bitcoin Latinum announced as newly launched project. Press releases cited Marsh McLennan as arranger of proposed insurance program for LTNM, describing the token as set to become 'the world's largest insured digital asset.'(2020-11-01:donald-basile-bitcoin-latinum-ltnm-monsoon-blockchain-corporation)event
↯e11cb974
CyberInsider publishes report on the phishing campaign, summarizing attack mechanics, distribution vectors, and the use of fake sponsored ads and social media impersonation accounts.(2025-07-31:fake-chainbase-airdrop-phishing-campaign)event
Data refreshes within about 10 minutes · All metrics derived from Supabase