← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,559
Relationships
32,624
Potential duplicates
0
Filter by kind
Entities (event)
↯1912f4d4
Blockaid begins tracking address poisoning transactions on-chain; 65.4 million transactions flagged in the subsequent 12+ months at an average of 160,000 per day.(2025-01-01:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯2ce943b4
$68 million WBTC stolen in address poisoning incident; approximately 22,960 ETH partially recovered within one week through deanonymization and negotiation.(2024-05-01:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯11ded7e2
Academic study baseline period begins: researchers later document 270 million address poisoning attempts and $83.8 million in losses across Ethereum and BSC between July 2022 and June 2024.(2022-07-01:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯79e6fbfe
At least 32 packages in the @redhat-cloud-services npm namespace reported compromised via a backdoored GitHub Actions workflow distributing Miasma, assessed as a Shai-Hulud derivative by Unit 42.(2026-06-01:shai-hulud-teampcp-supply-chain-attack)event
↯29133a8d
Mini Shai-Hulud Wave 3: Compromised @antv maintainer account used to publish 639 malicious versions across 323 packages in ~22 minutes (~16 million weekly downloads); largest single-hour package count of any documented Shai-Hulud wave.(2026-05-19:shai-hulud-teampcp-supply-chain-attack)event
↯7ad468ea
TeamPCP publishes Shai-Hulud worm source code to GitHub under MIT License: 'Open Sourcing The Carnage.' Copycat forks and clone packages begin appearing within hours.(2026-05-12:shai-hulud-teampcp-supply-chain-attack)event
↯3b59171b
Mini Shai-Hulud Wave 2 begins at 19:20 UTC: 84 malicious @tanstack package versions published in 6 minutes via GitHub Actions pwn request and OIDC token extraction; worm propagates to 172 unique packages / 403 malicious versions across npm and PyPI within 48 hours. CVE-2026-45321 (CVSS 9.6) assigned.(2026-05-11:shai-hulud-teampcp-supply-chain-attack)event
↯a4fe13f7
Mini Shai-Hulud targets SAP CAP ecosystem: @cap-js/sqlite, @cap-js/postgres, @cap-js/db-service, and mbt packages compromised (~570,000 combined weekly downloads).(2026-04-29:shai-hulud-teampcp-supply-chain-attack)event
↯2a499fc2
Bitwarden CLI @bitwarden/cli@2026.4.0 compromised for approximately 93 minutes via backdoored Checkmarx GitHub Actions workflow; 334 developer downloads of the malicious version; payload embedded string 'Shai-Hulud: The Third Coming'.(2026-04-22:shai-hulud-teampcp-supply-chain-attack)event
↯ad344902
Shai-Hulud 3.0 'The Golden Path' variant discovered by researcher Charlie Eriksen propagating via @vietmoney/react-big-calendar@0.26.2; dead-man's switch removed from this variant.(2025-12-28:shai-hulud-teampcp-supply-chain-attack)event
↯8b0af543
Malicious Trust Wallet extension exfiltration window closes at 11:00 UTC; Trust Wallet releases clean version 2.69; reimbursement process initiated. Final loss: approximately $8.5 million across 2,520 wallets.(2025-12-26:shai-hulud-teampcp-supply-chain-attack)event
↯4c15f779
Security researchers publicly report wallet drains; Trust Wallet acknowledges incident.(2025-12-25:shai-hulud-teampcp-supply-chain-attack)event
↯c3a916e6
Malicious Trust Wallet Chrome extension v2.68 published at 12:32 PM UTC using stolen Chrome Web Store API key; active wallet mnemonic harvesting begins.(2025-12-24:shai-hulud-teampcp-supply-chain-attack)event
↯ee2a8ba4
Microsoft Security Blog publishes formal Shai-Hulud 2.0 detection, investigation, and defense guidance.(2025-12-09:shai-hulud-teampcp-supply-chain-attack)event
↯ea1d9678
Attacker registers domain metrics-trustwallet[.]com in preparation for Trust Wallet extension compromise.(2025-12-08:shai-hulud-teampcp-supply-chain-attack)event
↯ddb7d153
Shai-Hulud 2.0 peak activity: 640+ npm packages infected within days; 25,000+ data-leaking GitHub repositories created; Zapier, PostHog, and Postman developer tooling among affected parties.(2025-11-24:shai-hulud-teampcp-supply-chain-attack)event
↯f9c6f886
Original Shai-Hulud worm first detected in the npm ecosystem; 500+ packages compromised via malicious preinstall hooks; credentials harvested from 25,000+ GitHub repositories.(2025-09-01:shai-hulud-teampcp-supply-chain-attack)event
↯705c3f2a
Bleeping Computer publishes deep-dive on Lucifer Drainer's internal operations, confirming the platform remains live and actively recruiting affiliates as of May 2026.(2026-05-21:lucifer-drainer)event
↯df72f6bc
Documentation domain hosted on Google Firebase suspended following security research exposure. Lucifer Drainer migrates documentation to IPFS, citing decentralization as a takedown-resistance strategy.(2025-11-01:lucifer-drainer)event
↯9ef92dd1
Telegram bans Lucifer Drainer bots. Operators instruct affiliates via channel to create new bots and grant them admin privileges, maintaining continuity.(2025-08-01:lucifer-drainer)event
↯c3c9a299
Lucifer Drainer operators publicly restate the commission-only model: 'We do not sell or lease the software and only split 20% per hit.'(2025-05-01:lucifer-drainer)event
↯393304b0
Lucifer Drainer announces version 6.6.6 featuring ERC-20 support, Permit2 abuse, off-chain signatures, Telegram notifications, wallet-security bypasses, and multichain deployment.(2025-03-01:lucifer-drainer)event
↯df76bcf9
Flare researchers begin collecting and analyzing approximately 700 underground posts from forums, chats, and channels related to Lucifer DaaS; research period spans January 2025 through early 2026.(2025-01-01:lucifer-drainer)event
↯b5626d1a
Inferno Drainer announces it has transferred its platform and code to the Angel Drainer team, consolidating two of the largest DaaS operations.(2024-10-19:lucifer-drainer)event
↯b53a4cc1
Angel Drainer suspends operations after cybersecurity firm Match Systems claims to have de-anonymized its developers.(2024-07-17:lucifer-drainer)event
↯3db3a18e
Pink Drainer ceases operations after stealing approximately $85 million from over 21,000 victims.(2024-05-17:lucifer-drainer)event
↯ab3f589c
Inferno Drainer announces shutdown after claiming over $80 million in total theft; later found to have continued operations covertly.(2023-11-01:lucifer-drainer)event
↯054bc9b9
Ray Youssef departs as CEO of NoOnes, a separate P2P crypto platform he founded after leaving Paxful. NoOnes states his legal matters are personal and unrelated to the company.(2026-02-01:paxful)event
↯66d04962
Paxful Holdings, Inc. is formally sentenced by the U.S. District Court, Eastern District of California to pay a $4 million criminal penalty.(2026-02-10:paxful)event
↯8488bf0c
Ray Youssef indicted in U.S. District Court, Eastern District of California, on charges of willfully failing to maintain an effective AML program, willfully failing to file SARs, and operating an unlicensed money transmitting business. Youssef is arrested and briefly detained in Santa Ana before being released under supervision.(2025-12-13:paxful)event
↯fcc39a26
Paxful Holdings, Inc. pleads guilty in U.S. District Court, Eastern District of California to three federal conspiracy charges: Travel Act violations, operating an unlicensed MTB, and BSA AML violations. FinCEN concurrently issues $3.5 million civil consent order.(2025-12-09:paxful)event
↯b3db0db7
Paxful ceases all operations by November 1, 2025, citing lasting impact of former co-founders' misconduct and unsustainable compliance remediation costs.(2025-11-01:paxful)event
↯713a4920
Artur Schaback pleads guilty in U.S. District Court, California, to conspiracy to fail to maintain an effective AML program. Agrees to pay $5 million in fines and cooperate with ongoing investigation. Faces maximum of five years in prison.(2024-07-08:paxful)event
↯53fe7a5d
Paxful relaunches under new CEO Roshan Dharia after board structure is resolved.(2023-05-08:paxful)event
↯986efc42
Paxful temporarily suspends marketplace operations amid co-founder dispute and concerns about customer fund safety; a Delaware Chancery Court appoints a custodian.(2023-04-01:paxful)event
↯7ea68843
Artur Schaback files suit against Ray Youssef and Paxful alleging wrongful termination, misappropriation of funds, money laundering, and alleged sanctions-evasion planning regarding Russia.(2023-01-01:paxful)event
↯7b5eb375
Artur Schaback takes paternity leave; upon returning finds his access to company systems and credit card revoked, and his COO title removed by Youssef. Beginning of documented co-founder conflict.(2021-10-01:paxful)event
↯8e7662fc
Paxful files its first Suspicious Activity Report (SAR) with FinCEN — more than four years after commencing operations.(2019-11-01:paxful)event
↯58b40b7f
Paxful implements its first written AML program — four years after founding.(2019-07-01:paxful)event
↯e2f234b1
Paxful designates its first compliance officer — approximately three years after beginning operations.(2018-11-01:paxful)event
↯1579d75f
DOJ seizes Backpage.com. Despite the seizure, Paxful allegedly continues processing payments to a Backpage copycat site for approximately four more years.(2018-04-01:paxful)event
↯0e76ed77
Ray Youssef is arrested in Tallinn, Estonia on suspicion of drug trafficking, allegedly for procuring MDMA and steroids via darknet markets.(2017-02-01:paxful)event
↯db8989d3
Co-founders Ray Youssef and Artur Schaback are arrested in Miami Beach following an incident involving an AR-15 rifle and drug possession (cocaine and hashish). Charges are later dismissed.(2016-09-01:paxful)event
↯8d291be6
Paxful begins knowingly processing Bitcoin payments on behalf of Backpage.com, an illegal prostitution advertising platform, according to DOJ court documents.(2015-12-01:paxful)event
↯c17d1e5c
Paxful founded by Ray Youssef and Artur Schaback as a peer-to-peer Bitcoin marketplace; begins operating without a registered Money Services Business license, AML program, or KYC requirements.(2015-07-01:paxful)event
↯b4939e26
Attacker wallet 0x7B582033... still holds approximately 2,102 ETH (~$4.23M). Bridge remains halted. No postmortem published.(2026-06-01:gravity-bridge)event
↯8c909615
Attacker begins laundering stolen funds through ChangeNow and Binance. TVL drops from approximately $11.82M to $6.24M — a 47% decline.(2026-05-30:gravity-bridge)event
↯41b1ceea
Gravity Bridge frontend goes live, with first transfers of DAI, ETH, and USDC from Ethereum to Cosmos.(2022-01-26:gravity-bridge)event
↯88d1c26d
Gravity Bridge mainnet launches in a decentralized genesis event with over 100 validators, following two years of development and three independent audits.(2021-12-14:gravity-bridge)event
↯04ff4a4b
Code4rena competitive audit contest for Gravity Bridge opens, with a prize pool exceeding $100,000. The contest runs through September 8, 2021, and yields 44 findings including 4 HIGH severity.(2021-08-26:gravity-bridge)event
Data refreshes within about 10 minutes · All metrics derived from Supabase