← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,477
Relationships
32,559
Potential duplicates
1
Filter by kind
Potential Duplicates
Entities with similar names that may refer to the same thing. Use the merge API to combine them.
substring match◎ docs.orai.io↔◎ orai.ioba8d3993 / 04c5bc4b
Merge instructions
curl -X POST /api/graph/merge \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"keepId": "<entity-to-keep>", "mergeId": "<entity-to-remove>"}'Entities
↯eff25fd3
Fortune reports cumulative losses at approximately 1,816 BTC ($116 million) from 5,200+ addresses. TRM Labs publishes detailed on-chain analysis. Bloomberg reports on the attack.(2026-08-03:coinkite-coldcard)event
↯66dab0f5
Cumulative losses reported at over 1,367 BTC (~$88.6 million) from 4,500+ addresses across three waves, per Blockhead.(2026-08-02:coinkite-coldcard)event
↯a8d6a823
Second attack wave: approximately 594 BTC (~$38 million) drained in 25 minutes from ~500 wallets. Coinkite releases emergency firmware patches (v4.2.0 for Mk2/Mk3; v5.6.0 for Mk4/Mk5; v1.5.0Q for Q model).(2026-07-31:coinkite-coldcard)event
↯492de99e
First attack wave: approximately 1,083 BTC (~$70.2 million) drained from 1,196 addresses in 41 minutes. Coinkite publicly discloses the firmware flaw the same day.(2026-07-30:coinkite-coldcard)event
↯07646a81
Bitcoin developer James O'Beirne reportedly warned Coinkite about the flawed RNG implementation in libngu and recommended migrating away from the library. According to O'Beirne, Coinkite dismissed the concern, citing absence of prior discovery as evidence of safety. Coinkite has not confirmed the specifics of this exchange.(2025-05-01:coinkite-coldcard)event
↯cdd6b21d
Coldcard firmware version 4.0.0 officially released, shipping the entropy flaw to all affected device lines.(2021-03-17:coinkite-coldcard)event
↯31b3aa1e
Vulnerable commit introduced into libngu library, replacing hardware RNG calls with weak software PRNG (Yasmarang). The flaw entered the codebase under the pseudonymous account 'switck.'(2021-03-01:coinkite-coldcard)event
♦c37c3b8f
Coinkite / Coldcardtoken
↯31b103b1
Crypto Times weekly security roundup reported the Oraichain incident alongside other exploits totaling more than $37 million in confirmed losses for the week of August 9–15, 2026. No formal Oraichain post-mortem had been published.(2026-08-16:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯ae667830
Harmony Protocol suffered a separate but structurally similar unauthorized minting exploit, with approximately 4 billion ONE tokens minted via a quorum verification flaw.(2026-08-12:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯419c0c1c
Oraichain network reported to have come back online following patching and reconciliation efforts.(2026-08-11:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯cba7d7df
Oraichain issued follow-up statement confirming exploit path had been identified and addressed, and announcing plans to burn unauthorized minted balances to restore canonical supply.(2026-08-10:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
↯0ae39636
MEXC temporarily suspended ORAI deposits and withdrawals at the request of the Oraichain project team.(2026-08-09:oraichain-evm-cross-chain-unauthorized-minting-exploit-august-2026)event
□9e3b22ca
Oraichain — EVM Cross-Chain Unauthorized Minting Exploit (August 2026)organization
↯44d4ec4e
As of this date, no funds from the August 2026 attack have been returned. No law enforcement action has been announced. Total confirmed crypto losses for the week of August 9–15 exceeded $37 million across multiple incidents.(2026-08-16:crypto-whale-repeat-phishing-drain-august-2026)event
↯631117bd
The same wallet was drained of approximately $25.6 million in a second malicious token approval phishing attack. Stolen assets included aWBTC, WBTC, DAI, ETH, cbBTC, USDS, LDO, and CRV. The attacker consolidated proceeds into approximately 20 million DAI and 3,000 ETH across four addresses. On-chain investigator Specter identified attacker address 0x8fEB...F95Ae.(2026-08-12:crypto-whale-repeat-phishing-drain-august-2026)event
↯5c7960bd
The 2023 attacker voluntarily returned approximately 90% of the stolen funds — roughly $21.8 million — to the victim wallet.(2023-09:crypto-whale-repeat-phishing-drain-august-2026)event
↯4760159c
The victim wallet (address prefix 0x13e382) lost approximately $24.23 million in rETH and stETH after signing malicious 'increaseAllowance' transactions granting the attacker token spending approval. Stolen assets were converted to approximately 13,785 ETH and 1.64 million DAI.(2023-09-06:crypto-whale-repeat-phishing-drain-august-2026)event
□2000d65a
Crypto Whale Repeat Phishing Drain — August 2026organization
↯2cd6bf79
No law enforcement action, sanctions designation, or indictment against Jewelbug operators confirmed as of this date.(2026-08-16:jewelbug-apt)event
↯872ca905
TechTimes and TechNadu publish follow-up analysis of the 15-ministry government webmail compromise and the shared XG-Web panel infrastructure.(2026-08-15:jewelbug-apt)event
↯15c4d963
BleepingComputer, The Hacker News, Crypto Briefing, The Cryptonomist, SC Media, and Infosecurity Magazine publish coverage of the Symantec Jewelbug attribution report.(2026-08-13:jewelbug-apt)event
↯4eba4e0a
Group attributed to a five-month intrusion targeting a Russian IT service provider to deliver malware interfering with security tool functionality.(2025-10-01:jewelbug-apt)event
↯fa9fbba5
Sustained operational activity confirmed from at least Q2 2023, including espionage and cryptocurrency fraud campaigns.(2023-04-01:jewelbug-apt)event
↯fcc21f13
Earliest malware samples linked to Jewelbug infrastructure traced to this period, per Symantec analysis.(2013-01-01:jewelbug-apt)event
◎9d23c38a
extrasafe.chatdomain
↯c4c2ae60
Additional coverage by The Coin Republic, CryptoNews.net, and Decrypt confirms scope details including 7-figure USDT wallet targeting and the AML-violation threat framing.(2026-03-21:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯91b7c6c1
Major crypto media outlets including Yahoo Finance, Unchained Crypto, Invezz, and Cryptopolitan publish coverage of the FBI warning, amplifying the alert to the broader crypto community.(2026-03-20:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯f0ed6602
FBI New York Field Office issues official public warning on X (@NewYorkFBI), confirming the fake token campaign and instructing users not to submit identifying information to any associated website. At least 728 wallets are confirmed holding the token at this time.(2026-03-19:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
↯11f88680
Airdrop campaign begins; attacker executes approximately 920 transactions distributing fake FBI tokens to targeted Tron wallets at a reported cost of roughly $40 in TRX fees.(2026-03-11:fbi-fake-token-tron-impersonation-wallet-freeze-extortion-scam-march-2026)event
◇c7ddf8d8
TKYWf5q5dzdeuCg38P8fU3wsGkHo6QL8aFwallet
♦f8140f13
FBI Fake Token Tron Impersonation Wallet Freeze Extortion Scam (March 2026)token
◎e3bbac24
darkmarc.substack.comdomain
↯97d55c04
CoinSpectator publishes an aggregated report citing a Reddit post by user /u/_clickfix_ and linking to a Dark Marc Substack analysis, confirming an active phishing campaign abusing Crypto.com's email infrastructure via SendGrid tracking-domain redirect. One documented victim reports a loss of $50,000 in Bitcoin.(2026-08-10:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯cc64569c
Crypto.com's phishing warning circulates further; GridinSoft and other security outlets document the specific lure types (fake bank-account additions, unrecognized-login alerts, identity-verification demands) being used against Crypto.com customers.(2026-07-31:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯09343553
Crypto.com posts a public warning on X (Twitter) alerting users to 'an increase in targeted industry-wide phishing attacks' and listing protective measures including the Anti-Phishing Code and the Crypto.com Verify tool. One user comments the warning appears to have arrived twelve hours after some fraudulent emails were already received.(2026-07-30:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
↯0b43e2b5
CoinTracking discloses a structurally identical attack: an unauthorized actor accessed its SendGrid marketing account and sent phishing emails from the company's own verified domain to approximately 128,000 external addresses.(2024-11-04:crypto-com-phishing-campaign-email-domain-abuse-august-2026)event
□654e1b7a
Crypto.com Phishing Campaign — Email Domain Abuse (August 2026)organization
↯3e2331d6
Crypto Times reports that over 100 crypto projects shut down in H1 2026, citing RootData data, listing Leap Wallet among the closures and attributing the broader wave to financial exhaustion rather than fraud.(2026-08-04:leap-wallet)event
↯0e4c824e
All Leap Wallet products permanently cease operation. The leapwallet.io domain displays a farewell page. Users who have not exported recovery phrases by this date must retain their seed phrase to recover funds via a compatible wallet.(2026-05-28:leap-wallet)event
↯4cce4e26
Leap Wallet announces permanent shutdown of all products effective May 28, 2026. Affected products include the browser extension, iOS and Android apps, Compass Wallet, Swapfast, the Leap Cosmos Hub validator, and Leap Cosmos Snaps. No specific reason disclosed.(2026-04-03:leap-wallet)event
↯23bea4dc
Leap begins building on the Cosmos interchain. Within approximately one year, the team reports over 300,000 users across its product suite.(2022-07-01:leap-wallet)event
↯67ecb25f
Terra blockchain collapses. Terraform Labs — an investor in Leap — fails. Leap begins pivoting to the broader Cosmos ecosystem.(2022-05-01:leap-wallet)event
Data refreshes within about 10 minutes · All metrics derived from Supabase