← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,477
Relationships
32,559
Potential duplicates
0
Filter by kind
Entities
↯7c8bfe4d
Alleged incident: Broox Bauer allegedly distributes a screenshot of private wallets connected to a trader identified as 'Jerry' obtained via internal dashboard.(2025-04-01:axiom-exchange-employee-insider-trading-scandal)event
↯334a377e
Axiom launches in early access on Solana. Alleged internal tool abuse begins shortly after launch, according to ZachXBT's investigation.(2025-01-01:axiom-exchange-employee-insider-trading-scandal)event
↯13e67f0a
Axiom Exchange founded by Henry Zhang (Mist) and Preston Ellis (Cal); accepted into Y Combinator Winter 2025 batch.(2024-01-01:axiom-exchange-employee-insider-trading-scandal)event
△7ccb0d7a
Axiom Exchange — Employee Insider Trading Scandalexchange
↯a8aab4b3
Basse-Terre Court of Appeal approves extradition of John Daghita to the United States.(2026-05-28:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯838a55ea
Daghita appears before the indictment chamber of the Court of Appeal in Basse-Terre, Guadeloupe. He reportedly requests his own extradition to the United States, stating he wants to explain himself in U.S. courts. Magistrates reserve decision until May 28.(2026-05-21:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯be4a22e1
Federal grand jury in Alexandria, Virginia, returns a 15-count indictment against John Daghita in the Eastern District of Virginia, charging wire fraud, theft of public money, money laundering, and unlawful monetary transactions.(2026-03-26:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯d0e2fa8c
FBI Director Kash Patel publicly announces arrest via X and shares photos of Daghita in custody and the seized suitcase of cash and hardware wallets.(2026-03-05:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯fa7cb12b
John Daghita arrested at Villa Sun Reset on the island of Saint Martin by French Gendarmerie elite tactical unit in collaboration with the FBI Washington Field Office. Seized items include $239,348 in cash, a Rolex GMT Master, and multiple hardware wallets.(2026-03-04:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯c7466a57
Wallet linked to the alleged theft deploys $LICK meme coin on Pump.fun (Solana). The token collapses approximately 97% within 24 hours. Pump.fun removes the ticker.(2026-01-01:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯61c35951
ZachXBT publishes findings publicly identifying the 'John/Lick' persona as John Daghita and alleging the son of a USMS contractor executive stole more than $40 million in government cryptocurrency. U.S. Marshals Service confirms investigation.(2026-01-26:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯044c9995
During an online 'band-for-band' exchange, a participant using the handle 'John' or 'Lick' screen-shares wallet balances and moves approximately $23 million live; ZachXBT observes the recorded session and traces the wallets to U.S. government seizure addresses. An additional $41 million in transfers alleged to have occurred on January 22-23.(2026-01-23:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯dc851087
USMS instructs CMDSS to return approximately $2 million in virtual currency to a USMS-owned address. Approximately 20 minutes later, Daghita allegedly diverts the assets to a non-USMS address instead.(2026-01-22:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯9a7a25d4
John Daghita allegedly initiates three transfers totaling approximately $5 million from USMS-controlled wallets to wallets he personally controlled — the first alleged theft transactions per the indictment.(2025-12-15:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯42f602ca
CMDSS (Command Services & Support), owned by Dean Daghita, awarded a ~$4 million U.S. Marshals Service contract for custody and disposal of Class 2-4 seized digital assets.(2024-10-01:john-daghita-aka-lick-us-marshals-crypto-theft)event
↯69dcd23f
Wallet address 0xc7a2 allegedly received $24.9 million from a U.S. government address tied to the 2016 Bitfinex hack seizure, per ZachXBT on-chain analysis.(2024-03-01:john-daghita-aka-lick-us-marshals-crypto-theft)event
□657a8a36
John Daghita (aka Lick) — US Marshals Crypto Theftorganization
↯93dfb957
Multiple major cybersecurity and crypto news outlets published detailed reporting on the arrests, including BleepingComputer and Help Net Security, expanding public awareness of the operation.(2026-06-26:poland-sim-swap-crypto-theft-ring-june-july-2026)event
↯3be3f23b
Blockchain investigator ZachXBT alleged via Telegram that one of the arrested individuals is Wojtek Kulisz, operating under the alias 'Merry,' based on matching designer clothing and jewelry between official police raid footage and the suspect's Instagram account. Polish authorities did not confirm this identification.(2026-06-25:poland-sim-swap-crypto-theft-ring-june-july-2026)event
⌂72ca1b17
Poland SIM-Swap Crypto Theft Ring — June/July 2026protocol
↯ec0211f3
GBHackers, CyberSecurityNews, and Rescana published public reports summarizing the incident, including the 'M-RED-TEAM v6.4' self-identification and the broader campaign context.(2026-07-21:asyncapi-npm-supply-chain-attack-miasma-rat-july-2026)event
↯b7dcae03
Palo Alto Networks Unit42 updated its npm threat landscape report to reference the AsyncAPI incident in the context of import-time payload delivery as an emerging technique.(2026-07-15:asyncapi-npm-supply-chain-attack-miasma-rat-july-2026)event
↯feef6940
Between approximately 11:12 and 11:18 UTC, all five malicious package versions were unpublished from the npm registry, ending the active distribution window.(2026-07-14:asyncapi-npm-supply-chain-attack-miasma-rat-july-2026)event
↯cc6c11ed
A proposed fix for the pull_request_target misconfiguration was submitted but was not merged into the AsyncAPI repository, leaving the vulnerability open for 58 more days.(2026-05-17:asyncapi-npm-supply-chain-attack-miasma-rat-july-2026)event
↯5931fa6c
A contributor identified the pull_request_target misconfiguration in AsyncAPI's manual-netlify-preview.yml workflow and submitted a proof-of-concept demonstrating the vulnerability.(2026-04-29:asyncapi-npm-supply-chain-attack-miasma-rat-july-2026)event
◇11229ea6
a7e18d96efd3cdb127ef4cdcad9e3ad26c482bf2wallet
□bb6b214e
AsyncAPI npm Supply Chain Attack (Miasma RAT) — July 2026organization
◎7f831957
bitcoinwell.comdomain
◎bf7dacad
blog.coinkite.comdomain
Coldcard / Coinkite Firmware Seed-Generation Exploit (July-August 2026)0Coldcard / Coinkite — August 2026 Multi-Actor Attacker Cluster0Coldcard / Coinkite Hardware Wallet Firmware Exploit5Coldcard / Coinkite — Firmware Seed Entropy Exploit (Multi-Actor, August 2026)11Coldcard Wallet (Coinkite Firmware Exploit)28+6 more
↯8e2e29c3
Investigation date. No regulatory actions or class action lawsuits against Coinkite publicly confirmed. Attacker identity remains unknown. Stolen BTC remains in attacker-controlled addresses per available on-chain data.(2026-08-01:coldcard-coinkite-hardware-wallet-firmware-exploit)event
↯dcb78453
Bitcoin Core developer Gregory Sanders reproduces the attack using Mk3 setup button-press counts, confirming impact on Mk3 and Mk2 models. Kevin Loaec (Wizardsardine) and Rob Hamilton (AnchorWatch) are among early public alerts.(2026-07-31:coldcard-coinkite-hardware-wallet-firmware-exploit)event
↯237646dc
Coinkite publishes a security advisory disclosing the firmware entropy vulnerability affecting Coldcard Mk3 devices (firmware 4.0.1 through 4.1.9) and Mk4/Mk5/Q devices (seeds generated before patched firmware versions). Fixed firmware versions released: 4.2.0+ for Mk3, 5.6.0+ for Mk4/Mk5, 1.5.0Q+ for Q.(2026-07-30:coldcard-coinkite-hardware-wallet-firmware-exploit)event
↯4a7db93d
Mk4, Mk5, and Q devices begin shipping with firmware that similarly reduced seed entropy to approximately 72 bits, with the flaw present in all versions prior to the patched releases.(2021-03-01:coldcard-coinkite-hardware-wallet-firmware-exploit)event
♦457d9a41
Coldcard / Coinkite Hardware Wallet Firmware Exploittoken
↯c027f5cf
Multiple crypto and financial news outlets report on the five complaints; Scam Center Strike Force total cryptocurrency seizures reported at approximately $832.8 million since November 2025 launch.(2026-07-22:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯e36c529c
U.S. Attorney's Office for the District of Columbia files five civil forfeiture complaints (26-cv-2539 through 26-cv-2543) in U.S. District Court for DC, collectively targeting over $26.4 million in USDT.(2026-07-21:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯24e381db
Tether freezes six addresses linked to the investment platform withdrawal-blocking scheme (complaint 26-cv-2543), less than two months before the civil complaint is filed.(2026-05-27:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯8c9ccded
Scam Center Strike Force announces seizure milestone of over $580 million in cryptocurrency from Chinese transnational criminal organizations, reached within three months of launch.(2026-02-26:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯632cc7df
U.S. Attorney Jeanine Ferris Pirro launches the Scam Center Strike Force, targeting Southeast Asian cryptocurrency fraud linked to Chinese transnational criminal organizations.(2025-11-01:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯d47e8ed1
Cryptocurrency transfers totaling approximately 3.2 million USDT linked to the Apex Financial / NCA recovery fraud begin flowing to the addresses targeted in complaint 26-cv-2541.(2025-10-01:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯8cdd2080
Tether freezes Zoomex spoof-linked addresses within one day of a U.S. Secret Service request.(2025-07-01:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯66e8fe23
UK National Crime Agency refers the Apex Financial / recovery fraud investigation to USAO-DC.(2025-01-01:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯74859f15
Ontario Provincial Police refers the multi-platform laundering network investigation to USAO-DC.(2024-11-01:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
↯64bcf8c1
Multi-platform laundering network (BitaGold, SteemFly, Smart Labs, Bdswg.com) begins documented activity; network eventually processes over $78 million in alleged fraud proceeds through January 2026.(2023-01-01:doj-dc-25m-crypto-fraud-forfeiture-july-2026)event
□9379758f
DOJ DC 25M Crypto Fraud Forfeiture July 2026organization
↯00d43600
X product head Nikita Bier announced enhanced anti-bot detection and AI-generated content flagging in response to the exposure(2026-03-23:ai-fake-x-account-crypto-scam-network-2026)event
↯a0adf082
Ten accounts in the identified cluster simultaneously promoted the $ORAMAMA meme token in a coordinated pump-and-dump event; on-chain evidence subsequently indicated six-figure profits; accounts never mentioned the token again after this date(2026-02-22:ai-fake-x-account-crypto-scam-network-2026)event
↯63f228ce
@BinsaeedRashid account, with 353,000+ followers, received X verification, lending additional false credibility to its fabricated persona(2026-02-01:ai-fake-x-account-crypto-scam-network-2026)event
Data refreshes within about 10 minutes · All metrics derived from Supabase