← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,497
Relationships
32,575
Potential duplicates
0
Filter by kind
Entities
↯3be4ee3a
Exploiter begins moving approximately 75,701 ETH (~$175 million) into freshly created Ethereum mainnet addresses and begins routing funds through THORChain, converting ETH to Bitcoin. THORChain volume surges approximately 18x.(2026-04-21:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
↯1c484781
Arbitrum Security Council freezes 30,766 ETH (~$71 million) linked to the exploiter on Arbitrum One, moving funds to an intermediary wallet accessible only through further governance action. The freeze is coordinated with law enforcement.(2026-04-20:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
↯f88f4946
LayerZero publishes its initial postmortem, attributing the hack with preliminary confidence to North Korea's Lazarus Group / TraderTraitor subunit and placing responsibility on KelpDAO's 1-of-1 DVN configuration.(2026-04-19:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
↯037a23f9
At 18:21 UTC, KelpDAO's emergency pauser multisig freezes protocol core contracts. Two follow-up attack attempts at 18:26 and 18:28 UTC (each targeting approximately $100 million) revert. KelpDAO publicly acknowledges the exploit on social media at 20:10 UTC.(2026-04-18:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
↯cd230a7c
Drift Protocol hack: alleged North Korean hackers (identified as a distinct group from TraderTraitor) steal $285 million from Drift via compromised multisig signers and exploitation of Solana durable nonce features — the first of two large DPRK attacks in April 2026.(2026-04-01:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
↯02305404
Alleged start of the social engineering campaign: attackers harvest session keys from a LayerZero Labs developer, enabling access to LayerZero's RPC cloud environment and planting of poisoned internal RPC nodes in preparation for the exploit.(2026-03-06:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
↯ed0ef061
Wu Huihui, a Chinese crypto broker later linked to laundering KelpDAO exploit proceeds, is indicted for laundering Lazarus Group crypto thefts. Funding chains from the KelpDAO exploit were later traced to a Bitcoin wallet he controlled as far back as 2018.(2023-01-01:kelpdao-layerzero-bridge-exploit-april-2026-dprk-lazarus)event
□6fdef2e1
KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarusorganization
↯4b01f282
CryptoTimes reports that crypto bridge hacks have exceeded $328 million in losses in 2026, listing CrossCurve as one of the early incidents in the year's elevated attack environment.(2026-05-18:crosscurve-bridge-hack-february-2026)event
↯62d0d973
BlockEden publishes detailed technical post-mortem, confirming the attack flow through expressExecute and the threshold-of-1 configuration flaw as enabling conditions.(2026-03-16:crosscurve-bridge-hack-february-2026)event
↯87b7cf22
72-hour bounty deadline passes. CrossCurve indicates escalation to criminal referrals, civil litigation, and coordination with exchanges and analytics firms. No confirmed attacker response is publicly documented.(2026-02-05:crosscurve-bridge-hack-february-2026)event
↯f1213457
CrossCurve publishes ten Ethereum wallet addresses identified as having received exploited funds, including 0xAc8f44ceCa92b2a4b30360E5bd3043850a0FFcbE and 0x8c259f1e53e79408095d0ba805554d4cdda15285. Curve Finance separately advises users to review exposure to CrossCurve-related liquidity pools.(2026-02-02:crosscurve-bridge-hack-february-2026)event
↯bb3ff4cb
Exploit begins at approximately 06:38 PM UTC. Attacker calls expressExecute() on CrossCurve's ReceiverAxelar contract with a forged cross-chain payload, exploiting missing gateway validation to unlock tokens from PortalV2 across multiple chains. PortalV2 balance drops from roughly $3 million to near zero.(2026-02-01:crosscurve-bridge-hack-february-2026)event
↯b3d05ccf
EYWA announces an additional financing round with participation from 1inch co-founder and Kenetic Fund, bringing total disclosed funding to approximately $8.5 million.(2024-12-21:crosscurve-bridge-hack-february-2026)event
↯6d2edcf9
EYWA Protocol announces a $7 million seed round led by Michael Egorov (Curve Finance), with Fenbushi Capital, GBV Capital, Big Brain Holdings, Marshland Capital, and Mulana Capital participating.(2024-05-02:crosscurve-bridge-hack-february-2026)event
↯af2d1d96
Curve Finance founder Michael Egorov becomes an early investor in EYWA Protocol (later rebranded CrossCurve).(2023-09-01:crosscurve-bridge-hack-february-2026)event
◎75378641
millenniumpost.indomain
◎f0ddc4aa
industrywired.comdomain
◎c6dd56b0
dailypioneer.comdomain
◎f8769d18
fintechbiznews.comdomain
◎bb8ce529
etvbharat.comdomain
↯92cd3e48
FintechBizNews and other outlets report on the ED's official disclosure. ED indicates multiple additional foreign investors were allegedly defrauded but have not yet filed complaints.(2026-07-22:india-otc-crypto-kol-scam-ravindra-k-mohammed-waseem-saurabh-diwan-vaibhav-gupta)event
↯f4957d54
ED publicly discloses the investigation, naming Mohammed Waseem, Saurabh Diwan, Vaibhav Gupta, and Ravindra K as accused. ED states total estimated scam value is approximately USD 35 million (₹336–337 crore), significantly higher than the FIR figure.(2026-07-21:india-otc-crypto-kol-scam-ravindra-k-mohammed-waseem-saurabh-diwan-vaibhav-gupta)event
↯595be2f2
Search operations continue on the second day. Authorities seize digital storage devices, email repositories, wallet credentials, and USDT (amount reported as either 8,700 or 87,000 USDT across sources).(2026-07-19:india-otc-crypto-kol-scam-ravindra-k-mohammed-waseem-saurabh-diwan-vaibhav-gupta)event
↯a3a0f59d
ED's Bengaluru Zonal Office commences search operations under PMLA at multiple Bengaluru premises associated with the accused.(2026-07-18:india-otc-crypto-kol-scam-ravindra-k-mohammed-waseem-saurabh-diwan-vaibhav-gupta)event
↯e05df82e
A Dutch commercial entity files a First Information Report at the Cyber Crime Police Station, South Andaman, alleging large-scale fraud in OTC cryptocurrency trades valued at approximately USD 10 million.(2026-07-01:india-otc-crypto-kol-scam-ravindra-k-mohammed-waseem-saurabh-diwan-vaibhav-gupta)event
↯9a61bbef
Similar OTC token allocation fraud schemes involving self-styled crypto influencers reportedly surface in India, predating the formal ED investigation.(2025-06:india-otc-crypto-kol-scam-ravindra-k-mohammed-waseem-saurabh-diwan-vaibhav-gupta)event
□7936cd06
India OTC Crypto KOL Scam (Ravindra K / Mohammed Waseem / Saurabh Diwan / Vaibhav Gupta)organization
◎b7d2b9da
news.ssbcrack.comdomain
◎e096f799
kbhbradio.comdomain
◎650105e7
dakotanewsnow.comdomain
◎2845460c
sdpb.orgdomain
↯fff16127
Court-appointed receiver's investigation finds Benaiah entities collected $25.1 million from investors, returned $12 million, and transferred $5.7 million to Wiener personally(2025-08-28:benjamin-paul-wiener)event
↯237927d2
Benaiah Capital established as wealth management company focused on digital currencies; two hedge funds launched by mid-2021(2021-01-01:benjamin-paul-wiener)event
◎ce856b54
globalcryptopress.comdomain
↯b30b82ae
Allbridge announced a structural redesign of Core: liquidity pools to be removed within three months, with routing switched to CCTP and LayerZero to eliminate the pool-based attack surface.(2026-07-20:allbridge-core-solana-flash-loan-exploit-july-2026)event
↯287da695
Stolen funds bridged from Solana (attacker address: FhffBraZsGn4H2LxLNToEcaHWEfWwT2UcSz4oRHb7Qdc) to Ethereum (address: 0x651591b68A9c9650FB23F642162353306281ffDe) and dispersed across additional addresses, with partial routing through privacy pools.(2026-07-19:allbridge-core-solana-flash-loan-exploit-july-2026)event
↯1dd358e5
Allbridge published postmortem and relaunched Core with stated fix: single liquidity pool per blockchain, Rebalancer Authority, and automatic circuit-breaker mechanisms. The fix was applied to BNB Chain but the Solana deployment was not correspondingly updated.(2023-05-30:allbridge-core-solana-flash-loan-exploit-july-2026)event
↯f7a8d062
Allbridge recovered approximately $465,000 of stolen funds through a white-hat arrangement with the attacker and compensated affected users who submitted recovery applications.(2023-04-01:allbridge-core-solana-flash-loan-exploit-july-2026)event
◇3d02b4ed
FhffBraZsGn4H2LxLNToEcaHWEfWwT2UcSz4oRHb7Qdcwallet
□4539dd44
Allbridge Core Solana Flash Loan Exploit (July 2026)organization
↯d77e70e4
The ED arrests three additional accused — Milan Garg, Sukhdev Thakur, and Abhishek Sharma — under PMLA Section 19(1). A Special Court (PMLA) in Shimla grants 12 days of custodial interrogation.(2026-07-17:korvio-coin-kro)event
↯f6208471
CryptoTimes reports the Himachal Pradesh probe has stalled: 76 total SIT arrests, 69 already on bail, no trial commenced, and alleged mastermind Subhash Sharma remains in Dubai.(2026-07-15:korvio-coin-kro)event
↯5caea34f
The ED's Shimla office conducts search-and-seizure operations and arrests Masoom Juneja under Section 19(1) of the PMLA as a key alleged accomplice. Co-accused Vijay Juneja is held in state police custody. The ED recovers incriminating documents and digital devices.(2026-06-15:korvio-coin-kro)event
Data refreshes within about 10 minutes · All metrics derived from Supabase