← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,559
Relationships
32,624
Potential duplicates
0
Filter by kind
Entities
↯ba572052
Security Alliance (SEAL) publishes 'State of Drainers Vol. 1,' naming Vanilla Drainer among four actively monitored drainer families alongside Inferno, Rublevka, and Eleven.(2025-10-07:vanilla-drainer-daas)event
↯57c6e544
Darkbit links Vanilla Drainer to $2.19 million in July 2025 losses, comprising over 30% of the month's total phishing losses.(2025-07-01:vanilla-drainer-daas)event
↯44cfe50f
Crypto Briefing and MEXC News report that all 8,535 ETH has been fully laundered through Tornado Cash. Recovery prospects considered extremely low.(2026-01-11:truebit-oracle-exploit-january-2026)event
↯f2059145
Lookonchain and Blockchain.news report that the stolen 8,535 ETH has been moved through multiple laundering wallets and deposited into Tornado Cash privacy mixer.(2026-01-10:truebit-oracle-exploit-january-2026)event
↯840b18a1
Blockchain security firms CertiK and PeckShield publish on-chain analysis confirming the exploit details and linking the attacker to the prior Sparkle Protocol incident.(2026-01-09:truebit-oracle-exploit-january-2026)event
↯3b9a0d72
Truebit team issues brief public statement approximately two hours after exploit detection, acknowledging 'a security incident involving one or more malicious actors,' advising against interacting with the affected contract, and stating law enforcement contact.(2026-01-08:truebit-oracle-exploit-january-2026)event
↯f98d75a1
Alleged same primary attacker exploits Sparkle Protocol using a similar integer-overflow minting technique, draining approximately 5 ETH. PeckShield links the Sparkle attacker address to the subsequent Truebit exploit.(2025-12-27:truebit-oracle-exploit-january-2026)event
↯d42b8e88
Primary attacker wallet (0x6c8ec8f14be7c01672d31cfa5f2cefeab2562b50) funded via the Across Protocol cross-chain bridge, approximately 33 days before the exploit.(2025-12-06:truebit-oracle-exploit-january-2026)event
↯a19167ba
Truebit Protocol Purchase contract (0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2) deployed on Ethereum, compiled with Solidity v0.5.3. Source code not verified on Etherscan. No third-party audit on record.(2021-01-01:truebit-oracle-exploit-january-2026)event
◎2f23fba1
↯349a9acc
CryptoTimes fact-check rates as 'partly true' claims that all funds were returned. Total recovered or frozen approximately $9 million of $18.4 million; approximately $8–9 million remains outstanding.(2026-04-18:rhea-finance-exploit-april-2026)event
↯38ee7057
Rhea Finance publishes preliminary analysis. Recovery efforts begin; protocol works with centralized exchanges and security experts.(2026-04-17:rhea-finance-exploit-april-2026)event
↯5d5a4d31
Tether CEO Paolo Ardoino confirms Tether froze $3.291 million USDT in the attacker's wallet. A further $1.053 million USDT frozen in NEAR Intents.(2026-04-16:rhea-finance-exploit-april-2026)event
↯dc1da288
Alleged attacker begins preparation phase: funds primary wallet via cross-chain transfers, distributes funds across 423 intermediary wallets, deploys fake token contracts, and creates eight fraudulent trading pools on Ref Finance.(2026-04-13:rhea-finance-exploit-april-2026)event
↯959cb815
Ref Finance and Burrow Finance announce merger to form Rhea Finance, the chain-abstracted DeFi hub on NEAR Protocol.(2025-03-01:rhea-finance-exploit-april-2026)event
◎042b14bc
↯b3badb56
Li Xiong, alleged chairman of Huione Group and key operational figure linked to Tudou Guarantee's parent network, is extradited from Cambodia to China.(2026-04-01:tudou-guarantee-telegram-marketplace)event
↯d0feee54
Total USDT refunded to Tudou Guarantee merchants exceeds $130 million, per Bitrace analysis. Closure announcement confirmed through Telegram channel screenshots.(2026-01-16:tudou-guarantee-telegram-marketplace)event
↯26669f39
Singapore Police arrest Yeo Sin Huat Alan (53) on money laundering charges linked to Prince Holding Group upon his return from Cambodia.(2026-01-12:tudou-guarantee-telegram-marketplace)event
↯b40bcc73
Elliptic's real-time blockchain monitoring records a sudden drop in activity across Tudou Guarantee's administrative wallets, consistent with operational cessation.(2026-01-07:tudou-guarantee-telegram-marketplace)event
↯76833718
Chen Zhi, chairman of Prince Group, is arrested by Cambodian authorities and extradited to China. Cambodian citizenship was revoked prior to arrest.(2026-01-06:tudou-guarantee-telegram-marketplace)event
↯33389c5d
Tudou Guarantee USDT refund outflows peak at approximately $18.1 million in a single day, according to Bitrace on-chain data.(2026-01-05:tudou-guarantee-telegram-marketplace)event
↯34a910ab
Tudou Guarantee begins returning merchant deposits. Bitrace records approximately $3.7 million in USDT refunds on this date, marking the start of the coordinated wind-down.(2026-01-01:tudou-guarantee-telegram-marketplace)event
↯ed3aa2a9
Singapore Police arrest Nigel Tang Wan Bao Nabil (32) on money laundering charges linked to Prince Holding Group upon his return from Cambodia.(2025-12-11:tudou-guarantee-telegram-marketplace)event
↯9646a257
Singapore Police arrest Tan Yew Kiat (49) on money laundering charges linked to the Prince Holding Group network. Assets including vehicles are subject to prohibition of disposal orders.(2025-11-20:tudou-guarantee-telegram-marketplace)event
↯cb905f89
FinCEN issues final rule severing Huione Group from the U.S. financial system, prohibiting correspondent banking relationships.(2025-10-16:tudou-guarantee-telegram-marketplace)event
↯fa94c467
OFAC and UK FCDO designate Prince Group as a Transnational Criminal Organization, sanctioning 146 associated entities and individuals including Chen Zhi. DOJ simultaneously unseals criminal indictment against Chen Zhi in the Eastern District of New York.(2025-10-14:tudou-guarantee-telegram-marketplace)event
↯2e3979ad
Tudou Guarantee's user base more than doubles following Huione merchant migration. Cryptocurrency inflows reach approximately equal levels to those Huione received prior to its shutdown.(2025-07-01:tudou-guarantee-telegram-marketplace)event
↯d4eaf988
Telegram shuts down Huione Guarantee's public channels. Huione formally directs its merchant network to migrate to Tudou Guarantee. Tudou experiences a 70-fold increase in daily USDT inflows.(2025-05-11:tudou-guarantee-telegram-marketplace)event
↯55efb431
FinCEN finds Huione Group to be a foreign financial institution of primary money laundering concern and proposes a special measure under Section 311 of the USA PATRIOT Act.(2025-05-01:tudou-guarantee-telegram-marketplace)event
↯d9a45209
Huione Guarantee acquires a 30% stake in Tudou Guarantee, positioning Tudou as an operational successor should Huione face enforcement action.(2024-12-01:tudou-guarantee-telegram-marketplace)event
↯7e3d5363
Tudou Guarantee launches on Telegram as a Chinese-language illicit guarantee marketplace. Exact launch date is not publicly documented; 2023 is the reported year of inception.(2023-01-01:tudou-guarantee-telegram-marketplace)event
↯0ee462c1
ReversingLabs documents campaign respawn under Blockmerce and Bridgers Finance personas, with new C2 domain huvaret[.]art and shift to GitHub release artifact delivery.(2026-04-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯535ff597
ReversingLabs publicly discloses the graphalgo campaign; widespread coverage by The Hacker News, Security Affairs, GBHackers, SC Media, and others.(2026-02-15:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯e19c5fe0
Malicious bigmathutils version 1.1.0 published; package had exceeded 10,000 cumulative downloads. Malicious version subsequently removed and package marked deprecated.(2026-02-11:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯d8af98c5
VBS payload variant identified by researchers.(2026-02-04:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯6e9c049b
bigmathutils accumulates over 4,200 weekly downloads; no malicious payload present in published versions yet.(2026-01-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯c594ccde
'Big'-prefixed PyPI package wave begins.(2025-12-09:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯aa531fef
'Big'-prefixed npm package wave begins, starting with bignumx and bignum.(2025-11-17:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯52c55873
Backup domain veltrixcapital[.]ai registered.(2025-09-21:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯89e91591
Blocmerce LLC registered as a real Florida LLC with fake CEO 'Alexandre Miller', pre-positioning for the campaign's next persona phase.(2025-08-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
↯de8a3109
First malicious PyPI package, graphalgo, published to the Python Package Index.(2025-06-13:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
Data refreshes within about 10 minutes · All metrics derived from Supabase