Skip to main content
AVOID.NET
← AVOID.NET

Entity Graph

Browse extracted entities, relationships, and potential duplicates.

Total entities
29,559
Relationships
32,624
Potential duplicates
0

Entities

↯
Alleged start of recruitment outreach via LinkedIn, Facebook, and Reddit under Veltrix Capital persona.(2025-05-01:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
a96b22a9
↯
First malicious npm package, graphalgo version 2.2.6, published to the npm registry.(2025-05-02:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
f6387afc
↯
Domain veltrixcap[.]org registered, establishing fake Veltrix Capital infrastructure.(2025-04-04:lazarus-group-graphalgo-fake-recruiter-npm-pypi-campaign)event
3f2a0643
□
Lazarus Group 'Graphalgo' Fake-Recruiter npm/PyPI Campaignorganization
2e967092
↯
FinCEN issues alert to financial institutions on IRGC money laundering through front companies, financial facilitators, and digital assets, explicitly naming Zedcex and Zedxion and identifying 14 red flags including six crypto-specific indicators.(2026-05-11:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
157b7827
↯
Israel's NBCTF adds Zedcex Exchange Ltd. to its sanctions designations.(2026-03-25:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
63a19433
↯
UK Companies House issues first gazette notice for compulsory strike-off of Zedxion Exchange Ltd. under Section 1002A of the Companies Act 2006, citing misleading, false, or deceptive incorporation filings.(2026-03-20:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
8adf1eec
↯
Federal Register publishes notice of OFAC sanctions action against Zedcex, Zedxion, and Babak Morteza Zanjani.(2026-02-04:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
ddc3301b
↯
OFAC designates Zedcex Exchange Ltd., Zedxion Exchange Ltd., and Babak Morteza Zanjani in the first-ever U.S. sanctions action targeting IRGC-linked digital asset exchanges. Seven TRON addresses designated.(2026-01-30:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
c91ffda4
↯
TRM Labs publishes detailed blockchain analysis identifying approximately $1 billion in IRGC-linked flows through Zedcex and Zedxion between 2023 and 2025.(2026-01-09:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
0afbbcd0
↯
Israel's National Bureau for Counter Terror Financing issues Administrative Seizure Order ASO-43/25, listing 187 crypto addresses affiliated with the IRGC, including Zedcex-attributed wallets.(2025-09-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
e7b83b06
↯
Tether blacklists at least one Zedcex-attributed TRON address.(2025-06-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
311ca298
↯
Over $10 million in USDT transferred directly from Zedcex/IRGC-attributed wallets to addresses controlled by Sa'id Ahmad Muhammad al-Jamal, a sanctioned Houthi financier, with no intermediary routing.(2024-12-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
0ebbd692
↯
IRGC-linked transaction flows through Zedcex/Zedxion peak at $619.1 million, representing 87% of all exchange activity for the year.(2024-01-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
f13a13e9
↯
Iran's Supreme Court commutes Zanjani's death sentence to 20 years of imprisonment after he returns approximately $2.1 billion in assets.(2024-04-30:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
1c7769e0
↯
Babak Morteza resigns as Zedxion director. Zedcex Exchange Ltd. incorporated days later (Companies House number 14311274, registered address 71-75 Shelton Street, London WC2H 9JQ).(2022-08-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
38f36881
↯
Babak Morteza (identifying details matching Zanjani) listed as director and Person with Significant Control of Zedxion Exchange Ltd.(2021-10-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
34c7c548
↯
Zedxion Exchange Ltd. incorporated in England and Wales (Companies House number 13404089).(2021-05-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
a640a5b0
↯
OFAC removes Zanjani from the SDN list as part of JCPOA-related delisting. Iranian court sentences him to death for corruption.(2016-01-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
bd22f8df
↯
Babak Morteza Zanjani arrested in Iran on allegations of embezzling approximately $2.7 billion from Iran's National Oil Company.(2013-01-01:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
da783993
↯
OFAC first designates Babak Morteza Zanjani under Executive Order 13382 for acting as a financial facilitator for the IRGC, moving billions in Iranian oil revenue.(2013-04-11:zedcex-zedxion-babak-morteza-zanjani-irgc-linked-exchanges)event
d06cbfb6
↯
Resolv Labs reports over $77 million redeemed for allowlisted pre-exploit USR holders, representing more than 90% of that group, completing phase one of recovery. Vault Street institutional RWA product line announced.(2026-05-27:resolv-usr-stablecoin-minting-exploit-march-2026)event
fca9279d
↯
Resolv Foundation announces tiered compensation plan. Pre-incident USR holders eligible for 1:1 USDC exchange; post-incident holders receive 1:0.5; RLP holders receive 0.71 USDC per token plus RESOLV tokens. Claims window: May 26 – August 26, 2026.(2026-05-26:resolv-usr-stablecoin-minting-exploit-march-2026)event
66126f64
↯
Resolv Labs publicly confirms the exploit. Protocol burns approximately 9 million USR from the attacker's account. Protocol reports functional insolvency: $95M assets vs $173M liabilities.(2026-03-23:resolv-usr-stablecoin-minting-exploit-march-2026)event
64034f5d
↯
Resolv Labs pauses all protocol functions. Fluid/Instadapp records $300M+ in outflows and $10M+ in bad debt. Euler, Venus, Lista DAO, and Inverse Finance pause USR markets. 15 Morpho vaults affected. Gauntlet vaults lose approximately $6 million in USDC to secondary hardcoded-oracle exploit.(2026-03-22:resolv-usr-stablecoin-minting-exploit-march-2026)event
03ce6274
♦
Resolv USR Stablecoin Minting Exploit (March 2026)token
f5a41f52
↯
Venus governance publishes bad-debt repayment proposal for $2,203,024 across 19 affected assets, proposing use of Venus Treasury transfers (CAKE, THE) and Risk Fund transfers (USDT, BNB). Community vote pending. Code-level fix replacing getCashPrior() direct balance read with internalCash state variable is committed.(2026-03-19:venus-protocol-the-token-flash-loan-exploit-march-2026)event
b91e2e8b
↯
Venus Protocol publishes official incident post-mortem on the community forum, disclosing attacker addresses, Tornado Cash funding chain, nine-month preparation timeline, and three root-cause factors: supply cap bypass via donation mechanic, price manipulation via thin liquidity, and illiquid collateral concentration risk. Allez Labs announces post-incident risk review.(2026-03-17:venus-protocol-the-token-flash-loan-exploit-march-2026)event
2a060def
↯
Emergency governance proposal to freeze approximately $3 million in assets still controlled by the attacker passes, contributing to the attacker's estimated net on-chain loss of $4.71 million.(2026-03-15:venus-protocol-the-token-flash-loan-exploit-march-2026)event
7ea57e2d
↯
Gradual accumulation of THE tokens on open markets begins across multiple attacker-controlled addresses. Over nine months the position grows to approximately 12.2 million vTHE tokens, representing 84% of Venus Protocol's 14.5 million THE supply cap.(2025-06-01:venus-protocol-the-token-flash-loan-exploit-march-2026)event
fae6127c
↯
Donation attack exploits Venus Protocol's zkSync deployment, targeting the wUSDM market. Venus absorbs approximately $716,789 in net bad debt. The identical supply-cap bypass mechanism is used. The specific market is patched but no systemic fix is applied across all Venus deployments.(2025-02-27:venus-protocol-the-token-flash-loan-exploit-march-2026)event
8a4ffe78
↯
Code4rena audit of Venus Protocol Isolated Pools documents the donation-attack supply cap bypass as finding M-10, including a working proof of concept. Venus Protocol team dismisses the finding, stating donations are 'supported behavior with no negative side effects.'(2023-05-01:venus-protocol-the-token-flash-loan-exploit-march-2026)event
a3302502
♦
Venus Protocol THE Token Flash-Loan Exploit (March 2026)token
664c7742
↯
Attacker moves 100 ETH to Tornado Cash (tx 0xdc082828a2358ccb33b3837b49bfe678c31259aad59c39c76916a53f8c73853b), signaling intent to launder rather than return funds.(2026-02-27:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
88b8b1a9
↯
Attacker consolidates approximately 380 ETH and bridges funds cross-chain between 09:17 and 09:26 UTC. Attacker does not respond to bounty offer before 72-hour deadline.(2026-02-23:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
52eb4bd6
↯
YieldBlox Security Council sends on-chain bounty message offering 10% white-hat incentive with 72-hour deadline in exchange for return of frozen funds and cessation of legal pursuit.(2026-02-22:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
10b588bc
↯
At 23:35 UTC, attacker creates SDEX manipulation burner account (GCNF5GNRIT6VWYZ7LXUZ33Q3SR2NUGO32F5X65VVKAEWWIQCKGYN75HB) with 15 XLM. At 23:38 UTC, attacker places inflated sell offer for USTRY at 107 USDC per USTRY, approximately 100-fold fair value.(2026-02-21:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
cc62a3ca
↯
Attacker's primary Stellar reconnaissance wallet created, seeded with 56.32 XLM, eight days before the exploit.(2026-02-14:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
64c0429d
↯
Blend V2 Code4rena competitive audit with Certora Formal Verification launched, with a $125,000 USDC prize pool. Reported as the first Rust/Soroban formal verification contest in DeFi.(2025-02-24:yieldblox-stellar-oracle-manipulation-exploit-feb-2026)event
969e8f28
□
YieldBlox Stellar Oracle Manipulation Exploit (Feb 2026)organization
3a3b6b71
◎74ee5553
↯
On-chain analyst b-block posts a public warning identifying two attacker wallets holding 146 ETH (~$306,000) linked to the ongoing fake Uniswap Google Ads campaign. Multiple outlets report cumulative losses of at least $400,000 from this campaign wave. SEAL confirms Uniswap accounts for 41% of all detected malicious DeFi phishing sites.(2026-05-25:fake-uniswap-v4-airdrop-phishing-network-2026)event
4a094008
↯
Cloud Security Alliance publishes analysis of 1Campaign, a cloaking platform used to serve malicious crypto drainer pages through Google Ads while hiding content from reviewers. Platform operator identified by handle DuppyMeister; tool maintained for over three years.(2026-03-23:fake-uniswap-v4-airdrop-phishing-network-2026)event
2cd32425
Data refreshes within about 10 minutes · All metrics derived from Supabase