← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
28,829
Relationships
32,002
Potential duplicates
4
Filter by kind
Potential Duplicates
Entities with similar names that may refer to the same thing. Use the merge API to combine them.
substring match↯ Payy publishes its official post-mortem attributing the exploit to the missing A(1) = 0 boundary check in Barretenberg's small-subgroup IPA verifier. No user compensation plan is announced.↔↯ Payy published a technical post-mortem attributing the exploit's root cause to a proving-system vulnerability in the Noir/Barretenberg verifier developed by Aztec.fffd976d / be2c4658
substring match↯ Payy Network halts all operations including deposits, withdrawals, transfers, and card transactions. The company confirms stolen funds were users' non-custodial deposits and rules out compromised keys and social engineering.↔↯ Payy stated it had completed initial root-cause analysis, ruled out a compromised key, social engineering, and off-chain infrastructure breach, and engaged a third-party audit firm to validate findings before publishing a full report.180de1c4 / 08fd86c3
substring match↯ Aztec ships the IPA verifier fix in Barretenberg v5.0.0 stable release. Payy remains on its older pinned version.↔↯ The Barretenberg fix was shipped in release v5.0.0; Payy's deployment, pinned to an older version, reportedly did not receive the patch and was not notified.a620d739 / 84e0ffb8
substring match↯ Aztec patches the Barretenberg IPA verifier boundary check flaw (missing A(1) = 0) in commit 58bf73a. Payy is not notified and does not update its dependency.↔↯ Aztec reportedly fixed a missing boundary-opening check (A(1) = 0) in Barretenberg's small-subgroup IPA verifier, per Payy's post-mortem as summarized by a secondary source.f9e0999f / 530d08dc
Merge instructions
curl -X POST /api/graph/merge \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"keepId": "<entity-to-keep>", "mergeId": "<entity-to-remove>"}'Entities
↯23d84bc4
TrueFi reports $4 million in bad debt from Blockwater Technologies and Invictus Capital defaults; default protection fund covers only one-third of losses.(2022-10-13:archblock-trueusd-trusttoken-truecoin)event
↯76422559
TrustToken raises $12.5 million round from a16z, BlockTower, and Alameda Research for the TrueFi protocol.(2021-08-04:archblock-trueusd-trusttoken-truecoin)event
↯e4842583
Archblock sells TrueUSD to Justin Sun-linked Techteryx for approximately $28 million; private key control transfers to Techteryx.(2020-12-01:archblock-trueusd-trusttoken-truecoin)event
↯91a83865
SEC alleged period of unregistered and fraudulent TUSD investment contract offering begins (November 2020 per SEC complaint).(2020-11-01:archblock-trueusd-trusttoken-truecoin)event
↯f6b5d417
Co-founder and CEO Daniel Jaiyong An removed by board vote. Rafael Cosman and others allegedly ousted An while he was negotiating a TrueUSD sale to Justin Sun.(2020-07-01:archblock-trueusd-trusttoken-truecoin)event
↯bc510477
TrustToken raises $20 million token presale led by Andreessen Horowitz (a16z), BlockTower, and Danhua Capital.(2018-06-01:archblock-trueusd-trusttoken-truecoin)event
↯400b9b6b
TrueUSD (TUSD) stablecoin launched, marketed as fully USD-backed with third-party escrow.(2018-03-01:archblock-trueusd-trusttoken-truecoin)event
↯0ee19f9c
TrustToken Inc. founded in San Francisco by Rafael Cosman, Danny An, Stephen Kade, and Tory Reiss.(2017-01-01:archblock-trueusd-trusttoken-truecoin)event
◎0d143cad
blog.fizen.iodomain
◎414a1b34
aztec.networkdomain
◎151f4d34
cve.threatint.comdomain
↯f7d22669
As of this report's date, Payy Network remains halted. No reimbursement plan, restart timeline, or number of affected users has been publicly disclosed.(2026-10-02:payy-network)event
↯fffd976d
Payy publishes its official post-mortem attributing the exploit to the missing A(1) = 0 boundary check in Barretenberg's small-subgroup IPA verifier. No user compensation plan is announced.(2026-09-29:payy-network)event
↯180de1c4
Payy Network halts all operations including deposits, withdrawals, transfers, and card transactions. The company confirms stolen funds were users' non-custodial deposits and rules out compromised keys and social engineering.(2026-09-25:payy-network)event
↯deb8ec31
The attacker's address conducts reconnaissance activity — depositing and withdrawing small amounts from the Payy bridge — two days before the exploit.(2026-09-22:payy-network)event
↯a620d739
Aztec ships the IPA verifier fix in Barretenberg v5.0.0 stable release. Payy remains on its older pinned version.(2026-07-13:payy-network)event
↯f9e0999f
Aztec patches the Barretenberg IPA verifier boundary check flaw (missing A(1) = 0) in commit 58bf73a. Payy is not notified and does not update its dependency.(2026-05-14:payy-network)event
↯3325ecc0
Payy Network announces $6 million seed funding round led by FirstMark Capital, with Robot Ventures and DBA Crypto participating.(2026-03-26:payy-network)event
↯101e4146
Payy Network's Barretenberg dependency pinned to version 3.0.0-manual.20251030, the version that would remain in production through the exploit.(2025-10-30:payy-network)event
↯762c4fe2
Archblock LLC, TrustToken Inc., TrueCoin LLC, Archblock (Cayman), TrueCoin II LLC, and TrueTrading 1 GP LLC file voluntary Chapter 11 petitions in U.S. Bankruptcy Court, District of Delaware (Case No. 26-10152); automatic stay halts Celsius lawsuit.(2026-02-06:archblock-trueusd-trusttoken-truecoin)event
↯c77a01c7
Celsius Network estate files fraud, conversion, and breach-of-contract lawsuit (Case No. 3:25-cv-08966, N.D. Cal.) against Archblock, TrustToken, and TrueCoin alleging ~$12.9 million in unrecoverable stablecoins and misappropriation of customer deposits.(2025-10-17:archblock-trueusd-trusttoken-truecoin)event
↯d0cf8dc9
SEC announces settled charges against TrueCoin LLC and TrustToken Inc. for unregistered investment contracts and misrepresented TUSD reserves; companies pay approximately $700,000 total without admitting or denying allegations.(2024-09-24:archblock-trueusd-trusttoken-truecoin)event
↯3f73ddbb
Techteryx assumes full operational control of TUSD reserve management as redemption failures from the Aria Commodity Finance Fund mount; Justin Sun reportedly extends emergency liquidity support.(2023-07:archblock-trueusd-trusttoken-truecoin)event
↯70bb193c
Escrow partner Prime Trust is ordered to halt withdrawals amid state regulatory action; TUSD briefly depegs to roughly $0.80 on Binance.US after disclosure that a portion of its reserves sat at the affected depository.(2023-06:archblock-trueusd-trusttoken-truecoin)event
↯7dd411a7
TrustToken rebrands as Archblock, shifting focus to institutional DeFi infrastructure under CEO Ryan Christensen.(2022-09:archblock-trueusd-trusttoken-truecoin)event
↯a61c3cb2
TrustToken/Archblock sells TrueUSD to Techteryx, a company reported to be linked to Justin Sun, for approximately $28 million, while retaining a revenue-sharing services agreement.(2020-12:archblock-trueusd-trusttoken-truecoin)event
↯0fc83e8e
TrueUSD (TUSD), developed by TrustToken, launches as an early fully-collateralized, audited dollar-pegged stablecoin.(2018:archblock-trueusd-trusttoken-truecoin)event
♦32df7b18
Archblock (TrueUSD / TrustToken / TrueCoin)token
↯287b5d7c
X suspends the @clippymsftcto impersonator account. The @ClippyMSFT account continues promoting the $CLIPPY token.(2026-10-02:clippy-token-clippy-microsoft-x-account-hijack)event
↯afded645
An older Clippy-themed Solana token (Clippy PFP Cult, contract: 7eMJmn1bYWSQEwxAX7CyngBzGNGu1cT582asKxxRpump) reaches an all-time high market cap of approximately $36.6 million.(2025-08-11:clippy-token-clippy-microsoft-x-account-hijack)event
↯5b4425dc
A Solana token named 'Microsoft Mascot' with symbol CLIPPY (contract: GyGYxT6XVwtAuEEVSn2V6YZ7bgkCxkjVzyWt8ogtpump) is created on the Solana blockchain via Pump.fun.(2024-10-29:clippy-token-clippy-microsoft-x-account-hijack)event
↯6936df80
Microsoft India's verified X account is compromised in a SIM-swapping attack. Attackers impersonate investor Keith Gill to promote a fraudulent GameStop crypto presale and direct followers to a wallet-draining phishing site.(2024-06-04:clippy-token-clippy-microsoft-x-account-hijack)event
◇9fc32d43
GyGYxT6XVwtAuEEVSn2V6YZ7bgkCxkjVzyWt8ogtpumpwallet
♦b336c2ba
Clippy Token ($CLIPPY) — Microsoft X Account Hijacktoken
↯be2c4658
Payy published a technical post-mortem attributing the exploit's root cause to a proving-system vulnerability in the Noir/Barretenberg verifier developed by Aztec.(2026-09-29:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯3a7baf1a
A GitHub security advisory and CVE (CVE-2026-48100) describing a soundness flaw in Payy's agg_agg aggregation circuit, patched in version 1.3.0, was published.(2026-09-28:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯08fd86c3
Payy stated it had completed initial root-cause analysis, ruled out a compromised key, social engineering, and off-chain infrastructure breach, and engaged a third-party audit firm to validate findings before publishing a full report.(2026-09-25:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯58c38d73
A second transaction several hours after the first drained a further approximately 90,202 USDC to the same receiving address, bringing the combined total to roughly $1.92 million.(2026-09-24:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯84e0ffb8
The Barretenberg fix was shipped in release v5.0.0; Payy's deployment, pinned to an older version, reportedly did not receive the patch and was not notified.(2026-07-13:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
↯530d08dc
Aztec reportedly fixed a missing boundary-opening check (A(1) = 0) in Barretenberg's small-subgroup IPA verifier, per Payy's post-mortem as summarized by a secondary source.(2026-05-14:payy-network-noir-barretenberg-verifier-flaw-post-mortem)event
⌂8091e2ee
Payy Network — Noir/Barretenberg Verifier Flaw Post-Mortemprotocol
↯01208f8a
Scammers deploy a counterfeit GIWA Layer 2 network using chain ID 9134, including a fraudulent cross-chain bridge. DYORSwap lists the fraudulent network. Approximately 767.65 ETH begins flowing in from roughly 1,335 addresses.(2026-09-26:dyorswap)event
↯d0c1c2d8
DYORSwap begins public activity; @DYORSWAPDEX Twitter/X account launches. Approximate date based on account activity records.(2024-01-01:dyorswap)event
⌂5f09cb71
DYORSwapprotocol
◎ba343a69
windowslatest.comdomain
Data refreshes every 5 minutes · All metrics derived from Supabase