← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
22,563
Relationships
17,963
Potential duplicates
0
Filter by kind
Entities
↯178d67a8
2026 FIFA World Cup tournament begins; scam infrastructure already fully operational across all documented vectors(2026-06-11:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯a893ba05
WCUP (World Cup PvP) memecoin launches; reaches approximately $50 million market cap on day one following alleged undisclosed paid promotions by crypto influencers on X(2026-06-10:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯9a1ed1fb
Arctic Wolf Labs publishes research on adversary-in-the-middle (AiTM) phishing kit defeating all FIFA account MFA methods in real time(2026-06-09:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯68a26c04
Help Net Security reports Intel 471 assessment that 2026 FIFA World Cup represents 'the largest and most complex cyberattack surface in sporting history'; total domain count cited at 19,000+(2026-06-08:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯0ab81528
FBI IC3 issues PSA I-052726-PSA formally warning consumers about FIFA website spoofing and identifying at least 36 fraudulent domains(2026-05-27:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯87abbf49
Single-day peak: 30 fraudulent FIFA domain registrations observed in one day(2026-04-29:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯f6e1626b
Threat actor claiming ShinyHunters affiliation publishes alleged AFC and Al Nassr FC database containing 150,000+ passport records and player contracts on a cybercrime forum(2026-04-27:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯2675690a
TRM Labs-tracked Polygon wallet address receives approximately $1,562 from fake ticketing scam victims(2026-04-01:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯3b4727fd
Second major GHOST STADIUM domain registration wave, March 20-31; 78 domain registrations recorded in March overall(2026-03-20:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯3208c758
FortiGuard Labs begins observing rapid accumulation of World Cup-themed domain registrations; count reaches 13,000+ by May(2026-01-01:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯e62f21da
First major GHOST STADIUM domain registration wave identified by Hunt.io infrastructure analysis(2025-11-17:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
↯fdb207a6
GHOST STADIUM begins registering fraudulent FIFA domains; Group-IB first observes the threat actor cluster(2025-08-01:fifa-world-cup-2026-crypto-phishing-and-typosquatting-infrastructure)event
⌂c210fb02
FIFA World Cup 2026 Crypto Phishing and Typosquatting Infrastructureprotocol
↯e09ce911
Solido Money protocol suffers a separate exploit involving SUPRA token pricing errors in its Solido Cash product; approximately 293.7 million SUPRA tokens stolen (~$900,000 at time of attack).(2026-07-23:supra-oracle-bonzo-lend-attack-vector)event
↯70086198
Supra CEO Joshua Tobkin publicly addresses the attacker, acknowledges two-year on-chain exposure of the vulnerable code, cites AI-assisted hacking as likely exploit vector, and offers $100,000 bounty + immunity + job offer for fund return. No funds recovered from Wallet A as of reporting.(2026-07-13:supra-oracle-bonzo-lend-attack-vector)event
↯28fdc661
Hedera network DeFi TVL falls ~40% within 24 hours to ~$25.7 million. Bonzo Lend TVL falls 77%.(2026-07-11:supra-oracle-bonzo-lend-attack-vector)event
↯e672923f
Supra patches oracle verifier on Polygon. At least 11 chains total receive the fix between June 29 and July 3, 2026. Hedera deployment is not patched.(2026-07-03:supra-oracle-bonzo-lend-attack-vector)event
↯e607e094
Supra deploys patched SupraSValueFeedVerifier to Base network — earliest confirmed patch in the pre-exploit rollout.(2026-06-29:supra-oracle-bonzo-lend-attack-vector)event
↯2221b526
Bonzo Finance migrates from Chainlink to Supra oracles on Hedera, citing Chainlink's absence from the network.(2024-03-01:supra-oracle-bonzo-lend-attack-vector)event
□cb54de3d
Supra Oracle — Bonzo Lend Attack Vectororganization
◎7d528463
↯7ce494f1
Final operational date for the Summer.fi application and support channels. Lazy Summer Protocol smart contracts remain deployed on-chain under DAO governance.(2026-08-31:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯ce719687
Lazy Summer DAO completes offboarding cleanup across all networks via governance proposals SIP1.7, SIP1.8, SIP1.9, SIP2.59.1-12, and SIP7.3.1-2; all Lazy Summer Vaults reopened for withdrawal, with affected vault users directed to Merkl distribution contracts.(2026-07-30:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯d2dd46ad
Summer.fi Labs publishes formal shutdown announcement, stating the company has 'no viable path forward other than to wind down operations.' The application is to remain live until August 31, 2026.(2026-07-15:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯832b4ac5
Attacker begins laundering stolen funds through Tornado Cash; approximately $1.35 million in DAI has been converted to ETH and deposited into the mixer in batches of 10 ETH or larger.(2026-07-09:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯be4bff1e
SUMR token declines more than 18% following public disclosure of the exploit.(2026-07-06:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯c62e58fc
Attacker begins funding multiple wallets and systematically accumulating stale Silo Varlamore tokens in preparation for the exploit, approximately three months before execution.(2026-04-06:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
↯03589cb8
Stream Finance collapses following a $93 million loss disclosed by an external fund manager; xUSD token crashes 77%, leaving Silo Varlamore USDC Growth tokens with stale inflated on-chain valuations.(2025-11:summer-finance-summer-fi-lazy-summer-protocol-flash-loan-exploit-and-shutdown)event
⌂d2de2c1f
Summer Finance (Summer.fi) — Lazy Summer Protocol Flash Loan Exploit and Shutdownprotocol
↯81f63fd5
Major crypto news outlets and blockchain analytics firms including Chainalysis and TRM Labs publish analyses of the Shelbit designation. Shelbit's website is reported non-functional; the associated gambling network continues to operate.(2026-08-08:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯8fb6f82c
OFAC personally designates Siavash Kayvanpour under Executive Order 13224, alongside five corporate entities (SHPS Shelbit, Shelbit General Trading LLC, Shelbit Technologies Ltd, Crypto Home DMCC, NFT Home DMCC). Aban Tether is simultaneously designated under Executive Order 13902. The action is coordinated with IRS Criminal Investigation.(2026-08-07:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯f0dfab1b
Reuters publishes an investigative report identifying Shelbit as the hub of a USD 4 billion Iranian sanctions-evasion scheme and naming Siavash Kayvanpour as its founder. The report traces connections to the IRGC, Iran's central bank, and an illegal gambling network of over 2,000 websites.(2026-07-31:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯9201856f
Dubai's VARA issues a second enforcement action against Shelbit, ordering a complete halt to unlicensed virtual-asset operations.(2026-07-24:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯06aa5ab7
OFAC designates Nobitex, Iran's largest cryptocurrency exchange, under the Economic Fury campaign. Kayvanpour's wallets had previously sent over USD 2 million to Nobitex.(2026-06-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯2bcada15
Shelbit states it ceased operations. OFAC separately designates Zedcex and Zedxion under the 'Economic Fury' Iran sanctions campaign.(2026-01-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯da30a68f
Shelbit reaches peak monthly volume of USD 735 million.(2025-11-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯54b46a44
Researchers inform Binance about Shelbit's alleged ties to Iran. Binance disputes the allegations.(2025-10-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯5f67bde4
Shelbit addresses send approximately USD 2 million to a wallet subsequently designated by Israel's National Bureau for Counter Terror Financing as Hamas infrastructure.(2025-09-17:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯7d5d77ae
Dubai's Virtual Assets Regulatory Authority (VARA) issues cease-and-desist order against Shelbit General Trading LLC for operating without a license, failing KYC requirements, and marketing services in Dubai without authorization. VARA publishes a notice of fines.(2025-01-02:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯bbbd60c2
Shelbit Exchange begins operations. TRM Labs traces blockchain flows from this date forward.(2024-05-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
↯83d94ec5
Siavash Kayvanpour, Sasha Sobhani, and Pooyan Mokhtari convicted in absentia by Iranian courts for illegal gambling activity. Kayvanpour received a three-month sentence for assisting the operation; Sobhani and Mokhtari received two-year sentences.(2023-01-01:siavash-kayvanpour-ofac-designated-shelbit-founder)event
□db332bbb
Siavash Kayvanpour — OFAC-Designated Shelbit Founderorganization
↯f562ba3d
Judge K. Michael Moore enters approximately $46.2 million default judgment against Pires and Capuci in the SEC's MCC International / Mining Capital Coin civil enforcement action.(2025-08-26:emerson-sousa-pires)event
↯e4f2ba95
CFTC obtains default judgment against Pires and Goncalves in the EmpiresX case: jointly and severally ordered to pay more than $32 million in disgorgement and more than $96 million in civil monetary penalties (approximately $128 million total). Permanent trading and registration bans imposed.(2025-02-04:emerson-sousa-pires)event
↯2ca0407c
Brazilian Federal Police conduct Operation Yang, executing 25 search and seizure warrants and two arrest warrants across multiple states. Reports indicate Pires was arrested in Florianopolis.(2023-09-13:emerson-sousa-pires)event
↯25aa3109
DOJ files notice transferring Pires and Goncalves to fugitive status in the EmpiresX criminal case after they flee to Brazil.(2022-07-01:emerson-sousa-pires)event
↯0fe1367e
DOJ, SEC, and CFTC file parallel criminal and civil charges against Pires, Goncalves, and Nicholas in connection with the EmpiresX scheme, alleging approximately $100 million in investor losses.(2022-06-30:emerson-sousa-pires)event
↯39993ce9
DOJ announces criminal indictment of Luiz Carlos Capuci Jr. in connection with the MCC Mining Capital Coin scheme, alleging a $62 million fraud.(2022-05-09:emerson-sousa-pires)event
Data refreshes every 5 minutes · All metrics derived from Supabase