← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
32,370
Relationships
34,903
Potential duplicates
0
Filter by kind
Entities
↯12803728
Attacker exploits reentrancy vulnerability in the Rebalancer contract's _burn() function, draining 133.7 ETH (~$501,000) from the Clober Liquidity Vault using a 267.4 ETH Morpho Blue flash loan and a malicious strategy contract. Stolen funds bridged to Ethereum via Across Protocol.(2024-12-10:clober-liquidity-vault)event
↯96e0a9c6
BTC24H Lock contract on Polygon exploited via missing eligibility check in the 'claim' function; estimated loss of $85,700. Exploit transaction: 0x554c9e4067e3bc0201ba06fc2cfeeacd178d7dd9c69f9b211bc661bb11296fde.(2024-12-16:btc24h)event
↯0feeb10e
GemPad disables Locker service and acknowledges exploit; no compensation plan announced for affected projects(2024-12-17:gempad)event
↯2dbffa56
FEG SmartBridge cross-chain contract exploited via Wormhole relay message spoofing vulnerability; approximately $1.3 million (96.3 ETH on ETH, 73.3 ETH on Base, 712 BNB on BSC) stolen. FEG token price collapses approximately 99%. Funds laundered via Tornado Cash.(2024-12-29:fegex)event
↯c8645c00
Dedaub discloses on X that its monitoring tools had flagged the unchecked flashloan callback and unrestricted approve proxy vulnerabilities in MoonHacker with high confidence prior to the exploit.(2025-01-02:moonhacker)event
↯166f1541
Remaining stolen ETH and WBTC begin dispersal across 35+ wallet addresses; 9.5634 ETH routed through Railgun privacy protocol.(2025-01-08:moby)event
□94d3c59a
Hederaorganization
↯913dcf5a
Stryke Protocol pauses associated vaults and disables deposits/withdrawals as a precautionary measure following the exploit.(2025-01-08:orange-finance)event
↯bca4a5d1
UniLend V2 exploited via flash loan attack exploiting stale health factor calculation logic, resulting in approximately $197,000 in losses from the stETH lending pool. Attacker address: 0x55f5f8058816d5376df310770ca3a2e294089c33.(2025-01-12:unilend-v2)event
↯f576eb25
ZachXBT publicly identifies on-chain commingling of Phemex and Bybit hack proceeds at Ethereum address 0x33d057af74779925c4b2e720a820387cb89f8f65, directly linking both hacks to Lazarus Group.(2025-02-22:phemex)event
↯446d8587
Bybit suffers $1.4 billion hack, subsequently attributed to Lazarus Group.(2025-02-21:phemex)event
↯6a95d229
Global Ledger identifies 2,080+ ETH from Phemex hack routed through Tornado Cash, eXch mixer, THORChain, and Wintermute.(2025-02-19:phemex)event
↯91a47d81
Phemex restores full withdrawal services approximately 10 days after the breach.(2025-02-01:phemex)event
↯4abf8602
Phemex CEO publishes Proof of Reserves and issues compensation plan. Security firms Halborn, Merkle Science, and Hacken begin on-chain analysis; Lazarus Group suspected.(2025-01-24:phemex)event
↯647a1caa
Phemex hot wallets drained across 16 blockchains; estimated $69–85 million stolen. Withdrawals suspended at 15:13 UTC. PeckShield and Cyvers flag approximately 125 suspicious transactions.(2025-01-23:phemex)event
↯b301cff0
Ontario Capital Markets Tribunal rules in Phemex Limited (Re), 2024 ONCMT 30 that Phemex operated an unregistered securities trading platform in Ontario; both entities permanently banned from Ontario capital markets.(2024-12-18:phemex)event
↯480cd5dc
Phemex implements IP-based blocks on Ontario users after being contacted by the Ontario Securities Commission.(2023-01-07:phemex)event
↯9040c70e
UK Financial Conduct Authority designates Phemex as an unauthorized firm operating without FCA approval.(2021-01-01:phemex)event
↯bfd1f3c1
Phemex founded by Jack Tao and seven other former Morgan Stanley executives; incorporated in the British Virgin Islands.(2019-11-01:phemex)event
□5645a6b2
Phemexorganization
↯93170109
Wiz Cloud Threat Landscape database catalogues the DogWifTool supply-chain attack as a notable 2025 security incident.(2025-02-01:dogwiftools)event
↯ccb88de0
Major crypto security outlets including BleepingComputer, Halborn, Rekt News, CryptoTimes, and The Defiant publish coverage of the incident, widely characterizing DogWifTools as a 'fake liquidity generator.'(2025-01-30:dogwiftools)event
↯414d9866
DogWifTools operators publicly attribute the compromise to a third-party actor who gained access via GitHub token; deny it is an internal rug pull.(2025-01-29:dogwiftools)event
↯94e8bb52
Threat actors trojanize DogWifTools versions 1.6.3 through 1.6.6, embedding a Remote Access Trojan (RAT) that downloads 'updater.exe' to harvest private keys, exchange credentials, and KYC identity documents from Windows users.(2025-01-27:dogwiftools)event
↯2c809441
Threat actors reverse-engineer DogWifTools software and extract a GitHub authentication token, gaining covert access to the private repository.(2025-01-01:dogwiftools)event
↯6d54b147
Platform begins selling lifetime licenses at approximately 15 SOL, establishing a paid subscription base of memecoin operators.(2024-07-01:dogwiftools)event
↯f600e457
DogWifTools v1.0 officially released on X, advertising volume bot, bundler, anti-detection bypass, and comment bot features for pump.fun token launches.(2024-07-12:dogwiftools)event
↯e71533af
Sirio Finance is exploited via three flashloan attacks executed through Bonzo Finance. The HSUITE pool is specifically compromised. Estimated $2–3 million is stolen. Smart contracts are immediately frozen.(2025-02-01:sirio-finance)event
↯25247359
ZachXBT publicly flags the exploit and states 'Ionic is just Midas wearing a carnival mask,' referencing two prior 2023 hacks.(2025-02-04:ionic-protocol)event
↯644ec40b
zkLend exploit begins; attacker manipulates wstETH market lending_accumulator via flash loans and rounding errors, draining approximately $9.57 million in ETH, USDC, STRK, and USDT(2025-02-11:zklend)event
↯6a6e20f1
First smart contract exploit: attackers manipulate PancakeSwap V3 pool prices ahead of token launches due to missing price verification checks. Approximately $183,000–$200,000 stolen. four.meme suspends LP function and announces user compensation.(2025-02-11:fourmeme)event
↯3d816c7d
Users flood Cardex's Telegram channel and Abstract's Discord with rug pull accusations and refund demands. Cardex confirms the attack and states cooperation with Abstract to trace stolen funds.(2025-02-18:cardex)event
↯68637ca6
After more than 200 days of inactivity, the exploiter's wallet resurfaces, purchasing 6,316 ETH at an average of $2,109 (~$13.32M). The full balance is subsequently transferred to Tornado Cash. At least 15,470 ETH (~$32.7M) has now been routed through Tornado Cash. No funds recovered.(2026-02-09:infini)event
↯dec9e21b
Exploiter sells a further 1,771 ETH at approximately $4,202/ETH near a local cycle high.(2025-08-01:infini)event
↯e0963e9b
Exploiter's wallet deposits 5,000 ETH into Tornado Cash and sells 1,770 ETH for approximately $5.88 million at $3,322/ETH. PeckShield and CertiK flag the activity.(2025-07-01:infini)event
↯365f7508
Li publicly reaffirms the 20% bounty offer and extends an offer of legal immunity to the attacker. No response from attacker is reported.(2025-03-01:infini)event
Data refreshes within about 10 minutes · All metrics derived from Supabase