Phantom Wallet
Summary
Phantom Wallet is a self-custody, non-custodial cryptocurrency wallet developed by Phantom Technologies, Inc., headquartered in San Francisco. Originally launched in 2021 as a Solana-focused browser extension, it has expanded to support Ethereum, Bitcoin, Polygon, Base, and Sui across browser extensions and mobile apps, with approximately 15 million monthly active users and $25 billion in self-custodied assets as of early 2025. The company is well-funded and has engaged constructively with US regulators, though it faces an active civil lawsuit alleging a browser-extension security flaw, and its users have been materially targeted by phishing impersonators and fake app-store clones.
Connected Entities
18 entities · 60 linked investigations- Andreessen Horowitz→funded by→Phantom Wallet(90%)
- Brandon Millman→controls→Phantom Technologies(95%)
- Paradigm→funded by→Phantom Wallet(90%)
- Francesco Agosti→member of→Phantom Wallet(95%)
- Sequoia Capital→funded by→Phantom Wallet(90%)
- 0x Protocol→associated with→Phantom Wallet(80%)
- Chris Kalani→member of→Phantom Wallet(90%)
- Brandon Millman→member of→Phantom Wallet(95%)
- Chris Kalani→member of→Phantom Technologies(90%)
- Garry Tan→member of→Phantom Wallet(75%)
- + 25 more
Connected Through
9 shared actors · 579 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganizationalso inEleven Drainer·0Amnokgang Technology Development Company·0Q2 2026 Bridge Exploit Wave·0KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus·0Faris Ali / UK Crypto Home Invasion Ring·0Voyager Digital·0The DAO Hack 2016·0Uniswap Google Ad Phishing Campaign (May 2026)·0A7A5 Stablecoin / Old Vector·0AI-Powered Crypto Phishing Infrastructure 2026·0Q2 2026 Record Crypto Hack Wave·0Blockchain Bandit·0Operation Economic Outcast — Iran Digital Assets Sectoral Sanctions (August 2026)·0MEV Bot Scam — YouTube AI Trading Bot Campaign (2026)·0$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)·0YieldBlox Stellar Oracle Manipulation Exploit (Feb 2026)·0CryptoZoo·0TraderTraitor / UNC4899·0TrueBit Oracle Exploit (January 2026)·0Mass Ethereum Address-Poisoning Wave (Dec 2025-Jan 2026)·0DPRK IT Worker Network (Overseas Scheme)·0DOJ Pig Butchering $25M Forfeiture 2026·0Lab·0Armstrong / Chindavanh / Rucker Crypto Robbery Gang·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0BonkDAO Treasury Governance Attack (July 2026)·0Bitcoin Latinum·0Google Coin / Fake Gemini AI Chatbot Presale Operation·0Inferno Drainer·0OLPC Token / PancakeSwap OLPC-LABUBU Pool·0Fake Trezor Support Social Engineering — $282M Heist·0Drift Protocol DPRK Exploit (April 2026)·0Solana Blinks / Durable-Nonce Drainer Kits (2026)·0BitMart Exchange — Insolvency Claims and Frozen Withdrawals (August 2026)·0ISIS-K Crypto Funding Network (OFAC July 2026)·0DeFi Governance Attack Wave 2026·0MiningMax·0DSJEX / BG Wealth Sharing·0fake Ledger Live app·0ChainDrop / Shai-Hulud npm Worm August 2026 — Crypto Credential Harvester·0keyv / cacheable npm Supply Chain Attack — TeamPCP Mini Shai-Hulud (August 2026)·0Andean Medjedovic (KyberSwap / Indexed Finance Attacker)·0LAB / LABUSDT·0AI Agent Prompt Injection Crypto Attack Class (2026)·0OFAC Operation Economic Outcast — Iran Digital Assets Sectoral Sanctions August 2026·0HECO Bridge & HTX Exchange Hack·1StableMagnet·2Compounder Finance·2Google Coin / Fake Gemini AI Chatbot Presale Scam·2Jonathan Spalletta·2Trenton Richard Johnston·2Donald G. Basile / Bitcoin Latinum (LTNM)·2Socket Security Malicious Browser Extension Campaign August 2026·2SudoRare·2USI-Tech·2Andean Medjedovic·2Bitpapa IC FZC LLC·2TurtleDex·2ETHTrustFund·2Robinhood Chain Scam Ecosystem·2Frosties NFT·2Andean Medjedovic — KyberSwap/Indexed Finance Fugitive, Active Laundering 2026·2Star Credit Holdings / Misam M. Abidi·2HyperVault·2Gotbit / Vortex / Contrarian / Antier Wash-Trading Ring·2Operation Token Mirrors — DOJ Crypto Market Manipulation Ring·2Bitforex·2QuadrigaCX / Gerald Cotten·2Karatbars International·3FCoin·3M1llionz (RichMilly666)·3SIGMA Bot·4LAB Token (Smartliquid AI)·4zkLend (Starknet)·4CryptoJS Ill Bloom — Weak RNG Multi-Wallet Drain (CVE-2026-71851)·4DxSale·4AscendEX Exchange·4ApeMars (APRZ)·4CLS Global FZC / ZM Quant Investment·4LAB Token·47zarc·4Raidparty·4LML/USDT staking protocol·4Friend Tech·4Kalax·5Venus Protocol THE Token Flash-Loan Exploit (March 2026)·5BitClave·5Grand Base·5luna·5GANA Payment·5Cashio·5WallStreetBets·5Allbridge Core Second Flash-Loan Exploit (July 2026)·6Justin Sun·7Terra 2.0·7Nomad Bridge·8Zoth Protocol·8Rivus DAO·8Taiko L2 Bridge Exploit June 2026·8Roberto Zibert·8Truebit·8Allbridge Core — Second Flash Loan Exploit via Same Unpatched Vector·8C&M Software·8Harmony ONE (Protocol Entity)·8Rhea Finance Exploit (April 2026)·9Nobitex June 2025 Hack (Predatory Sparrow)·10Term Finance — Governance Exploit (August 2026)·10Qubit Finance·10Bunny Finance·10DEUS Finance·10Curio·10Taiko Ethereum L2 Bridge·10UwU Lend·10BearnFi·12Bidao·12Ploutos Money·12Raft Protocol·12DeepSnitch AI·12CrossCurve (formerly EYWA) Bridge Exploit (Feb 2026)·12Popsicle Finance·12PlayDapp·12LastPass·12BarnBridge·12Masa·12Summer.fi Lazy Summer Exploit (July 2026)·12XBridge·12Allbridge Core Solana Flash Loan Exploit (July 2026)·14Terence Kwok — Humanity Protocol Staged Hack·14Ionic Money·14WEMIX / WEMIX$ Stablecoin·14Loopring DEX — Trustless Exit Disabled at Shutdown·14Garden Finance·14Voltage Finance·15BNB Chain Bridge·16Levyathan·18Bankr·18Cascade Protocol·18BounceBit L1 Exploit and Chain Shutdown (August 2026)·18OlympusDAO·18Tectonic Protocol·18MoonHacker·18FOMO Token·18Pond0x·18Humanity Protocol June 2026 Hack·18Fantasm Finance·18Dexible V2·18Noones·18Convergence·18HyPC·18Lodestar Finance·20ForceBridge·20Hinkal Protocol·20Verus Protocol (VRSC)·21Cork Protocol·22FEGex·22EdgeX / EDGE Token·22Gravity Bridge·22Triple-A Treasury Hack (July 2026)·22Hunter Biden ($LAPTOP token)·22DAO Maker Vesting·22ElasticSwap·22Resolv·22TAC Chain·22FutureSwap·22Lodestar V0·22Summer.fi (Lazy Summer Protocol)·22Wise Lending V1·22NowSwap·22Eclipse·22Earning.Farm·22Africoin·22Pike V1·22Term Finance·22Locus Finance·22B² Network·23Aster (ASTER)·23Makina Finance·24Carrot Protocol·24zombies·25Coinsbuy·26Taiko·26Shuffle (shuffle.com)·26Frank DeGods·26BullX·27Shibarium·28Nesa (NES)·28SharedStake·28Aperture LM·28PAAL AI·28Super Sushi Samurai·28DeFiTuna·28Verus Protocol·28Superfortune AI (GUA)·28Bunni Protocol·28Orion Pools·28Pike Finance·28TAC Network·28Kinto Bridge·28Aquifer AMM·28BtcTurk·28Remitano·28JRNY Crypto·28dForce Lending·28KyberSwap Classic·28Growth DeFi·28Spartans Bet·28Zcash Orchard Counterfeit Vulnerability·28CrossCurve·28UPCX·28Mixin Network·28Typus Perp·28GeniusAI·28Lendf.me·30Evmos Network·30Tia·30Venice Token·30Tether Gold (XAUT)·31Nexera·32MANTRA Chain Upstream Exploit (August 2026)·32Vestra DAO·32Shibarium Bridge·32TempleDAO·32ChangeNOW·32Dolomite·32Blend Pools V2·32numa.·32Zinc·32LayerZero Labs·32Gamma Strategies·33Apyx Finance·33Revert Lend·33The Sandbox (SAND OFT Exploit)·34Hyperdrive HL·35Steadefi·35Cod3x·36Aethir·36Panoptic V1.1·370x62d5a59e0d67c0381aad53b201b4a1b8dcd2c833·37MONA (Monavale / DIGITALAX)·38Chads NFT·38CoinDCX·38Astera.fi·38Polymarket — June 2026 Supply Chain Attack·380x5a76a2830859c321a50937a22fde571fbf4810f3·38Axie Infinity·38IoTeX·38The Sandbox SAND Bridge Exploit·38Amun·38Symbiosis Finance·38THORChain GG20 MPC Vault Exploit (May 2026)·38BitoPro·38USD1 (World Liberty Financial)·38Astrid Finance·38Hemi (Genesis Drop / MerkleBox Exploit)·38MustStopMurad·38Unilend V2·38Thunder Terminal·38WazirX·38StakeDAO — vsdCRV Deployer Key Exploit (May 2026)·38Rho Markets·38KAT katana-network·39M2·39Juicebox V3·40Bedrock Protocol·41Jump Trading·42Orion Protocol·42Balancer·42DGLD·42Midnight Network / NIGHT Token·42Polygon (POL)·44Midnight (NIGHT Token)·44SuperRare·45Binance·45Zilliqa·46Flash Trade·48Aptos·50ZRX (0x Protocol)·50Sky (MakerDAO)·51PeopleDAO·52Internet Computer·52Clober Liquidity Vault·52LCX Exchange·52THORChain·52Bittensor·52SushiSwap·52Leap Wallet·52GHO·53Ethereum Foundation·53Jupiter Perps·54Robinhood Crypto·54Fuse Wallet·54SushiSwap RouteProcessor Exploit·54Celestia·54LCX·54Ethena·55Hedera·55Lulo·55Trust Wallet·55Exponent Finance·55Kevin Rose·57Gnosis Pay Zodiac Delay Module Exploit·57Famous Fox Federation·57Allo Protocol·57ZKsync·57Sui·57Socket Protocol·58Linea·58Sei Network·58Scroll·58Aerodrome Finance·58Gemini Exchange·58Audius·58Synthetix·58Spicenet·58Euler Finance·58Yearn Ether·58Cega·58Eigenlayer·58Ethereum Classic·58Uniswap·58Ethena·58Optimism·60Convex Finance·62Curve Finance·62Starknet·62Hyperliquid·62Raydium Protocol·62PAX Gold (PAXG)·62Curve DEX·62Raydium AMM·62Canton Network·63Ethereum·64Rocket Pool·64Kaspa·64Chainlink·67Safe{Wallet}·68Crossmint·70Lido Finance·70USD Coin (USDC)·71Circle USYC·73Marinade Finance·79ZachXBT·82BlackRock USD Institutional Digital Liquidity Fund (BUIDL)·82
- ♦Bitcointokenalso inBitcoin Xchange (Syria-based, ISIS-Linked)·0Abdelhakim Boukich·0Operation Economic Outcast — Iran Digital Assets Sectoral Sanctions (August 2026)·0Mass Ethereum Address-Poisoning Wave (Dec 2025-Jan 2026)·0TraderTraitor / UNC4899·0Rathnakishore Giri·0DPRK IT Worker Network (Overseas Scheme)·0AudiA6·0JADEPUFFER·0Crypto.com Phishing Campaign — Email Domain Abuse (August 2026)·0KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus·0Mukhtar Adamu Muhammad (ISIS-WA Nigeria Crypto Facilitator)·0Blockchain Bandit·0YieldBlox Stellar Oracle Manipulation Exploit (Feb 2026)·0Voyager Digital·0Zyaire Wilkins (Steam Malware Crypto Theft Ring)·0Crypto Dispensers / Virtual Assets LLC·0DOJ Pig Butchering $25M Forfeiture 2026·0Tudou Guarantee Telegram Marketplace·0Miloud Abderrahmane (ISIS TRON Facilitator, France)·0Courier-Based Pig Butchering Scam Network (FBI Warning June 2026)·0Rodney Burton (Bitcoin Rodney)·0$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)·0Q2 2026 Record Crypto Hack Wave·0JADEPUFFER – First Fully Autonomous AI Ransomware Targeting Crypto Wallet Keys·0Chen Zhi / Prince Holding Group·0Adam Iza·0Southeast Asian Pig-Butchering Scam Compounds (276-Arrest Operation)·0Malone Lam·0WEL1DROPPER — 800 Malicious npm Packages RAT and Crypto Infostealer Campaign (August 2026)·0Fake Trezor Support Social Engineering — $282M Heist·0ClickFix macOS Go-Based Infostealer Crypto Wallet Drainer (August 2026)·0World Cup 2026 Crypto Scam Network·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0H1 2026 Bridge Hack Cluster — Same-Day $35.6M Attack Wave July 22-23·0Gamer Crew $263M Social Engineering Ring (New Defendants)·0Bitcoin Latinum·0FIFA World Cup 2026 Crypto Scam Infrastructure·0Prince Group Transnational Criminal Organization·0Armstrong / Chindavanh / Rucker Crypto Robbery Gang·0OFAC Operation Economic Outcast — Iran Digital Assets Sectoral Sanctions August 2026·0PGI Global·0OFAC ISIS-K 134-Address SDN Batch (July 2026)·0ChainDrop / Shai-Hulud npm Worm August 2026 — Crypto Credential Harvester·0Huione Group (Haowang Guarantee)·0Ruslan Igorevich Tkachuk·2Alexander Vladimirovich Ledenev·2USI-Tech·2Google Coin / Fake Gemini AI Chatbot Presale Scam·2Jonathan Spalletta·2Aman Kesar India Crypto Scam Ring·2Xinbi Marketplace·2Donald G. Basile / Bitcoin Latinum (LTNM)·2Hu Xiaowei (Prince Group second-in-command)·2Bitpapa IC FZC LLC·2Trenton Richard Johnston·2BTC-e·2Mr. Parveen India Social Engineering Scam Ring·2Malone Lam·2Finiko·2eXch·2BitBank (Iranian Crypto Exchange)·2Coldcard / Coinkite Firmware Seed-Generation Exploit (July-August 2026)·3Delio (South Korea Crypto Lender Fraud)·3AudiA6 Mixing Service·3FCoin·3CryptoJS Ill Bloom — Weak RNG Multi-Wallet Drain (CVE-2026-71851)·4Paxful·4TradeOgre·4Undisclosed KOL Promo Network (ZachXBT Exposé, September 2025)·5luna·5Coldcard / Coinkite Hardware Wallet Firmware Exploit·6Adform Ad-Tech Supply Chain Wallet Swap Attack·6Sportsbet·6Justin Sun·7Huobi / HTX·7Terra 2.0·7Roberto Zibert·8C&M Software·8Ostium Protocol — Oracle Signer Key Compromise (July 2026)·8Poolin Technology·8Rhea Finance Exploit (April 2026)·9Little Boy Plus - BSC DeFi Logic Exploit·10Nobitex June 2025 Hack (Predatory Sparrow)·10BitMEX (2026 Class Action — Insider Trading and Liquidation Fraud)·10Bitfinex Hack·10Abracadabra Money MIM Depeg June 2026·12LastPass·12Joaquin Diaz (Orionx Co-Founder)·12Michele Spagnuolo·12Ionic Money·14Pi Network (PI)·14Garden Finance·14Bitget VOXEL Futures Manipulation April 2025·14Bitget VOXEL Futures Manipulation April 2026·16Pond0x·18BounceBit L1 Exploit and Chain Shutdown (August 2026)·18Austin Fine (@xmrfine)·18Tectonic Protocol·18Liquid Network / Elements Cache-Bug Exploit (September 2026)·18Kroll·18Bitfinex Hack 2016·21Triple-A Treasury Hack (July 2026)·22Syscoin Bridge·22Hunter Biden ($LAPTOP token)·22Liquid Network·22CyberLeek Solana Token·22Africoin·22B² Network·23zombies·25HTX (Huobi) Exchange·25Shuffle (shuffle.com)·26Shibarium·28TBTFW (Beverly Hills Luxury Car Dealer — Crypto Laundering Vector)·28BitMEX Exchange·28ALEX Lab·28Mixin Network·28dForce Lending·28Spartans Bet·28BtcTurk·28Lendf.me·30Evmos Network·30Arthur Hayes (Maelstrom)·30OKX NFT Aggregator·30Symbiosis Finance BridgeV2 syBTC Exploit (September 2026)·30Revolut Data Breach (Fake Government Request, September 2026)·30Venice Token·30BitClout / DeSo / Nader Al-Naji·32Blockstream Liquid Network·32ChangeNOW·32Tropykus RSK·32TeleSwap·32Apyx Finance·33Strike·34Dogwifhat (WIF)·38Volo Vault·38Coincheck·38SideSwap·38IoTeX·38Amun·38Symbiosis Finance·38THORChain GG20 MPC Vault Exploit (May 2026)·38BitoPro·38M2·39Bedrock Protocol·41SafePal·42Swiss Bitcoin Pay·42DGLD·42Midnight Network / NIGHT Token·42Chainflip·42Tria·42Zapper·47Flash Trade·48Aptos·50Internet Computer·52THORChain·52Leap Wallet·52Tether·52Bittensor·52Robinhood Crypto·54Hedera·55Trust Wallet·55Kevin Rose·57Trezor·57Gemini Exchange·58Bitcoin·62Starknet·62PAX Gold (PAXG)·62Canton Network·63Litecoin·64Kaspa·64Bitstamp·67Safe{Wallet}·68ZachXBT·82
- □ZachXBTorganizationalso inDean Daghita / CMDSS (Command Services and Support)·0Gurhan Kiziloz·0Gurhan Kiziloz (BlockDAG Co-Founder)·0$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)·0Blockchain Bandit·0Faris Ali / UK Crypto Home Invasion Ring·0Yelo (yelotree)·0Lab·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0Wojtek Kulisz aka Merry (SIM-Swap Gang)·0Ben 'BitBoy' Armstrong·0Inferno Drainer·0DSJEX / BG Wealth Sharing·0Poland SIM-Swap Crypto Theft Ring — June/July 2026·0LastPass threat actor·0Fake Trezor Support Social Engineering — $282M Heist·0LAB / LABUSDT·0Chris Larsen·0StableMagnet·2AnubisDAO·2SudoRare·2Jonathan Spalletta·2Aman Kesar India Crypto Scam Ring·2HQI Exchange·2Trenton Richard Johnston·2Blur Finance·2ETHTrustFund·2Gotbit·2HyperVault·2Bitforex·2Wiz Khalifa Pump Fun·2Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)·2Mr. Parveen India Social Engineering Scam Ring·2Aqua·2eXch·2Malone Lam·2M1llionz (RichMilly666)·3AudiA6 Mixing Service·3LAB Token (Smartliquid AI)·4AscendEX Exchange·4Brandon Michael Tardibone·4RaveDAO (RAVE Token)·4LML/USDT staking protocol·4Raidparty·4Friend Tech·47zarc·4Crypto Beast (ALT Token Influencer)·4Undisclosed KOL Promo Network (ZachXBT Exposé, September 2025)·5Grand Base·5WallStreetBets·5JELLY·5GANA Payment·5Rivus DAO·8Wonderland Finance·8Axiom DEX Insider Trading (Broox Bauer)·8Nobitex June 2025 Hack (Predatory Sparrow)·10Sheldon Xia (BitMart Founder)·10UwU Lend·10BearnFi·12Rain Protocol (RAIN Token)·12Meteora / Benjamin Chow·12Abracadabra Money MIM Depeg June 2026·12ZachXBT Crypto Influencer Paid-Promotion Leak (200+ Influencers, September 2025)·12Gym Network·12Popsicle Finance·12LastPass·12Masa·12Terence Kwok — Humanity Protocol Staged Hack·14Ionic Money·14Shawn Liu·14Garden Finance·14Austin Fine (@xmrfine)·18MoonHacker·18JUDAO·18Skyward Finance·18Cyrus Finance·18Humanity Protocol June 2026 Hack·18Kroll·18Cetus CLMM·18Noones·18Concentric·18Alpha Finance Lab·18HyPC·18OKX DEX·18ForceBridge·20FEGex·22EdgeX / EDGE Token·22XT Exchange·22ElasticSwap·22DeltaPrime·22Ratio Finance·22Locus Finance·22Wise Lending V1·22Axiom DEX Employee Insider Trading·22FutureSwap·22Shido·22Earning.Farm·22Eclipse·22RocketSwap Base·22Pike V1·22Renzo·22Shuffle (shuffle.com)·26PAAL AI·28SharedStake·28Aperture LM·28Orion Pools·28TBTFW (Beverly Hills Luxury Car Dealer — Crypto Laundering Vector)·28Kinto Bridge·28ALEX Lab·28Truflation·28Token 2049·28GeniusAI·28JRNY Crypto·28Growth DeFi·28KyberSwap Classic·28Moola Market·28OlaXBT·28Arthur Hayes (Maelstrom)·30OKX NFT Aggregator·30Axiom Exchange — Employee Insider Trading Scandal·30Revolut Data Breach (Fake Government Request, September 2026)·30Nexera·32Serenity Shield·32Arena SocialFi·32PiggyBank Protocol·32Axiom·32Geoffrey Woo·32TeleSwap·32Themis Protocol·32Sentiment·32Eleven Finance·32Revert Lend·33Strike·34Hyperdrive HL·35Aethir·36Cod3x·36Panoptic V1.1·37Astera.fi·38Ansem / $ANSEM ("Black Bull") creator-coin controversy·38MONA (Monavale / DIGITALAX)·38Volo Vault·38Polymarket — June 2026 Supply Chain Attack·38Dogwifhat (WIF)·38CoinDCX·38PRXVT·38Amun·38Kipseli·38BitoPro·38Astrid Finance·38Thunder Terminal·38Offshore Cryptocurrency Exchanges to Avoid·38MustStopMurad·38M2·39Juicebox V3·40Nelly·40SafePal·42CoinEx Exchange Closure (September 2026)·42Tectonic·42DGLD·42Cozy V2·42PeopleDAO·52SushiSwap·52Trust Wallet·55Transak·55Blast·55Trezor·57Crypto.com·58Ethena·58Raydium AMM·62Cointelegraph·62Litecoin·64Superteam·72ZachXBT·82
- □Solanaorganizationalso inKelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus·0Q2 2026 Bridge Exploit Wave·0CATFI Memecoin·0BonkDAO Treasury Governance Attack·0Q2 2026 Record Crypto Hack Wave·0Ben Pasternak / Believe / LAUNCHCOIN·0MEV Bot Scam — YouTube AI Trading Bot Campaign (2026)·0Mach-O Man Malware Campaign (Lazarus / Chollima)·0DPRK IT Worker Network (Overseas Scheme)·0Yelo (yelotree)·0Lab·0Solana Blinks / Durable-Nonce Drainer Kits (2026)·0H1 2026 Bridge Hack Cluster — Same-Day $35.6M Attack Wave July 22-23·0Google Coin / Fake Gemini AI Chatbot Presale Operation·0Solana Token-2022 Permanent Delegate Rug Pull Factory·0AI Agent Prompt Injection Crypto Attack Class (2026)·0fake Ledger Live app·0Sam Bankman-Fried·0LAB / LABUSDT·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0BonkDAO Treasury Governance Attack (July 2026)·0DeFi Governance Attack Wave 2026·0HECO Bridge & HTX Exchange Hack·1Socket Security Malicious Browser Extension Campaign August 2026·2Google Coin / Fake Gemini AI Chatbot Presale Scam·2Basis Markets·2HQI Exchange·2Robinhood Chain Scam Ecosystem·2Aqua·2Bitforex·2Wiz Khalifa Pump Fun·2Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)·2Dragoma·3SIGMA Bot·4LAB Token (Smartliquid AI)·4Crypto Beast (ALT Token Influencer)·4YZY Money·4Undisclosed KOL Promo Network (ZachXBT Exposé, September 2025)·5JELLY·5Input Output Group (IOG) YouTube Channel Hijack – Deepfake Hoskinson Giveaway Scam·5Allbridge Core Second Flash-Loan Exploit (July 2026)·6Axiom DEX Insider Trading (Broox Bauer)·8OverHere Limited / Clinton So·8Rhea Finance Exploit (April 2026)·9Nobitex June 2025 Hack (Predatory Sparrow)·10Bidao·12Meteora / Benjamin Chow·12DeepSnitch AI·12ZachXBT Crypto Influencer Paid-Promotion Leak (200+ Influencers, September 2025)·12Allbridge Core Solana Flash Loan Exploit (July 2026)·14OpenZeppelin AI Exploit Threat Vector·15Remora Markets·16Pond0x·18FOMO Token·18Cascade Protocol·18Tectonic Protocol·18OlympusDAO·18Noones·18LetsBonk.fun·20Triple-A Treasury Hack (July 2026)·22Hunter Biden ($LAPTOP token)·22Eclipse·22Ratio Finance·22CyberLeek Solana Token·22CyberLeek / CYBERLEEK Solana Token·22Trezor Email Provider Breach (Brevo, September 2026)·22Axiom DEX Employee Insider Trading·22Carrot Protocol·24Aurory·26Frank DeGods·26BullX·27Shibarium·28Boop (boop.fun)·28DeFiTuna·28ElizaOS / AI16Z (Eliza Labs)·28Aquifer AMM·28Moola Market·28Dunamu / Upbit·30Axiom Exchange — Employee Insider Trading Scandal·30Cropper Finance·32Daos.fun·32Adrena Protocol·32PiggyBank Protocol·32Axiom·32Zinc·32Eleven Finance·32Epicentral Labs·34Honeyland·34Cod3x·36Genopets·37Griffain·37CoinDCX·38Chads NFT·38Ansem / $ANSEM ("Black Bull") creator-coin controversy·38Fogo·38Avici·38Dogwifhat (WIF)·38IoTeX·38Symbiosis Finance·38Thunder Terminal·38MustStopMurad·38M2·39Jump Trading·42Chainflip·42Midnight Network / NIGHT Token·42Lifinity·47Flash Trade·48BonkBot·49Aptos·50ZRX (0x Protocol)·50Sky (MakerDAO)·51Teraswitch (Solana validator hosting concentration incident)·52Internet Computer·52Decaf·52Leap Wallet·52Robinhood Crypto·54Fuse Wallet·54Jupiter Perps·54Lulo·55Exponent Finance·55YLDS·56Famous Fox Federation·57Trezor·57Audius·58Titan Exchange·58Cega·58Solana·62Raydium Protocol·62cat in a dogs world·62Raydium AMM·62Clockwork·68Edgevana·69Crossmint·70USD Coin (USDC)·71Glow Wallet·72Superteam·72Circle USYC·73BlazeStake·73Marinade Finance·79BlackRock USD Institutional Digital Liquidity Fund (BUIDL)·82
- ♦Coinbasetokenalso inGoliath Ventures / Christopher Delgado·0DOJ Pig Butchering $25M Forfeiture 2026·0Mastra AI npm Supply Chain Attack (June 2026)·0Miasma npm Supply Chain Attack (Red Hat)·0BonkDAO Treasury Governance Attack·0AI-Powered Crypto Phishing Infrastructure 2026·0IRS Fake Digital Asset Compliance Portal Phishing Campaign 2026·0IRS Fake Digital Asset Compliance Portal Letter Campaign — 2026·0DOJ DC 25M Crypto Fraud Forfeiture July 2026·0Solana Blinks / Durable-Nonce Drainer Kits (2026)·0MiCA Transition Impersonation Scam Wave 2026·0EU MiCA Post-Deadline Regulator Impersonation Scam Cluster·0fake Ledger Live app·0Google Coin / Fake Gemini AI Chatbot Presale Operation·0AI Agent Prompt Injection Crypto Attack Class (2026)·0Inferno Drainer·0Resolv USR Stablecoin Minting Exploit (March 2026)·2Aman Kesar India Crypto Scam Ring·2Socket Security Malicious Browser Extension Campaign August 2026·2Google Coin / Fake Gemini AI Chatbot Presale Scam·2ETHTrustFund·2Mr. Parveen India Social Engineering Scam Ring·2FCoin·3Ismael Sanchez / CryptoFX·3YZY Money·4Friend Tech·4Web3Port·5Kalax·5Grand Base·5Normie (NORMIE)·8Roberto Zibert·8Ostium Protocol — Oracle Signer Key Compromise (July 2026)·8Raft Protocol·12Joaquin Diaz (Orionx Co-Founder)·12PlayDapp·12Pi Network (PI)·14Garden Finance·14OpenZeppelin AI Exploit Threat Vector·15Bankr·18Cascade Protocol·18MiCA EU Mass Non-Compliance — 83% Unlicensed Platform Risk·18Hunter Biden ($LAPTOP token)·22Resolv·22RocketSwap Base·22Libra / Diem·25Shuffle (shuffle.com)·26BtcTurk·28Truflation·28Evmos Network·30BitClout / DeSo / Nader Al-Naji·32LeetSwap·32numa.·32The Sandbox (SAND OFT Exploit)·34Panoptic V1.1·37Dogwifhat (WIF)·380x5a76a2830859c321a50937a22fde571fbf4810f3·38MONA (Monavale / DIGITALAX)·38CoinDCX·38The Sandbox SAND Bridge Exploit·38Astrid Finance·38Fantom (Sonic Labs)·42Ripple Labs·47Zapper·47Aptos·50ZRX (0x Protocol)·50LCX Exchange·52Clober Liquidity Vault·52Hxro Network·53Fuse Wallet·54Robinhood Crypto·54Celestia·54Allo Protocol·57ZKsync·57AKT·57Sui·57Aerodrome Finance·58Euler Finance·58Sei Network·58Socket Protocol·58Cega·58Polkadot·58Ethena·58Optimism·60Coinbase·62Convex Finance·62PAX Gold (PAXG)·62Raydium AMM·62Kaspa·64Uniblock·64Litecoin·64Chainlink·67Crossmint·70Lido Finance·70USD Coin (USDC)·71DOJ Scam Center Disruption Week (June 2026)·84
- □Polygonorganizationalso inInferno Drainer·0FIFA World Cup 2026 Crypto Scam Infrastructure·0StableMagnet·2AnubisDAO·2Andean Medjedovic·2Blur Finance·2Dragoma·3AscendEX Exchange·4CryptoJS Ill Bloom — Weak RNG Multi-Wallet Drain (CVE-2026-71851)·4DxSale·4Titan·8Bunny Finance·10EasyFi·10Ploutos Money·12Joaquin Diaz (Orionx Co-Founder)·12PlayDapp·12Ionic Money·14BNB Chain Bridge·16PancakeBunny·18JUDAO·18Dexible V2·18Triple-A Treasury Hack (July 2026)·22ElasticSwap·22Africoin·22Frank DeGods·26Shibarium·28TAC Network·28GeniusAI·28dForce Lending·28Renzo Protocol·28KyberSwap Classic·28BtcTurk·28Shibarium Bridge·32Eleven Finance·32Revert Lend·33The Sandbox (SAND OFT Exploit)·34Polymarket — June 2026 Supply Chain Attack·38MONA (Monavale / DIGITALAX)·38Amun·38The Sandbox SAND Bridge Exploit·38IoTeX·38BitoPro·38KAT katana-network·39Balancer·42Polygon (POL)·44SushiSwap·52Polygon·54Robinhood Crypto·54SushiSwap RouteProcessor Exploit·54Celestia·54Trust Wallet·55Allo Protocol·57ZKsync·57Convex Finance·62Curve DEX·62Safe{Wallet}·68USD Coin (USDC)·71BlackRock USD Institutional Digital Liquidity Fund (BUIDL)·82
- □Phantom Walletorganizationalso inMastra AI npm Supply Chain Attack (June 2026)·0node-gyp npm Supply Chain Compromise (June 2026)·0Uniswap Google Ad Phishing Campaign (May 2026)·0UNK_DeadDrop North Korea Developer Phishing Campaign·0Miasma npm Supply Chain Attack (Red Hat)·0Solana Blinks / Durable-Nonce Drainer Kits (2026)·0Donald G. Basile / Bitcoin Latinum (LTNM)·2WAYGU CASH·18BullX·27Leap Wallet·52Fuse Wallet·54Lulo·55Transak·55Famous Fox Federation·57Glow Wallet·72
- □Slope Walletorganizationalso inSlope Wallet·28
- □Sequoia Capitalorganizationalso inFTX·0
Timeline(17 events)
2021
Phantom Technologies, Inc. founded by Brandon Millman, Francesco Agosti, and Chris Kalani, all former 0x Protocol engineers
TechCrunch14 July 2021
Phantom raises $9 million Series A led by a16z, with Variant Fund, Jump Capital, DeFi Alliance, Solana Foundation, and Garry Tan participating
TechCrunchSeptember 2021
Halborn privately discloses the 'Demonic' vulnerability affecting Phantom's browser extension, in which browsers cache seed phrases in plaintext
Halborn2022
Phantom begins rolling out patches for the Demonic vulnerability; all users protected by April 2022
Phantom blog31 January 2022
Phantom raises $109 million Series B led by Paradigm at a $1.2 billion valuation; launches iOS mobile app
CoinDesk3 August 2022
Approximately 8,000 Solana-ecosystem wallets drained in exploit later attributed to Slope Wallet's insecure key logging; Phantom wallets not directly compromised but some affected users had previously imported seed phrases from Slope
CoinDeskJune 2024
Fake Phantom wallet application appears in Apple iOS App Store, harvesting seed phrases from users who attempt to import wallets
crypto.news7 June 2024
Least Authority publishes independent security audit of Phantom Wallet; findings include two non-critical deficiencies later resolved by the Phantom team
Least Authority2 December 2024
Solana web3.js npm library supply chain attack discovered; Phantom confirms it does not use the compromised library versions and is unaffected
Mitrade / The Hacker News16 January 2025
Phantom raises $150 million Series C co-led by Sequoia Capital and Paradigm at a $3 billion valuation
Phantom blog / The Block20 January 2025
Alleged hack of plaintiff Liam Murphy's wallets via Phantom browser extension; $500,000 in WIENER tokens liquidated, causing alleged 99% token value collapse
Decrypt14 April 2025
Thomas Liam Murphy and 13 co-plaintiffs file $3.1M lawsuit against Phantom Technologies and OKX in SDNY, alleging unencrypted private key storage and Commodity Exchange Act violations
Decrypt17 June 2025
Phantom Technologies submits letter to SEC Crypto Task Force arguing wallet does not constitute broker activity and does not require Exchange Act registration
SEC.gov17 March 2026
CFTC Division of Enforcement issues Staff Letter 26-09 — a no-action position — to Phantom Technologies, permitting wallet integration with regulated derivatives platforms without introducing broker registration, subject to ten conditions
CFTC.gov / CoinDesk7 April 2026
Phantom experiences temporary service outage causing incorrect balance and price display; company states user funds unaffected; service restored same day
The BlockDecision Log
- hash: 2cvU9RK6G7Tvxot794TbfATn6o3r64G4Z2cZvKJWmd1o
- hash: GPsB81q36PtpaaE38JvrvfYs6hwMbbFL6YEUDL9cmFo3
- hash: 6NHrVie21NJp4XrdJNGHPptRqCycPVNbmZFxqyRPhmzu
- hash: 42zC6xrGgMFYjLrEJGGU8ST1VaqsPhuJxTt6ZNPsZRfx
- hash: GzH9sy38PVFRTr53Qns4HZYijZ3yAZryHWvKA8BHSBTH
- hash: 5WXFU6XJzcJ2K1ZBivkr4Au2YrofVCNjrvhq1P8NhGkr
- hash: GhddYFK5NE8FUeMHiVp1HLeJx3PAsrbwq7F2YRsYkpUx
- hash: 4tnfumtFPA3cUoo7wtRynSSmybrZomHdtkeFyez9FFaQ
- hash: ELUE9SbUiZfpXNpekWfiHKsXEFV8v1WMvmVm753SRWDM
- hash: AYou1mvo9BEgfHg67w3xi1kwTqNfvkdgzk3ksKo4NCnb
This investigation is cryptographically anchored to the Solana blockchain (10 events). 30 of 30 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 4/20/2026, 5:55:06 AM
last updated: 7/24/2026, 3:56:29 PM
56 viewsavoid.net — verified advice for a post-truth world