doing onchain investigations better than your local law firm

Investigative Analyst
Joined January 2026
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @MayaStone420
Swap service with no aml and kyc
1
4
1,091
Replying to @DontTraceMeBruh
At least wait for the first swap to finish
29
2,153
Replying to @XMRVoid
From what I understand they hold guarantee deposits on several services like OrangeFren
9
2,430
Replying to @OrangeFren
Pablo Cash statement: "After receiving the necessary data we checked the claimant's information. The order IDs he provided are not in our database. The Monero address he provided was not generated by our backend and is not among the payment details issued by the service. We also found no incoming transfers matching the claimed swaps. At the same time, the claimant still has not provided a single PGP signed email from our service, which is issued to the client when an exchange is created." And user says he simply forgot to save the PGP
1
20
2,249
$913,000 in XMR disputed between a swap service and its user, and nobody can prove what happened User says he sent 1,438 XMR to Pablo Cash OTC to swap these funds in two transactions, 700 XMR and 738 XMR And got nothing back Right after deposits the swap service went down for maintenance and blamed a PHP vulnerability Pablo Cash says funds never arrived and cannot find the order IDs or the deposit address in its records It also points at the screenshots, 700 $XMR transfer shows an earlier block with fewer confirmations than the 738 one, while both phone screens show the same time The dispute is now in arbitration on a forum
30
13
10
266
43,709
‼️ $750,000 lost due to an exploit 5 days ago the Cysic cross-chain bridge was exploited, attacker minted 10,000,000 CYS without authorization All funds were swapped to ETH and 309 ETH is sitting on the wallet now Cysic Foundation already sent an onchain message asking to return 90% of the ETH within a 72 hour window 0x1106De394da07e90b02161465EA0421B74DB4691
3
20
1,651
‼️ Drift exploiter sent $39M to Tornado Cash in the last few hours After 3 months of inactivity the transfers started again, 16,600 $ETH already moved to the mixer Still more than $200M of stolen funds on the exploiter wallets, almost all of it in $ETH 0xAa843eD65C1f061F111B5289169731351c5e57C1
2
1
17
1,719
Peak laundering patience! 4,932 ETH was withdrawn from the mixer back in 2022, and over the next four and a half years all of it was deposited back in In June 2022 this wallet withdrew 4,932 ETH from Tornado Cash After that all of this ETH went back to Tornado Cash, from July 2022 to this week, the longest gap between transfers 15 months All of this is probably done to complicate demixing and make it harder to identify who is behind the funds 0xFFD837984668002AA8AaE4A8839782293c91187e
4
2
1
74
13,400
CryptoBilis Ledger drainer continues sending funds to Tornado Cash 1 hour ago more than $1.1M in ETH was distributed to 4 wallets, and from those wallets all funds went to the mixer Looks like many more millions will go the same way Around $7.5M in ETH is sitting here right now, $2M has already gone to Tornado from this wallet in two rounds 0xfa4EaBB840A33C156E600311433AE261CBfCb0e2
3
6
45
8,427
‼️ Attacker returned $11M to 79thVault in less than 24 hours after the exploit Yesterday 16,249 BNB was exploited from 79thVault infrastructure After a round of onchain negotiations the exploiter sent 15,000 BNB back today 1,249 BNB stayed with him as a bounty, 7.7% of the exploited amount Return address: 0x2BFcF0475e7B40cd68E91A7178Cf5E43262EB7b2
12
11
1
100
11,647
Replying to @PierreL94460800
More than we could imagine
1
273
Scammer who extracted over $300M from Coinbase users continues laundering funds through Tornado Cash $1.11M was moved from one of the consolidation wallets, swapped to ETH and sent to the mixer 3 days ago 8.3 ETH were sent to another wallet and bridged to Hyperliquid, where spot XMR1 was bought for that amount Still holding $16M on this consolidation wallet, untouched for a year 0xC84C35f57CaEeB5Da8E31D1144c293Ae5851Ab84
4
12
1
120
13,287
Replying to @zachxbt
huge! that's an insane intelligence operation
2
324
Replying to @pepemoonn
No, compromised wallet, but no exact vector known for now
1
100
More than $292,000 drained from hundreds of wallets The drain happened in the last days of August, but I only confirmed it now, as multiple users pointed to the same drainer wallet Stolen funds are still sitting on that wallet, everything swapped to $DAI, $ETH and $BNB 0x91CDAf83687ED670C4CC8C0c77f7F7b996e3329B
7
4
27
2,321
Near Intents hacker sent funds to Lazarus Group wallets Just small amounts and to old addresses used years ago 0.05 $BNB and 0.0065 $ETH Earlier today, part of the stolen funds went to Kucoin and part was bridged to $BTC 0x09Fd1f5d9F185067A92493E43AA259ea4AB3ad37
4
2
28
3,290
Replying to @web3_christian
still sometimes it won't help
136
‼️ Duelbits exploiter moving funds to Tornado Cash Around $3.3M in ETH sent over the last 2 days And looks like another $2.6M is prepared to go the same way 0x8dB9D7f0a03d212c566Ca80c66e294CeCC20C306 0x56644f6A348A142d38Fb7Dde2e942c9ef03D09Fc
3
2
43
3,750
‼️ User withdrawals are back open, but it took $201M out of Bitget Protection Fund 2,432 BTC moved to their hot wallets
Bitget started withdrawing from their Protection Fund Around $1,000,000 in BTC was moved to their Hot Wallet earlier today 6 transactions of 2 BTC each and 1 tx of 0.1 BTC There are 3 wallets in their Protection Fund with total holdings of 5,487 $BTC (~$464M) 3H6JnFoz5jcoATKQ83BuQ3cUUCHswqfgtG 3AZHcgLnJL5C5xKo33mspyHpQX7x4H5bBw 3KUwtHc5UhWQ76z6WrZRQHHVTZMuUWiZcU
1
17
2,766