CRYPTO ROAST
Kanalga Telegram’da o‘tish
Serving the Hottest Scams, Celeb Fails, and Trader Blunders in Crypto Cooperation - @samoeq
Ko'proq ko'rsatish2025 yil raqamlarda
1 245 228
Obunachilar
-50524 soatlar
-4 3767 kunlar
-21 12230 kunlar
Ma'lumot yuklanmoqda...
O'xshash kanallar
Ma'lumot yo'q
Muammo bormi? Iltimos, sahifani yangilang yoki bizning qo'llab-quvvatlash boshqaruvchimizga murojaat qiling>.
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Dekabr '25
Dekabr '250
0 kanalda
Noyabr '250
0 kanalda
Get PRO
Oktabr '250
0 kanalda
Get PRO
Sentabr '250
0 kanalda
Get PRO
Avgust '250
0 kanalda
Get PRO
Iyul '250
0 kanalda
Get PRO
Iyun '250
0 kanalda
Get PRO
May '250
0 kanalda
Get PRO
Aprel '25
+44 580
0 kanalda
Get PRO
Mart '25
+130 033
0 kanalda
Get PRO
Fevral '250
0 kanalda
Get PRO
Yanvar '250
0 kanalda
Get PRO
Dekabr '24
+2 999
0 kanalda
Get PRO
Noyabr '24
+7 400
0 kanalda
Get PRO
Oktabr '24
+17 467
0 kanalda
Get PRO
Sentabr '24
+1 757 034
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 26 Dekabr | 0 | |||
| 25 Dekabr | 0 | |||
| 24 Dekabr | 0 | |||
| 23 Dekabr | 0 | |||
| 22 Dekabr | 0 | |||
| 21 Dekabr | 0 | |||
| 20 Dekabr | 0 | |||
| 19 Dekabr | 0 | |||
| 18 Dekabr | 0 | |||
| 17 Dekabr | 0 | |||
| 16 Dekabr | 0 | |||
| 15 Dekabr | 0 | |||
| 14 Dekabr | 0 | |||
| 13 Dekabr | 0 | |||
| 12 Dekabr | 0 | |||
| 11 Dekabr | 0 | |||
| 10 Dekabr | 0 | |||
| 09 Dekabr | 0 | |||
| 08 Dekabr | 0 | |||
| 07 Dekabr | 0 | |||
| 06 Dekabr | 0 | |||
| 05 Dekabr | 0 | |||
| 04 Dekabr | 0 | |||
| 03 Dekabr | 0 | |||
| 02 Dekabr | 0 | |||
| 01 Dekabr | 0 |
Kanal postlari
💵 Trust Wallet Browser Extension Under Fire
🟠Reports are spreading fast on X about a possible compromise of the Trust Wallet browser extension following the December 24 update. Users claim that funds disappear immediately after importing a seed phrase — wallets drained in seconds to unknown addresses.
🟠According to multiple on-chain reports, losses may already exceed $2M. Exploiters appear to be using several addresses, suggesting an automated or coordinated attack rather than isolated user error. Some victims insist their wallets were never connected to any websites and were used only for basic send/receive transactions.
🟠The suspected vector is a supply-chain attack on the extension itself. In other words, the danger may come from the update — not from phishing links or fake dApps. If true, this puts even experienced users at risk.
🟠As of now, there has been no official statement from the Trust Wallet team. The silence is only fueling panic, especially as more users report real losses, including individual cases above $20K.
🟠Until there is clear confirmation and a fix:
avoid using the Trust Wallet browser extension, do not import seed phrases on desktop, and assume the risk is real, not hypothetical.
💭 When wallet software itself becomes the attack surface, “user error” is no longer an excuse. In crypto, delayed warnings cost real money — and silence during active exploits makes things worse.
📱 Token Report (X) — your daily pulse on crypto and global markets
1 17700
| 2 |  🅰️ SEC just exposed a $14M crypto scam — and it was never about trading
🟠According to the SEC, Morocoin, Berge, Cirkor and four so-called “investment clubs” ran a coordinated scam that drained at least $14 million from retail investors using fake crypto platforms and fake promises of AI-powered profits.
🟠The entry point was social media. Victims were pulled in through ads, then funneled into WhatsApp group chats where scammers posed as analysts and “professionals,” slowly building trust and authority.
🟠Once hooked, people were told to send money to sleek-looking trading platforms tied to Morocoin, Berge and Cirkor. None of them were real. No trades existed. No issuers existed. The platforms were pure theater.
🟠Even withdrawal was part of the scam. When victims tried to cash out, scammers demanded extra “fees” or “taxes” upfront — turning the exit into another money grab.
🟠The SEC says the funds were then routed overseas through a mix of bank accounts and crypto wallets. Now the regulator is seeking permanent bans, penalties, and full repayment with interest.
🧑⚖️ This wasn’t a technical hack. It was social engineering at scale. The real danger didn’t start when money was sent — it started earlier, when group chats replaced verification and fake authority replaced critical thinking. In crypto, if trust is manufactured instead of proven, you’re already inside the scam.
📱 Token Report (X) — your daily pulse on crypto and global markets | 3 431 |
| 3 |  😈 macOS malware just leveled up — and it’s doing it quietly
🟠Security researchers spotted a new version of MacSync Stealer that no longer relies on obvious tricks like “drag this into Terminal” or sketchy copy-paste commands. Instead, it shows up as a normal-looking Mac app — signed, notarized, and packaged like legit software.
🟠The bait looks harmless: a fake “messenger installer” hosted on a clean-looking website. You open it, nothing suspicious happens… but in the background the app quietly downloads and runs a hidden script that steals data.
🟠The scary part: Apple’s usual warning signs don’t trigger. The app passes Gatekeeper checks, looks trusted, and doesn’t ask you to do anything weird. Even antivirus tools barely notice it at first.
🟠To stay hidden, the malware runs only if you’re online, limits how often it executes, deletes its traces after running, and pretends to be a regular system update. No pop-ups, no drama — just silent theft.
🟠This isn’t just one malware family. Researchers are seeing more macOS threats pretending to be “legit apps” using Apple’s own trust system against users.
💻 macOS is no longer “safe by default.” If an app looks clean, signed, and professional — that doesn’t mean it’s harmless anymore. In 2025, the most dangerous malware doesn’t scream — it blends in.
📱 Token Report (X) — your daily pulse on crypto and global markets | 4 375 |
| 4 |  ➕ $16M Coinbase Scam — Brooklyn Man Charged
🟠U.S. prosecutors say a Brooklyn resident ran a large-scale crypto scam by impersonating a Coinbase employee. Victims were told their accounts were “under threat” and urgently needed to move funds to “secure wallets” — which, of course, were fully controlled by the scammer.
🟠The scheme worked frighteningly well. One victim from California lost over $1M, another from Virginia nearly $900K, plus smaller but still painful losses from users in Pennsylvania and Maryland. In total, investigators estimate the damage at around $16 million.
🟠Stolen funds were laundered through crypto exchanges and gambling platforms. Authorities managed to recover about $105K in cash and $400K in crypto, but most of the money is still being traced.
🟠According to investigators, the scammer also recruited helpers via Telegram and Discord. Under the alias “lolimfeelingevil”, he allegedly ran a channel called Blockchain Enemies, where he bragged about successful thefts and openly taught social-engineering tactics.
🟠He now faces charges for fraud, grand larceny, and money laundering. For now, he’s out on bail — but the case is ongoing.
🪙 Fake “Coinbase support” isn’t just a meme — it’s a proven, industrial-scale scam. If someone tells you to move your funds “for security reasons,” it’s not protection. It’s the setup.
📱 Token Report (X) — your daily pulse on crypto and global markets | 4 584 |
| 5 |  💵 –$50M. One click. Gone.
🟠A whale tried to move a massive bag and did everything “by the book”: sent a $50 test tx, checked the first and last characters of the address — all matched. Green light.
🟠But scammers were faster. They ran an address poisoning attack: instantly generated a fake address with the same beginning and ending as the real one and injected it into the transaction history at the perfect moment.
🟠The victim copied the address from history (because he had just sent funds there, right?) — and $50,000,000 flew straight to the scammer.
🟠Wallet UIs that hide the middle of addresses played a brutal role here. Checking only the “head and tail” no longer works. This trick has already burned more than one whale.
🟠Hard rule: never copy addresses from transaction history. If you’re too lazy to verify every character — you’re one click away from becoming exit liquidity.
💸 In crypto, convenience is expensive. Sometimes it costs $50 million.
📱 Token Report (X) — your daily pulse on crypto and global markets | 5 365 |
| 6 |  😈 Crypto Scam Ends in Prison — Finally
🟠A 23-year-old from Cardiff, Haroon Zaman, has been sentenced to 3 years and 8 months in prison after running a social-media crypto scam that drained £124,000 from at least 17 victims.
🟠His method was painfully effective. He hacked real social media accounts, impersonated their owners, and promoted “risk-free” crypto investment opportunities to friends and followers. No trading. No investing. Just straight theft.
🟠Victims were convinced they were sending funds into legitimate crypto plays. In reality, the money went directly into Zaman’s pockets between January 2021 and June 2023.
🟠Investigators confirmed there were no investments at all — just fabricated promises and stolen trust. Authorities described his actions as showing “complete disregard” for the damage caused.
🟠The case was cracked through joint work between South Wales Police and the South East Regional Organised Crime Unit, finally putting an offline end to an online scam.
🤝 Crypto scams don’t always end with a rug and silence — sometimes they end with a prison sentence.
But the lesson stays the same: “risk-free returns” on social media are almost always a lie.
📱 Token Report (X) — your daily pulse on crypto and global markets | 7 754 |
| 7 | 🔤 UPD: American justice in action — steal billions, serve less than a year.
🟠Caroline Ellison, former Alameda CEO and Sam Bankman-Fried’s closest partner, is already out. Her original 2-year sentence was quietly reduced to just 11 months. No real prison time ahead — likely home confinement or a “rehab” setting instead of bars.
🟠The reason is painfully obvious. Ellison fully cooperated with prosecutors and had the right background. Her father, Glenn Ellison, is a prominent MIT professor with deep ties to U.S. academic and regulatory circles, including past connections to Gary Gensler. Add elite networks, political proximity, and the magic word “cooperation” — and the system suddenly becomes very flexible.
🟠Meanwhile, Sam Bankman-Fried is on track to rot in prison for decades. Same crime. Same billions. Very different outcomes.
🟠This isn’t about innocence or guilt anymore — it’s about who you are, who you know, and how useful you are to prosecutors. In crypto scandals, justice isn’t blind — it’s selective.
🇺🇸 In the U.S., accountability is negotiable. Steal billions, flip early, know the right people — and the system might just call it a “mistake,” not a sentence.
📱 Token Report (X) — your daily pulse on crypto and global markets | 7 445 |
| 8 |  🤎 0G Labs Reward Contract Drained via Emergency Function
🟠Monitoring systems flagged abnormal withdrawals tied to the 0G Labs reward contract, shortly followed by deposits into Tornado Cash. This wasn’t a bug — it was a privileged function being used exactly as designed… just in the wrong hands.
🟠An attacker executed emergencyWithdraw(), a high-level admin function, and pulled out roughly 520,000 OG tokens (~$516K) to a single address before routing the funds through Tornado Cash. Clean exit, zero noise, classic playbook.
🟠This is the uncomfortable reminder nobody likes: when a contract has emergency or admin powers, security doesn’t end at audits — it ends at key management and access control. One compromised role is enough to drain everything without exploiting a single line of code.
🟠Mixing through Tornado immediately suggests there’s no intention to negotiate or return funds. This wasn’t an experiment, it was a cash-out.
⚠️ In DeFi, “emergency functions” are double-edged swords. They save protocols in crises — and kill them when governance or keys fail. No exploit needed, just permissions in the wrong place.
📱 Token Report (X) — your daily pulse on crypto and global markets | 7 032 |
| 9 |  ☠️ Aevo hit for $2.7M — legacy vaults compromised
🟠Aevo confirmed that its legacy Ribbon DOV vaults were exploited after a vulnerability slipped into a smart-contract update. Result: roughly $2.7M drained. Important detail — this only affected old vaults, not the active Aevo exchange.
🟠The team says they moved fast: tracing funds, coordinating with CEXs and security partners, and flagging the stolen assets. The attacker bypassed the existing Immunefi bounty setup, but Aevo is still leaving the door open for a potential whitehat return.
🟠For users panicking: Aevo trading, staking, and current products are NOT affected. The exchange remains fully operational. The damage is isolated to Ribbon Legacy depositors, and the team обещает план действий в течение 24 часов.
🟠A full post-mortem is coming, but the pattern is already familiar — “legacy” contracts + updates + overlooked edge cases = expensive lesson. Old code has a habit of becoming the weakest link when markets move fast.
🙏 Conclusion: Crypto doesn’t forget its past. Legacy contracts don’t magically become safe just because the spotlight moved on — and sooner or later, someone will test them with real money.
📱 Token Report (X) — your daily pulse on crypto and global markets | 7 556 |
| 10 |  🔤 Investor Leak Exposes the Real Crypto Kitchen
🟠A leaked document from a Botify investor shows how “easy money” is actually made in crypto. A project with no product, no utility, no real roadmap burned $1.5M not on development — but on manufacturing hype to sell vapor to retail.
🟠Listings weren’t about tech or audits — just pay-to-play. Gate: $190K, MEXC: $90K. No one cared what was under the hood, only whether the envelope was thick enough.
🟠Influencers were bought wholesale. Some got paid in USDT, others in chunks of token supply with a laughable 14-day lock, just enough to dump on followers. One “thought leader” pocketed $10K + 1% of supply for daily shilling.
🟠Around 90% of holders and trading volume were fake. Wash trading, botted wallets, artificial activity. They even hired a so-called “Trump Whale” for $20K to fake demand and create the illusion of smart money interest.
🟠The ending was predictable: post-pump collapse. Loud marketing, flashy partnerships (yes, even UEFA-style name drops), inflated metrics — then straight down.
😇 Final result: Exchanges got paid. Influencers cashed out. Founders walked away clean. Retail got the bags.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 533 |
| 11 |  ⚡️ Hacker Turns Hijacked WeChat Into a $55K Rug
🟠A scammer managed to take over @heyibinance’s WeChat account and instantly used the borrowed credibility to shill $MUBARAKAH, triggering a classic micro pump-and-dump. One post — and the crowd rushed in on pure FOMO, without checking the source.
🟠The plan couldn’t be simpler: trust the name → pump → dump → disappear. It took the hacker just minutes to walk away with roughly $55K, powered entirely by people’s blind confidence in the Binance brand.
🟠The story is yet another reminder: an “official account” isn’t always official. Any sudden shill message — especially in closed platforms like WeChat — should be treated as a red flag until proven otherwise.
🟠In crypto, people lose money not because hackers are smarter — but because they believe faster than they think.
💭 Conclusion: If you follow hype instead of verification, you’re not trading — you’re volunteering as exit liquidity.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 826 |
| 12 |  🅰️ Binance Just Caught an Insider Playing Dirty
🟠Binance confirmed that one of its own employees used insider knowledge to drop a token seconds before an official Binance Futures announcement — copying the name and visuals to siphon attention and profit from confused traders.
🟠The token — year of yellow fruit — was minted on-chain at 05:29 UTC, and less than a minute later, its branding appeared in the @BinanceFutures tweet. The idea was simple: users would rush to buy the “official” token, but some would mistakenly pump the fake one first.
🟠Binance moved fast: the employee was immediately suspended, a lawsuit is being prepared, and authorities in the employee’s jurisdiction were contacted for criminal proceedings.
🟠Five whistleblowers who reported the misconduct through the official audit@binance.com channel will receive $100,000 each. Public reports on X were acknowledged — but only official submissions qualify for rewards.
🟠Binance says it will tighten internal controls, upgrade policies, and continue enforcing zero-tolerance measures against misconduct inside the company.
⭐️ Even the biggest exchanges aren’t immune to internal rats. But the speed of Binance’s response — and a $500K whistleblower payout — shows one thing clearly: in this market, transparency isn’t optional. It’s survival.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 421 |
| 13 |  ☠️ Netherlands Warns 300 Scam Victims
🟠The setup is classic: victims thought they were investing in crypto or earning easy money by writing product reviews from home. But none of the transfers went into “investments” — everything was funneled straight into wallets controlled by criminal networks. The alert came after Coinbase flagged suspicious activity and passed the data to Europol, which then forwarded it to police across multiple countries.
🟠One of the nastiest parts of the scheme is the fake job hustle. At first, victims actually get paid to build trust. Then comes the twist: they’re told to deposit their own money “to unlock a higher pay tier.” And you can guess the rest — once the money goes in, it’s gone, and the scammers just move on to the next target.
🟠Recovering the funds is nearly impossible. Everything is routed through long chains of foreign wallets, the perpetrators are scattered across multiple jurisdictions, and the networks are too complex to unravel quickly. So right now the only real priority is stopping victims from sending even more money.
🟠The emotional toll is brutal. People feel ashamed, guilty, and afraid to talk about it. Slachtofferhulp Nederland reports that many victims get hit again by “recovery companies” promising to get their money back for a fee — which, of course, turns out to be yet another scam.
🔄 Crypto might be digital — but the damage from these schemes is painfully real. And every new wave of fraud is a reminder: if something looks safe, simple, and guaranteed… it’s almost always a trap.
📱 Token Report (X) — your daily pulse on crypto and global markets | 8 154 |
| 14 |  🔤 A Google insider just walked away with $1M — by farming Polymarket with answers he already knew
🟠Yet another reminder that the “free market” isn’t free at all — it’s a buffet for insiders. One crafty Google employee decided his salary wasn’t enough and started quietly farming Polymarket using internal knowledge.
🟠The scheme? Stupidly simple and painfully effective. He knew outcomes in advance: release dates like Gemini 3 Pro, search trends, internal timelines — all the stuff regular users can only guess about.
No charts. No analysis. No risk. Just bets placed on events with outcomes already in his pocket.
🟠Result: a 100% win rate and over a million dollars siphoned from people who still think prediction markets reward “skill.”
📖While retail players cope with hopium and TA squiggles, insiders stroll in, vacuum up liquidity, and walk out smiling.
📱 Token Report (X) — your daily pulse on crypto and global markets | 8 240 |
| 15 |  💵 USPD Drained for $1M After Hidden Exploit Ignites the Protocol
🟠The US Permissionless Dollar (USPD) just suffered one of the wildest DeFi breaches of the year — a hacker quietly hijacked the protocol months ago, then woke up one morning and printed 98M USPD out of thin air, draining over $1M in liquidity.
🟠The attacker deposited 3122 ETH, triggered a single transaction, and somehow walked out with 237 stETH plus a fresh pile of tokens, which were quickly swapped into $300K USDC on Curve. And yes — all of this came from a vulnerability no one even saw coming.
🟠The exploit wasn’t simple. This was a CPIMP attack — “Clandestine Proxy In the Middle of Proxy.” Translation: the hacker secretly took control of USPD’s proxy months ago, deployed a shadow contract, and rerouted calls so that block explorers, auditors, and users saw a safe contract… while he controlled everything behind the scenes.
🟠For months, he had admin access without anyone noticing. Then, when the time was right, he flipped the switch, minted tens of millions of tokens, and bled the protocol dry.
🟠USPD is now telling users to revoke approvals immediately and stop touching the token. They’ve brought in exchanges, security firms, and law enforcement — and even offered the hacker a “white hat deal”: return 90%, keep 10%, walk away clean.
📉 DeFi keeps innovating. Hackers keep innovating faster.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 797 |
| 16 |  🎸 Plush Pepe #123 vanished — classic fake escrow scam
🟠Classic prehistoric scamming technique, still working like it’s 2019: the scammer spins up a fake chat, clones the avatar, copies the username, and perfectly mimics a real escrow. Seller sends the NFT, expecting a clean deal. Scammer instantly withdraws the funds, disappears into the sunset, and leaves the victim staring at an empty wallet.
🟠The account was frozen after complaints — but as always, that doesn’t bring the Pepe back. These guys don’t need sophistication, just patience and a convincing copy-paste of your trusted middleman.
🟠And let’s be honest — fake escrows keep thriving because people still skip basic verification. One quick check, one real DM to the legit escrow, and $15k would still be sitting in the right wallet. But the combination of FOMO and “deal must close now” creates the perfect breeding ground for scams like this.
🏆 Fake escrows are alive, well, and eating collectors for breakfast.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 807 |
| 17 |  🔤 Another day — another scam in TON
🟠This time it’s Flipsy — a “casino mini-app” where degen gamblers flipped a coin hoping to double their balance. While users were chasing luck, the devs chased a ~$224,000 TON withdrawal, instantly dumped everything, deleted the bot, wiped the posts, and vanished faster than you can open Tonviewer.
🟠And it’s not even about the amount. These Flipsy-clones pop up and disappear with scary regularity. Over the past couple of years, this isn’t the first, or the tenth, or even the twentieth case — TON mini-apps are slowly turning into the most efficient trust-draining machine in the ecosystem.
🟠The question the community keeps asking: how can anyone talk about ecosystem growth when a fresh scam drops literally every day? It’s one thing when the Messiah’s “millionaire friends” rug people — but it’s a whole different level when random nobodies walk away with user funds while moderation just watches.
🟠The solution is obvious: real moderation. Real security checks. Real transparency. Actual accountability — not “well, it’s an open ecosystem, freedom for everyone”.
🟠But until that happens, Telegram + TON will remain the perfect playground for anyone who wants to grab a quick couple hundred grand and disappear.
😏 And yes — we will absolutely see Flipsy #128, #129 and many more.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 133 |
| 18 |  ⭐️ TON Foundation just pulled the emergency brake — MemeRepublic is officially on pause
🟠And yes, the reason is exactly what everyone expected: the contest was “suddenly” full of manipulation.
🟠TF published a whole corporate manifesto about how they were “testing formats, modeling scenarios, ensuring fairness…” — while accidentally handing out $200k to people who were clicking buttons faster than the foundation could blink.
🟠Now they’ve received “credible allegations” — with actual evidence — that MemeRepublic was being gamed hard: spoofed metrics, fake activity, farmed engagement everywhere. To avoid turning the meme contest into a full circus, TF froze Week 3 rewards and slammed the whole event into standby mode.
🟠Officially, it’s a “pause to reassess structure, market conditions, and community feedback.”
Unofficially — it’s time to figure out who scammed whom, and how $1M in meme money ended up in the wrong wallets.
🟠TF promises an updated plan “after the review is complete.”
But as they say… the hardest part of any investigation is not accidentally uncovering yourself.
🤡 TON wanted a fair meme tournament. Instead, they got a mini-scandal, metric fraud, and full-blown corporate damage control. Web3 moves fast — but farmers always move faster.
📱 Token Report (X) — your daily pulse on crypto and global markets | 8 676 |
| 19 |  😈 A fresh thief just surfaced on Solana — hiding behind a “helpful” Chrome extension
🟠Meet “Crypto Copilot”, an extension found in the Chrome Web Store that promised “easy trading inside Twitter.” In reality, it was straight-up crypto theft: every time you made a swap, the extension quietly injected an extra transaction that sent your tokens to the scammer’s wallet.
🟠You thought you were aping into the next x100 shitcoin — but instead, you were handing your balance to guys who didn’t even bother to hide their tracks. The mechanics were dirty and simple: any action → invisible malicious output → your funds gone before you even realized something happened.
🟠The funniest part? The extension is still live in the Chrome Web Store. Google’s moderation clearly lives in an alternate timeline — or works on the principle of “if it’s not malware for enterprises, who cares.”
🌐 The takeaway is simple: if something promises “smooth trading directly inside social media,” it’s almost always trying to slip a hand into your wallet. Solana moves fast — but scammers move even faster.
📱 Token Report (X) — your daily pulse on crypto and global markets | 9 221 |
| 20 |  💵 Upbit just got hit for $38M — less than 24 hours after Naver bought the exchange’s parent company
🟠South Korea’s crypto giant Upbit is back in the spotlight: hackers breached its Solana hot wallet and drained roughly KRW 54B ($38M). The exchange detected abnormal transfers early in the morning and immediately froze all Solana–network operations.
🟠As usual, the weak point was the hot wallet. SOL, USDC, BONK, RAY, JUP, JTO, MOODENG, TRUMP, ACS, SONIC — all funneled into an unknown external address. Cold wallets stayed untouched.
🟠Dunamu (Upbit’s parent company) says all customer losses will be fully covered using corporate reserves. The compromised wallet is isolated, internal audits are underway, and assets have been moved to cold storage. Some tokens are already frozen — including Solayer (LAYER) worth roughly $15.7M.
🟠Here’s the kicker: the hack hit right after Naver closed a $13.6B deal that was supposed to push Upbit into a new fintech ecosystem and potentially toward a future Nasdaq listing. Now regulators will be watching with maximum pressure.
🟠And once again we’re reminded of the obvious: hot wallets remain a permanent security hole. Upbit survived 159,000+ attack attempts back in 2023, and the wave of hacks across the industry is only rising — from GANA on BNB Chain to the recent hits on Balancer and Stream Finance.
🙏 Web3 expands, regulators tighten, corporations sign multi-billion-dollar deals — but old-fashioned human error and fragile hot wallets still knock companies down faster than the SEC ever could.
📱 Token Report (X) — your daily pulse on crypto and global markets | 12 300 |
