F12

🚨The $48M KyberSwap hacker (Andean Medjedovic) just pushed another ~2,000 ETH (~$3.4M) into Tornado Cash today 2.5 years on, still laundering - Arbitrum → Synapse bridge → Tornado. We caught it live Wallet 👇

🚨 UPDATE - the JaredFromSubway attacker just answered the 50% bounty offer… by laundering ~1,000 ETH hit Tornado in the last hour, from a wallet we traced straight to the attacker's hub All 4 staging wallets are now empty. He's washing, not returning

Details: • Victim: ATM/WBNB Pancake pair (0x9753A64f) • Attacker contract: 0xDbf187d9 • Loot: 1,604 WBNB (~$950K), pool WBNB now ~0 • Method: reserve desync via sync() → swap at the fake price tx: bscscan.com/tx/0x939fc9299…

🚨 EXPLOIT - ATM token (BNB Chain), ~$950K drained No flash loan - the attacker manipulated the ATM/WBNB PancakeSwap pair reserves via sync(), then swapped out the pool's entire WBNB liquidity (1,604 WBNB) Attacker: 0x66DE38dA216D6fCC3F9Aa944f592546e3eae2dD0

@zachxbt @CyversAlerts etherscan.io/tx/0xd0eafd5c0…

🚨 $18.5M in dormant Hashflare fraud funds just woke up. 10,624 ETH moved from a Hashflare-linked wallet today (07:33 UTC) after ~3.5 years dormant ,now being laundered ETH→BTC via HiFiSwap & Near Intents Flagged by @zachxbt & @CyversAlerts . We confirmed it on-chain 🧵

TX : etherscan.io/tx/0x3d30d74d8…

🔔The hunter is negotiating with the hunted JaredFromSubway , the sandwich bot drained for ~$7.5M , just sent the attacker an on-chain ultimatum: "Well played. 50% white hat bounty if you return 2150 ETH in 48h , otherwise legal & law enforcement"

@banteg I think the attacker was a rival who was familiar with the MEV ecosystem because Jared's MEV bot was closed source, and seeing the post-state allowance perspective in the bot is definitely the work of someone familiar with the MEV ecosystem

jaredfromsubway.eth mev bot honeypot/bait hack analysis gist.wavey.info/hCH6XqvxIwR27H…

The 4 wallets depositing to Tornado: 0xe3Da36E4bd1a5738fa5D6Ef4F0e4dF40bDeB5f17 done (~1k ETH) Tornado 0x74Dc5b93586D248D5Aec64b3586736FF0A0D0e65 , 1,001 ETH 0xd8C125efCBc99408eC8723E9BBd81d1E8D39D845 , 1,001 ETH 0x71d4416A7A85e08a5Fe7227Ca3B44Fc639e94e97 , 1,423 ETH

🚨 JaredFromSubway's MEV bot (Bot 2) just got drained for ~$7.5M Attacker-controlled contracts tricked the bot into granting token approvals, then drained: • $2.87M USDC • $2.04M USDT • 1,474 WETH tx : etherscan.io/tx/0x2be8704f5…

@NoxosIntel The software I use is my own and does not rely on any third-party applications, I am always open to collaboration you can message me via DM

@f12sec Thank you! Your profile says you are dealing with exploits monitoring and forensic. What software are you using? We will need some independent testers soon. If you are interested you can jump in.

Noxos Intelligence is coming. Blockchain crime is growing, but the tools to fight it remain locked behind high costs and limited access. We are changing that. Noxos Intelligence brings powerful blockchain forensics, tracing, and security tools to everyone—individual users, investigators, and businesses—at a price that makes sense. Same level of intelligence. Wider access. Stronger defense. Launching soon. #Blockchain #CryptoSecurity #Web3 #Compliance #Forensics

Attack TX : bscscan.com/tx/0x8dabb60a9… ETH to Tornado Cash : etherscan.io/address/0x18D6…

🚨 EXPLOIT - LABUBU/OLPC (BNB Chain), ~$1.1M drained No flash loan , the attacker (EIP-7702 wallet) manipulated the token pools via transfer + sync() reserve desync, then swapped out ~1.12M USDT Bridged to ETH → 633 ETH into Tornado Cash

@namada Just a researcher who spotted this on-chain yesterday. Traced the drain + the attacker's first wallet, happy to share it all. my DMs are open

There's been an exploit in the Namada protocol. We are investigating the issue and are involving the relevant parties. If you are the white hat hacker behind this exploit, please get in touch with us.

@namada mintscan.io/cosmos/address…

🚨 @namada attacker identified The ATOM drained over IBC landed here on Cosmos Hub: cosmos1zw9weagzm2w4ud6w3ql7m7rvzpxhvkpt8kk4ff ~228,517 ATOM received from Namada (Jun 18), emptied within hours via IBC + sends. Fresh wallet, now dust