Cryptoforensic Investigators @CFInvestigators

Blockchain forensics, investigations and expert witness @cfinvestigators.bsky.social cryptoforensic.com Joined July 2023

Tweets

242
Followers

5K
Following

184
Likes

342

Cryptoforensic Investigators @CFInvestigators

2 months ago

@tayvano_

0 0 1 181 0

View Details

Elliptic @elliptic

3 months ago

At $134 billion, Huione was the largest criminal marketplace and money laundering operation crypto has ever seen. Over the past two years, Elliptic's intelligence has revealed how it operated, tracing the network behind it through every rebrand, and informing the sanctions and enforcement actions that followed. Read the full story: hubs.la/Q04mqYXz0

2 11 32 5K 17

View Details

Cryptoforensic Investigators @CFInvestigators

6 months ago

Would encourage project teams to seriously take note of the details here or you could become the next case study. 6 months of patience and persistence from the DPRK threat actors in this case, resulting in a devastatingly high value theft of almost $280 Million.

Velocity @VelocityDEX

6 months ago

x.com/i/article/2040…

645 675 4K 6.6M 2K

1 1 7 2K 2

View Details

SlowMist @SlowMist_Team

9 months ago

🚨 SlowMist TI Alert 🚨 The @Truebitprotocol has suffered a security incident. Its smart contract 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 was maliciously exploited, resulting in the theft of 8,535 $ETH (~$26.44M). ⚠️ Do NOT interact with this contract. Stay alert and follow official updates. etherscan.io/tx/0xcd4755645…

Truebit @Truebitprotocol

9 months ago

Today, we became aware of a security incident involving one or more malicious actors. The affected smart contract is 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 and we strongly advise the public not to interact with this contract until further notice. We are in contact with law

59 20 149 150K 37

10 25 61 31K 11

View Details

ZachXBT @zachxbt

9 months ago

Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information). Earlier today customers received the email below.

1K 975 5K 1.2M 650

View Details

harsh @hpatel

a year ago

Hey all, My hot wallet was drained across Hyperliquid and EVM chains for millions on 27th Sep. I’m in touch with the FBI, USSS, @_SEAL_Org, @trmlabs, @CFInvestigators, and major exchanges who are now all aware of the stolen assets, their locations & movements (address ending in dHjFY). All are taking the investigation seriously. All have been incredibly responsive. Thank you. I’d be happy to pay a bounty to whitehats or anyone with onchain or IRL information that leads to the recovery of the assets. Please DM me for details 🙏. To the attacker: if you return 80% of the funds, all law enforcement, legal and exchange action will be dropped immediately, and you can keep the remaining 20% as a legitimate whitehat bounty that can be legally offramped and spent. Return 80% here: 2evt4TTjHw6BZjnaaq3UcSnmBrqzJjJnTsWi65yYpLbT Thanks to the @_SEAL_Org members for their first-hand response and initial guidance.

103 29 432 120K 134

View Details

JP @rugpullfinder

a year ago

🚨 The Biggest Crypto Scam You’ve Never Heard Of! 💰 A Chinese "goddess of wealth" fooled 128,000+ people, stole billions, and vanished with 61,000 Bitcoin! 😱 Want to know how it all unraveled? Let’s dive into this wild story! 🧵👇

6 7 22 3K 17

View Details

🚨 Cyvers Alerts 🚨 @CyversAlerts

a year ago

Our system has detected a hack into @CoinDCX centralized exchange 20 hours ago. Here's what we know: - The hacker stole around $44.2M in USDC/USDT from one of the exchange's operational wallets on Solana. - The hacker funded the hack with 1 ETH from Tornado Cash. - Part of the funds ($15.8M) were moved to Ethereum via a bridge. Thanks to @zachxbt for identifying that it's CoinDCX and for the shoutout to Cyvers!

9 36 103 18K 15

View Details

ZachXBT @zachxbt

a year ago

A recent cyberattack on the Central Bank of Brazil services provider C&M resulted in a breach to the reserve accounts of six financial institutions where attackers converted stolen fiat to crypto. I began working on an initiative that has helped freeze ~$5M across multiple exchanges and blockchains. A special thanks goes to @tether , @Binance Security Team, @Bitso, @Bybit_Official Compliance Team, & @CFInvestigators. Collaboration within the private sector is the most effective way to combat illicit activity and push our industry forward.

374 534 4K 380K 270

View Details

ZachXBT @zachxbt

a year ago

1/ An investigation into how the New York based social engineering scammer Daytwo/PawsOnHips (Christian Nieves) stole $4M+ from Coinbase users by impersonating customer support, bought luxury goods, and lost most of the funds gambling at casinos.

525 716 7K 1.3M 2K

View Details

Cryptoforensic Investigators @CFInvestigators

a year ago

The scam industry has evolved in the past years, the groups behind it are larger, more organized and frequently linked to transnational enterprises such as Chinese crime syndicates, or, in the case of North Korea, state-sponsored schemes. 🥷 #cryptocurrency #scam #ATMs govtech.com/public-safety/…

1 1 7 2K 4

View Details

Cryptoforensic Investigators @CFInvestigators

a year ago

They come from video games, and then they bring their high scores into the real world. 🎮💀fortune.com/crypto/2025/05…

0 0 2 2K 2

View Details

Cryptoforensic Investigators @CFInvestigators

a year ago

Crypto kidnappings: the new crypto crime wave crystalintelligence.com/news/crypto-ki… via @CrystalPlatform

0 0 2 2K 2

View Details

Cryptoforensic Investigators @CFInvestigators

a year ago

Behind the Coinbase data breach and phishing attacks -- why they have been so effective, and what are the characteristics? We discuss cryptoforensic.com/blog/why-recen…

1 4 15 5K 6

View Details

MistTrack🕵️ @MistTrack_io

a year ago

🚨 The official driver provided by this printer carries a backdoor program. It will hijack the wallet address in the user's clipboard and replace it with the attacker's address: 1BQZKqdp2CV3QV5nUEsqSg1ygegLmqRygj 🕵️ According to @MistTrack_io, the attacker has stolen 9.3086 $BTC. Active since Apr 22, 2016, last seen Mar 14, 2024, with links to multiple exchanges. 🔗light.misttrack.io/address/BTC/1B…

蓝点网 @landiantech

a year ago

中国深圳打印机公司天生 (#Procolored) 被发现提供的官方驱动程序携带后门程序用来盗取加密货币，数据显示黑客盗取的比特币数量达 9.3 个。至于感染原因则是天生使用 U 盘传输这些驱动程序，被感染后门程序后天生又将其上传到网盘供全球用户下载。查看全文：ourl.co/108992

17 48 303 204K 146

3 13 32 25K 13

View Details

Cryptoforensic Investigators @CFInvestigators

a year ago

@tayvano_

0 0 1 233 0

View Details

Cryptoforensic Investigators @CFInvestigators

a year ago

Data leaks are a threat on multiple levels, data is not only ransomed but also sold on hacking platforms to individuals who use it to for scams and theft🕷️🕷️🕸️ the-sun.com/tech/14150403/… #DataLeak #hacks #SIMswap #ScatteredSpider

1 1 7 4K 3

View Details

ZachXBT @zachxbt

a year ago

Update: So far $7M+ has been frozen with the help of @CFInvestigators, @tanuki42_, Binance Security team, and myself.

98 152 1K 292K 50

View Details

Scam Sniffer | Web3 Anti-Scam @realScamSniffer

a year ago

🚨 ALERT: Fake "Solscan" ads top Google search results right now! ⚠️ These phishing ads are designed to drain your wallet through malicious transaction signatures.