⚠️JUST IN: Over $11.7M in crypto was stolen across 15,000 victims in September 2025 through malicious phishing attacks.

“Permit” signature phishing continues to dominate as the main attack vector, with the largest single victim losing $6.5M. Most of the stolen funds have already been laundered through Tornado Cash.

@scammed / @DWCusers

⚠️UPDATE: Another victim lost $163K in crypto after signing a malicious signature.

That brings the total to ~$12M stolen over the last 31 days from drainer attacks. These drains bypass detection tools and succeed because users approve signatures without verifying them.

@scammed / @DWCusers

⚠️JUST IN: PancakeSwap’s official X account was hacked earlier today by a group promoting their own memecoin.

The team has since regained access, and the hackers made little to no profit as no one interacted with the scam post.

It appears an insider at X is being paid very well in cryptocurrency, giving bad actors access to major crypto-related accounts to run fraudulent scam promotions.

@scammed / @DWCusers

⚠️JUST IN: A victim was social-engineered into signing a malicious permit signature and lost $440k USDC.

The stolen funds were split roughly 40/ 40/20 (≈ $175k/$175k /$88k) and funneled through Tornado Cash. The threat actors also moved $10 in ETH from Coinbase (???), a centralized exchange, likely to cover gas fees before laundering the stolen funds

@scammed / @DWCusers

⚠️JUST IN: CryptoGWB (GWB) was drained for $900K+ in Ethereum by wanted criminals

The stolen funds are linked to the team behind one of Russia’s largest Ponzi schemes. Most of the assets were quickly swapped and bridged to Bitcoin and Solana across multiple transactions, with 14 wallets used to launder the funds.

@scammed / @DWCusers

⚠️JUST IN: A Discord employee was bribed with $500 upfront and thousands more in crypto to work with threat actors.

The insider is believed to have helped them gain access to rare usernames, badged accounts, and other requested assets. The employee is said to be based in Southwest Asia, where the payout would be considered "life-changing money".

@scammed / @DWCusers

⚠️JUST IN: BreachedForum, the latest incarnation of Breached, has been seized by the United States FBI.

The forum was live for barely a month before being taken down again. It’s worth noting the FBI has been increasingly active in targeting members of the “com” exploiting online services for profit.

@scammed / @DWCusers

⚠️BREAKING: Crypto casino Shuffle has confirmed a major data breach exposing sensitive user information.

According to shuffle, the incident occurred after Shuffle’s third-party provider suffered a highly sophisticated cyberattack.

Most Shuffle users were affected, with leaked transaction details (deposits & withdrawals), bet data, emails, and other sensitive information.

@scammed / @DWCusers

⚠️JUST IN: A crypto whale lost around $21M on Hyperliquid after a private key leak.

The attacker bridged the stolen funds to Ethereum, including $17.75M DAI. The hit appears to be split 50/50 between two wallets, suggesting two people were involved.

It’s still unclear whether the whale was social engineered for his seed phrase or infected with malware.

@scammed / @DWCusers

⚠️JUST IN: Roobet confirmed it was impacted by the same data breach as Shuffle.

According to the team, all user funds and crypto assets remain safe, but some user information Including emails, names, and historical activity data was compromised.

@scammed / @DWCusers

⚠️JUST IN: Binance is experiencing slower crypto swaps due to the surge in market activity.

All funds remain safe, but transactions across multiple exchanges are processing slower than usual, and network fees are currently high. Some users may also notice brief delays or display issues.

@scammed / @DWCusers

🔽UPDATE: The mint price for Telegram 4-letter usernames has decreased by another $2K.

You can now officially acquire a 4-letter handle on Telegram for $10K due to the market downturn.

@scammed / @DWCusers