⚠️INSIGHT: December 2025 saw ~26 major crypto exploits, totaling approximately $76M in losses.

The largest incident was a $27M multisig compromise, where attackers helped a high net worth crypto investor set up a wallet, leading to him accidentally exposing his seed phrase.

@scammed / @DWCusers

⚠️JUST IN: Hundreds of wallets are currently being drained across multiple chains for small amounts.

So far, approximately $107K has been stolen, with the total continuing to rise. The root cause of the drain has not yet been identified.

@scammed / @DWCusers

⚠️BREAKING: Crypto gambling website Stake is being sued in a federal class action RICO case.

The lawsuit seeks to shut down Stake US, alleging it has operated as one of the largest and most profitable illegal online casinos since at least 2022

Drake and Adin Ross are also being sued, accused of using Stake’s tipping features for fraudulent and deceptive purposes

@scammed / @DWCusers

⚠️JUST IN: Trust Wallet browser extension is back online after last week’s $7M exploit.

The new version is secure with no known vulnerabilities, so your funds won’t get drained. They’ve also rolled out a recovery program to reimburse users affected by the $7M theft.

@scammed / @DWCusers

⚠️JUST IN: Over $83M was stolen from 106,106 victims in 2025 due to phishing and wallet draining attacks.

In comparison, 2024 saw $494M lost to similar schemes. 2025 marks the first year where less than $100M was stolen due to phishing and draining, as crypto exchanges continue to upgrade their security.

@scammed / @DWCusers

⚠️JUST IN: A victim lost 12 BTC (~$1M) after falling victim to a fake exchange website.

The wallet had been holding BTC for a year before being redirected to a phishing site, where a signature was approved and the funds were drained.

@scammed / @DWCusers

⚠️JUST IN: Over ~36,000 Trust Wallet users were impacted during a recent exploit.

The attacker is believed to have exported seed phrases and is monitoring the compromised wallets, waiting for deposits. Trust Wallet has since locked all affected wallets.

@scammed @DWCusers

⚠️JUST IN: Cold MM allegedly fell victim to an address poisoning attack during an MM deal, resulting in a ~$10,000 loss.

The victim has since posted a DD on OGU detailing how the address poisoning occurred. Nothing has been confirmed yet as the DD is currently live.

NOTE: Having an open DD does not instantly make him a scammer.

@scammed / @DWCusers

⚠️JUST IN: An elderly victim was social engineered out of 50 ETH ($150K) on Base, the network built by Coinbase.

The victim later left an on-chain message asking the attacker to return the $150K, stating he planned to start a family and buy a home.

@scammed / @DWCusers

⚠️JUST IN: MetaMask has suffered a data breach, resulting in users receiving phishing emails.

Attackers are sending users emails impersonating MetaMask, redirecting users to a phishing site that asks for wallet recovery phrases.

@scammed / @DWCusers

⚠️BREAKING: Ledger experienced another data breach via its payment processor Global-e, resulting in the exposure of customer personal data

Earlier today, affected customers received an email regarding the incident. Ledger is investigating the breach with external security experts.

@scammed / @DWCusers

⚠️JUST IN: A wallet compromised in 2022 was fully exploited in 2025, with ~$17M in ETH drained.

The victim originally lost 5,544 ETH (~$6.5M in 2022) + ~$396K in other assets after their private keys were compromised. The attacker retained control of the wallet and remained silent.

By November 2025, the attackers came back and withdrew ~$17M from the victim’s wallet after 3 years of waiting, laundering it via Tornado Cash.

@scammed / @DWCusers

⚠️JUST IN: ZachXBT is warning against buying Ledger wallets after today’s data breach.

Whenever a cold wallet suffers a breach, attackers usually follow up with phishing emails and social engineering attempts. Back in August, a Trezor user lost 783 BTC ( $91M ) after receiving a call from fake Trezor support.

@scammed / @DWCusers

⚠️UPDATE: Cold MM won the dispute regarding the $10k scam claim.

During the transaction, $10,000 was sent to a poisoned address and are now lost, but Cold was cleared in the dispute. The original claim was found to have inconsistencies & lack of proof.

@scammed / @DWCusers

⚠️UPDATE: Threat actors behind the Ledger breach are already sending phishing emails & calls to users.

Victims from yesterday’s data breach are now receiving phishing emails. Targeted users with higher crypto balances are receiving Ledger support impersonation calls.

@scammed / @DWCusers

⚠️JUST IN: A victim lost $229,951 in BTC and WETH after signing multiple phishing signatures.

The victim was drained of 1.1 BTC ( ~$100K ) and 40 ETH ( ~$130K+ ) after being redirected to a fake exchange website, where the attackers obtained wallet access via malicious approvals.

@scammed / @DWCusers