🐋 2016 wallet wakes after 10 years of sleep and moves 500 BTC to Coinbase

A wallet created on January 1, 2016 just shook off a decade of dust and sent 500 BTC (about $41.33M) to Coinbase on Tuesday, with bitcoin sitting above $82,000. Arkham ties the coins to convicted Irish drug dealer Clifton Collins and thinks the cops are behind the move. Officials haven't confirmed a thing, but that's the story everyone's chewing on, and the cops being the ones moving the bag is a pretty spicy plot twist.

▪️ Collins built his stash in 2011 and 2012 with cannabis trafficking money, piling up 6,000 BTC.
▪️ Then he lost access. The private keys were reportedly stashed in a fishing rod case that ended up in a landfill. Beautiful. Somewhere a bag of trash holds a few billion in potential.
▪️ Irish authorities, working with Europol, started digging these coins out earlier this year. This transfer is the fifth such movement in 2026.
▪️ Tuesday's transfer pushes the recovered total to 2,500 BTC. It's a slow drip, not a faucet, so expect more batches, not one big dump to ruin your weekend.
▪️ Same week, an unidentified "BTC whale" moved 411.45 BTC from a 2013 wallet, legacy address to a newer SegWit wallet, two UTXOs merged. That's housekeeping, not a sell signal.

📊 Recovered so far (Collins coins): 2,500 BTC
📊 Still sitting in limbo: 3,500 BTC (~$288M)
📊 Dormant wallets woken in October: 23

Old coins landing on Coinbase is never a hug, it's a question mark. The October wave of dormant wallets is already at 1,745.615 BTC per btcparser.com, so this isn't some one-off curiosity for the nostalgia crowd. Watch whether the Irish batches keep rolling in, because 3,500 BTC is still in the pipeline and that's supply with a date on it. Arkham's read is law enforcement, not a whale. The official side hasn't confirmed anything yet, so take the narrative with the same skepticism you'd give a 'guaranteed' signal from a stranger in a chat.

🔮 Police are the new whale on the chart now. Who's positioning ahead of the next batch?

@zeroexchangecommunity

Nobody cracked Ngrave. Victims typed their own seed phrases into a fake pop-up

Nobody cracked a single Ngrave device. Hackers hijacked the alert pipe of the Belgian hardware-wallet maker, served customers a fake 'security warning' on Oct. 17, and walked off with about $2.56 million from 70 wallet addresses on four networks. Oldest trick in the book: don't break the safe, just talk the owner into opening it.

▪️ The way in was a third-party notification provider behind Ngrave's LIQUID companion app. The attackers pushed authentic-looking alerts straight to customers' screens.
▪️ The fake message claimed the portfolio had synced with a Pixel 9 in Moscow. Approve or deny, with a countdown ticking. Both buttons led to a counterfeit Ngrave site.
▪️ Both paths demanded the 24-word recovery phrase or Perfect Key. Victims typed it in, and that was the whole game. Scripts emptied the wallets within minutes.
▪️ The door was open long before. Unauthorized access likely started Oct. 11. The attackers stole one access key, then used it to grab a key with broader permissions, including analytics data.
▪️ Ngrave spotted the malicious alerts within a minute, at 9:30 p.m. UTC. The first wallet was still getting drained six minutes later.
▪️ The loot got laundered through exchanges, bridges and fresh addresses. Bitcoin was traced across 12 addresses, XRP across 54 transfers. Follow the money, if you enjoy that kind of thing.

📊 Total stolen, 70 addresses: $2.56M
📊 Bitcoin: $1.77M
📊 XRP: $454K
📊 Ethereum-based assets: $316K

If you hold a hardware wallet and a 'security' pop-up shows up asking for your phrase, treat it as an attack until proven otherwise. Ngrave's device held up fine, but its trusted messaging became the weapon, and that's the scariest part. The company says it replaced compromised keys and added two-person approvals, restricted domains and an emergency shutdown for notifications. Exposed device data, IP addresses and rough locations mean targeted scams are coming next, so expect the follow-up DMs. 2026 has been a rough year for this category: nearly a dozen hardware-wallet incidents, with over $180 million lost across two of them. Cold storage is only as cold as the last thing you clicked.

💬 «In my humble opinion, the first duty of a crypto security company is to provide exactly that: security. In this, we have absolutely and utterly failed.» — Ngrave CEO

🔮 The wallet did its job. The weak link was the guy typing his seed into a pop-up. Still think 'my hardware is safe' covers you?

@zeroexchangecommunity

BTC $82,850, ETH $2,447 — ZEC ripped +9.6% on $216M while Strive keeps stacking

BTC is parked at $82,850 (+0.93% in 24h) and ETH at $2,447.23 (+1.44%). The majors are just drifting up, nobody's getting rich off that. The actual fun is in the alts, where ZEC led the gainers on real volume and ARB was the only big red name.

▪️ ZEC +9.6% on $216M and WLD +8.8% on $97M are the moves with actual money behind them. PEPE +8.1% on $60M rounds out the group.
▪️ SPCXB +9.2% on $45M and SOXLB +8.6% on only $22M are thin pumps. A 9% candle on $22M is how the crowd gets sold to.
▪️ ARB -4.4% on $30M was the only meaningful loser. XAUT, TRX, USDC and USD1 barely moved, so there's no panic in the tape. Nobody's running for the exits yet.
▪️ Strive bought 1,223 BTC between October 14 and 16, per a Monday filing, for about $100M at an average of ~$81,734. A treasury company buying the dip while retail is busy cheering green candles.
▪️ A wallet created January 1, 2016 moved 500 BTC (~$41M) for the first time in a decade. It's part of a wave of long-dormant coins that pushed this month's total to 1,745.615 BTC.
▪️ Thieves hijacked Belgian hardware-wallet maker Ngrave's alert system with a fake security warning, led victims to the attackers and drained ~$2.56M. Yes, the fake warning was the scam.

Fear & Greed climbed to 63 (Greed) from 55 yesterday, which is exactly when the crowd starts chasing green candles on thin volume. Strive is adding BTC around $81.7K while an old 2016 wallet wakes up, so someone with size is moving while retail gets hyped. Don't be the exit liquidity for the SPCXB and SOXLB pumps. Those are the ones that dump on the people who bought the top.

🔮 Greed at 63, a treasury stacking BTC and a 2016 wallet waking up. Who's selling to whom today?

@zeroexchangecommunity

🔥 Bitcoin rips through $84K and the shorts get rekt by the tens of thousands

Bitcoin punched through $84,000 on Wednesday, trading near $84,376 and poking at $84,739, and the bears who bet on a drop got steamrolled. About $188 million in short positions were liquidated across more than 71,000 traders, and Binance ate roughly 44% of all the erased positions. Somebody's sleeping well tonight.

▪️ How the trap works: shorters borrow funds to amplify bets that price falls. Price went up instead, so exchanges auto-closed every position that no longer had enough collateral.
▪️ Every forced close is a forced buy-back. Shorts buying to get out push price higher, which triggers more liquidations. That's the feedback loop, and it's the whole show.
▪️ Snapshot at 11:20 a.m. Wednesday: shorts took 77.4% of the 24-hour total, while longs got a light scratch of $54.89 million. Longs got a scratch. Shorts got a funeral.
▪️ Breakdown: BTC shorts were 94% of its $78.42M wipeout. Ethereum took $47.99M and Zcash about $14.80M.
▪️ Speed of the carnage: $68.12M gone in one hour, $144.68M over four hours, $182.52M over 12 hours. Nobody got a warning. Nobody ever does.
▪️ The ceiling is still there. $84,000 to $85,000 keeps attracting sellers. A close above $85K opens $86,500 to $86,700, while another rejection puts $82,000 and then $80,000 in focus.

📊 24h liquidations, all markets: $243.04M
📊 Traders liquidated: 71,223
📊 Largest single liquidation: $8.74M ETH short on Binance

Anyone still shorting this range is donating to the next squeeze. U.S. spot bitcoin ETFs are propping the move, with $23.16M in inflows on Tuesday after $526.60M on Monday. Fund money isn't a love letter, but it's the fuel. The Fed's October decision is the next catalyst, and CME's FedWatch tool shows an 81% chance rates stay the same, so the market has mostly priced in a hold. Nothing to see there, which is exactly why it's dangerous.

🔮 Shorts paid the tuition again. Real buying demand, or just forced buyers doing the work for free?

@zeroexchangecommunity

📊 BTC parked at $82.9K while Greed climbs: the crowd is warming up for something

Bitcoin sits at $82,862 (-0.09% in 24h), Ethereum at $2,445 (-0.21%). Nothing moved, nobody got wrecked, nobody printed. But the crowd is getting greedy while the price goes nowhere. Flat tape, hot mood. You've seen how this movie ends.

▪️ ALT +13.6% on only $29M volume. Thin book, fat candle. That's the exact setup where somebody sells you the top.
▪️ PUMP +4.4% on $26M, CRCLB +1.3% on $26M. Small money, but watch whether volume actually follows the price or it's just a painted candle.
▪️ ZEC +1.6% on $252M, the biggest volume on the gainers board, and the price barely moved. Someone is absorbing, not chasing. Smart money doesn't scream.
▪️ IOST -15.0% on $47M, the worst drop on the board. Sellers hit it hard on heavy turnover.
▪️ WLD -5.7% on $56M and UNI -4.0% on $49M. Heavy volume on the way down, and nobody's calling it a dip yet. Give it time, the bagholders will name it.
▪️ Top story: Doodles' DOOD token surged 212% to about $38M market cap. NFT-linked tokens pump on hype and dump on the same hype. Ride it if you're fast, cry if you're last.

📊 Fear & Greed, now: 68 (Greed)
📊 Fear & Greed, yesterday: 63

Greed climbing while the tape stays flat is the classic late-chat moment: latecomers buy the hype, early money sells into their bids. Appetite is heating up, not cooling, so expect the chats to get louder and the candles to get thinner. Louder is not stronger, and every guy in the group shouting about the moon is somebody's exit.

🔮 Greed climbing into a flat tape. Who's the exit liquidity this time, you or the guy next to you?

@zeroexchangecommunity

🚨 Mafia's 'secret bank' ran out of a Milan car rental. Crypto was the emergency exit

Italian cops busted 30 people running an underground bank out of a car-rental firm in Pero, on the outskirts of Milan, and seized €21M (about $23.6M) in cash, bank balances, crypto, boats, jewelry and watches. The clients were 'Ndrangheta and Camorra figures. The laundromat looked like ordinary business until somebody actually read the invoices.

▪️ The Guardia di Finanza ran the operation on orders from Milan's anti-mafia prosecutors. Three Italians led it: two long-time contacts of 'Ndrangheta clans from Crotone, both already convicted before,…
▪️ Chinese and Albanian accomplices ran the daily grind. Shell companies pushed out more than €110M in invoices for services that never existed. Paper business at its finest.
▪️ Those fake invoices gave real companies phantom costs, so their tax bills shrank. The firms paid by bank transfer, then got the cash back minus a commission.
▪️ About €68M went abroad. Money from the shells landed in banks in Luxembourg, Lithuania and Germany, then hopped through crypto exchanges into wallets the network controlled.
▪️ Drug traffickers who handed over cash got crypto or international transfers back. The network also washed money stolen from victims of online crypto investment scams.
▪️ Among those caught: a Guardia di Finanza inspector under house arrest for corruption, a Milan court employee accused of leaking details of ongoing probes, and a lawyer.

📊 Arrested: 30
📊 Fake invoices issued: €110M+
📊 Moved abroad: €68M

Skip the mafia romance for a sec. What matters to you is the crypto leg: exchanges were the pipe that turned cash from drug deals and scam victims into wallets the network controlled. Investigators followed the on-chain trail as much as the paper trail. Expect exchanges and compliance teams to tighten checks on fiat-to-crypto flows from shell-company accounts. This is exactly the pattern they get judged on, so brace for more KYC pain, frozen withdrawals and support tickets that go nowhere.

💬 «all criminal organizations, including those of the Mafia type, have an interest in using these instruments for their business» — Italy's Anti-Mafia Investigative Directorate, 2021

🔮 Fake invoices, cash-back, crypto exit. Same old scam, new wallet. Who's still washing money through your favorite exchange?

@zeroexchangecommunity

🔓 Coldcard's "random" seeds were guessable: $140M+ in BTC gone, and now Coinkite gets sued

Cold storage, they said. Turns out the cold wallet was basically a buffet for anyone who could guess the seed. Coinkite, the Toronto maker of Coldcard hardware wallets, is being sued in Ontario after attackers allegedly drained more than $140 million in bitcoin. The proposed class action was filed Sept. 11, 2026, and names Coinkite Inc. plus co-founders Rodolfo Novak and Peter D. Gray. The core claim is simple: the wallets were sold as a vault, but their seed phrases were predictable.

▪️ The bug was a "build and link integration error" that made devices use Micropython's Yasmarang generator instead of the hardware random number generator.
▪️ Seed phrases came out predictable, which means attackers could rebuild private keys without ever touching your physical wallet. Your device could be sitting in a drawer and still be the weak link.
▪️ Exploitation started July 30, 2026. The first hit took about 594 BTC (~$38M) in 25 minutes, and later thefts pushed estimated losses past $140M. That's not a leak, that's a faucet.
▪️ The complaint says bitcoin engineer James O'Beirne warned Coinkite about the flaw in May 2025, more than a year before the thefts began. So somebody raised the alarm, and the alarm went to voicemail.
▪️ Coinkite disclosed the bug July 30 and shipped corrective firmware the next day. Great. But a firmware patch doesn't fix seeds that already exist.
▪️ The suit says Coinkite never directly notified affected customers, even though it had their contact details.

📊 Alleged losses: $140M+
📊 First drain: 594 BTC in 25 min
📊 Affected since: March 2021 firmware

If you hold a Coldcard Mk2, Mk3, Mk4, Mk5 or Q bought for personal use and never migrated to fresh seeds, you're sitting on the same exposed setup. The fix was never automatic, so the risk stays live for every wallet generated on the bad firmware. Expect the class action to grow and the liability fight over that contract wording to be the story for months. Nothing is proven in court yet, and no damages have been awarded. Until then, it's allegations, not verdicts.

💬 «undermined the entire purpose and function of the device» — Lawsuit complaint, Amir Reza Naderi v. Coinkite

🔮 A hardware wallet whose 'randomness' was guessable for five years. Who was actually watching the seed generator?

@zeroexchangecommunity

📉 BTC slides under $82K while $210M in longs gets wiped

BTC sits at $81,862.3 (-1.11% over 24h), ETH at $2,404.66 (-1.47%). The majors are bleeding slowly, not crashing. The real blood is in the alts, where SOXLB dumped 10.1% and the feed has zero explanation. Nobody knows why, and somebody will call it 'sentiment' anyway.

▪️ AI +7.3% on $86M volume: top gainer, no catalyst anywhere in the feed. Chasing it is on you, and the room will hand you the bag.
▪️ SOXLB -10.1% on $56M, worst name on the board. PUMP -5.9% and SPCXB -5.3% are bleeding right alongside it.
▪️ ZEC -3.9% on $252M, the biggest volume on the losers list. That much money moving on a red day? Somebody is heading for the exit, and it's not the guy buying the dip.
▪️ Coinkite sued after a five-year-old Coldcard flaw let attackers drain $140M+ in bitcoin. The recovery phrases were predictable. Suit filed Sept. 11, 2026.
▪️ China wants to seize 61,800+ BTC tied to a $5.7B fraud. A UK court just ruled Chinese law governs victims' claims, so now the fight is about who gets the coins. Lawyers eat, victims wait.
▪️ $210M in crypto longs liquidated as BTC and ETH fell, with reports tying it to cautious sentiment. Separately, CertiK flagged an $820K drain of NEM's PancakeSwap pool.

Fear & Greed dropped to 50 (Neutral) from 68 yesterday. Neutral doesn't mean safe. It means the crowd got bored of chasing and lost its appetite. Leveraged longs already got cleaned out, so the next liquidation cascade needs a fresh trigger. The Coldcard class action is the one that could hit hardware-wallet holders directly, and it's the one nobody is pricing in.

🔮 Neutral after a greedy 68? The dip buyers are still out there. Question is whether they're the ones holding the bag.

@zeroexchangecommunity

💸 Colombian broker gets 160 months for washing drug money through Tether

Leonardo de Jesus Zuluaga Duque, a Colombia-based crypto broker who had a supervisory role in the network, got 160 months in a New York federal case. The SDNY announced it on October 21. Prosecutors say he and others laundered about $14.5M in Tether from drug trafficking between May and November 2023. Judge Mary Kay Vyskocil handed down the sentence.

▪️ Step 1: drug cash gets turned into Tether, the token everybody was sold as the boring dollar. Boring, sure.
▪️ Step 2: the USDT goes to an unlicensed money-transmission business, which swaps it for US dollars. No license, no problem, apparently.
▪️ Step 3: US shell companies push those dollars on to Colombian companies. A company with a bank account is the whole point.
▪️ Step 4: the money gets converted to pesos and paid out in local currency. Clean cash, no fuss.
▪️ Why it got caught: a blockchain tracer sees the token moves but not the business reason behind the bank wire. The bank sees the company but not the USDT that came before it.

📊 Forfeiture ordered: $14,751,846
📊 Supervised release after prison: 5 years
📊 Laundering window: May–Nov 2023

If you're trading stablecoins like they're cash, here's your reminder: the rails that carry your 'digital dollar' are also the laundering highway. Tether freezes wallets when OFAC updates its lists, as it did with 131 TRON wallets, so that 'digital dollar' comes with a kill switch and a paper trail. Zuluaga Duque is done for 13+ years. The shell companies and the unlicensed transmitter are the parts that will keep popping up in future cases, so watch them, not just the headline.

🔮 Tether froze 131 wallets when OFAC called, yet $14.5M still walked the rails. Who's really watching?

@zeroexchangecommunity

🚨 New York wants $1.37B from the Novatech couple who ran a 'trading' firm on other people's money

New York wants a state court to make Novatech founders Cynthia and Eddy Petion pay $1.367B. Small detail: they skipped the case, a default judgment followed in August 2025, and the attorney general's office says the couple fled the country. Investors shoveled over $1.16B in crypto into this thing, lured by promised weekly 'trading returns' of roughly 2% to 4%. Great business model. Shame about the trading.

▪️ The pitch: weekly crypto and forex returns, sold through prayer groups, social media and WhatsApp chats. Haitian and other immigrant communities were specifically targeted.
▪️ Deposits hit Novatech's Coinpayments wallet from August 2019 to May 2023. Only about 2% of that ever reached the trading platform, B2Broker: $25.99M. Trading desk, my ass.
▪️ Those traders lost about $18.19M. The 'successful trading' story needed real profits, and the filing says there were none big enough to pay the promised returns. Running a fund with no fund. Bold.
▪️ Prosecutors say the payouts came from newer investors' deposits, plus recruitment rewards. Textbook Ponzi: pay the old guys with the new guys' money and call it alpha.
▪️ Cynthia Petion allegedly authorized at least $134.5M in withdrawals from the Coinpayments account to wallets belonging to her and Eddy Petion. Allegedly. Sure.
▪️ The ask breaks down as $1.135B in disgorgement plus $232.5M in prejudgment interest. Four top promoters, Martin Zizi, Frantz Ciceron, Ricardo Roy Sr and James Corbett, settled for nearly $6M combined…

If you've ever been pitched a fixed weekly return with a WhatsApp group cheering it on, this is the exact playbook, and more than 11,000 New Yorkers bought in. Chasing $1.37B from two people who reportedly left the country is the hard part, so the promoters' settlements are what's actually on the table. The filing doesn't say investors get their money back. Shocking, I know.

🔮 Weekly 2% to 4% returns from a 'trading desk' that got about 2% of the cash. Who in that group chat ran the math?

@zeroexchangecommunity

🧾 Morning digest: WLD dumps -13%, Novatech owes $1.37B, market sits on its hands

BTC is at $80,859.01, down 1.15% in 24 hours. ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday. Nobody's panicking, nobody's partying. Just chop, and chop is exactly how they farm your leverage.

▪️ BMT is the top gainer at +29.0% on $34M volume. The feed doesn't say why it ran. Until someone explains it, that's a pump, and you're the exit liquidity.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR dropped -6.7% on $108M, and ZEC -4.7% on $176M, the heaviest volume on the board. Big volume on red candles is never a coincidence.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain got hit: an attacker minted tokens and cashed out about $2.6M. Sources say it raises security concerns and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.

📊 BTC 24h: $80,859.01 (-1.15%)
📊 ETH 24h: $2,381.38 (-0.87%)
📊 Fear & Greed: 51 (Neutral)

A 51 reading means no fear and no greed, which is exactly when chop eats leveraged longs and shorts alike. WLD's -13% on $72M is the one to watch, because the feed gives no reason for it, and a move with no story is either a whale or a trap. The Novatech numbers are the lesson for anyone trusting a platform: $1.16B came in and about $26M reached the trading side. Not your keys, not your coins, and apparently not your money either.

🔮 Neutral sentiment with BTC bleeding: nobody's panicking yet, which is exactly when the wrong trade gets made.

@zeroexchangecommunity

🚨 UAE sting: $39B in fraud assets 'flagged', 960 arrests... or nearly 100? Pick a number

A three-month UAE-led op with 30 countries and 13 private partners raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, the body says nearly 100 defendants. Interpol and GASA are in the room, and so are Huawei, Mastercard and Meta. Big PR lineup for a crackdown whose own numbers can't agree with each other.

▪️ Operation Confrontation Ghost ran for three months and went after groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion. Nice buzzwords.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. How they were linked? Nobody says. Just trust us, they were linked.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts. Big numbers, zero breakdown. That's how you sell a press release.
▪️ The $39B is described as already being seized and recovered. The wire never says how much of it was actually seized. 'Identified' is a fun word. It makes the pile look bigger than the cash.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits. Same playbook, different month. The laundry keeps running.

📊 Fraud-linked assets identified: $39B
📊 Fraud attempts thwarted: 123.71M
📊 Bank accounts blocked: 4,000+
📊 Fraud centers raided: 29

Retail is the one getting hit, so watch the gap between 'identified' and 'seized' before anyone starts cheering. The partner list reads like a PR roster, and Meta and TikTok are on it. These are the platforms where the scams run, so the people selling the fix are also the people selling the shop. And the headline's 960 arrests doesn't match the body's nearly 100 defendants, so nobody actually knows how big this crackdown is. Hype first, math later, as usual.

💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC

🔮 $39B 'identified' is not $39B seized. When do the actual numbers show up? Don't hold your breath, and don't buy the headline.

@zeroexchangecommunity

🚨 Interpol nabbed 1,462 people across Africa and clawed back $105M from crypto launderers

Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States. Result: 1,462 arrests and more than $105M recovered. The juicy bit for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto. Shocking, right? Crypto being used for crime. Never heard that one before.

▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22, right on schedule for a nice press-release week.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. The victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, and one suspect got arrested. The pitch sounds familiar, doesn't it?
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.

📊 Losses tied to the cases: $385M+
📊 Victims recorded: 65,929
📊 Malicious networks disrupted: 10,909
📊 Email addresses harvested in one Nigerian case: 2.1M

If a 'trading mentor' with green screenshots has ever slid into your DMs, this is your category: fake platforms, scripted callers, a chat full of guaranteed returns. Same product, different logo. Interpol raids don't move price, so nobody's pumping anything here, relax. But several investigations are still active, officials are tracing more proceeds, and the Tanzania, Gabon and Republic of Congo cases are not closed.

🔮 Pensioners got the scripted call. Your 'guaranteed returns' group is the same script with a nicer avatar.

@zeroexchangecommunity

🚨 X 100 Global: Senate hijacked, treasury drained, X down 96%

Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24, after attackers took over its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the money, and the X token face-planted.

▪️ No code bug, folks. Nobody cracked anything clever. They exploited the governance design: a three-seat Senate that could be bought with a flash loan. Cheapest hostile takeover in history.
▪️ No voting snapshots, no minimum holding period, no execution delay. Whoever bought the majority could pass proposals and execute them on the spot.
▪️ One transaction moved 400,000 X out of the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury. Generous, right? Crumbs for the house.
▪️ The attackers pulled those tokens out and dumped them through a legitimate Uniswap V3 pool. Across three transactions, about 550,000 X got extracted. Slick, boring, effective.
▪️ Follow-up operations hit more Uniswap V3 liquidity positions. In some DEX pools, liquidity dropped to a few dollars. Pools that were basically a puddle with a price tag on it.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position ate extreme slippage. Exit liquidity is a fairy tale until you need it.

📊 Stolen in USDT: $4.85M
📊 Flash loan from Aave: 1.94M USDT
📊 X tokens extracted: 550,000
📊 X still in Freezer at last update: 12.2M

Holding X? Congrats, you're holding a token with almost no liquidity and a treasury that's still half-loaded. The 12.2M X left in the Freezer is the obvious next target, so this story isn't over. X 100 Global hasn't issued an official statement yet, which is the classic silence right before the 'we're investigating' post. Lesson for every DAO-style project: if a few seats can be bought in one block, your treasury is a yard sale.

🔮 Three seats, one flash loan, treasury on sale. Who's next with the same governance setup?

@zeroexchangecommunity

📊 BTC sleeps at $80.9K while BMT gets gutted 14% on $43M

BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%). The majors are doing nothing, which means the market is waiting for someone to tell you what to buy. The real blood is in the alts, and the crowd is still scrolling past the three stories below.

▪️ Green side: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it. Somebody's bag is getting filled.
▪️ Red side: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why. Falling knife until someone explains it, and nobody explains anything for free.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list. That's heavy money leaving, not tourists wandering.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished. Liquidity didn't vanish, it got walked out the back door.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.

📊 Fear & Greed: 54 (Neutral), was 51 yesterday

Fear & Greed at 54 is neutral and creeping up, so the crowd is warming up, not panicking. That's exactly when the smart money starts selling to you. Flat majors plus a 14% alt crater means the damage is parked in names with thin conviction, and that's where retail gets shredded. Holding X 100 Global or the BMT/AI/NEAR names? Expect ugly volatility to stick around, since the source gives no recovery plan for X. Don't marry the bag.

🔮 Flat majors, a 14% alt crater, and a crowd just warm enough to get greedy. Who's the exit liquidity today?

@zeroexchangecommunity

🚨 Chinese national extradited over $36.9M fake-exchange scam, 174 Americans hit

The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto 'investment' scam that pushed more than $36.9M through offshore banks and wallets. 174 Americans got hit. The pitch was a 'trading platform' dressed up as a real exchange, balances climbing on screen, and the actual money quietly walking out the back door. Somebody got rich, and it wasn't the hamsters.

▪️ Step one: cold DMs on social media, calls, texts, even online dating. Build trust first, then pitch 'digital asset' investments on fake platforms that look exactly like legit exchanges.
▪️ Victims watched their balances grow. Meanwhile the cash went through US shell companies, international bank accounts and digital asset wallets. Those green numbers were a screenshot, nothing more.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It got converted into USDT and shipped to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went on to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao faces a money laundering conspiracy charge tied to August 2025, up to 20 years. Eight co-conspirators have already pleaded guilty, so somebody folded fast.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business. Moving other people's money with no license. Not a great career move.

📊 Moved through the scheme: $36.9M+
📊 American victims: 174
📊 Max sentence for Zhao: 20 years
📊 Co-conspirators who pleaded guilty: 8

Same ecosystem as the Prince Group saga: its head Chen Zhi was sent to China in January, and associate Hu Shi was arrested in Osaka in June. The Scam Center Strike Force restrained about $52M in one day in the Xinbi Guarantee action, bringing its total to roughly $938M. And the money trail here ran through USDT on public chains, the exact rail you use every day. Stablecoins aren't invisible. The feds have clearly learned to read them, so next time you think your wallet is a black box, remember who's watching the chain.

💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division

🔮 Green numbers on a fake exchange. Oldest trick in the book, now with a Bahamas account attached.

@zeroexchangecommunity

🔓 GMO's trading cloud got cracked: 26,739 servers in the crosshairs

GMO Internet in Japan got tapped exactly where retail parks its cash. Onamae.com Desktop Cloud is the always-on box that runs your FX bots, and it got breached. One account lost about 2.4 million yen in roughly 84 seconds. The attackers weren't running anyone's strategy. They were trading on stolen broker logins, and that's the whole game.

▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Great for you.
▪️ A customer complaint tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ Then GMO found its own security hole, which let someone get in and remove customer information.
▪️ Stolen trading credentials were used for unauthorized trades. Repeated orders drained one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid up.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service went offline. GMO refused to pay, pointing out that nobody could guarantee the data would vanish or the attacks would…

📊 Flat payout per Desktop Cloud customer: 5,000 yen
📊 Brokerages threatened: 70+
📊 Free access to alternative desktop platform: 6 months

Your broker login was sitting in the same room as the hacker. GMO will cover verified losses and fees, plus a flat 5,000 yen to every Desktop Cloud customer, whether they lost money or not. That's a coffee for a robbed account, and they know it. The service is offline, the investigation has no end date, and founder Masatoshi Kumagai is asking the government to step in under Japan's active cyber defense framework. Translation: this is bigger than a bad week at the office.

🔮 A cloud that keeps broker keys running 24/7 is a vault with the door off. Who's next?

@zeroexchangecommunity

🐋 Arthur Hayes calls $10K ETH, then dumps $22.28M of altcoins and ETH. Shocking, truly

Wallets tied to Arthur Hayes, ex-CEO of BitMEX, moved about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest chunk was 6,400 ETH, roughly $15.2M. The man who said ETH hits $10,000 by year-end is now the one hitting the bid. Sure, sure.

▪️ Late September he called Ethereum the most secure layer-one that can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at. Retail calls this a strategy.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909. Buy high, sell low, buy higher.
▪️ These sales came during a week or so of market uncertainty, the exact kind of stress window where he has dumped big size before. Nobody's surprised except the people who bought his tweets.

📊 ENA sold (14M tokens): $2.76M
📊 UNI sold (323,000): $2.24M
📊 ETHFI sold (1.89M): $1.23M
📊 AERO sold (546,609): $398K

If you're holding ETH because a famous name said $10K, the wallet doing the selling belongs to that famous name. Hayes is loudly bullish on the timeline while his own on-chain history shows him selling into weakness and buying back higher. Lookonchain shows what moved, not why, so his track record is the only honest guidance on the table, and it's not flattering. Anyone still long the altcoins he just unloaded is now the exit liquidity. Congrats on the new job.

🔮 Is the $10K ETH call still live, or is it just a better entry in his head?

@zeroexchangecommunity

📉 BTC at $80,094, $815M liquidated: longs got farmed overnight

BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell. Everyone who bought the dip on leverage just paid tuition, and the market collected.

▪️ ENA +6.4% on just $33M volume: top green on the board. Thin volume like this is the candle that gets chased right before it gets dumped on the chasers. Enjoy the bag.
▪️ WLD -4.6% on $30M: worst of the top losers. If BTC keeps bleeding, keep an eye on it, because weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: heaviest volume among the losers, and the name the liquidations were pinned to. Retail panics, the big players read the book.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed through offshore banks and digital wallets. Offshore banks and wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.

📊 Fear & Greed: 50 (Neutral), yesterday 54

CoinDCX confirmed a $16M loss from retired wallets after breach reports surfaced, with no attack vector or recovery details yet. Don't assume your old wallets are safe just because you forgot about them. Sentiment is slipping but not panicking, which means choppy action with liquidation hunts around key levels, not a clean trend. Trade small and expect wicks.

🔮 Who is the exit liquidity this time: the longs who bought ENA's pump, or the ones who bought the BTC dip?

@zeroexchangecommunity

🎤 Carti's dead X account wakes up, shills a memecoin, and rugs within hours

Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market cap before it rugged. The main Solana pair did $4.09M in 24h volume while the price fell roughly 64%. Nobody has tied the rapper or his team to it. Surprise, surprise.

▪️ The bio edit tagging @pumpfun surfaced first on memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side. Just a tag and a vibe.
▪️ The bait was a screenshot: a token called "carti" under a playboicarti handle, up 18,535% in its first hour, market cap near $714,600. Somebody's marketing budget is doing very well.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway. Of course they did.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market cap was a small fraction of the peak. The chart did its whole life cycle before most of you finished your coffee.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars. Lovely.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M. Read that twice and tell me who the casino is really for.

If you touched any CARTI ticker this weekend, you were the exit liquidity. Full stop. The copycats are the real trap: deployers know celebrity search spikes, so they flood launchpads with lookalikes and pray you grab the wrong contract at 2am. This isn't new, it's the same script on a new actor. In July, Robinhood CEO Vlad Tenev's account got hijacked to shill a fake "Vladhood" token, which pulled in 175,000+ views in under 20 minutes before users flagged it. The Kimchi saga went from Pump.fun star to rug suspect in 48 hours. Bitcoin slipped below $80,000, speculative volume dried up, and yet a celebrity name still found buyers. Think about that. The appetite for a name is still alive when everything else is dead, and that's exactly what the sharks are counting on.

🔮 Dormant account, one bio edit, instant pump. Hacked, or the cheapest marketing campaign of the year?

@zeroexchangecommunity