🎣 Fake Ngrave alert: users typed their own seed phrases in, the hardware was never cracked
Hackers didn't crack a single Ngrave device. The Belgian hardware-wallet maker's alert pipe got hijacked, customers got a fake 'security warning' on Oct. 17, and the thieves walked off with about $2.56 million from 70 wallet addresses on four networks. Classic move: don't break the safe, convince the owner to open it.
▪️ The entry point was a third-party notification provider behind Ngrave's LIQUID companion app. The attackers sent authentic-looking alerts straight to customers.
▪️ The fake message said the portfolio had synced with a Pixel 9 in Moscow. Approve or deny, with a countdown timer ticking. Both buttons led to a counterfeit Ngrave site.
▪️ Both paths asked for the 24-word recovery phrase or Perfect Key. Victims typed it in, and that was the whole game: scripts emptied the wallets within minutes.
▪️ The door was open earlier. Unauthorized access likely started Oct. 11. The attackers stole one access key, used it to grab a key with broader permissions, including analytics data.
▪️ Ngrave spotted the malicious alerts within a minute, at 9:30 p.m. UTC. The first wallet was still drained six minutes later.
▪️ The loot was laundered through exchanges, bridges and fresh addresses. Bitcoin was traced across 12 addresses, XRP across 54 transfers.
📊 Total stolen, 70 addresses:
📊 Bitcoin:
📊 XRP:
📊 Ethereum-based assets:
💬 «In my humble opinion, the first duty of a crypto security company is to provide exactly that: security. In this, we have absolutely and utterly failed.» — Ngrave CEO
🔮The wallet did its job. The weak link was the guy typing his seed into a pop-up. Still think 'my hardware is safe' covers you?
@hivenetwork
Hackers didn't crack a single Ngrave device. The Belgian hardware-wallet maker's alert pipe got hijacked, customers got a fake 'security warning' on Oct. 17, and the thieves walked off with about $2.56 million from 70 wallet addresses on four networks. Classic move: don't break the safe, convince the owner to open it.
▪️ The entry point was a third-party notification provider behind Ngrave's LIQUID companion app. The attackers sent authentic-looking alerts straight to customers.
▪️ The fake message said the portfolio had synced with a Pixel 9 in Moscow. Approve or deny, with a countdown timer ticking. Both buttons led to a counterfeit Ngrave site.
▪️ Both paths asked for the 24-word recovery phrase or Perfect Key. Victims typed it in, and that was the whole game: scripts emptied the wallets within minutes.
▪️ The door was open earlier. Unauthorized access likely started Oct. 11. The attackers stole one access key, used it to grab a key with broader permissions, including analytics data.
▪️ Ngrave spotted the malicious alerts within a minute, at 9:30 p.m. UTC. The first wallet was still drained six minutes later.
▪️ The loot was laundered through exchanges, bridges and fresh addresses. Bitcoin was traced across 12 addresses, XRP across 54 transfers.
📊 Total stolen, 70 addresses:
$2.56M📊 Bitcoin:
$1.77M📊 XRP:
$454K📊 Ethereum-based assets:
$316KAnyone holding a hardware wallet who gets a 'security' pop-up should treat it as an attack until proven otherwise. Ngrave's device held, but its trusted messaging became the weapon. The company says it replaced compromised keys and added two-person approvals, restricted domains and emergency shutdown for notifications. Exposed device data, IP addresses and rough locations mean targeted scams are coming next. 2026 has been a bad year for this category: nearly a dozen hardware-wallet incidents, with over $180 million lost across two of them.
💬 «In my humble opinion, the first duty of a crypto security company is to provide exactly that: security. In this, we have absolutely and utterly failed.» — Ngrave CEO
🔮
@hivenetwork
📊 BTC $82,850, ETH $2,447 — ZEC ripped +9.6% on $216M, Strive is stacking
BTC is sitting at $82,850 (+0.93% in 24h) and ETH at $2,447.23 (+1.44%), so the majors are just drifting up. The real action is in the alts, where ZEC led the gainers on serious volume while ARB was the only big red name.
▪️ ZEC +9.6% on $216M volume and WLD +8.8% on $97M are the moves with real money behind them. PEPE +8.1% on $60M rounds out the group.
▪️ SPCXB +9.2% on $45M and SOXLB +8.6% on only $22M are thin pumps. A 9% candle on $22M is how the crowd gets sold to, so check who's on the other side first.
▪️ ARB -4.4% on $30M was the only meaningful loser. XAUT, TRX, USDC and USD1 barely moved, so there's no panic in the tape.
▪️ Strive bought 1,223 BTC between October 14 and 16, per a Monday filing, for about $100M at an average of ~$81,734.
▪️ A wallet created January 1, 2016 moved 500 BTC (~$41M) for the first time in a decade. It's part of a wave of long-dormant coins that pushed this month's total to 1,745.615 BTC.
▪️ Thieves hijacked Belgian hardware-wallet maker Ngrave's alert system with a fake security warning, led victims to the attackers and drained ~$2.56M.
🔮Greed at 63, a treasury stacking BTC and a 2016 wallet waking up. Who's selling to whom today?
@hivenetwork
BTC is sitting at $82,850 (+0.93% in 24h) and ETH at $2,447.23 (+1.44%), so the majors are just drifting up. The real action is in the alts, where ZEC led the gainers on serious volume while ARB was the only big red name.
▪️ ZEC +9.6% on $216M volume and WLD +8.8% on $97M are the moves with real money behind them. PEPE +8.1% on $60M rounds out the group.
▪️ SPCXB +9.2% on $45M and SOXLB +8.6% on only $22M are thin pumps. A 9% candle on $22M is how the crowd gets sold to, so check who's on the other side first.
▪️ ARB -4.4% on $30M was the only meaningful loser. XAUT, TRX, USDC and USD1 barely moved, so there's no panic in the tape.
▪️ Strive bought 1,223 BTC between October 14 and 16, per a Monday filing, for about $100M at an average of ~$81,734.
▪️ A wallet created January 1, 2016 moved 500 BTC (~$41M) for the first time in a decade. It's part of a wave of long-dormant coins that pushed this month's total to 1,745.615 BTC.
▪️ Thieves hijacked Belgian hardware-wallet maker Ngrave's alert system with a fake security warning, led victims to the attackers and drained ~$2.56M.
Fear & Greed climbed to 63 (Greed) from 55 yesterday, which is exactly when the crowd starts chasing green candles on thin volume. Strive is adding BTC at around $81.7K while the old wallet is waking up, so someone with size is moving while retail gets hyped. Don't be the exit liquidity for the SPCXB and SOXLB pumps.
🔮
@hivenetwork
🔥 Bitcoin smashes $84K and tens of thousands of shorters get rekt
Bitcoin punched through $84,000 on Wednesday, trading near $84,376 and poking at $84,739, and the bears betting on a drop got steamrolled. About $188 million in short positions were liquidated across more than 71,000 traders, with Binance accounting for roughly 44% of all erased positions.
▪️ How it works: shorters borrow funds to amplify bets that price falls. Price went up instead, so exchanges auto-closed every position that no longer had enough collateral.
▪️ Every forced close is a forced buy-back. Shorts buying to exit push price higher, which triggers more liquidations. That's the feedback loop, and it's the whole show.
▪️ Snapshot at 11:20 a.m. Wednesday: shorts took 77.4% of the 24-hour total, while longs got a light scratch of $54.89 million.
▪️ Breakdown: BTC shorts were 94% of its $78.42M wipeout. Ethereum took $47.99M and zcash about $14.80M.
▪️ Speed of the carnage: $68.12M gone in one hour, $144.68M over four hours, $182.52M over 12 hours.
▪️ The ceiling is still there. $84,000 to $85,000 keeps attracting sellers. A close above $85K opens $86,500 to $86,700, while another rejection puts $82,000 and then $80,000 in focus.
📊 24h liquidations, all markets:
📊 Traders liquidated:
📊 Largest single liquidation:
🔮Shorts paid the tuition again. Real buying demand, or just forced buyers doing the work for free?
@hivenetwork
Bitcoin punched through $84,000 on Wednesday, trading near $84,376 and poking at $84,739, and the bears betting on a drop got steamrolled. About $188 million in short positions were liquidated across more than 71,000 traders, with Binance accounting for roughly 44% of all erased positions.
▪️ How it works: shorters borrow funds to amplify bets that price falls. Price went up instead, so exchanges auto-closed every position that no longer had enough collateral.
▪️ Every forced close is a forced buy-back. Shorts buying to exit push price higher, which triggers more liquidations. That's the feedback loop, and it's the whole show.
▪️ Snapshot at 11:20 a.m. Wednesday: shorts took 77.4% of the 24-hour total, while longs got a light scratch of $54.89 million.
▪️ Breakdown: BTC shorts were 94% of its $78.42M wipeout. Ethereum took $47.99M and zcash about $14.80M.
▪️ Speed of the carnage: $68.12M gone in one hour, $144.68M over four hours, $182.52M over 12 hours.
▪️ The ceiling is still there. $84,000 to $85,000 keeps attracting sellers. A close above $85K opens $86,500 to $86,700, while another rejection puts $82,000 and then $80,000 in focus.
📊 24h liquidations, all markets:
$243.04M📊 Traders liquidated:
71,223📊 Largest single liquidation:
$8.74M ETH short on BinanceAnyone still shorting this range is donating to the next squeeze. U.S. spot bitcoin ETFs are propping the move, with $23.16M in inflows on Tuesday after $526.60M on Monday. The Fed's October decision is the next catalyst, and CME's FedWatch tool shows an 81% chance rates stay the same, so the market has mostly priced in a hold.
🔮
@hivenetwork
📊 BTC flat at $82.9K while Greed climbs: the crowd is warming up for something
Bitcoin sits at $82,862 (-0.09% in 24h) and Ethereum at $2,445 (-0.21%), so nothing moved, nobody got wrecked, and nobody printed. The sentiment is not flat, though: the crowd is getting greedy while the price goes nowhere.
▪️ ALT +13.6% on only $29M volume. Thin book, fat candle: that's the setup where somebody sells to you.
▪️ PUMP +4.4% on $26M and CRCLB +1.3% on $26M. Small money, but watch whether volume follows the price.
▪️ ZEC +1.6% on $252M, the biggest volume on the gainers board, and the price barely moved. Someone is absorbing, not chasing.
▪️ IOST -15.0% on $47M, the worst drop on the board. Sellers hit it hard on heavy turnover.
▪️ WLD -5.7% on $56M and UNI -4.0% on $49M. Heavy volume on the way down, and nobody's calling it a dip yet.
▪️ Top story 1: Doodles' DOOD token surged 212% to about $38M market cap. NFT-linked tokens pump on hype and dump on the same hype.
📊 Fear & Greed now:
📊 Fear & Greed yesterday:
🔮Greed climbing into a flat tape. Who's the exit liquidity this time, you or the guy next to you?
@hivenetwork
Bitcoin sits at $82,862 (-0.09% in 24h) and Ethereum at $2,445 (-0.21%), so nothing moved, nobody got wrecked, and nobody printed. The sentiment is not flat, though: the crowd is getting greedy while the price goes nowhere.
▪️ ALT +13.6% on only $29M volume. Thin book, fat candle: that's the setup where somebody sells to you.
▪️ PUMP +4.4% on $26M and CRCLB +1.3% on $26M. Small money, but watch whether volume follows the price.
▪️ ZEC +1.6% on $252M, the biggest volume on the gainers board, and the price barely moved. Someone is absorbing, not chasing.
▪️ IOST -15.0% on $47M, the worst drop on the board. Sellers hit it hard on heavy turnover.
▪️ WLD -5.7% on $56M and UNI -4.0% on $49M. Heavy volume on the way down, and nobody's calling it a dip yet.
▪️ Top story 1: Doodles' DOOD token surged 212% to about $38M market cap. NFT-linked tokens pump on hype and dump on the same hype.
📊 Fear & Greed now:
68 (Greed)📊 Fear & Greed yesterday:
63Greed rising while the tape is flat is the classic moment when the late crowd buys the hype and the early money sells into it. Appetite is climbing, not cooling, so expect the chats to get louder and the candles to get thinner. Louder is not the same as stronger.
🔮
@hivenetwork
🚨 Mafia 'secret bank' ran out of a Milan car rental, and crypto was the exit door
Italian police arrested 30 people over an underground bank run from a car-rental firm in Pero, on the outskirts of Milan, and seized €21M (about $23.6M) in cash, bank balances, crypto, boats, jewelry and watches. The customers were 'Ndrangheta and Camorra figures. Their laundering machine looked like ordinary business until somebody read the invoices.
▪️ The operation was run by the Guardia di Finanza on orders from Milan's anti-mafia prosecutors. Three Italians led it: two long-time contacts of 'Ndrangheta clans from Crotone, both convicted before,…
▪️ Chinese and Albanian accomplices ran the day-to-day operation. Shell companies issued more than €110M in invoices for services that were never provided.
▪️ Those invoices gave real businesses fake costs, so they cut their tax bills. The firms paid by bank transfer and got the money back in cash, minus a commission.
▪️ About €68M was moved abroad. Money from the shells went to banks in Luxembourg, Lithuania and Germany, then through crypto exchanges into wallets the network controlled.
▪️ Drug traffickers who handed over cash got crypto or international transfers back. The network also laundered money stolen from victims of online crypto investment scams.
▪️ Among those caught: a Guardia di Finanza inspector under house arrest for corruption, a Milan court employee accused of leaking details of ongoing probes, and a lawyer.
📊 Arrested:
📊 Fake invoices issued:
📊 Moved abroad:
💬 «all criminal organizations, including those of the Mafia type, have an interest in using these instruments for their business» — Italy's Anti-Mafia Investigative Directorate, 2021
🔮Fake invoices, cash-back, crypto exit. Old scheme, new wallet. Who's still cleaning money through your favorite exchange?
@hivenetwork
Italian police arrested 30 people over an underground bank run from a car-rental firm in Pero, on the outskirts of Milan, and seized €21M (about $23.6M) in cash, bank balances, crypto, boats, jewelry and watches. The customers were 'Ndrangheta and Camorra figures. Their laundering machine looked like ordinary business until somebody read the invoices.
▪️ The operation was run by the Guardia di Finanza on orders from Milan's anti-mafia prosecutors. Three Italians led it: two long-time contacts of 'Ndrangheta clans from Crotone, both convicted before,…
▪️ Chinese and Albanian accomplices ran the day-to-day operation. Shell companies issued more than €110M in invoices for services that were never provided.
▪️ Those invoices gave real businesses fake costs, so they cut their tax bills. The firms paid by bank transfer and got the money back in cash, minus a commission.
▪️ About €68M was moved abroad. Money from the shells went to banks in Luxembourg, Lithuania and Germany, then through crypto exchanges into wallets the network controlled.
▪️ Drug traffickers who handed over cash got crypto or international transfers back. The network also laundered money stolen from victims of online crypto investment scams.
▪️ Among those caught: a Guardia di Finanza inspector under house arrest for corruption, a Milan court employee accused of leaking details of ongoing probes, and a lawyer.
📊 Arrested:
30📊 Fake invoices issued:
€110M+📊 Moved abroad:
€68MForget the mafia romance for a second. The part that matters to you is the crypto leg: exchanges were the pipe that turned cash from drug deals and scam victims into wallets the network controlled. Investigators followed the on-chain trail as much as the paper trail. Expect exchanges and compliance teams to keep tightening checks on fiat-to-crypto flows from shell-company accounts, because this is exactly the pattern they get judged on.
💬 «all criminal organizations, including those of the Mafia type, have an interest in using these instruments for their business» — Italy's Anti-Mafia Investigative Directorate, 2021
🔮
@hivenetwork
🔓 Coldcard's "random" seed phrases were guessable: $140M+ in BTC gone, Coinkite sued
Coinkite, the Toronto maker of Coldcard hardware wallets, is being sued in Ontario after attackers allegedly drained more than $140 million in bitcoin. The proposed class action was filed Sept. 11, 2026, and it names Coinkite Inc. plus co-founders Rodolfo Novak and Peter D. Gray. The core claim: the wallets were supposed to be a vault, but their seed phrases were predictable.
▪️ The bug was a "build and link integration error" that made devices use Micropython's Yasmarang generator instead of the hardware random number generator.
▪️ Seed phrases came out predictable, so attackers could recreate private keys without ever touching the physical wallet.
▪️ Exploitation started July 30, 2026. The first hit took about 594 BTC (~$38M) in 25 minutes; later thefts pushed the estimated losses past $140M.
▪️ The complaint says bitcoin engineer James O'Beirne warned Coinkite about the flaw in May 2025, more than a year before the thefts began.
▪️ Coinkite disclosed the bug July 30 and shipped corrective firmware the next day. But a firmware patch doesn't fix seeds already generated: owners had to create new seeds and move their coins.
▪️ The suit says Coinkite never directly notified affected customers, even though it had their contact details, and it challenges the contract clauses that limit liability.
📊 Alleged losses:
📊 First drain:
📊 Affected since:
💬 «undermined the entire purpose and function of the device» — Lawsuit complaint, Amir Reza Naderi v. Coinkite
🔮A hardware wallet whose 'randomness' was guessable for five years. Who was actually watching the seed generator?
@hivenetwork
Coinkite, the Toronto maker of Coldcard hardware wallets, is being sued in Ontario after attackers allegedly drained more than $140 million in bitcoin. The proposed class action was filed Sept. 11, 2026, and it names Coinkite Inc. plus co-founders Rodolfo Novak and Peter D. Gray. The core claim: the wallets were supposed to be a vault, but their seed phrases were predictable.
▪️ The bug was a "build and link integration error" that made devices use Micropython's Yasmarang generator instead of the hardware random number generator.
▪️ Seed phrases came out predictable, so attackers could recreate private keys without ever touching the physical wallet.
▪️ Exploitation started July 30, 2026. The first hit took about 594 BTC (~$38M) in 25 minutes; later thefts pushed the estimated losses past $140M.
▪️ The complaint says bitcoin engineer James O'Beirne warned Coinkite about the flaw in May 2025, more than a year before the thefts began.
▪️ Coinkite disclosed the bug July 30 and shipped corrective firmware the next day. But a firmware patch doesn't fix seeds already generated: owners had to create new seeds and move their coins.
▪️ The suit says Coinkite never directly notified affected customers, even though it had their contact details, and it challenges the contract clauses that limit liability.
📊 Alleged losses:
$140M+📊 First drain:
594 BTC in 25 min📊 Affected since:
March 2021 firmwareAnyone holding a Coldcard Mk2, Mk3, Mk4, Mk5 or Q bought for personal use and never migrated to fresh seeds is sitting on the same exposed setup. The fix was never automatic, so the risk stays live for every wallet generated on the bad firmware. Expect the class action to grow and the liability fight over that contract wording to be the story for months. None of it is proven in court yet, and no damages have been awarded.
💬 «undermined the entire purpose and function of the device» — Lawsuit complaint, Amir Reza Naderi v. Coinkite
🔮
@hivenetwork
📉 BTC slides under $82K while $210M in longs gets wiped
BTC sits at $81,862.3 (-1.11% over 24h) and ETH at $2,404.66 (-1.47%), so the majors are bleeding slowly, not crashing. The sharper pain is in the alts, where SOXLB dropped 10.1% and nobody in the feed has a reason for it.
▪️ AI +7.3% on $86M volume: top gainer, no catalyst in the feed. Chasing it is on you, and the room will hand you the bag.
▪️ SOXLB -10.1% on $56M, the worst name on the board. PUMP -5.9% and SPCXB -5.3% are bleeding alongside it.
▪️ ZEC -3.9% on $252M: the biggest volume on the losers list. When that much money moves on a red day, someone is exiting.
▪️ Coinkite sued after a five-year-old Coldcard flaw let attackers drain $140M+ in bitcoin. The recovery phrases were predictable, and the suit was filed Sept. 11, 2026.
▪️ China seeks to seize 61,800+ BTC tied to a $5.7B fraud. A UK court just ruled Chinese law governs victims' claims, so the fight is now about who gets the coins.
▪️ $210M in crypto longs liquidated as BTC and ETH fell, with reports tying it to cautious sentiment. Separately, CertiK flagged an $820K drain of NEM's PancakeSwap pool.
🔮Neutral after a greedy 68? The dip buyers are still out there. Question is whether they're the ones holding the bag.
@hivenetwork
BTC sits at $81,862.3 (-1.11% over 24h) and ETH at $2,404.66 (-1.47%), so the majors are bleeding slowly, not crashing. The sharper pain is in the alts, where SOXLB dropped 10.1% and nobody in the feed has a reason for it.
▪️ AI +7.3% on $86M volume: top gainer, no catalyst in the feed. Chasing it is on you, and the room will hand you the bag.
▪️ SOXLB -10.1% on $56M, the worst name on the board. PUMP -5.9% and SPCXB -5.3% are bleeding alongside it.
▪️ ZEC -3.9% on $252M: the biggest volume on the losers list. When that much money moves on a red day, someone is exiting.
▪️ Coinkite sued after a five-year-old Coldcard flaw let attackers drain $140M+ in bitcoin. The recovery phrases were predictable, and the suit was filed Sept. 11, 2026.
▪️ China seeks to seize 61,800+ BTC tied to a $5.7B fraud. A UK court just ruled Chinese law governs victims' claims, so the fight is now about who gets the coins.
▪️ $210M in crypto longs liquidated as BTC and ETH fell, with reports tying it to cautious sentiment. Separately, CertiK flagged an $820K drain of NEM's PancakeSwap pool.
Fear & Greed fell to 50 (Neutral) from 68 yesterday. Neutral means the crowd lost its appetite for chasing, not that the market is safe. Leveraged longs already got cleaned out, so the next liquidation cascade needs a new trigger, and the Coldcard class action is the one that could hit hardware-wallet holders directly.
🔮
@hivenetwork
💸 Colombian crypto broker gets 160 months for laundering drug money through Tether
Leonardo de Jesus Zuluaga Duque, a Colombia-based crypto broker with a supervisory role in the network, got 160 months in a New York federal case, announced by the SDNY on October 21. Prosecutors say he and others laundered about $14.5M in Tether from drug trafficking between May and November 2023. The sentence is by Judge Mary Kay Vyskocil.
▪️ Step 1: drug proceeds get converted into Tether, the token that was supposed to be the boring dollar.
▪️ Step 2: the USDT goes to an unlicensed money-transmission business, which exchanges it for US dollars.
▪️ Step 3: US shell companies move those dollars on to Colombian companies. A company with a bank account is the whole point.
▪️ Step 4: the money is converted into pesos and paid out to recipients in local currency. Clean cash, no fuss.
▪️ Why it got caught: a blockchain tracer sees token moves but not the business reason behind the bank wire. A bank record shows the company but not the USDT before it.
📊 Forfeiture ordered:
📊 Supervised release after prison:
📊 Laundering window:
🔮Tether freezes 131 wallets when OFAC calls, yet $14.5M still walked through the rails. Who's really watching?
@hivenetwork
Leonardo de Jesus Zuluaga Duque, a Colombia-based crypto broker with a supervisory role in the network, got 160 months in a New York federal case, announced by the SDNY on October 21. Prosecutors say he and others laundered about $14.5M in Tether from drug trafficking between May and November 2023. The sentence is by Judge Mary Kay Vyskocil.
▪️ Step 1: drug proceeds get converted into Tether, the token that was supposed to be the boring dollar.
▪️ Step 2: the USDT goes to an unlicensed money-transmission business, which exchanges it for US dollars.
▪️ Step 3: US shell companies move those dollars on to Colombian companies. A company with a bank account is the whole point.
▪️ Step 4: the money is converted into pesos and paid out to recipients in local currency. Clean cash, no fuss.
▪️ Why it got caught: a blockchain tracer sees token moves but not the business reason behind the bank wire. A bank record shows the company but not the USDT before it.
📊 Forfeiture ordered:
$14,751,846📊 Supervised release after prison:
5 years📊 Laundering window:
May–Nov 2023If you're trading stablecoins like they're cash, this is your reminder that the rails are also the laundering highway. Tether freezes wallets when OFAC updates its lists, as it did with 131 TRON wallets, so the 'digital dollar' has a kill switch and a paper trail. Zuluaga Duque is done for 13+ years. The shell companies and the unlicensed transmitter are the parts that will keep showing up in future cases.
🔮
@hivenetwork
🚨 New York wants $1.37B from Novatech founders who ran a 'trading' firm on other people's cash
New York is asking a state court to make Novatech founders Cynthia and Eddy Petion pay $1.367B after they skipped the case and a default judgment followed in August 2025. The attorney general's office says the couple fled the country. Investors sent over $1.16B in crypto into the scheme, which promised weekly 'trading returns' of roughly 2% to 4%.
▪️ The pitch: weekly crypto and forex returns, sold through prayer groups, social media and WhatsApp chats, with Haitian and other immigrant communities specifically targeted.
▪️ Deposits went to Novatech's Coinpayments wallet from August 2019 to May 2023. Only about 2% of that ever reached the trading platform, B2Broker: $25.99M.
▪️ Those traders lost about $18.19M. The 'successful trading' story needed real profits, and the filing says there were none big enough to pay the promised returns.
▪️ Prosecutors say the payouts came from newer investors' deposits, plus recruitment rewards. Classic: pay the old guys with the new guys' money and call it alpha.
▪️ Cynthia Petion allegedly authorized at least $134.5M in withdrawals from the Coinpayments account to wallets belonging to her and Eddy Petion.
▪️ The ask breaks down as $1.135B in disgorgement plus $232.5M in prejudgment interest. Four top promoters, Martin Zizi, Frantz Ciceron, Ricardo Roy Sr and James Corbett, settled for nearly $6M combined…
🔮Weekly 2% to 4% returns from a 'trading desk' that got about 2% of the cash. Who in that group chat ran the math?
@hivenetwork
New York is asking a state court to make Novatech founders Cynthia and Eddy Petion pay $1.367B after they skipped the case and a default judgment followed in August 2025. The attorney general's office says the couple fled the country. Investors sent over $1.16B in crypto into the scheme, which promised weekly 'trading returns' of roughly 2% to 4%.
▪️ The pitch: weekly crypto and forex returns, sold through prayer groups, social media and WhatsApp chats, with Haitian and other immigrant communities specifically targeted.
▪️ Deposits went to Novatech's Coinpayments wallet from August 2019 to May 2023. Only about 2% of that ever reached the trading platform, B2Broker: $25.99M.
▪️ Those traders lost about $18.19M. The 'successful trading' story needed real profits, and the filing says there were none big enough to pay the promised returns.
▪️ Prosecutors say the payouts came from newer investors' deposits, plus recruitment rewards. Classic: pay the old guys with the new guys' money and call it alpha.
▪️ Cynthia Petion allegedly authorized at least $134.5M in withdrawals from the Coinpayments account to wallets belonging to her and Eddy Petion.
▪️ The ask breaks down as $1.135B in disgorgement plus $232.5M in prejudgment interest. Four top promoters, Martin Zizi, Frantz Ciceron, Ricardo Roy Sr and James Corbett, settled for nearly $6M combined…
If you've ever been pitched a fixed weekly return with a WhatsApp group cheering it on, this is the exact playbook, and more than 11,000 New Yorkers bought into it. Chasing $1.37B from two people who reportedly left the country is the hard part, so the promoters' settlements are what's actually on the table. The filing doesn't say the investors' money is coming back.
🔮
@hivenetwork
🧾 Morning digest: WLD -13%, Novatech faces $1.37B, market stuck in neutral
BTC is at $80,859.01, down 1.15% over 24 hours, and ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday, so nobody is panicking and nobody is partying.
▪️ BMT is the day's top gainer at +29.0% on $34M volume. The feed doesn't say why it ran, so treat it as a pump until proven otherwise.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR fell -6.7% on $108M and ZEC -4.7% on $176M, the heaviest volume on the board.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain was hit when an attacker minted tokens and cashed out about $2.6M. Sources say the exploit raises concerns about the chain's security and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.
📊 BTC 24h:
📊 ETH 24h:
📊 Fear & Greed:
🔮Neutral sentiment with BTC bleeding: nobody is panicking yet, which is when the wrong trade gets made.
@hivenetwork
BTC is at $80,859.01, down 1.15% over 24 hours, and ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday, so nobody is panicking and nobody is partying.
▪️ BMT is the day's top gainer at +29.0% on $34M volume. The feed doesn't say why it ran, so treat it as a pump until proven otherwise.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR fell -6.7% on $108M and ZEC -4.7% on $176M, the heaviest volume on the board.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain was hit when an attacker minted tokens and cashed out about $2.6M. Sources say the exploit raises concerns about the chain's security and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.
📊 BTC 24h:
$80,859.01 (-1.15%)📊 ETH 24h:
$2,381.38 (-0.87%)📊 Fear & Greed:
51 (Neutral)A 51 reading means no fear and no greed, which is exactly when chop eats leveraged longs and shorts alike. WLD's -13% on $72M is the one to watch, since the feed gives no reason for it. The Novatech numbers are the lesson for anyone trusting a platform: $1.16B came in and about $26M reached the trading side.
🔮
@hivenetwork
🚨 UAE-led sting flags $39B in crypto fraud assets, 960 arrests claimed
A three-month operation led by the UAE, with 30 countries and 13 private partners, raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, but the same wire's body says nearly 100 defendants, so the arrest count is shaky. Interpol and GASA were in on it, and so were Huawei, Mastercard and Meta.
▪️ Operation Confrontation Ghost ran for three months and hit groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. Nothing says how the accounts were linked, only that they were.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts.
▪️ The $39B in fraud-linked assets is described as already being seized and recovered. The wire doesn't say how much of it has actually been seized.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits.
📊 Fraud-linked assets identified:
📊 Fraud attempts thwarted:
📊 Bank accounts blocked:
📊 Fraud centers raided:
💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC
🔮$39B 'identified' is not $39B seized. When do the actual numbers show up?
@hivenetwork
A three-month operation led by the UAE, with 30 countries and 13 private partners, raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, but the same wire's body says nearly 100 defendants, so the arrest count is shaky. Interpol and GASA were in on it, and so were Huawei, Mastercard and Meta.
▪️ Operation Confrontation Ghost ran for three months and hit groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. Nothing says how the accounts were linked, only that they were.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts.
▪️ The $39B in fraud-linked assets is described as already being seized and recovered. The wire doesn't say how much of it has actually been seized.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits.
📊 Fraud-linked assets identified:
$39B📊 Fraud attempts thwarted:
123.71M📊 Bank accounts blocked:
4,000+📊 Fraud centers raided:
29Retail is the one getting hit, and the reader should watch the gap between 'identified' and 'seized' before anyone cheers. The list of partners reads like a PR roster: Meta and TikTok are on it, and they're the platforms where these scams run. The headline's 960 arrests doesn't match the body's nearly 100 defendants, so the scale of the crackdown is still unclear.
💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC
🔮
@hivenetwork
🚨 Interpol: 1,462 arrests across Africa, $105M clawed back from crypto launderers
Interpol's Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States and ended with 1,462 arrests and more than $105M recovered. The juicy part for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto.
▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. Victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites selling…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, one suspect arrested.
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.
📊 Losses tied to the cases:
📊 Victims recorded:
📊 Malicious networks disrupted:
📊 Email addresses harvested in one Nigerian case:
🔮Pensioners got the scripted call. Your 'guaranteed returns' group is the same script with a nicer avatar.
@hivenetwork
Interpol's Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States and ended with 1,462 arrests and more than $105M recovered. The juicy part for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto.
▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. Victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites selling…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, one suspect arrested.
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.
📊 Losses tied to the cases:
$385M+📊 Victims recorded:
65,929📊 Malicious networks disrupted:
10,909📊 Email addresses harvested in one Nigerian case:
2.1MIf a 'trading mentor' with green screenshots has ever slid into your DMs, this is your category: fake platforms, scripted callers, a chat full of guaranteed returns. Same product, different logo. Interpol raids don't move price, so nobody is pumping anything here. Several investigations are still active, officials are tracing more proceeds, and the Tanzania, Gabon and Republic of Congo cases are not closed.
🔮
@hivenetwork
🚨 X 100 Global: hijacked Senate, drained treasury, X token down 96%
Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24 after attackers took control of its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the proceeds, and the X token collapsed.
▪️ No code bug here. The attack hit the governance design: a three-seat Senate that could be bought with a flash loan.
▪️ Governance had no voting snapshots, no minimum holding period and no execution delay. Whoever bought the majority could pass proposals and execute them immediately.
▪️ One transaction moved 400,000 X from the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury.
▪️ The attackers pulled those tokens out and sold them through a legitimate Uniswap V3 pool. Across three transactions about 550,000 X were extracted.
▪️ Follow-up operations targeted more Uniswap V3 liquidity positions. In some DEX pools, liquidity fell to just a few dollars.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position hit extreme slippage.
📊 Stolen in USDT:
📊 Flash loan from Aave:
📊 X tokens extracted:
📊 X still in Freezer at last update:
🔮Three seats, one flash loan, and the treasury was for sale. Who's next with the same governance setup?
@hivenetwork
Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24 after attackers took control of its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the proceeds, and the X token collapsed.
▪️ No code bug here. The attack hit the governance design: a three-seat Senate that could be bought with a flash loan.
▪️ Governance had no voting snapshots, no minimum holding period and no execution delay. Whoever bought the majority could pass proposals and execute them immediately.
▪️ One transaction moved 400,000 X from the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury.
▪️ The attackers pulled those tokens out and sold them through a legitimate Uniswap V3 pool. Across three transactions about 550,000 X were extracted.
▪️ Follow-up operations targeted more Uniswap V3 liquidity positions. In some DEX pools, liquidity fell to just a few dollars.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position hit extreme slippage.
📊 Stolen in USDT:
$4.85M📊 Flash loan from Aave:
1.94M USDT📊 X tokens extracted:
550,000📊 X still in Freezer at last update:
12.2MIf you're holding X, you're holding a token with almost no liquidity and a treasury that's still half-loaded. The 12.2M X left in the Freezer are the obvious next target, so the story isn't over. X 100 Global hadn't issued an official statement at the time of writing, which is the classic silence before a 'we're investigating' post. The lesson for every DAO-style project is simple: if a few seats can be bought in one block, the treasury is a yard sale.
🔮
@hivenetwork
📊 BTC flat at $80.9K, but BMT just got cut 14% on $43M volume
BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%), so the majors are doing absolutely nothing. The real action is in the alts, and the crowd is still ignoring the three stories below.
▪️ Gainers: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it.
▪️ Losers: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why, so treat it as a falling knife until someone explains it.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.
📊 Fear & Greed:
🔮Flat majors, a 14% alt crater, and a crowd just warm enough to get greedy. Who's the exit liquidity today?
@hivenetwork
BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%), so the majors are doing absolutely nothing. The real action is in the alts, and the crowd is still ignoring the three stories below.
▪️ Gainers: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it.
▪️ Losers: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why, so treat it as a falling knife until someone explains it.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.
📊 Fear & Greed:
54 (Neutral), was 51 yesterdayFear & Greed at 54 is neutral and creeping up, so the crowd is warming up, not panicking. Flat majors plus a 14% alt crater means the day's damage is concentrated in names with thin conviction, and that's where people get shredded. Anyone holding X 100 Global or the BMT/AI/NEAR names should expect volatility to stay ugly, since the source gives no recovery plan for X.
🔮
@hivenetwork
🚨 Chinese national extradited over $36.9M fake-exchange crypto scam, 174 Americans hit
The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto investment scam that pushed more than $36.9M through offshore banks and wallets. The victims were 174 Americans. The pitch was a 'trading platform' that looked like a real exchange, while the balances on screen climbed and the actual money walked out the back door.
▪️ The approach: unsolicited social media messages, calls, texts and online dating. Trust first, then 'digital asset' investments on fake platforms built to look like legit exchanges.
▪️ Victims were told their balances were growing. Meanwhile the money went through US shell companies, international bank accounts and digital asset wallets.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It was converted into USDT and sent to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao's charge is money laundering conspiracy from August 2025, up to 20 years. Eight co-conspirators already pleaded guilty.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business.
📊 Moved through the scheme:
📊 American victims:
📊 Max sentence for Zhao:
📊 Co-conspirators who pleaded guilty:
💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division
🔮Green numbers on a fake exchange. Oldest trick in the book, just with a Bahamas account attached.
@hivenetwork
The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto investment scam that pushed more than $36.9M through offshore banks and wallets. The victims were 174 Americans. The pitch was a 'trading platform' that looked like a real exchange, while the balances on screen climbed and the actual money walked out the back door.
▪️ The approach: unsolicited social media messages, calls, texts and online dating. Trust first, then 'digital asset' investments on fake platforms built to look like legit exchanges.
▪️ Victims were told their balances were growing. Meanwhile the money went through US shell companies, international bank accounts and digital asset wallets.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It was converted into USDT and sent to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao's charge is money laundering conspiracy from August 2025, up to 20 years. Eight co-conspirators already pleaded guilty.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business.
📊 Moved through the scheme:
$36.9M+📊 American victims:
174📊 Max sentence for Zhao:
20 years📊 Co-conspirators who pleaded guilty:
8Same ecosystem as the Prince Group saga: its head Chen Zhi was sent to China in January, and associate Hu Shi was arrested in Osaka in June. The Scam Center Strike Force restrained about $52M in one day in the Xinbi Guarantee action, bringing its total to roughly $938M. The money trail here ran through USDT on public chains, which is the exact rail you use every day. Stablecoins are not invisible, and the feds have clearly learned to read them.
💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division
🔮
@hivenetwork
🔓 GMO's trading cloud gets cracked: 26,739 servers in the crosshairs
Japan's GMO Internet got hit where retail keeps its money: Onamae.com Desktop Cloud, the always-on box that runs FX bots, was breached. One account lost about 2.4 million yen in roughly 84 seconds, because the attackers were trading with stolen broker logins, not with anyone's strategy.
▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Handy, but it parked broker credentials inside an environment attackers could get into.
▪️ A customer inquiry tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ GMO then found its own security flaw, which allowed unauthorized access and removal of customer information.
▪️ Stolen trading credentials were used for unauthorized trades, with repeated orders draining one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service was taken offline. GMO refused to pay, citing no guarantee the data would vanish or the attacks would stop.
📊 Flat payout per Desktop Cloud customer:
📊 Brokerages threatened:
📊 Free access to alternative desktop platform:
🔮A cloud that keeps broker keys running 24/7 is a vault with the door off. Who's next?
@hivenetwork
Japan's GMO Internet got hit where retail keeps its money: Onamae.com Desktop Cloud, the always-on box that runs FX bots, was breached. One account lost about 2.4 million yen in roughly 84 seconds, because the attackers were trading with stolen broker logins, not with anyone's strategy.
▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Handy, but it parked broker credentials inside an environment attackers could get into.
▪️ A customer inquiry tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ GMO then found its own security flaw, which allowed unauthorized access and removal of customer information.
▪️ Stolen trading credentials were used for unauthorized trades, with repeated orders draining one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service was taken offline. GMO refused to pay, citing no guarantee the data would vanish or the attacks would stop.
📊 Flat payout per Desktop Cloud customer:
5,000 yen📊 Brokerages threatened:
70+📊 Free access to alternative desktop platform:
6 monthsYour broker login sat in the same room as the hacker. GMO will pay verified losses and fees, plus a flat 5,000 yen to every Desktop Cloud customer whether they lost money or not, which is a coffee for a robbed account. The service is offline, the investigation has no end date, and founder Masatoshi Kumagai is asking the government to step in under Japan's active cyber defense framework.
🔮
@hivenetwork
🐋 Arthur Hayes dumps $22.28M in altcoins and ETH right after calling for $10K ETH
Wallets linked to Arthur Hayes, ex-CEO of BitMEX, sold about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest hit was 6,400 ETH, worth roughly $15.2M. The guy who called ETH going to $10,000 by year-end is now the one hitting the bid.
▪️ Late September he said Ethereum is the most secure layer-one and can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909.
▪️ Sales came during a week or so of market uncertainty, the same kind of stress window where he has dumped big size before.
📊 ENA sold (14M tokens):
📊 UNI sold (323,000):
📊 ETHFI sold (1.89M):
📊 AERO sold (546,609):
🔮Is the $10K ETH call still live, or is it just a better entry in his head?
@hivenetwork
Wallets linked to Arthur Hayes, ex-CEO of BitMEX, sold about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest hit was 6,400 ETH, worth roughly $15.2M. The guy who called ETH going to $10,000 by year-end is now the one hitting the bid.
▪️ Late September he said Ethereum is the most secure layer-one and can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909.
▪️ Sales came during a week or so of market uncertainty, the same kind of stress window where he has dumped big size before.
📊 ENA sold (14M tokens):
$2.76M📊 UNI sold (323,000):
$2.24M📊 ETHFI sold (1.89M):
$1.23M📊 AERO sold (546,609):
$398KIf you're holding ETH because a famous name said $10K, the wallet doing the selling is the famous name. Hayes is publicly bullish while his own on-chain history shows him selling into weakness and buying back higher. Lookonchain shows what moved, not why, so read his track record as the only real guidance on offer. Anyone long the same altcoins he just unloaded is now the exit liquidity.
🔮
@hivenetwork
📉 BTC at $80,094 and $815M liquidated: longs got farmed overnight
BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell, so the longs who piled in on the way down paid for it.
▪️ ENA +6.4% on just $33M volume: top green on the board, but thin volume is exactly the candle that gets chased right before it gets dumped on the chasers.
▪️ WLD -4.6% on $30M: worst of the top losers. Watch it if BTC keeps bleeding, because the weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: the heaviest volume among the losers, and the name the liquidations were pinned to.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed via offshore banks and digital wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.
📊 Fear & Greed:
🔮Who is the exit liquidity this time: the longs who bought ENA's pump, or the ones who bought the BTC dip?
@hivenetwork
BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell, so the longs who piled in on the way down paid for it.
▪️ ENA +6.4% on just $33M volume: top green on the board, but thin volume is exactly the candle that gets chased right before it gets dumped on the chasers.
▪️ WLD -4.6% on $30M: worst of the top losers. Watch it if BTC keeps bleeding, because the weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: the heaviest volume among the losers, and the name the liquidations were pinned to.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed via offshore banks and digital wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.
📊 Fear & Greed:
50 (Neutral), yesterday 54CoinDCX confirmed a $16M loss from retired wallets after breach reports surfaced, with no attack vector or recovery details yet, so don't assume your old wallets are safe. Sentiment is slipping but not panicking, which means choppy price action with liquidation hunts around key levels, not a clean trend. Trade small and expect wicks.
🔮
@hivenetwork
🎤 Carti's dormant X account shills a memecoin, and it rugs within hours
Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market value before it rugged, with $4.09M in 24h volume on the main Solana pair while the price fell roughly 64%. Nobody has linked the rapper or his team to it.
▪️ Bio edit tagging @pumpfun surfaced first via memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side.
▪️ The hook was a screenshot: a token named "carti" under a playboicarti handle, up 18,535% in its first hour, market value near $714,600.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market value was a small fraction of the peak.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M.
🔮Dormant account, one bio edit, instant pump. Hacked, or the cheapest marketing campaign of the year?
@hivenetwork
Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market value before it rugged, with $4.09M in 24h volume on the main Solana pair while the price fell roughly 64%. Nobody has linked the rapper or his team to it.
▪️ Bio edit tagging @pumpfun surfaced first via memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side.
▪️ The hook was a screenshot: a token named "carti" under a playboicarti handle, up 18,535% in its first hour, market value near $714,600.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market value was a small fraction of the peak.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M.
If you touched any CARTI ticker this weekend, you were the exit liquidity. The copycats are the trap: deployers know celebrity search spikes, so they flood launchpads with lookalikes and hope you grab the wrong contract. This isn't new. In July, Robinhood CEO Vlad Tenev's account was hijacked to shill a fake "Vladhood" token, which pulled in 175,000+ views in under 20 minutes before users flagged it. The Kimchi saga went from Pump.fun star to rug suspect in 48 hours. Bitcoin slipped below $80,000 and speculative volume dried up, yet a celebrity name still found buyers. That tells you where the retail appetite is.
🔮
@hivenetwork
📊 Morning digest: dead-calm majors, SOXLB pumping on thin volume, and a wallet check that got robbed
BTC and ETH both slid under half a percent in 24h, so the majors are doing nothing worth your coffee. The money moved in small caps, and the newsroom's top stories show people getting robbed through boring plumbing.
▪️ SOXLB +6.9% on $28M and QNT +4.1% on $37M lead the green list. Thin volume pumps look great on a chart until you try to exit.
▪️ ZEC +1.6% on $160M is the big money in the green list, barely moving. Somebody is loading or dumping while everyone watches the top gainer.
▪️ CRCLB -4.8% on $28M is the worst loser. NEAR -1.9% on $91M and SOL -1.2% on $153M show heavy selling, where stops get hunted.
▪️ BloomTrading: custodial bot users lost nearly $1M as wallets were drained. Custodial means the bot held the keys, so you trusted the box.
▪️ CARTI: a Pump.fun link appeared on Playboi Carti's dormant X account. The token ran to about $1.2M, then rugged within hours with no wallet tied to the account.
▪️ Keystone: hackers first leaked customer info, then stole a key used to check wallet authenticity, so counterfeit wallets could pass verification.
📊 BTC:
📊 ETH:
🔮Neutral sentiment and thin-volume pumps: who is the exit liquidity this morning?
@hivenetwork
BTC and ETH both slid under half a percent in 24h, so the majors are doing nothing worth your coffee. The money moved in small caps, and the newsroom's top stories show people getting robbed through boring plumbing.
▪️ SOXLB +6.9% on $28M and QNT +4.1% on $37M lead the green list. Thin volume pumps look great on a chart until you try to exit.
▪️ ZEC +1.6% on $160M is the big money in the green list, barely moving. Somebody is loading or dumping while everyone watches the top gainer.
▪️ CRCLB -4.8% on $28M is the worst loser. NEAR -1.9% on $91M and SOL -1.2% on $153M show heavy selling, where stops get hunted.
▪️ BloomTrading: custodial bot users lost nearly $1M as wallets were drained. Custodial means the bot held the keys, so you trusted the box.
▪️ CARTI: a Pump.fun link appeared on Playboi Carti's dormant X account. The token ran to about $1.2M, then rugged within hours with no wallet tied to the account.
▪️ Keystone: hackers first leaked customer info, then stole a key used to check wallet authenticity, so counterfeit wallets could pass verification.
📊 BTC:
$79,848.01 (-0.36%)📊 ETH:
$2,317.08 (-0.33%)Fear & Greed sits at 48, Neutral, down from 50 yesterday. Nobody is panicking and nobody is euphoric, so a green candle today is just someone's exit at retail prices. If you use Keystone, treat any wallet verification as unproven until they close the hole.
🔮
@hivenetwork