📊 BTC parked at $82.9K while Greed climbs: the crowd is warming up for something
Bitcoin sits at $82,862 (-0.09% in 24h), Ethereum at $2,445 (-0.21%). Nothing moved, nobody got wrecked, nobody printed. But the crowd is getting greedy while the price goes nowhere. Flat tape, hot mood. You've seen how this movie ends.
▪️ ALT +13.6% on only $29M volume. Thin book, fat candle. That's the exact setup where somebody sells you the top.
▪️ PUMP +4.4% on $26M, CRCLB +1.3% on $26M. Small money, but watch whether volume actually follows the price or it's just a painted candle.
▪️ ZEC +1.6% on $252M, the biggest volume on the gainers board, and the price barely moved. Someone is absorbing, not chasing. Smart money doesn't scream.
▪️ IOST -15.0% on $47M, the worst drop on the board. Sellers hit it hard on heavy turnover.
▪️ WLD -5.7% on $56M and UNI -4.0% on $49M. Heavy volume on the way down, and nobody's calling it a dip yet. Give it time, the bagholders will name it.
▪️ Top story: Doodles' DOOD token surged 212% to about $38M market cap. NFT-linked tokens pump on hype and dump on the same hype. Ride it if you're fast, cry if you're last.
📊 Fear & Greed, now:
📊 Fear & Greed, yesterday:
🔮Greed climbing into a flat tape. Who's the exit liquidity this time, you or the guy next to you?
@smegmars
Bitcoin sits at $82,862 (-0.09% in 24h), Ethereum at $2,445 (-0.21%). Nothing moved, nobody got wrecked, nobody printed. But the crowd is getting greedy while the price goes nowhere. Flat tape, hot mood. You've seen how this movie ends.
▪️ ALT +13.6% on only $29M volume. Thin book, fat candle. That's the exact setup where somebody sells you the top.
▪️ PUMP +4.4% on $26M, CRCLB +1.3% on $26M. Small money, but watch whether volume actually follows the price or it's just a painted candle.
▪️ ZEC +1.6% on $252M, the biggest volume on the gainers board, and the price barely moved. Someone is absorbing, not chasing. Smart money doesn't scream.
▪️ IOST -15.0% on $47M, the worst drop on the board. Sellers hit it hard on heavy turnover.
▪️ WLD -5.7% on $56M and UNI -4.0% on $49M. Heavy volume on the way down, and nobody's calling it a dip yet. Give it time, the bagholders will name it.
▪️ Top story: Doodles' DOOD token surged 212% to about $38M market cap. NFT-linked tokens pump on hype and dump on the same hype. Ride it if you're fast, cry if you're last.
📊 Fear & Greed, now:
68 (Greed)📊 Fear & Greed, yesterday:
63Greed climbing while the tape stays flat is the classic late-chat moment: latecomers buy the hype, early money sells into their bids. Appetite is heating up, not cooling, so expect the chats to get louder and the candles to get thinner. Louder is not stronger, and every guy in the group shouting about the moon is somebody's exit.
🔮
@smegmars
🚨 Mafia's 'secret bank' ran out of a Milan car rental. Crypto was the emergency exit
Italian cops busted 30 people running an underground bank out of a car-rental firm in Pero, on the outskirts of Milan, and seized €21M (about $23.6M) in cash, bank balances, crypto, boats, jewelry and watches. The clients were 'Ndrangheta and Camorra figures. The laundromat looked like ordinary business until somebody actually read the invoices.
▪️ The Guardia di Finanza ran the operation on orders from Milan's anti-mafia prosecutors. Three Italians led it: two long-time contacts of 'Ndrangheta clans from Crotone, both already convicted before,…
▪️ Chinese and Albanian accomplices ran the daily grind. Shell companies pushed out more than €110M in invoices for services that never existed. Paper business at its finest.
▪️ Those fake invoices gave real companies phantom costs, so their tax bills shrank. The firms paid by bank transfer, then got the cash back minus a commission.
▪️ About €68M went abroad. Money from the shells landed in banks in Luxembourg, Lithuania and Germany, then hopped through crypto exchanges into wallets the network controlled.
▪️ Drug traffickers who handed over cash got crypto or international transfers back. The network also washed money stolen from victims of online crypto investment scams.
▪️ Among those caught: a Guardia di Finanza inspector under house arrest for corruption, a Milan court employee accused of leaking details of ongoing probes, and a lawyer.
📊 Arrested:
📊 Fake invoices issued:
📊 Moved abroad:
💬 «all criminal organizations, including those of the Mafia type, have an interest in using these instruments for their business» — Italy's Anti-Mafia Investigative Directorate, 2021
🔮Fake invoices, cash-back, crypto exit. Same old scam, new wallet. Who's still washing money through your favorite exchange?
@smegmars
Italian cops busted 30 people running an underground bank out of a car-rental firm in Pero, on the outskirts of Milan, and seized €21M (about $23.6M) in cash, bank balances, crypto, boats, jewelry and watches. The clients were 'Ndrangheta and Camorra figures. The laundromat looked like ordinary business until somebody actually read the invoices.
▪️ The Guardia di Finanza ran the operation on orders from Milan's anti-mafia prosecutors. Three Italians led it: two long-time contacts of 'Ndrangheta clans from Crotone, both already convicted before,…
▪️ Chinese and Albanian accomplices ran the daily grind. Shell companies pushed out more than €110M in invoices for services that never existed. Paper business at its finest.
▪️ Those fake invoices gave real companies phantom costs, so their tax bills shrank. The firms paid by bank transfer, then got the cash back minus a commission.
▪️ About €68M went abroad. Money from the shells landed in banks in Luxembourg, Lithuania and Germany, then hopped through crypto exchanges into wallets the network controlled.
▪️ Drug traffickers who handed over cash got crypto or international transfers back. The network also washed money stolen from victims of online crypto investment scams.
▪️ Among those caught: a Guardia di Finanza inspector under house arrest for corruption, a Milan court employee accused of leaking details of ongoing probes, and a lawyer.
📊 Arrested:
30📊 Fake invoices issued:
€110M+📊 Moved abroad:
€68MSkip the mafia romance for a sec. What matters to you is the crypto leg: exchanges were the pipe that turned cash from drug deals and scam victims into wallets the network controlled. Investigators followed the on-chain trail as much as the paper trail. Expect exchanges and compliance teams to tighten checks on fiat-to-crypto flows from shell-company accounts. This is exactly the pattern they get judged on, so brace for more KYC pain, frozen withdrawals and support tickets that go nowhere.
💬 «all criminal organizations, including those of the Mafia type, have an interest in using these instruments for their business» — Italy's Anti-Mafia Investigative Directorate, 2021
🔮
@smegmars
🔓 Coldcard's "random" seeds were guessable: $140M+ in BTC gone, and now Coinkite gets sued
Cold storage, they said. Turns out the cold wallet was basically a buffet for anyone who could guess the seed. Coinkite, the Toronto maker of Coldcard hardware wallets, is being sued in Ontario after attackers allegedly drained more than $140 million in bitcoin. The proposed class action was filed Sept. 11, 2026, and names Coinkite Inc. plus co-founders Rodolfo Novak and Peter D. Gray. The core claim is simple: the wallets were sold as a vault, but their seed phrases were predictable.
▪️ The bug was a "build and link integration error" that made devices use Micropython's Yasmarang generator instead of the hardware random number generator.
▪️ Seed phrases came out predictable, which means attackers could rebuild private keys without ever touching your physical wallet. Your device could be sitting in a drawer and still be the weak link.
▪️ Exploitation started July 30, 2026. The first hit took about 594 BTC (~$38M) in 25 minutes, and later thefts pushed estimated losses past $140M. That's not a leak, that's a faucet.
▪️ The complaint says bitcoin engineer James O'Beirne warned Coinkite about the flaw in May 2025, more than a year before the thefts began. So somebody raised the alarm, and the alarm went to voicemail.
▪️ Coinkite disclosed the bug July 30 and shipped corrective firmware the next day. Great. But a firmware patch doesn't fix seeds that already exist.
▪️ The suit says Coinkite never directly notified affected customers, even though it had their contact details.
📊 Alleged losses:
📊 First drain:
📊 Affected since:
💬 «undermined the entire purpose and function of the device» — Lawsuit complaint, Amir Reza Naderi v. Coinkite
🔮A hardware wallet whose 'randomness' was guessable for five years. Who was actually watching the seed generator?
@smegmars
Cold storage, they said. Turns out the cold wallet was basically a buffet for anyone who could guess the seed. Coinkite, the Toronto maker of Coldcard hardware wallets, is being sued in Ontario after attackers allegedly drained more than $140 million in bitcoin. The proposed class action was filed Sept. 11, 2026, and names Coinkite Inc. plus co-founders Rodolfo Novak and Peter D. Gray. The core claim is simple: the wallets were sold as a vault, but their seed phrases were predictable.
▪️ The bug was a "build and link integration error" that made devices use Micropython's Yasmarang generator instead of the hardware random number generator.
▪️ Seed phrases came out predictable, which means attackers could rebuild private keys without ever touching your physical wallet. Your device could be sitting in a drawer and still be the weak link.
▪️ Exploitation started July 30, 2026. The first hit took about 594 BTC (~$38M) in 25 minutes, and later thefts pushed estimated losses past $140M. That's not a leak, that's a faucet.
▪️ The complaint says bitcoin engineer James O'Beirne warned Coinkite about the flaw in May 2025, more than a year before the thefts began. So somebody raised the alarm, and the alarm went to voicemail.
▪️ Coinkite disclosed the bug July 30 and shipped corrective firmware the next day. Great. But a firmware patch doesn't fix seeds that already exist.
▪️ The suit says Coinkite never directly notified affected customers, even though it had their contact details.
📊 Alleged losses:
$140M+📊 First drain:
594 BTC in 25 min📊 Affected since:
March 2021 firmwareIf you hold a Coldcard Mk2, Mk3, Mk4, Mk5 or Q bought for personal use and never migrated to fresh seeds, you're sitting on the same exposed setup. The fix was never automatic, so the risk stays live for every wallet generated on the bad firmware. Expect the class action to grow and the liability fight over that contract wording to be the story for months. Nothing is proven in court yet, and no damages have been awarded. Until then, it's allegations, not verdicts.
💬 «undermined the entire purpose and function of the device» — Lawsuit complaint, Amir Reza Naderi v. Coinkite
🔮
@smegmars
📉 BTC slides under $82K while $210M in longs gets wiped
BTC sits at $81,862.3 (-1.11% over 24h), ETH at $2,404.66 (-1.47%). The majors are bleeding slowly, not crashing. The real blood is in the alts, where SOXLB dumped 10.1% and the feed has zero explanation. Nobody knows why, and somebody will call it 'sentiment' anyway.
▪️ AI +7.3% on $86M volume: top gainer, no catalyst anywhere in the feed. Chasing it is on you, and the room will hand you the bag.
▪️ SOXLB -10.1% on $56M, worst name on the board. PUMP -5.9% and SPCXB -5.3% are bleeding right alongside it.
▪️ ZEC -3.9% on $252M, the biggest volume on the losers list. That much money moving on a red day? Somebody is heading for the exit, and it's not the guy buying the dip.
▪️ Coinkite sued after a five-year-old Coldcard flaw let attackers drain $140M+ in bitcoin. The recovery phrases were predictable. Suit filed Sept. 11, 2026.
▪️ China wants to seize 61,800+ BTC tied to a $5.7B fraud. A UK court just ruled Chinese law governs victims' claims, so now the fight is about who gets the coins. Lawyers eat, victims wait.
▪️ $210M in crypto longs liquidated as BTC and ETH fell, with reports tying it to cautious sentiment. Separately, CertiK flagged an $820K drain of NEM's PancakeSwap pool.
🔮Neutral after a greedy 68? The dip buyers are still out there. Question is whether they're the ones holding the bag.
@smegmars
BTC sits at $81,862.3 (-1.11% over 24h), ETH at $2,404.66 (-1.47%). The majors are bleeding slowly, not crashing. The real blood is in the alts, where SOXLB dumped 10.1% and the feed has zero explanation. Nobody knows why, and somebody will call it 'sentiment' anyway.
▪️ AI +7.3% on $86M volume: top gainer, no catalyst anywhere in the feed. Chasing it is on you, and the room will hand you the bag.
▪️ SOXLB -10.1% on $56M, worst name on the board. PUMP -5.9% and SPCXB -5.3% are bleeding right alongside it.
▪️ ZEC -3.9% on $252M, the biggest volume on the losers list. That much money moving on a red day? Somebody is heading for the exit, and it's not the guy buying the dip.
▪️ Coinkite sued after a five-year-old Coldcard flaw let attackers drain $140M+ in bitcoin. The recovery phrases were predictable. Suit filed Sept. 11, 2026.
▪️ China wants to seize 61,800+ BTC tied to a $5.7B fraud. A UK court just ruled Chinese law governs victims' claims, so now the fight is about who gets the coins. Lawyers eat, victims wait.
▪️ $210M in crypto longs liquidated as BTC and ETH fell, with reports tying it to cautious sentiment. Separately, CertiK flagged an $820K drain of NEM's PancakeSwap pool.
Fear & Greed dropped to 50 (Neutral) from 68 yesterday. Neutral doesn't mean safe. It means the crowd got bored of chasing and lost its appetite. Leveraged longs already got cleaned out, so the next liquidation cascade needs a fresh trigger. The Coldcard class action is the one that could hit hardware-wallet holders directly, and it's the one nobody is pricing in.
🔮
@smegmars
💸 Colombian broker gets 160 months for washing drug money through Tether
Leonardo de Jesus Zuluaga Duque, a Colombia-based crypto broker who had a supervisory role in the network, got 160 months in a New York federal case. The SDNY announced it on October 21. Prosecutors say he and others laundered about $14.5M in Tether from drug trafficking between May and November 2023. Judge Mary Kay Vyskocil handed down the sentence.
▪️ Step 1: drug cash gets turned into Tether, the token everybody was sold as the boring dollar. Boring, sure.
▪️ Step 2: the USDT goes to an unlicensed money-transmission business, which swaps it for US dollars. No license, no problem, apparently.
▪️ Step 3: US shell companies push those dollars on to Colombian companies. A company with a bank account is the whole point.
▪️ Step 4: the money gets converted to pesos and paid out in local currency. Clean cash, no fuss.
▪️ Why it got caught: a blockchain tracer sees the token moves but not the business reason behind the bank wire. The bank sees the company but not the USDT that came before it.
📊 Forfeiture ordered:
📊 Supervised release after prison:
📊 Laundering window:
🔮Tether froze 131 wallets when OFAC called, yet $14.5M still walked the rails. Who's really watching?
@smegmars
Leonardo de Jesus Zuluaga Duque, a Colombia-based crypto broker who had a supervisory role in the network, got 160 months in a New York federal case. The SDNY announced it on October 21. Prosecutors say he and others laundered about $14.5M in Tether from drug trafficking between May and November 2023. Judge Mary Kay Vyskocil handed down the sentence.
▪️ Step 1: drug cash gets turned into Tether, the token everybody was sold as the boring dollar. Boring, sure.
▪️ Step 2: the USDT goes to an unlicensed money-transmission business, which swaps it for US dollars. No license, no problem, apparently.
▪️ Step 3: US shell companies push those dollars on to Colombian companies. A company with a bank account is the whole point.
▪️ Step 4: the money gets converted to pesos and paid out in local currency. Clean cash, no fuss.
▪️ Why it got caught: a blockchain tracer sees the token moves but not the business reason behind the bank wire. The bank sees the company but not the USDT that came before it.
📊 Forfeiture ordered:
$14,751,846📊 Supervised release after prison:
5 years📊 Laundering window:
May–Nov 2023If you're trading stablecoins like they're cash, here's your reminder: the rails that carry your 'digital dollar' are also the laundering highway. Tether freezes wallets when OFAC updates its lists, as it did with 131 TRON wallets, so that 'digital dollar' comes with a kill switch and a paper trail. Zuluaga Duque is done for 13+ years. The shell companies and the unlicensed transmitter are the parts that will keep popping up in future cases, so watch them, not just the headline.
🔮
@smegmars
🚨 New York wants $1.37B from the Novatech couple who ran a 'trading' firm on other people's money
New York wants a state court to make Novatech founders Cynthia and Eddy Petion pay $1.367B. Small detail: they skipped the case, a default judgment followed in August 2025, and the attorney general's office says the couple fled the country. Investors shoveled over $1.16B in crypto into this thing, lured by promised weekly 'trading returns' of roughly 2% to 4%. Great business model. Shame about the trading.
▪️ The pitch: weekly crypto and forex returns, sold through prayer groups, social media and WhatsApp chats. Haitian and other immigrant communities were specifically targeted.
▪️ Deposits hit Novatech's Coinpayments wallet from August 2019 to May 2023. Only about 2% of that ever reached the trading platform, B2Broker: $25.99M. Trading desk, my ass.
▪️ Those traders lost about $18.19M. The 'successful trading' story needed real profits, and the filing says there were none big enough to pay the promised returns. Running a fund with no fund. Bold.
▪️ Prosecutors say the payouts came from newer investors' deposits, plus recruitment rewards. Textbook Ponzi: pay the old guys with the new guys' money and call it alpha.
▪️ Cynthia Petion allegedly authorized at least $134.5M in withdrawals from the Coinpayments account to wallets belonging to her and Eddy Petion. Allegedly. Sure.
▪️ The ask breaks down as $1.135B in disgorgement plus $232.5M in prejudgment interest. Four top promoters, Martin Zizi, Frantz Ciceron, Ricardo Roy Sr and James Corbett, settled for nearly $6M combined…
🔮Weekly 2% to 4% returns from a 'trading desk' that got about 2% of the cash. Who in that group chat ran the math?
@smegmars
New York wants a state court to make Novatech founders Cynthia and Eddy Petion pay $1.367B. Small detail: they skipped the case, a default judgment followed in August 2025, and the attorney general's office says the couple fled the country. Investors shoveled over $1.16B in crypto into this thing, lured by promised weekly 'trading returns' of roughly 2% to 4%. Great business model. Shame about the trading.
▪️ The pitch: weekly crypto and forex returns, sold through prayer groups, social media and WhatsApp chats. Haitian and other immigrant communities were specifically targeted.
▪️ Deposits hit Novatech's Coinpayments wallet from August 2019 to May 2023. Only about 2% of that ever reached the trading platform, B2Broker: $25.99M. Trading desk, my ass.
▪️ Those traders lost about $18.19M. The 'successful trading' story needed real profits, and the filing says there were none big enough to pay the promised returns. Running a fund with no fund. Bold.
▪️ Prosecutors say the payouts came from newer investors' deposits, plus recruitment rewards. Textbook Ponzi: pay the old guys with the new guys' money and call it alpha.
▪️ Cynthia Petion allegedly authorized at least $134.5M in withdrawals from the Coinpayments account to wallets belonging to her and Eddy Petion. Allegedly. Sure.
▪️ The ask breaks down as $1.135B in disgorgement plus $232.5M in prejudgment interest. Four top promoters, Martin Zizi, Frantz Ciceron, Ricardo Roy Sr and James Corbett, settled for nearly $6M combined…
If you've ever been pitched a fixed weekly return with a WhatsApp group cheering it on, this is the exact playbook, and more than 11,000 New Yorkers bought in. Chasing $1.37B from two people who reportedly left the country is the hard part, so the promoters' settlements are what's actually on the table. The filing doesn't say investors get their money back. Shocking, I know.
🔮
@smegmars
🧾 Morning digest: WLD dumps -13%, Novatech owes $1.37B, market sits on its hands
BTC is at $80,859.01, down 1.15% in 24 hours. ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday. Nobody's panicking, nobody's partying. Just chop, and chop is exactly how they farm your leverage.
▪️ BMT is the top gainer at +29.0% on $34M volume. The feed doesn't say why it ran. Until someone explains it, that's a pump, and you're the exit liquidity.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR dropped -6.7% on $108M, and ZEC -4.7% on $176M, the heaviest volume on the board. Big volume on red candles is never a coincidence.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain got hit: an attacker minted tokens and cashed out about $2.6M. Sources say it raises security concerns and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.
📊 BTC 24h:
📊 ETH 24h:
📊 Fear & Greed:
🔮Neutral sentiment with BTC bleeding: nobody's panicking yet, which is exactly when the wrong trade gets made.
@smegmars
BTC is at $80,859.01, down 1.15% in 24 hours. ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday. Nobody's panicking, nobody's partying. Just chop, and chop is exactly how they farm your leverage.
▪️ BMT is the top gainer at +29.0% on $34M volume. The feed doesn't say why it ran. Until someone explains it, that's a pump, and you're the exit liquidity.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR dropped -6.7% on $108M, and ZEC -4.7% on $176M, the heaviest volume on the board. Big volume on red candles is never a coincidence.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain got hit: an attacker minted tokens and cashed out about $2.6M. Sources say it raises security concerns and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.
📊 BTC 24h:
$80,859.01 (-1.15%)📊 ETH 24h:
$2,381.38 (-0.87%)📊 Fear & Greed:
51 (Neutral)A 51 reading means no fear and no greed, which is exactly when chop eats leveraged longs and shorts alike. WLD's -13% on $72M is the one to watch, because the feed gives no reason for it, and a move with no story is either a whale or a trap. The Novatech numbers are the lesson for anyone trusting a platform: $1.16B came in and about $26M reached the trading side. Not your keys, not your coins, and apparently not your money either.
🔮
@smegmars
🚨 UAE sting: $39B in fraud assets 'flagged', 960 arrests... or nearly 100? Pick a number
A three-month UAE-led op with 30 countries and 13 private partners raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, the body says nearly 100 defendants. Interpol and GASA are in the room, and so are Huawei, Mastercard and Meta. Big PR lineup for a crackdown whose own numbers can't agree with each other.
▪️ Operation Confrontation Ghost ran for three months and went after groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion. Nice buzzwords.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. How they were linked? Nobody says. Just trust us, they were linked.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts. Big numbers, zero breakdown. That's how you sell a press release.
▪️ The $39B is described as already being seized and recovered. The wire never says how much of it was actually seized. 'Identified' is a fun word. It makes the pile look bigger than the cash.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits. Same playbook, different month. The laundry keeps running.
📊 Fraud-linked assets identified:
📊 Fraud attempts thwarted:
📊 Bank accounts blocked:
📊 Fraud centers raided:
💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC
🔮$39B 'identified' is not $39B seized. When do the actual numbers show up? Don't hold your breath, and don't buy the headline.
@smegmars
A three-month UAE-led op with 30 countries and 13 private partners raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, the body says nearly 100 defendants. Interpol and GASA are in the room, and so are Huawei, Mastercard and Meta. Big PR lineup for a crackdown whose own numbers can't agree with each other.
▪️ Operation Confrontation Ghost ran for three months and went after groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion. Nice buzzwords.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. How they were linked? Nobody says. Just trust us, they were linked.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts. Big numbers, zero breakdown. That's how you sell a press release.
▪️ The $39B is described as already being seized and recovered. The wire never says how much of it was actually seized. 'Identified' is a fun word. It makes the pile look bigger than the cash.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits. Same playbook, different month. The laundry keeps running.
📊 Fraud-linked assets identified:
$39B📊 Fraud attempts thwarted:
123.71M📊 Bank accounts blocked:
4,000+📊 Fraud centers raided:
29Retail is the one getting hit, so watch the gap between 'identified' and 'seized' before anyone starts cheering. The partner list reads like a PR roster, and Meta and TikTok are on it. These are the platforms where the scams run, so the people selling the fix are also the people selling the shop. And the headline's 960 arrests doesn't match the body's nearly 100 defendants, so nobody actually knows how big this crackdown is. Hype first, math later, as usual.
💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC
🔮
@smegmars
🚨 Interpol nabbed 1,462 people across Africa and clawed back $105M from crypto launderers
Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States. Result: 1,462 arrests and more than $105M recovered. The juicy bit for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto. Shocking, right? Crypto being used for crime. Never heard that one before.
▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22, right on schedule for a nice press-release week.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. The victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, and one suspect got arrested. The pitch sounds familiar, doesn't it?
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.
📊 Losses tied to the cases:
📊 Victims recorded:
📊 Malicious networks disrupted:
📊 Email addresses harvested in one Nigerian case:
🔮Pensioners got the scripted call. Your 'guaranteed returns' group is the same script with a nicer avatar.
@smegmars
Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States. Result: 1,462 arrests and more than $105M recovered. The juicy bit for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto. Shocking, right? Crypto being used for crime. Never heard that one before.
▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22, right on schedule for a nice press-release week.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. The victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, and one suspect got arrested. The pitch sounds familiar, doesn't it?
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.
📊 Losses tied to the cases:
$385M+📊 Victims recorded:
65,929📊 Malicious networks disrupted:
10,909📊 Email addresses harvested in one Nigerian case:
2.1MIf a 'trading mentor' with green screenshots has ever slid into your DMs, this is your category: fake platforms, scripted callers, a chat full of guaranteed returns. Same product, different logo. Interpol raids don't move price, so nobody's pumping anything here, relax. But several investigations are still active, officials are tracing more proceeds, and the Tanzania, Gabon and Republic of Congo cases are not closed.
🔮
@smegmars
🚨 X 100 Global: Senate hijacked, treasury drained, X down 96%
Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24, after attackers took over its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the money, and the X token face-planted.
▪️ No code bug, folks. Nobody cracked anything clever. They exploited the governance design: a three-seat Senate that could be bought with a flash loan. Cheapest hostile takeover in history.
▪️ No voting snapshots, no minimum holding period, no execution delay. Whoever bought the majority could pass proposals and execute them on the spot.
▪️ One transaction moved 400,000 X out of the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury. Generous, right? Crumbs for the house.
▪️ The attackers pulled those tokens out and dumped them through a legitimate Uniswap V3 pool. Across three transactions, about 550,000 X got extracted. Slick, boring, effective.
▪️ Follow-up operations hit more Uniswap V3 liquidity positions. In some DEX pools, liquidity dropped to a few dollars. Pools that were basically a puddle with a price tag on it.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position ate extreme slippage. Exit liquidity is a fairy tale until you need it.
📊 Stolen in USDT:
📊 Flash loan from Aave:
📊 X tokens extracted:
📊 X still in Freezer at last update:
🔮Three seats, one flash loan, treasury on sale. Who's next with the same governance setup?
@smegmars
Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24, after attackers took over its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the money, and the X token face-planted.
▪️ No code bug, folks. Nobody cracked anything clever. They exploited the governance design: a three-seat Senate that could be bought with a flash loan. Cheapest hostile takeover in history.
▪️ No voting snapshots, no minimum holding period, no execution delay. Whoever bought the majority could pass proposals and execute them on the spot.
▪️ One transaction moved 400,000 X out of the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury. Generous, right? Crumbs for the house.
▪️ The attackers pulled those tokens out and dumped them through a legitimate Uniswap V3 pool. Across three transactions, about 550,000 X got extracted. Slick, boring, effective.
▪️ Follow-up operations hit more Uniswap V3 liquidity positions. In some DEX pools, liquidity dropped to a few dollars. Pools that were basically a puddle with a price tag on it.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position ate extreme slippage. Exit liquidity is a fairy tale until you need it.
📊 Stolen in USDT:
$4.85M📊 Flash loan from Aave:
1.94M USDT📊 X tokens extracted:
550,000📊 X still in Freezer at last update:
12.2MHolding X? Congrats, you're holding a token with almost no liquidity and a treasury that's still half-loaded. The 12.2M X left in the Freezer is the obvious next target, so this story isn't over. X 100 Global hasn't issued an official statement yet, which is the classic silence right before the 'we're investigating' post. Lesson for every DAO-style project: if a few seats can be bought in one block, your treasury is a yard sale.
🔮
@smegmars
📊 BTC sleeps at $80.9K while BMT gets gutted 14% on $43M
BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%). The majors are doing nothing, which means the market is waiting for someone to tell you what to buy. The real blood is in the alts, and the crowd is still scrolling past the three stories below.
▪️ Green side: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it. Somebody's bag is getting filled.
▪️ Red side: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why. Falling knife until someone explains it, and nobody explains anything for free.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list. That's heavy money leaving, not tourists wandering.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished. Liquidity didn't vanish, it got walked out the back door.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.
📊 Fear & Greed:
🔮Flat majors, a 14% alt crater, and a crowd just warm enough to get greedy. Who's the exit liquidity today?
@smegmars
BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%). The majors are doing nothing, which means the market is waiting for someone to tell you what to buy. The real blood is in the alts, and the crowd is still scrolling past the three stories below.
▪️ Green side: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it. Somebody's bag is getting filled.
▪️ Red side: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why. Falling knife until someone explains it, and nobody explains anything for free.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list. That's heavy money leaving, not tourists wandering.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished. Liquidity didn't vanish, it got walked out the back door.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.
📊 Fear & Greed:
54 (Neutral), was 51 yesterdayFear & Greed at 54 is neutral and creeping up, so the crowd is warming up, not panicking. That's exactly when the smart money starts selling to you. Flat majors plus a 14% alt crater means the damage is parked in names with thin conviction, and that's where retail gets shredded. Holding X 100 Global or the BMT/AI/NEAR names? Expect ugly volatility to stick around, since the source gives no recovery plan for X. Don't marry the bag.
🔮
@smegmars
🚨 Chinese national extradited over $36.9M fake-exchange scam, 174 Americans hit
The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto 'investment' scam that pushed more than $36.9M through offshore banks and wallets. 174 Americans got hit. The pitch was a 'trading platform' dressed up as a real exchange, balances climbing on screen, and the actual money quietly walking out the back door. Somebody got rich, and it wasn't the hamsters.
▪️ Step one: cold DMs on social media, calls, texts, even online dating. Build trust first, then pitch 'digital asset' investments on fake platforms that look exactly like legit exchanges.
▪️ Victims watched their balances grow. Meanwhile the cash went through US shell companies, international bank accounts and digital asset wallets. Those green numbers were a screenshot, nothing more.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It got converted into USDT and shipped to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went on to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao faces a money laundering conspiracy charge tied to August 2025, up to 20 years. Eight co-conspirators have already pleaded guilty, so somebody folded fast.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business. Moving other people's money with no license. Not a great career move.
📊 Moved through the scheme:
📊 American victims:
📊 Max sentence for Zhao:
📊 Co-conspirators who pleaded guilty:
💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division
🔮Green numbers on a fake exchange. Oldest trick in the book, now with a Bahamas account attached.
@smegmars
The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto 'investment' scam that pushed more than $36.9M through offshore banks and wallets. 174 Americans got hit. The pitch was a 'trading platform' dressed up as a real exchange, balances climbing on screen, and the actual money quietly walking out the back door. Somebody got rich, and it wasn't the hamsters.
▪️ Step one: cold DMs on social media, calls, texts, even online dating. Build trust first, then pitch 'digital asset' investments on fake platforms that look exactly like legit exchanges.
▪️ Victims watched their balances grow. Meanwhile the cash went through US shell companies, international bank accounts and digital asset wallets. Those green numbers were a screenshot, nothing more.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It got converted into USDT and shipped to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went on to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao faces a money laundering conspiracy charge tied to August 2025, up to 20 years. Eight co-conspirators have already pleaded guilty, so somebody folded fast.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business. Moving other people's money with no license. Not a great career move.
📊 Moved through the scheme:
$36.9M+📊 American victims:
174📊 Max sentence for Zhao:
20 years📊 Co-conspirators who pleaded guilty:
8Same ecosystem as the Prince Group saga: its head Chen Zhi was sent to China in January, and associate Hu Shi was arrested in Osaka in June. The Scam Center Strike Force restrained about $52M in one day in the Xinbi Guarantee action, bringing its total to roughly $938M. And the money trail here ran through USDT on public chains, the exact rail you use every day. Stablecoins aren't invisible. The feds have clearly learned to read them, so next time you think your wallet is a black box, remember who's watching the chain.
💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division
🔮
@smegmars
🔓 GMO's trading cloud got cracked: 26,739 servers in the crosshairs
GMO Internet in Japan got tapped exactly where retail parks its cash. Onamae.com Desktop Cloud is the always-on box that runs your FX bots, and it got breached. One account lost about 2.4 million yen in roughly 84 seconds. The attackers weren't running anyone's strategy. They were trading on stolen broker logins, and that's the whole game.
▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Great for you.
▪️ A customer complaint tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ Then GMO found its own security hole, which let someone get in and remove customer information.
▪️ Stolen trading credentials were used for unauthorized trades. Repeated orders drained one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid up.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service went offline. GMO refused to pay, pointing out that nobody could guarantee the data would vanish or the attacks would…
📊 Flat payout per Desktop Cloud customer:
📊 Brokerages threatened:
📊 Free access to alternative desktop platform:
🔮A cloud that keeps broker keys running 24/7 is a vault with the door off. Who's next?
@smegmars
GMO Internet in Japan got tapped exactly where retail parks its cash. Onamae.com Desktop Cloud is the always-on box that runs your FX bots, and it got breached. One account lost about 2.4 million yen in roughly 84 seconds. The attackers weren't running anyone's strategy. They were trading on stolen broker logins, and that's the whole game.
▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Great for you.
▪️ A customer complaint tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ Then GMO found its own security hole, which let someone get in and remove customer information.
▪️ Stolen trading credentials were used for unauthorized trades. Repeated orders drained one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid up.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service went offline. GMO refused to pay, pointing out that nobody could guarantee the data would vanish or the attacks would…
📊 Flat payout per Desktop Cloud customer:
5,000 yen📊 Brokerages threatened:
70+📊 Free access to alternative desktop platform:
6 monthsYour broker login was sitting in the same room as the hacker. GMO will cover verified losses and fees, plus a flat 5,000 yen to every Desktop Cloud customer, whether they lost money or not. That's a coffee for a robbed account, and they know it. The service is offline, the investigation has no end date, and founder Masatoshi Kumagai is asking the government to step in under Japan's active cyber defense framework. Translation: this is bigger than a bad week at the office.
🔮
@smegmars
🐋 Arthur Hayes calls $10K ETH, then dumps $22.28M of altcoins and ETH. Shocking, truly
Wallets tied to Arthur Hayes, ex-CEO of BitMEX, moved about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest chunk was 6,400 ETH, roughly $15.2M. The man who said ETH hits $10,000 by year-end is now the one hitting the bid. Sure, sure.
▪️ Late September he called Ethereum the most secure layer-one that can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at. Retail calls this a strategy.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909. Buy high, sell low, buy higher.
▪️ These sales came during a week or so of market uncertainty, the exact kind of stress window where he has dumped big size before. Nobody's surprised except the people who bought his tweets.
📊 ENA sold (14M tokens):
📊 UNI sold (323,000):
📊 ETHFI sold (1.89M):
📊 AERO sold (546,609):
🔮Is the $10K ETH call still live, or is it just a better entry in his head?
@smegmars
Wallets tied to Arthur Hayes, ex-CEO of BitMEX, moved about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest chunk was 6,400 ETH, roughly $15.2M. The man who said ETH hits $10,000 by year-end is now the one hitting the bid. Sure, sure.
▪️ Late September he called Ethereum the most secure layer-one that can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at. Retail calls this a strategy.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909. Buy high, sell low, buy higher.
▪️ These sales came during a week or so of market uncertainty, the exact kind of stress window where he has dumped big size before. Nobody's surprised except the people who bought his tweets.
📊 ENA sold (14M tokens):
$2.76M📊 UNI sold (323,000):
$2.24M📊 ETHFI sold (1.89M):
$1.23M📊 AERO sold (546,609):
$398KIf you're holding ETH because a famous name said $10K, the wallet doing the selling belongs to that famous name. Hayes is loudly bullish on the timeline while his own on-chain history shows him selling into weakness and buying back higher. Lookonchain shows what moved, not why, so his track record is the only honest guidance on the table, and it's not flattering. Anyone still long the altcoins he just unloaded is now the exit liquidity. Congrats on the new job.
🔮
@smegmars
📉 BTC at $80,094, $815M liquidated: longs got farmed overnight
BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell. Everyone who bought the dip on leverage just paid tuition, and the market collected.
▪️ ENA +6.4% on just $33M volume: top green on the board. Thin volume like this is the candle that gets chased right before it gets dumped on the chasers. Enjoy the bag.
▪️ WLD -4.6% on $30M: worst of the top losers. If BTC keeps bleeding, keep an eye on it, because weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: heaviest volume among the losers, and the name the liquidations were pinned to. Retail panics, the big players read the book.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed through offshore banks and digital wallets. Offshore banks and wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.
📊 Fear & Greed:
🔮Who is the exit liquidity this time: the longs who bought ENA's pump, or the ones who bought the BTC dip?
@smegmars
BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell. Everyone who bought the dip on leverage just paid tuition, and the market collected.
▪️ ENA +6.4% on just $33M volume: top green on the board. Thin volume like this is the candle that gets chased right before it gets dumped on the chasers. Enjoy the bag.
▪️ WLD -4.6% on $30M: worst of the top losers. If BTC keeps bleeding, keep an eye on it, because weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: heaviest volume among the losers, and the name the liquidations were pinned to. Retail panics, the big players read the book.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed through offshore banks and digital wallets. Offshore banks and wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.
📊 Fear & Greed:
50 (Neutral), yesterday 54CoinDCX confirmed a $16M loss from retired wallets after breach reports surfaced, with no attack vector or recovery details yet. Don't assume your old wallets are safe just because you forgot about them. Sentiment is slipping but not panicking, which means choppy action with liquidation hunts around key levels, not a clean trend. Trade small and expect wicks.
🔮
@smegmars
🎤 Carti's dead X account wakes up, shills a memecoin, and rugs within hours
Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market cap before it rugged. The main Solana pair did $4.09M in 24h volume while the price fell roughly 64%. Nobody has tied the rapper or his team to it. Surprise, surprise.
▪️ The bio edit tagging @pumpfun surfaced first on memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side. Just a tag and a vibe.
▪️ The bait was a screenshot: a token called "carti" under a playboicarti handle, up 18,535% in its first hour, market cap near $714,600. Somebody's marketing budget is doing very well.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway. Of course they did.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market cap was a small fraction of the peak. The chart did its whole life cycle before most of you finished your coffee.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars. Lovely.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M. Read that twice and tell me who the casino is really for.
🔮Dormant account, one bio edit, instant pump. Hacked, or the cheapest marketing campaign of the year?
@smegmars
Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market cap before it rugged. The main Solana pair did $4.09M in 24h volume while the price fell roughly 64%. Nobody has tied the rapper or his team to it. Surprise, surprise.
▪️ The bio edit tagging @pumpfun surfaced first on memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side. Just a tag and a vibe.
▪️ The bait was a screenshot: a token called "carti" under a playboicarti handle, up 18,535% in its first hour, market cap near $714,600. Somebody's marketing budget is doing very well.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway. Of course they did.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market cap was a small fraction of the peak. The chart did its whole life cycle before most of you finished your coffee.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars. Lovely.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M. Read that twice and tell me who the casino is really for.
If you touched any CARTI ticker this weekend, you were the exit liquidity. Full stop. The copycats are the real trap: deployers know celebrity search spikes, so they flood launchpads with lookalikes and pray you grab the wrong contract at 2am. This isn't new, it's the same script on a new actor. In July, Robinhood CEO Vlad Tenev's account got hijacked to shill a fake "Vladhood" token, which pulled in 175,000+ views in under 20 minutes before users flagged it. The Kimchi saga went from Pump.fun star to rug suspect in 48 hours. Bitcoin slipped below $80,000, speculative volume dried up, and yet a celebrity name still found buyers. Think about that. The appetite for a name is still alive when everything else is dead, and that's exactly what the sharks are counting on.
🔮
@smegmars
📊 Morning digest: majors are dead, SOXLB pumps on air, and a wallet check got robbed
BTC and ETH both slid under half a percent in 24h. The majors are doing nothing worth your coffee, so the action is in small caps, and the top stories show people getting robbed through boring plumbing.
▪️ SOXLB +6.9% on $28M and QNT +4.1% on $37M top the green list. Thin-volume pumps look gorgeous on a chart right up until you try to get out.
▪️ ZEC +1.6% on $160M is the real money in the green list, and it barely moves. Somebody is loading or dumping while everyone stares at the top gainer.
▪️ CRCLB -4.8% on $28M is the worst loser. NEAR -1.9% on $91M and SOL -1.2% on $153M show heavy selling, which is exactly where stops get hunted.
▪️ BloomTrading: custodial bot users lost nearly $1M as their wallets got drained. Custodial means the bot held the keys. You trusted the box.
▪️ CARTI: a Pump.fun link showed up on Playboi Carti's dormant X account. The token ran to about $1.2M, then rugged within hours, and no wallet is tied to the account. Shocking, I know.
▪️ Keystone: hackers leaked customer info first, then stole a key used to check wallet authenticity, so counterfeit wallets can now pass verification.
📊 BTC:
📊 ETH:
🔮Neutral sentiment and thin-volume pumps: who is the exit liquidity this morning?
@smegmars
BTC and ETH both slid under half a percent in 24h. The majors are doing nothing worth your coffee, so the action is in small caps, and the top stories show people getting robbed through boring plumbing.
▪️ SOXLB +6.9% on $28M and QNT +4.1% on $37M top the green list. Thin-volume pumps look gorgeous on a chart right up until you try to get out.
▪️ ZEC +1.6% on $160M is the real money in the green list, and it barely moves. Somebody is loading or dumping while everyone stares at the top gainer.
▪️ CRCLB -4.8% on $28M is the worst loser. NEAR -1.9% on $91M and SOL -1.2% on $153M show heavy selling, which is exactly where stops get hunted.
▪️ BloomTrading: custodial bot users lost nearly $1M as their wallets got drained. Custodial means the bot held the keys. You trusted the box.
▪️ CARTI: a Pump.fun link showed up on Playboi Carti's dormant X account. The token ran to about $1.2M, then rugged within hours, and no wallet is tied to the account. Shocking, I know.
▪️ Keystone: hackers leaked customer info first, then stole a key used to check wallet authenticity, so counterfeit wallets can now pass verification.
📊 BTC:
$79,848.01 (-0.36%)📊 ETH:
$2,317.08 (-0.33%)Fear & Greed sits at 48, Neutral, down from 50 yesterday. Nobody is panicking and nobody is euphoric, so a green candle today is just someone's exit at retail prices. If you use Keystone, treat any wallet verification as unproven until they close the hole.
🔮
@smegmars
🔐 Keystone lost the key that proves its wallets are real. Now fakes can pass as genuine
Keystone sold you a 'cold' box and a promise of authenticity. Now that promise is in a hacker's pocket. The attacker who breached its website last week took the key used to verify devices, plus 25,964 buyer records from 2024 to 2026. First Keystone called it just a customer data leak. Cute. Counterfeit wallets built with that key can pass Keystone's own checks.
▪️ Way in: a hole in a third-party monitoring tool on Keystone's website. The attacker used it to escalate privileges. Classic.
▪️ What walked out: some customer info and the key that confirms a device is genuine. Keystone admits fake devices could be sold or shipped to buyers.
▪️ Why the old data is still floating around: a 180-day deletion policy was supposed to wipe old records. A bulk-erasure tool silently failed and kept them. Nobody noticed. Of course nobody noticed.
▪️ Checkout leak: the attacker also pulled 12,873 unfinished checkout records that Shopify was still holding. Keystone has asked Shopify to delete anything kept over 30 days. Thirty days. Sure.
▪️ Stock freeze: production shipments of every device using the compromised key are suspended. 18,835 devices in inventory will be destroyed. Shipments resume only after a new key is in place.
▪️ Who's safe: devices made and delivered before the Oct. 20 incident are considered safe. Anything delivered after that can't be vouched for, so buyers are told to contact support for extra…
💬 «These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft.» — Keystone
🔮Your cold storage is only as cold as the supply chain behind it. Who checks the checker?
@smegmars
Keystone sold you a 'cold' box and a promise of authenticity. Now that promise is in a hacker's pocket. The attacker who breached its website last week took the key used to verify devices, plus 25,964 buyer records from 2024 to 2026. First Keystone called it just a customer data leak. Cute. Counterfeit wallets built with that key can pass Keystone's own checks.
▪️ Way in: a hole in a third-party monitoring tool on Keystone's website. The attacker used it to escalate privileges. Classic.
▪️ What walked out: some customer info and the key that confirms a device is genuine. Keystone admits fake devices could be sold or shipped to buyers.
▪️ Why the old data is still floating around: a 180-day deletion policy was supposed to wipe old records. A bulk-erasure tool silently failed and kept them. Nobody noticed. Of course nobody noticed.
▪️ Checkout leak: the attacker also pulled 12,873 unfinished checkout records that Shopify was still holding. Keystone has asked Shopify to delete anything kept over 30 days. Thirty days. Sure.
▪️ Stock freeze: production shipments of every device using the compromised key are suspended. 18,835 devices in inventory will be destroyed. Shipments resume only after a new key is in place.
▪️ Who's safe: devices made and delivered before the Oct. 20 incident are considered safe. Anything delivered after that can't be vouched for, so buyers are told to contact support for extra…
If you bought a Keystone device after Oct. 20, treat its authenticity as unproven until support checks it. A counterfeit unit with a seed phrase you type into it is a straight line to your funds. The buyer list is now in criminal hands. After the 2020 Ledger leak of over a million addresses and phone numbers, years of phishing followed. Expect the same wave here. And this is the sector's bad year: Trezor's shipping-partner breach grew past 80,000 users, SafePal exposed nearly 40,000 customers, BitBox got hit by phishing, and Coinkite's weak-entropy bug drained millions.
💬 «These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft.» — Keystone
🔮
@smegmars
🐋 Fresh wallets dump $49M in SOL as price breaks under $100
Three brand-new Solana wallets moved 482,228 SOL in three days, right as SOL slid under $100. About a third of the bag is already on exchanges, and nobody's claiming the addresses. Onchain analysts reckon it's one whale wearing three hats.
▪️ Oct. 23, evening: three never-used Solana addresses logged their first transactions within two minutes of each other. Arkham tags them wallet A, B and C, no labels. Nobody's name on it. Classic.
▪️ Method: split the coins across fresh addresses and feed them to the market in slices. Textbook way to limit slippage and keep order books from freaking out.
▪️ Lookonchain: 171,430 SOL (about $17.3M) already deposited to various exchanges. The selling is steady, not a dump-in-one-candle. Patient sellers are the ones who eat your stops.
▪️ As of Oct. 27, 04:20 UTC, all three wallets were still sending transactions. Nobody has stopped.
▪️ Remaining balances: roughly 96,743, 97,639 and 97,312 SOL. Near-identical stacks look like one pre-planned split, not panic. Panic doesn't measure its bags to the decimal.
▪️ Backdrop: bitcoin hovers near $79,590, down almost 6% in a month, with most moving averages tilted bearish. High-beta SOL bleeds first. Always does.
📊 Still in the three wallets:
📊 Already sent to exchanges:
📊 SOL price now:
📊 Under the Jan 2025 record of $293.31:
🔮Whale exit or whale with a plan? Three near-equal stacks sliced into exchanges is not how people panic.
@smegmars
Three brand-new Solana wallets moved 482,228 SOL in three days, right as SOL slid under $100. About a third of the bag is already on exchanges, and nobody's claiming the addresses. Onchain analysts reckon it's one whale wearing three hats.
▪️ Oct. 23, evening: three never-used Solana addresses logged their first transactions within two minutes of each other. Arkham tags them wallet A, B and C, no labels. Nobody's name on it. Classic.
▪️ Method: split the coins across fresh addresses and feed them to the market in slices. Textbook way to limit slippage and keep order books from freaking out.
▪️ Lookonchain: 171,430 SOL (about $17.3M) already deposited to various exchanges. The selling is steady, not a dump-in-one-candle. Patient sellers are the ones who eat your stops.
▪️ As of Oct. 27, 04:20 UTC, all three wallets were still sending transactions. Nobody has stopped.
▪️ Remaining balances: roughly 96,743, 97,639 and 97,312 SOL. Near-identical stacks look like one pre-planned split, not panic. Panic doesn't measure its bags to the decimal.
▪️ Backdrop: bitcoin hovers near $79,590, down almost 6% in a month, with most moving averages tilted bearish. High-beta SOL bleeds first. Always does.
📊 Still in the three wallets:
~291,700 SOL (~$29M)📊 Already sent to exchanges:
171,430 SOL (~$17.3M)📊 SOL price now:
$99.89📊 Under the Jan 2025 record of $293.31:
66%If you're long SOL with stops parked under $100, congrats, that's exactly where the liquidity hunt happens. Manifold has the 'SOL closes above $100 on Oct. 31' market at 63%, down from the Oct. 20 open when SOL was near $104. By the pattern so far, the remaining ~$29M is the next slice headed for exchanges. Meanwhile, Bloom Trading lost nearly $1M when a breach drained 49 wallets belonging to nine users, and a Solana trading bot got hacked for almost $1M too. Fun week for anyone trusting a hot wallet.
🔮
@smegmars
🦆 Q ran $0.05 → $0.24 → $0.06 in hours. Who was holding the duck?
Quack AI (Q) ripped from about $0.05 to a fresh all-time high near $0.24, pushing its market cap to almost $1B and into the top 100 coins. Then it gave back nearly every cent in a few hours and now trades around $0.06. Nobody can say what lit the fuse. That's the part that should bother you, not the chart.
▪️ What Q actually is: the native token of an AI governance layer for AI agents and dApps. Holders delegate votes, run gasless payments through the Q402 system and manage governance across multiple…
▪️ No big announcement before the spike. It came after weeks of gradual interest in AI agents, and no obvious signal said a move this size was coming.
▪️ Lookonchain tracked trader 0xF1fE, who made almost $1M mainly by opening longs while the price climbed. Smart money or inside info? Pick your flavor, both smell the same on a chart.
▪️ Crypto with Haris ₿ says he made over $17,000 by shorting what he called 'the perfect top'. Good call, respect. But he was the exception, and the exception is the guy you see on your feed.
▪️ The crowd was on the wrong side: 70% of accounts on Binance were betting on a drop while open interest ballooned from $10M to $42M. Shorts piling in is exactly the fuel a squeeze needs.
▪️ OxNox flagged 48 wallets holding 55% of Q on BNB Chain. Through the entire run they made zero transactions, which means they didn't sell a single token on the way up.
📊 Open interest peak:
📊 Trader 0xF1fE profit:
💬 «pure leverage theater» — Nura
🔮Insiders who knew, or just a leverage casino with a duck mascot? Those 48 silent wallets will answer it, sooner or later.
@smegmars
Quack AI (Q) ripped from about $0.05 to a fresh all-time high near $0.24, pushing its market cap to almost $1B and into the top 100 coins. Then it gave back nearly every cent in a few hours and now trades around $0.06. Nobody can say what lit the fuse. That's the part that should bother you, not the chart.
▪️ What Q actually is: the native token of an AI governance layer for AI agents and dApps. Holders delegate votes, run gasless payments through the Q402 system and manage governance across multiple…
▪️ No big announcement before the spike. It came after weeks of gradual interest in AI agents, and no obvious signal said a move this size was coming.
▪️ Lookonchain tracked trader 0xF1fE, who made almost $1M mainly by opening longs while the price climbed. Smart money or inside info? Pick your flavor, both smell the same on a chart.
▪️ Crypto with Haris ₿ says he made over $17,000 by shorting what he called 'the perfect top'. Good call, respect. But he was the exception, and the exception is the guy you see on your feed.
▪️ The crowd was on the wrong side: 70% of accounts on Binance were betting on a drop while open interest ballooned from $10M to $42M. Shorts piling in is exactly the fuel a squeeze needs.
▪️ OxNox flagged 48 wallets holding 55% of Q on BNB Chain. Through the entire run they made zero transactions, which means they didn't sell a single token on the way up.
📊 Open interest peak:
$42M📊 Trader 0xF1fE profit:
almost $1MIf you bought the top chasing the duck, congrats, you're the exit liquidity now. The 48 wallets sitting on 55% of supply haven't moved, and that's the real question: whoever controls that float decides when the next leg happens. Retail is the only side without a map. Nura says the volume is largely wash trading, so part of this chart was never real demand to begin with. Half the candles were the market talking to itself.
💬 «pure leverage theater» — Nura
🔮
@smegmars