Blockchain forensics, investigations and expert witness @cfinvestigators.bsky.social
Joined July 2023
- Tweets242
- Following184
- Followers5.5K
- Likes342
Pinned Tweet
🚩💸 Top 5 Red Flags For Crypto Recovery Services 💸🚩
The only thing worse than being a victim to a NFT rug pull, a crypto investment scheme or pig butchering is to spend money on a recovery services, that DOESN'T actually recover your crypto.
Cryptoforensic Investigators retweeted
At $134 billion, Huione was the largest criminal marketplace and money laundering operation crypto has ever seen.
Over the past two years, Elliptic's intelligence has revealed how it operated, tracing the network behind it through every rebrand, and informing the sanctions and enforcement actions that followed.
Read the full story: hubs.la/Q04mqYXz0
Would encourage project teams to seriously take note of the details here or you could become the next case study.
6 months of patience and persistence from the DPRK threat actors in this case, resulting in a devastatingly high value theft of almost $280 Million.
Cryptoforensic Investigators retweeted
🚨 SlowMist TI Alert 🚨
The @Truebitprotocol has suffered a security incident. Its smart contract 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 was maliciously exploited, resulting in the theft of 8,535 $ETH (~$26.44M).
⚠️ Do NOT interact with this contract. Stay alert and follow official updates.
etherscan.io/tx/0xcd47556455…
Today, we became aware of a security incident involving one or more malicious actors. The affected smart contract is 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 and we strongly advise the public not to interact with this contract until further notice. We are in contact with law enforcement and taking all available measures to address the situation. We will share updates through our official channels as they become available.
Cryptoforensic Investigators retweeted
Hey all,
My hot wallet was drained across Hyperliquid and EVM chains for millions on 27th Sep.
I’m in touch with the FBI, USSS, @_SEAL_Org, @trmlabs, @CFInvestigators, and major exchanges who are now all aware of the stolen assets, their locations & movements (address ending in dHjFY). All are taking the investigation seriously. All have been incredibly responsive. Thank you.
I’d be happy to pay a bounty to whitehats or anyone with onchain or IRL information that leads to the recovery of the assets. Please DM me for details 🙏.
To the attacker: if you return 80% of the funds, all law enforcement, legal and exchange action will be dropped immediately, and you can keep the remaining 20% as a legitimate whitehat bounty that can be legally offramped and spent. Return 80% here: 2evt4TTjHw6BZjnaaq3UcSnmBrqzJjJnTsWi65yYpLbT
Thanks to the @_SEAL_Org members for their first-hand response and initial guidance.
Cryptoforensic Investigators retweeted
Our system has detected a hack into @CoinDCX centralized exchange 20 hours ago.
Here's what we know:
- The hacker stole around $44.2M in USDC/USDT from one of the exchange's operational wallets on Solana.
- The hacker funded the hack with 1 ETH from Tornado Cash.
- Part of the funds ($15.8M) were moved to Ethereum via a bridge.
Thanks to @zachxbt for identifying that it's CoinDCX and for the shoutout to Cyvers!
Cryptoforensic Investigators retweeted
A recent cyberattack on the Central Bank of Brazil services provider C&M resulted in a breach to the reserve accounts of six financial institutions where attackers converted stolen fiat to crypto.
I began working on an initiative that has helped freeze ~$5M across multiple exchanges and blockchains.
A special thanks goes to @tether , @Binance Security Team, @Bitso, @Bybit_Official Compliance Team, & @CFInvestigators.
Collaboration within the private sector is the most effective way to combat illicit activity and push our industry forward.
Cryptoforensic Investigators retweeted
1/ An investigation into how the New York based social engineering scammer Daytwo/PawsOnHips (Christian Nieves) stole $4M+ from Coinbase users by impersonating customer support, bought luxury goods, and lost most of the funds gambling at casinos.
The scam industry has evolved in the past years, the groups behind it are larger, more organized and frequently linked to transnational enterprises such as Chinese crime syndicates, or, in the case of North Korea, state-sponsored schemes. 🥷
#cryptocurrency #scam #ATMs govtech.com/public-safety/ho…
They come from video games, and then they bring their high scores into the real world. 🎮💀fortune.com/crypto/2025/05/2…
Crypto kidnappings: the new crypto crime wave crystalintelligence.com/news… via @CrystalPlatform
Behind the Coinbase data breach and phishing attacks -- why they have been so effective, and what are the characteristics? We discuss cryptoforensic.com/blog/why-…
Cryptoforensic Investigators retweeted
🚨 The official driver provided by this printer carries a backdoor program. It will hijack the wallet address in the user's clipboard and replace it with the attacker's address: 1BQZKqdp2CV3QV5nUEsqSg1ygegLmqRygj
🕵️ According to @MistTrack_io, the attacker has stolen 9.3086 $BTC. Active since Apr 22, 2016, last seen Mar 14, 2024, with links to multiple exchanges.
🔗light.misttrack.io/address/B…
中国深圳打印机公司天生 (#Procolored) 被发现提供的官方驱动程序携带后门程序用来盗取加密货币，数据显示黑客盗取的比特币数量达 9.3 个。
至于感染原因则是天生使用 U 盘传输这些驱动程序，被感染后门程序后天生又将其上传到网盘供全球用户下载。
查看全文：ourl.co/108992
Data leaks are a threat on multiple levels, data is not only ransomed but also sold on hacking platforms to individuals who use it to for scams and theft🕷️🕷️🕸️ the-sun.com/tech/14150403/te…
#DataLeak #hacks #SIMswap #ScatteredSpider
Cryptoforensic Investigators retweeted
Update: So far $7M+ has been frozen with the help of @CFInvestigators, @tanuki42_, Binance Security team, and myself.
Cryptoforensic Investigators retweeted
🚨 ALERT: Fake "Solscan" ads top Google search results right now!
⚠️ These phishing ads are designed to drain your wallet through malicious transaction signatures.
Whac-a-Mole is the name of the game, the stakes are a bit higher tho and the moles craftier 😅🕹️nytimes.com/2025/04/24/magaz…
