Blockchain forensics, investigations and expert witness @cfinvestigators.bsky.social

Joined July 2023
Cryptoforensic Investigators retweeted
At $134 billion, Huione was the largest criminal marketplace and money laundering operation crypto has ever seen. Over the past two years, Elliptic's intelligence has revealed how it operated, tracing the network behind it through every rebrand, and informing the sanctions and enforcement actions that followed. Read the full story: hubs.la/Q04mqYXz0
2
10
2
30
5,484
Cryptoforensic Investigators retweeted
🚨 SlowMist TI Alert 🚨 The @Truebitprotocol has suffered a security incident. Its smart contract 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 was maliciously exploited, resulting in the theft of 8,535 $ETH (~$26.44M). ⚠️ Do NOT interact with this contract. Stay alert and follow official updates. etherscan.io/tx/0xcd47556455…
Today, we became aware of a security incident involving one or more malicious actors. The affected smart contract is 0x764C64b2A09b09Acb100B80d8c505Aa6a0302EF2 and we strongly advise the public not to interact with this contract until further notice. We are in contact with law enforcement and taking all available measures to address the situation. We will share updates through our official channels as they become available.
10
25
2
61
31,325
Cryptoforensic Investigators retweeted
Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information). Earlier today customers received the email below.
1,069
965
518
5,467
1,218,155
Cryptoforensic Investigators retweeted
Hey all, My hot wallet was drained across Hyperliquid and EVM chains for millions on 27th Sep. I’m in touch with the FBI, USSS, @_SEAL_Org, @trmlabs, @CFInvestigators, and major exchanges who are now all aware of the stolen assets, their locations & movements (address ending in dHjFY). All are taking the investigation seriously. All have been incredibly responsive. Thank you. I’d be happy to pay a bounty to whitehats or anyone with onchain or IRL information that leads to the recovery of the assets. Please DM me for details 🙏. To the attacker: if you return 80% of the funds, all law enforcement, legal and exchange action will be dropped immediately, and you can keep the remaining 20% as a legitimate whitehat bounty that can be legally offramped and spent. Return 80% here: 2evt4TTjHw6BZjnaaq3UcSnmBrqzJjJnTsWi65yYpLbT Thanks to the @_SEAL_Org members for their first-hand response and initial guidance.
103
29
29
429
120,065
Cryptoforensic Investigators retweeted
🚨 The Biggest Crypto Scam You’ve Never Heard Of! 💰 A Chinese "goddess of wealth" fooled 128,000+ people, stole billions, and vanished with 61,000 Bitcoin! 😱 Want to know how it all unraveled? Let’s dive into this wild story! 🧵👇
6
7
1
22
3,288
Cryptoforensic Investigators retweeted
Our system has detected a hack into @CoinDCX centralized exchange 20 hours ago. Here's what we know: - The hacker stole around $44.2M in USDC/USDT from one of the exchange's operational wallets on Solana. - The hacker funded the hack with 1 ETH from Tornado Cash. - Part of the funds ($15.8M) were moved to Ethereum via a bridge. Thanks to @zachxbt for identifying that it's CoinDCX and for the shoutout to Cyvers!
9
36
10
103
17,538
Cryptoforensic Investigators retweeted
A recent cyberattack on the Central Bank of Brazil services provider C&M resulted in a breach to the reserve accounts of six financial institutions where attackers converted stolen fiat to crypto. I began working on an initiative that has helped freeze ~$5M across multiple exchanges and blockchains. A special thanks goes to @tether , @Binance Security Team, @Bitso, @Bybit_Official Compliance Team, & @CFInvestigators. Collaboration within the private sector is the most effective way to combat illicit activity and push our industry forward.
373
531
40
3,671
381,308
Cryptoforensic Investigators retweeted
1/ An investigation into how the New York based social engineering scammer Daytwo/PawsOnHips (Christian Nieves) stole $4M+ from Coinbase users by impersonating customer support, bought luxury goods, and lost most of the funds gambling at casinos.
522
715
129
6,809
1,320,687
Cryptoforensic Investigators retweeted
🚨 The official driver provided by this printer carries a backdoor program. It will hijack the wallet address in the user's clipboard and replace it with the attacker's address: 1BQZKqdp2CV3QV5nUEsqSg1ygegLmqRygj 🕵️ According to @MistTrack_io, the attacker has stolen 9.3086 $BTC. Active since Apr 22, 2016, last seen Mar 14, 2024, with links to multiple exchanges. 🔗light.misttrack.io/address/B…
中国深圳打印机公司天生 (#Procolored) 被发现提供的官方驱动程序携带后门程序用来盗取加密货币,数据显示黑客盗取的比特币数量达 9.3 个。 至于感染原因则是天生使用 U 盘传输这些驱动程序,被感染后门程序后天生又将其上传到网盘供全球用户下载。 查看全文:ourl.co/108992
3
13
4
32
24,710
Cryptoforensic Investigators retweeted
Update: So far $7M+ has been frozen with the help of @CFInvestigators, @tanuki42_, Binance Security team, and myself.
98
151
7
1,421
291,890
Cryptoforensic Investigators retweeted
🚨 ALERT: Fake "Solscan" ads top Google search results right now! ⚠️ These phishing ads are designed to drain your wallet through malicious transaction signatures.
14
108
13
193
44,821
Cryptoforensic Investigators retweeted
Why is time of the essence when reporting crypto scams to exchanges? ⏰ In this video, @paul_sibenik, Founder & CEO of @CFInvestigators, explains how swift notification can lead to frozen accounts and potential recovery. 🚨Learn why acting quickly matters. #CryptoScams
2
2
2,490
Cryptoforensic Investigators retweeted
How quickly can experts identify a pig butchering scam? ⏱️ In this video, @paul_sibenik, Founder & CEO of @CFInvestigators, reveals that he can often spot these scams within 15 seconds of reviewing transaction data.🤯 Learn how they do it.#Investigation #CryptoSecurity
2
5
2,180
Cryptoforensic Investigators retweeted
🚨 There are some crazy threat actors lurking among us This guy “Nick” has a year+ persona, is hanging out in the infamous ethsec tg, and has multiple long-running dms open with multiple (legit) security researchers. If you opened his “PDF” pls turn off your computer NOW.
32
103
23
664
197,899
Cryptoforensic Investigators retweeted
If you suspect a crypto scam, what's the best course of action? 💡 @paul_sibenik, from @CFInvestigators, shares crucial advice: avoid confrontation and try to withdraw small amounts while feigning continued investment. ⚠️ Learn why. #CryptoScams #Investigation #FinancialCrime
1
1
1,340
Cryptoforensic Investigators retweeted
Uncovering Pig Butchering Scams: Beyond Social Media 🔍 @paul_sibenik from @CFInvestigators explains why traditional investigative methods might fall short. Learn about new approaches to uncovering these sophisticated scams. #CryptoforensicInvestigators #Cybersecurity
1
2
1,202
Cryptoforensic Investigators retweeted
Pig butchering scams are on the rise. 📈 Learn how these sophisticated criminals operate from the leading experts in the field. 🚨 @paul_sibenik, Founder & CEO of @CFInvestigators, shares valuable insights into the emotional manipulation tactics used by scammers. #CryptoScams
1
1
1,139
Cryptoforensic Investigators retweeted
🚨 Security Update 🚨 We’ve published a detailed Transparency Post Mortem Report on the recent Simple Staking incident at Voltage Finance. It covers what happened, our ongoing investigation, and next steps. Full details here 👉 medium.com/@voltage.finance/…
4
1
1
12
2,551
Cryptoforensic Investigators retweeted
Pig Butchering Scams: Don't Fall for Their Charm 🤝 @paul_sibenik, Founder & CEO of @CFInvestigators, explains how scammers build trust to steal your crypto. 🧠 Learn how to spot red flags. ⚠️ #PigButcheringScam #CryptoScam
2
1
1,338
Cryptoforensic Investigators retweeted
ALERT: LAZARUS LAUNDERING THROUGH THORCHAIN - MINIMUM $240M SO FAR Over $240M of ETH has been sent through Thorchain by Lazarus-tagged wallets on Arkham. These funds have mainly been swapped for native BTC.
95
164
22
1,169
156,765