Blockchain intelligence for investigations and B2B products. Wallet data | entity intelligence | threat data | APIs intelligence
Joined December 2021
- Tweets1.8K
- Following140
- Followers2.4K
- Likes386
Pinned Tweet
Blokiments is entering a new chapter.
Over the last few years, we built tools for crypto users to filter new tokens, analyze launches, track wallets, and detect scam signals. That work gave us a deep understanding of how risky on-chain activity actually looks in practice.
Today, we’re officially shifting Blokiments toward what has become most valuable: crypto investigations, due diligence, and custom blockchain intelligence.
The new site is now live and reflects that transition.
What this means:
- a new landing page focused on investigations, due diligence, and custom data work
- a growing set of practical tools
- more public research, guides, and investigation workflows
- a stronger focus on helping funds, investigators, legal teams, and builders turn on-chain activity into usable answers
If you need help with wallet tracing, token reviews, suspicious flow analysis, or custom blockchain data workflows, take a look.
More updates soon.
New Blokiments tool: Wallet Risk Analyzer.
Paste an EVM wallet and get a structured view of its identity, activity, counterparties, and risk signals.
It checks:
• wallet & entity labels
• multichain activity
• sanctions & official watchlists
• stablecoin issuer restrictions
• exploit associations
• privacy protocol interactions
• scam / malicious-address signals
• on-chain behavioral patterns.
The report combines these signals into an AI-assisted risk assessment while showing the underlying evidence and coverage.
More networks and intelligence sources are coming.
➡️ Try it: blokiments.com/tools/wallet-…
BITGET EXPLOIT
There are reports of a major security incident involving Bitget, with estimated losses exceeding $170 million.
Several wallets that currently appear to hold or have received funds linked to the incident:
- 0xa6dd3f218b65e32ccc37be30f74884133c655545
- 0xA6dD3F218B65E32Ccc37BE30f74884133c655545
- 0xd2c2f029eff5cacc686f24377cfddcfc82d9f899
- 0x600cfedc6bd65fa79b604dc44964f419e45784b2
- 0x770b10b273fc44fe9197d6bf20f145c2e98463ee
We are continuing to trace the movement of the funds and will publish a more detailed investigation as additional information becomes available.
EXPLOIT: MOKE Spot-Price and Stale LP Accounting Exploit
Network: BNB Smart Chain (BSC)
Exploit timestamp: 2026-08-02 20:50:11.000
Amount lost: 907,700 USD
Project: Moke
Attacker: bscscan.com/address/0xe454a9…
TxHash: bscscan.com/tx/0x0776048b1b5…
Summary: An attacker manipulated MOKE's same-transaction spot-price settlement and exploited stale LP dividend records to release tens of millions of MOKE, convert them into BNB, and realize approximately $907.7K.
Sources:
- anomly.rs/moke-lp-dividend-s…
- xitter.cf/TenArmorAlert/status/2…
TRACING the funds:
The MOKE exploiter funds were transferred to 0x6254365dD2E179055AFE9E68e90D0EAb305650ff.
The malicious actor then made two additional PancakeSwap swaps and transferred the funds through:
- 0xF38B1cab69C7DDDF11DBb17b7EbcE8098DF58213 and 0x8d9ddf0ab2e3e3Ff450aac7773dEEBc27c7aEA1C.
On 2026-08-05, the stolen funds were transferred to 0x8f01F5C9827909Ab819cD6622588eBa2c1445C25.
The funds are still currently held in this wallet. The attacker has started converting the BNB to Binance-Peg BSC-USD. @binance
For now, the funds remain in this wallet. We will continue to monitor and update on any future movements.
🚨TenArmor Security Alert🚨
Our system has detected a suspicious attack involving #MOKE on #BSC, resulting in an approximately loss of $907.7K.
Attack transaction: bscscan.com/tx/0x0776048b1b5…
With TenArmor’s TenMonitor, you get early detection and automated response to on-chain attacks.
Need protection? Reach out anytime!
#TenArmorAlert #TenArmor
UPDATE: After the exploit, the funds were swapped for approximately 940,000 BSC-USD. Then, 40,000 USD was deposited to Binance. The remaining stolen funds were moved to four wallets via the Across Bridge:
~400,000 USD to Ethereum: 0x0e4052edf0a35ecddf2998db21a331a4ebede799
~300,000 USD to Base: 0xbbb248f74bd4671768926586f2f3a46bc2b72d1f
101,000 USD to Robinhood Chain: 0x1397c6115ff92574df231933201aba7ed9f89295
100,000 USD to BSC: 0xb714ebf48060c9b15e3e39ebd3944cc14291c5bf
NEW EXPLOIT: USM/FUM Split Redemption Pricing Exploit
Network: Ethereum
Exploit timestamp: 2026-08-09 8:12:47
Amount lost: 136,123 USD
Project: USM Stablecoin
Attacker: etherscan.io/address/0xe3c63…
TxHash: etherscan.io/tx/0xfae5e751b8…
Summary: An attacker exploited path-dependent pricing between USM's fund() and defund() functions by flash-funding the ETH pool and splitting the resulting FUM redemption across 64 calls, extracting approximately 70.83 ETH.
Sources:
- anomly.rs/usm-fum-fund-defun…
-xitter.cf/DefimonAlerts/status/2…
TRACING THE FUNDS:
The 70.83 ETH from the USM exploit was sent to 0xE3C6346b6F282029312d2CAf4677EF39BeaBBF99.
After the exploit, 70 ETH of the stolen funds were transferred to 0x8BF0E85c2655D4b6051024a7c47B20190C786aAC.
This wallet then made four deposit transactions to the XT.com exchange deposit wallet 0x60988d3B4D3DfFe2C9A5277945968E61993594Eb. @XTexchange
The exploiter wallet 0xb92b2E47680c89DA8f951B8963ef469f461a50Fc also received ETH funds from the same XT.com exchange.
🚨 @usmfum - Loss $136K (2026-08-09)
Token: $FUM / $USM
Network: Ethereum
Type: Oracle / Price Manipulation (Flash Loan)
Attacker flash-loaned 11,580 WETH from Balancer and repeatedly called USM.defund() (65 iterations) to burn its ~62M FUM position against the ETH pool. Each defund tweaks the internal bidAskAdjustment / sliding price (USM.sol _defundFum, ls.bidAskAdjustment.wadMulDown), and chunking the exit inflated the effective FUM sell price far above the oracle mark (PriceChanged pushed to ~$7.1M vs oracle ~$1,921), letting each burn drain more ETH than fair value. The extracted ETH was re-wrapped to repay the loan, netting ~70.83 ETH profit drained from the USM ETH pool.
TX: etherscan.io/tx/0xfae5e751b8…
Attacker: etherscan.io/address/0xb92b2…
Victim: etherscan.io/address/0x2a7ff…
⏱️ Real-time alerts: defimon.xyz
0x784aab4a45505c256f258845ad41b47671dbd8e68f3cdf461396b0f70b79d594 -> funding from XT.com
TXhash for Deposits to Xt.com:
0xefba951de4891031c1429e8ad0d68239773fe476cb98ed533799ec42315047a7
0x67535e38e735810023fbe01f66eaae5414c40180c1171d1fe222c3feb9be8314
0x87f5ed4d05667dbbd920fb4530a586bf3c2d9c9e83e5a7f1b043817988b21034
0x1020cf1a34e4b395d7da469197ec81d82326d6373bf388fd9ec4257034b6a87d
NEW EXPLOIT: Atomic.green Spot Price Manipulation Exploit
Network: Arbitrum
Exploit timestamp: 2026-08-07 04:18:12.000
Amount lost: 29,984 USD
Project: Atomic (@atomic__green)
Attacker: arbiscan.io/address/0xf8803d…
TxHash: arbiscan.io/tx/0xbd4a009cd60…
Summary: An attacker replayed an insufficiently scoped manager signature across 21 Atomic.green position IDs, enabling unauthorized full LP burns. Flash-loan manipulation of the underlying spot price amplified the withdrawals, resulting in approximately 29,984 USDC in losses.
TRACING THE FUNDS:
The attacker, 0xf8803dae13a6757e53711214769b5fb52ec26c7e, sent 19,980 USDC to two @hitbtc deposit wallets, while another 10,000 USDC was transferred to a @Cce_Cash Cross-Chain Instant Exchange deposit wallet.
The attacker was also funded with 0.0186 ETH from the HitBTC exchange an hour before the exploit.
HitBTC deposit wallet (9,980 USDC): 0x5e751c2d5d84d352257d6e92543ee7523b841a6e
HitBTC deposit wallet (10,000 USDC): 0xbc6668f3fc0e84557a39356fdb4671ebe49d6a7e
CCE Cash deposit wallet (10,000 USDC):
0x25ab4d45bb7e0649a11d46eefff8d85afe000b52
Tx hashes:
- 0x5527fd49e32b6199b97de8f15d1edcb5748d298e23f5b57e133c1c8bc7a47300 (Attacker wallet funding from HitBTC: Hot Wallet)
- 0x3662a55e08ac20327ea9580058b6c337d36d9bd3eccae2f012df78827eb9c7c7
- 0x565741e9a6e156ccd27f9e7df56fd4598ff44f6eb980ec8bcf234282bed28c6c
- 0x38ee66382e3696b945841281a7c277cba1ec86db8039c6be16a1404b02b764a0
We investigated Blockstreet, the ethereum:0xcab84bc21f9092167fcfe0ea60f5ce053ab39a1e token, its links to MIXIE, the team, and the on-chain flows.
Our findings point to coordinated trading, major profit extraction, and serious questions about insider activity.
Read the full report: docs.blokiments.com/investig…
We’re Leveling Up: Platform Restructuring
We’ve built a lot together over the last three years, from wallet analysis to strategy builders. But to move faster, we need to get leaner.
To speed up development and reduce maintenance overhead, we are officially narrowing our focus to the features you use most. We're doubling down on:
➡️ Advanced Token Analyzer (web and Telegram bot)
➡️ Wallet Alerts & Tracking
➡️ Early Entry Signals (Money flow, Whales, Smart Money)
➡️ Forensics & Research (Scams/Hacks)
➡️ Custom Analytics APIs
This shift allows us to spend less time "fixing" and more time building. We’ll be sharing more specific development news over the next few days. Thanks for being part of the journey!
Token Analyzer TUTORIAL: Holders Risk Metrics Explained
With scams everywhere, the holder structure matters more than hype. Here’s how our Holders metrics help you quickly spot fake distribution and concentration risks 👇
5️⃣ 🔴 HHI (Concentration Index)
HHI is a standard financial metric that measures the degree of ownership concentration across holders. Higher HHI = more whale dominance and uneven distribution. It gives a mathematically solid view of concentration risk instead of relying on a single top-holder number.
These metrics are now built directly into our Token Analyzer so you can spot distribution red flags before you ape in. Try it now: blokiments.com/
