HWC USERS

⚠️JUST IN: A Trezor user lost 113 BTC ($7M) to a phishing site The victim entered their seed phrase into a fake 1:1 Trezor site, allowing the attackers to access their wallet and steal over 113 BTC. @hWCusers

⚠️ BREAKING: FBI agent arrested after draining $1M in crypto An FBI agent was arrested after using classified FBI tools to access a target's crypto wallet and drain $1M He was caught after he started talking about it to his colleagues. 💧 @hwcusers

⚠️JUST IN: Notorious Cybercrime group "Lazarus" has moved 120 BTC ($7M) The cybercrime group has stolen over $6B since 2017 by hacking major crypto exchanges and has now moved 120 BTC across multiple wallets, likely to split the funds. @hWCusers

⚠️JUST IN: Crypto wallet company loses $12M to a social engineering scam An employee was social engineered into giving an attacker the seed phrase to the company’s treasury wallet, resulting in $12M being stolen. @HWCusers

⚠️JUST IN: TripleAQH crypto wallets have been exploited for over $9M All new deposits made to the wallet are being instantly drained, with over $9M stolen from multiple victims. @hWCusers

⚠️JUST IN: B2 Network has been exploited for $3.6M+. The team is asking the attacker to return only 10% of the stolen funds and, in exchange, has agreed not to pursue any investigations allowing the attacker to keep $3M+. @hWCusers

⚠️JUST IN: Allbridge Core on Solana has been exploited for $1.6M+. The attacker took out a fake loan, successfully swapped $3K USDC for $2.2M USDT, and withdrew the funds immediately after @hWCusers

⚠️JUST IN: A fake crypto exchange has drained $240K+ from hundreds of victims. Multiple victims are now begging for the funds to be returned, with some saying the stolen money was their life savings. @hWCusers

⚠️JUST IN: Ostium was exploited for $24M. An employee was social engineered into giving the vault’s private keys to an attacker. Shortly after, $24M+ was stolen. @hwcusers

⚠️ BREAKING: The Official SpaceX and Starlink accounts on X appear to have been compromised to promote a rugpull @hwcusers

⚠️ JUST IN: Hinkal Protocol was hit by an exploit that drained roughly $820k USDC.The attacker reportedly used a Proofless Deposit followed by multiple transact calls. The stolen funds were reportedly swapped into ETH, with about 410 ETH sent to Tornado Cash and bridged 44.7 ETH through THORChain toward bitcoin. As a precautionary measure, the affected contracts have been frozen while the engineering team investigates the occurrence. @hwcusers

⚠️JUST IN: Alleged Scattered Spider member arrested in Finland and extradited to the U.S. FBI says the cybercrime group is linked to over $100M in thefts from 100+ victims, using sophisticated social engineering tactics. @HWCusers

⚠️ JUST IN: A phishing campaign targeting Polymarket users has allegedly stolen about $2.94 M from more than 11 wallets holding PUSD. The funds were bridged from Polygon to Ethereum, converted into roughly 1,893 ETH, and sent to a single wallet address controlled by the attackers. The incident appears to stem from users signing malicious transactions or interacting with fake links, not a direct breach of Polymarket's infrastructure @hwcusers

⚠️JUST IN: Social engineering threat actor “Merry” has been raided and arrested alongside three others. The group is accused of stealing over $10M through social engineering and SIM-swapping attacks. All suspects are now in custody and could face up to 25 years in prison. @hwCusers

⚠️JUST IN: The FBI arrested a threat actor who stole $1.4M from elderly victims through social engineering. The unknown actor was sentenced to 15 months in federal prison and ordered to forfeit the stolen assets after scamming 25 victims. / @hwCusers

⚠️JUST IN: Inactive crypto project exploited for $2.1M The project’s developers abandoned it in 2023, leaving $2.1M in user funds sitting in a wallet. Today, a threat actor gained access to that wallet and stole over $2M in ETH. / @hwCusers

⚠️BREAKING: Multiple 1L Instagram usernames appear to have been claimed via an exploit. Around 10 minutes ago, both @e and @f on Instagram were claimed through an active exploit. Previous one letter Instagram handles have sold for $100K+. @hwcusers

✅JUST IN: Gravity exploited with $5.4M+ stolen Early details suggest 11 employees were social engineered into signing a malicious signature, which gave the attacker access to the wallet and allowed them to drain the funds. / @hwcusers

⚠️ One of Polymarket’s wallets was compromised , with the hacker withdrawing $500 every 30 seconds ~ $670K stolen so far. Polymarket says no users were affected. 💧 @hwcusers Post from feds📱