We won the Gold Award in the FinTech (RegTech: Regulatory and Risk Management) at the #HKICT Awards 2025! 🏆

Please use the official @Bitget API for hacker addresses; our Google Sheet will no longer be updated. bitget.com/support/articles/…

Tether banned the wallet owned by the bitget exploiter etherscan.io/tx/0xdd30e4831e…

THORChain and Stolen Funds: The Industry Needs Answers After the $1.46B @Bybit_Official hack last year, nearly $1.2B in stolen funds was reportedly traced through @THORChain as the attackers moved assets across chains. Today, following another major security incident at @Bitget , we are once again observing Bitget Exploiter funds being sent into the THORChain for asset swaps and cross-chain transfers. The question is no longer: “Does THORChain know these funds are associated with hackers?” The attacker addresses have already been publicly flagged and are being actively tracked by exchanges, blockchain security/aml firms, and the wider crypto industry. The real question is: When a protocol is aware that funds originate from a publicly identified major hack, yet continues to facilitate large-scale cross-chain swaps, how should the industry view this under the banner of “decentralization”? Decentralization should not become a blanket excuse when dealing with known stolen funds. If, after every major crypto hack, attackers can continue using THORChain as a route to move funds from ETH → BTC, BNB → BTC, and across other chains, the industry needs to seriously ask: What responsibility should THORChain bear when handling known stolen funds? @GracyBitget @xiejiayinBitget @benbybit

We’re working closely with @bitget on the ongoing investigation. For further details, please refer to Bitget’s official updates.

RT @evilcos: 来自 @SpecterAnalyst 的链上分析关联出朝鲜黑客历史上的有关资金。另外，这次手法上确实和之前朝鲜黑客相关组织的手法类似，包括资金归集习惯… 更多信息见 Bitget 官方披露就好，我们在协同调查中。

All hacker addresses have been tagged. We’re actively monitoring fund transfers and expanding our blacklist. We remain fully committed to combating illicit transactions.

如果你手机上安装过 FomoPeek 而且最近有被盗，可以把被盗地址、黑客地址提交给我们 aml.slowmist.com/cn/recovery…

🚨 SlowMist TI Alert: FomoPeek App v1.1–1.2 Asset Theft 🚨 We have recently received multiple reports of users having assets stolen. Our investigation found that the affected cases involved private key exposure, and some of the users had previously installed and used @FomoPeek App versions 1.1–1.2. A joint investigation by the @SlowMist_Team and @okx security teams confirmed that the app contains malicious code.⚠️ Besides its normal features, FomoPeek includes two modules that are unrelated to its stated business functions. One of them contains an #iOS kernel exploitation framework with eight different exploit methods. The framework can automatically choose an attack method based on the device model and iOS version. ‼️Affected iOS versions: iOS 12.0–18.7 and iOS 26.0–26.1.‼️ If the exploit succeeds, the app may escape the iOS sandbox, access and decrypt Keychain data, and read files belonging to other apps on the device. 🔐 This means sensitive data stored on the device, including private keys, seed phrases, login credentials, chat history, and files, may be exposed. The app also connects to hidden servers that are unrelated to its public-facing services and can receive remote commands. Based on plaintext traffic captured during our analysis, the attack functionality is currently enabled and runs automatically at regular intervals. In general, devices running older iOS versions are at higher risk. If you have installed or used FomoPeek versions 1.1–1.2, we recommend that you take action immediately: 1️⃣ Check your accounts and assets for any unusual activity. 2️⃣ On a trusted device where FomoPeek has never been installed, create a new account and generate a new private key and seed phrase. 3️⃣ Move your assets to the new account as soon as possible. 4️⃣ Update your device to the latest available iOS version. 5️⃣ Do not continue using or reinstalling FomoPeek. 6️⃣ If you notice any suspicious asset activity, contact the official support team of the relevant platform and keep the affected device and related evidence for further investigation.

🚨 MistTrack Fund Tracking 🚨 Following the @likwid_fi incident reported by @SlowMist_Team, we tracked the on-chain movement of the stolen funds. 💸 Loss: 74.31 $BNB 📌 Attacker: 0x90bde1e0bb16b3deeb9d638acf8d01f19fd2f31e 🧭 Fund Flow: Attacker → Tornado Cash 🧩 Key Findings: • Multiple withdrawals by the attacker were traced to Tornado Cash, which also provided the initial funding. • 31.8 $BNB was transferred to the attacker from FixedFloat. 🔎 MistTrack has added the related addresses to its malicious address library. light.misttrack.io/address/B…

Following exposure by @Bitrace_team and @MistTrack_io , Fulilai Guarantee（福利来担保） rebranded as Falali Guarantee（法拉利担保）.

🚀 MistTrack is now live on @WorkBuddy_AI ！ You can now ask WorkBuddy to run on-chain risk checks with MistTrack — risk scores, entity labels, transaction tracing, and counterparty analysis. Just bring your own MistTrack API Key.✨ Find the MistTrack expert in WorkBuddy and start tracing.

On Sept 9, OFAC and DOJ took joint action against Xinbi Guarantee and its supporting service network, restricting more than $52 million in crypto assets. Xinbi Guarantee is a Chinese-language online escrow marketplace connecting scam groups with merchants offering money laundering, scam-site development, and other illicit services. OFAC designated Xinbi Guarantee as a significant Transnational Criminal Organization (TCO), and also sanctioned supporting firms SafeW Technology and Anwen Technology. DOJ seized related Telegram channels and wallets, including ~$12M from 2 collection wallets. Treasury said the marketplace has processed over $24B in digital assets and fiat since around 2022. The case highlights the importance of tracking illicit fund flows across service networks. SlowMist @MistTrack_io will continue updating related risk labels to support on-chain monitoring and illicit fund analysis. Read more 👇 medium.com/@slowmist/u-s-ofa…

THE BLOCK: Tether earlier today froze about $39.3 million in USDT across 10 Tron addresses linked to Xinbi Guarantee, a source with direct knowledge of the matter told The Block. Xinbi is a Chinese-language guarantee marketplace that emerged on Telegram around 2022. TRM Labs has described it as one of Southeast Asia's largest illicit crypto marketplaces, saying it has processed about $24.2 billion in transactions. MistTrack, an onchain tracing platform developed by SlowMist, first reported the USDT freeze.

Hours ago, Tether froze approximately 39,273,713 USDT across 10 TRON addresses linked to Xinbi Guarantee新币担保. Following its freeze of 汇旺担保Huione-linked funds, this appears to mark another crackdown on illicit Telegram-based escrow platforms. light.misttrack.io/address/U…

📢Apply now misttrack.io/partners.html