Site language
Ru En
Социальные сети

cointelegraph.com 10 red flags that scream ‘fake airdrop,’ and how to avoid them

Key takeawaysIn 2024 and 2025, fake airdrop scams targeting Hamster Kombat, Wall Street Pepe and others led to millions in user losses, contributing to over $9.9 billion in global crypto scam damages.Fake airdrops impersonate legitimate projects, tricking users into revealing private keys, signing malicious contracts or paying upfront fees that lead to irreversible crypto theft.Warning signs include no official announcement, suspicious URLs, requests for private keys, grammar errors and unrealistic reward promises.Future airdrops are shifting toward activity-based, retroactive and AI-monitored models that reward genuine user engagement while reducing exploitation.While cryptocurrency airdrops are a legitimate way for projects to gain publicity and users, scammers exploit this hype, draining wallets through fake campaigns. In 2024 and 2025, fake airdrop scams around projects like Hamster Kombat and Wall Street Peepe cost victims millions. According to Chainalysis, the global estimated losses in 2024 from cryptocurrency scams and fraud, which included fake airdrops, amounted to at least $9.9 billion. Spotting red flags is crucial to staying safe from fake airdrops. This article explores key warning signs and practical tips to protect your funds. What are fake airdrops?Airdrops are a common practice of distributing free tokens in the crypto world as part of marketing campaigns, user acquisition efforts, or community-building exercises. Legitimate airdrops reward early takers, increase token visibility, or promote network activity. Getting airdrops requires minimal effort, like signing up, joining a community or holding a specific token.However, the popularity of airdrops has also drawn scammers. They exploit user greed and curiosity by promising free tokens (fake airdrops) in exchange for sensitive actions such as sharing private keys, signing malicious contracts or paying gas fees. Fraudsters may impersonate real projects using spoofed domains or fake social media accounts.These scams often look convincing, and even experienced users can fall victim. This is the reason consistent vigilance is required when you are getting airdrops. Did you know? In 2023, Inferno Drainer helped scammers steal over $80 million through airdrop phishing campaigns. Operating as a “drainer-as-a-service,” it lets affiliates use prebuilt kits to run scam airdrop sites, targeting wallets across several blockchains.Key red flags that expose ‘fake airdrops’Before you connect for an airdrop, learn to spot the warning signs. These red flags are your first line of defense against losing your crypto or sensitive information to scammers:1. No official announcement from verified channelsWhat to watch for: A major warning sign of a fake airdrop is the lack of any announcement on the project’s official communication channels. Scammers often use unsolicited direct messages, unofficial Telegram groups or poorly crafted websites mimicking legitimate ones to promote fake airdrops.How to avoid: Always verify the legitimacy of an airdrop by checking the project’s official website, verified X account or official Discord/Telegram channels before clicking any links. If the airdrop isn’t mentioned there, keep away from it.2. Request for private key or seed phraseWhat to watch for: A critical red flag of a fake airdrop is a request to “verify” your wallet by providing your private key or seed phrase. These scams deceive users into surrendering complete control of their crypto wallets by posing as eligibility checks. Once shared, scammers can immediately steal all assets.How to avoid: Genuine airdrops never ask for your private key or recovery phrase, which should always remain confidential. If anyone or any website requests these, it is a clear scam. Exit the page immediately.3. Upfront gas fees or crypto paymentsWhat to watch for: A significant warning sign of a fake airdrop is that it requires upfront gas fees or cryptocurrency payments to “unlock” tokens. Scammers often insist you send Ether (ETH) or other coins to claim rewards, but after the payment, the promised tokens never materialize, and your funds are lost.How to avoid: Legitimate airdrops are free, typically involving only simple tasks like connecting a wallet or completing minor actions. If an airdrop demands any payment, it is likely to be a scam. Never send funds to unfamiliar addresses.4. Suspicious URLs or clone sitesWhat to watch for: Fake airdrops frequently employ phishing websites resembling legitimate crypto platforms. These sites aim to deceive users into connecting wallets and signing fraudulent transactions.How to avoid: You need to carefully check a project’s URL before executing any transaction on it. There will likely be subtle differences, such as misspellings, extra characters or alternate domain extensions.Did you know? Some airdrops use retroactive criteria, rewarding users based on past activity. This encourages organic participation before the airdrop announcement, so simply using DApps naturally could make you eligible for future free tokens.5. Poor grammar and urgent languageWhat to watch for: Many fake airdrops feature poor grammar, spelling errors or aggressive phrases like “Claim Now Or Lose Out!” or “Final Chance For Free Tokens!” These tactics aim to create panic, rushing users into clicking malicious links without careful thought. Sloppy writing and intense urgency are clear signs of a scam.How to avoid: Legitimate crypto projects communicate professionally and clearly. If an airdrop announcement contains errors or uses high-pressure, time-sensitive language, steer clear. 6. Fake social proof or bot commentsWhat to watch for: Scammers frequently use fake airdrop posts filled with fabricated social proof, such as comments like “I just got 500 $XYZ!” or “Totally legit!” These are often posted by bots or fake accounts to create a false sense of trust and encourage participation. They might also use fake or hacked celebrity accounts to disseminate false information regarding airdrops.How to avoid: Avoid trusting social media comments alone to determine an airdrop’s legitimacy. Research the token thoroughly, confirm its presence on reputable platforms, and seek authentic user feedback on forums like Reddit or trusted crypto Discord groups. Genuine projects maintain transparent communities, not just artificial hype.7. Unknown or nonexistent token projectsWhat to watch for: Certain fake airdrops promote tokens tied to obscure or nonexistent projects, which might lack a white paper, roadmap, official website or verifiable team. Scammers use these fabricated tokens to trick users into connecting wallets or approving transactions that result in stolen funds.How to avoid: Always research a token extensively before participating in an airdrop. Check for a white paper, official website, team credentials and active community presence. If the project lacks basic details or appears suspiciously new with no credible background, it is likely fraudulent.8. Token approval trapsWhat to watch for: Certain fake airdrops entice users to connect their wallets and grant token spending permissions. These seemingly harmless “approval” requests can allow scammers to freely transfer or drain your tokens without further interaction, exploiting the granted permissions.How to avoid: Exercise caution when approving token transactions, particularly from unfamiliar sources. Avoid authorizing smart contract interactions on untrusted websites. Regularly use tools like revoke cash to check and cancel unnecessary token approvals.9. Redirects to malicious wallet drainersWhat to watch for: Some fake airdrop links redirect users to malicious DApps known as wallet drainers. These sites are designed to resemble legitimate claim pages but execute malicious smart contracts once a wallet is connected. By clicking “claim airdrop,” users unknowingly sign transactions that give scammers full access to their funds.How to avoid: Always review transaction pop-ups carefully before signing. Use browser wallets like MetaMask with built-in phishing protection and stay updated on known scam domains. If a site looks unfamiliar or triggers unexpected approvals, disconnect immediately. 10. Unrealistic reward promisesWhat to watch for: Fake airdrops often attract users with unrealistic promises, such as “Instantly claim $2,000 in free tokens!” with no effort required. These offers exploit greed and curiosity, luring users into connecting wallets or signing transactions without proper scrutiny.How to avoid: Be suspicious of extravagant claims. Genuine airdrops usually provide modest rewards and have certain eligibility criteria. If an offer appears too good to be true, it is likely to be fraudulent.Did you know? In 2021, the Ethereum Name Service (ENS) gave governance tokens via an airdrop to anyone who had registered a .eth name. Many ENS holders received thousands of dollars just for owning a crypto domain name.Examples of fake airdropsHere are some examples of well-known fake airdrops to help you understand how these fraudulent actions scam unsuspecting victims:Hamster KombatHamster Kombat is a Telegram-based tap-to-earn game where players manage a virtual crypto exchange as a hamster CEO. By tapping, completing daily tasks and upgrading, players earn HMSTR coins, which are convertible to tradable tokens. Launched in March 2024, it attracted over 250 million users, but scams targeting players have raised concerns.Malicious actors targeted Hamster Kombat to profit from the tap-to-earn game’s viral popularity. Kaspersky warned users about fake Hamster Kombat airdrops, meant to steal victims’ crypto wallet credentials.Wall Street PepeWall Street Pepe ($WEPE) is an Ethereum-based memecoin that combines meme culture with practical trading utilities. Inspired by the Pepe meme and Wall Street trading, $WEPE provides small traders with unique market insights, strategic analysis and a supportive community.The $WEPE airdrop scam mimicked the legitimate token's website. It lured users with promises of an airdrop and prompted them to connect their digital wallets, inadvertently signing malicious contracts that drained their assets.HEXHEX is a token built on Ethereum to help users capitalize on cryptocurrency market growth through a system that supports coin locking and staking for fixed durations. The fraudulent webpage replicated the official HEX site. The airdrop on this counterfeit site was fake and unrelated to the genuine HEX project or other initiatives. When a crypto wallet was linked to the deceptive site, it activated a malicious contract that enabled the cryptocurrency drainer to steal funds.SuiSui (SUI) is a layer-1 blockchain and smart-contract platform engineered for speed, privacy and accessibility, featuring a distinctive object-centric data model.When users checked airdrop eligibility on the fraudulent webpage posted by the scammers, they were prompted to link their digital wallets. This action unwittingly signed a malicious contract, enabling the cryptocurrency drainer. Consequently, their funds were automatically transferred to wallets controlled by scammers through seamless, unauthorized transactions.LayerZeroThe LayerZero airdrop implemented a novel "proof-of-donation" claiming system. Instead of distributing $ZRO tokens for free, as typical airdrops do, LayerZero required users to donate $0.10 per token to the Protocol Guild, which supports Ethereum’s core developers.In July 2023, security firm CertiK cautioned users to be careful about fake airdrops being promoted on X by accounts impersonating Layer Zero. When users clicked on the links, they were sent to a website that resembled the official LayerZero website.How crypto airdrops are evolving from freebies to secure community rewardsCrypto airdrops are advancing beyond basic token giveaways, adopting more advanced and secure approaches to engage users. Projects increasingly implement activity-based airdrops, rewarding users for contributions like staking, testing apps or engaging in governance. This shift seeks to promote authentic community involvement and prevent exploitative tactics. Novel distribution models such as snapshot-based allocations and retroactive rewards are gaining traction. These approaches enhance transparency and ensure tokens reach active community contributors. Integrating artificial intelligence and machine learning improves fraud detection and strengthens airdrop security by helping detect bots, fake wallets and fraudulent behavior, making airdrops more secure and resistant to exploitation.This transformation reflects the evolution of responsible, effective token distribution practices that align with decentralization and community empowerment goals.This article does not contain investment advice or recommendations. Every investment and trading move involves risk, and readers should conduct their own research when making a decision.

bitcoinist.com How Bitcoin ETFs Are Taking A Key Role In Price Discovery And Liquidity – Analyst

The US Bitcoin Spot ETFs are credited as a major bullish driver in the concluding market cycle, for heralding a heavy wave of institutional investment in the premier cryptocurrency. Interestingly, on-chain data shows these funds are transforming into key structural components of the Bitcoin market, moving beyond just investment vehicles. Related Reading: Bitcoin Cannot Rally […]

blockmanity.com Is It Time to Ditch Ethereum for Solana? The Ultimate Crypto Switch Guide

Is It Time to for Solana? The Ultimate Crypto Switch Guide Ethereum has been a giant in the crypto world for years. Since it started in 2015, its price has soared over 68,000%. But now, things look different. Ethereum is […] The post Is It Time to Ditch Ethereum for Solana? The Ultimate Crypto Switch Guide appeared first on Blockmanity.

blockmanity.com CEVA’s Bold Move: Joining IBM-Maersk TradeLens to Supercharge Blockchain in Logistics

CEVA’s Bold Move: Joining IBM-Maersk to Supercharge The shipping world is full of delays, paperwork, and trust issues. But a new partnership is changing that. CEVA Logistics has teamed up with IBM and Maersk’s platform. This blockchain tool promises to […] The post CEVA’s Bold Move: Joining IBM-Maersk TradeLens to Supercharge Blockchain in Logistics appeared first on Blockmanity.

blockonomi.com Binance ETH Reserve Hits Lowest Level Since 2024 as Stablecoin Balances Surge

TLDR: Binance ETH reserve fell to 3.3M ETH, breaking below both the February and August 2024 historical lows. Bitcoin reserves on Binance declined from 670,000 BTC in early February to 636,000 BTC by early April 2025. USDT reserves on Binance grew from $35 billion on March 12 to $38 billion by April 2, reflecting rising [...] The post Binance ETH Reserve Hits Lowest Level Since 2024 as Stablecoin Balances Surge appeared first on Blockonomi.

blockonomi.com Leap Wallet to Shut Down All Products on May 28, 2026

TLDR: Leap Wallet will sunset all products, including extensions and mobile apps, on May 28, 2026, across iOS and Android. Users can migrate safely using their recovery phrase, as Leap is non-custodial and assets remain on the blockchain at all times. ATOM delegators staking with Leap’s Cosmos Hub validator must redelegate early due to network [...] The post Leap Wallet to Shut Down All Products on May 28, 2026 appeared first on Blockonomi.

news.bitcoin.com MiCA Decoded: July 1 Is Not the Deadline. For Most Service Providers, It Already Passed

Picture a crypto exchange registered in an EU Member State, operating normally in early April 2026. The registration is valid. The compliance team has July 1 circled in red. The founder believes the situation is under control: there are still 90 days to sort out the licensing. The business is legal today, and the deadline […]

blockonomi.com Cambodia Passes First Cybercrime Law to Shut Down Scam Centers for Good

TLDR: Cambodia’s parliament passed its first cybercrime law on April 3, 2026, targeting online scam centres directly. Convictions carry prison terms of up to 10 years and fines reaching $250,000 for gang-related scam operations. Cambodia extradited two high-profile figures to China amid a broader crackdown on senior scam network leaders. Britain sanctioned Cambodia’s largest fraud [...] The post Cambodia Passes First Cybercrime Law to Shut Down Scam Centers for Good appeared first on Blockonomi.

blockonomi.com Bitcoin Faucet Revival: Block Confirms April 6 Launch Date

TLDR: Block confirms its Bitcoin faucet launches April 6, allowing users to collect free satoshis online. The original Bitcoin faucet, created in 2010, distributed roughly 19,700 BTC before closing in 2012. Block cut 40% of its workforce to refocus on Bitcoin, using AI-driven workflows to sustain operations. Block’s product line now includes Cash App, Bitkey [...] The post Bitcoin Faucet Revival: Block Confirms April 6 Launch Date appeared first on Blockonomi.

blockmanity.com Jamie Dimon’s Explosive Rant: Are Crypto Tokens Like Bitcoin Just ‘Decentralized Ponzi Schemes’?

? In a recent public statement, J.P. Morgan Chase CEO Jamie Dimon dropped a bombshell on the crypto world. He called crypto tokens, including Bitcoin, “decentralized Ponzi schemes.” This harsh criticism from one of the biggest names in traditional banking […] The post Jamie Dimon’s Explosive Rant: Are Crypto Tokens Like Bitcoin Just ‘Decentralized Ponzi Schemes’? appeared first on Blockmanity.

blockonomi.com Coinbase CEO Brian Armstrong Pledges Direct Involvement in Bitcoin’s Quantum Defense Strategy

Google's quantum research threatens Bitcoin security. Coinbase CEO Brian Armstrong pledges personal involvement to make BTC quantum-resistant before it's too late. The post Coinbase CEO Brian Armstrong Pledges Direct Involvement in Bitcoin’s Quantum Defense Strategy appeared first on Blockonomi.

bitcoinist.com Why This Next Altcoin Season Could Be More Explosive Than 2021 As Signals Go Crazy

The crypto market is yet to have an altcoin season the likes of what was seen back in 2021, despite the Bitcoin price hitting new all-time highs over the last two years. This has alluded to the fact that the Bitcoin dominance over the market remains very high, thus not leaving any room for altcoins […]

forklog.media JPMorgan Reports Sharp Decline in Crypto Market Inflows

JPMorgan has observed a sharp decline in capital inflows into crypto assets in the first quarter of 2026, contrary to earlier growth expectations. This was reported by The Block. According to estimates by the bank's analysts, led by Managing Director Nikolaos Panigirtzoglou, total flows into digital assets over the three-month period amounted to approximately $11 billion. This is about three times less than the figure for the same period last year. If the current trend continues, the inflows for the full 12 months will amount to around $44 billion, significantly lower than the ~$130 billion in 2025. Source: The Block. Shift in Demand Structure and Miner Pressure The main volume of inflow in the first quarter was driven by corporate purchases of bitcoin and venture investments. Meanwhile, activity in the DAT segment was mixed. While a small group of players led by Strategy continued to increase positions, some smaller companies sold their assets to meet obligations and buy back shares. Analysts noted that the market is increasingly dependent on a limited number of large participants, rather than broad demand from institutional and retail investors. Additional signs of cooling during the first quarter included: outflows from spot ETFs based on bitcoin and Ethereum; reduced positions in CME futures; institutional demand turning negative. However, analysts noted a partial recovery of inflows into exchange-traded BTC funds in March. A significant factor pressuring capital inflows into cryptocurrencies was that mining companies were net sellers of bitcoin in the first quarter. JPMorgan explained this by the tightening of financing conditions for cryptocurrency miners and the need to maintain liquidity. In some cases, asset sales were related to diversification costs into AI services. The volume of venture financing in the first quarter remained high, with growth rates surpassing those of the previous two years. However, the number of deals and participants decreased, with investor interest focusing on fewer large rounds, bank specialists noted. In March, retail bitcoin investor activity dropped to its lowest since 2017, reported an analyst under the pseudonym Darkfost.

news.bitcoin.com The Retroactive Decryption Trap: Why Post-Quantum Upgrades Can’t Save Your Past Privacy

Google’s whitepaper warns that quantum computers may break current cryptography by 2029. Computer scientist Guy Zyskind says post‑quantum cryptography—particularly lattice‑based schemes and encrypted mempools—is essential to secure blockchains. Reframing the 10-Year Migration Window The recently released Google whitepaper on the quantum threat has ignited intense debate over the technical justifications that led authors to aggressively […]

bitcoinist.com Taiwan To Introduce Strict Crypto Penalties To Crackdown On Unlicensed And Fraudulent Activity

Taiwanese authorities have approved a new draft of their crucial crypto legislation, introducing severe penalties for unlicensed or fraudulent activities related to stablecoins and other digital assets. Related Reading: Coinbase Secures Conditional OCC Approval For National Trust Charter – Details Taiwan Approves $6M Fines To Combat Crypto Fraud On Friday, local news outlets reported that […]

forklog.media Prank trojan in Russia, European Commission data leak, and other cybersecurity news

Here are the week’s key cybersecurity developments. Spied, swapped crypto addresses and taunted victims: a prankish trojan found in Russia. C2 addresses for crypto-stealing malware found on Spotify and Chess.com. Hacker charged over $53m theft from the Uranium exchange. Researchers found an updated seed-phrase stealer for Apple and Android. Spied, swapped crypto addresses and taunted victims: prank trojan uncovered in Russia Researchers at Kaspersky Lab identified an active campaign in Russia spreading a new trojan. CrystalX is marketed under a CaaS model via ads on the social platforms Telegram and YouTube. The software acts as both a spy and a stealer, enabling the following: steal browser credentials as well as Steam, Discord and Telegram accounts; silently replace crypto-wallet addresses in the clipboard; covertly record audio and video from the screen and webcam. Its distinguishing feature is real-time mockery of the user. The panel includes a dedicated Rofl section with commands to: download an image from a specified URL and set it as the desktop background; rotate the display by 90°, 180° or 270°; shut down the OS via shutdown.exe; swap left- and right-mouse-button functions; turn off the monitor and lock input; make the cursor jitter at short intervals; hide all desktop icons and disable the taskbar, Task Manager and cmd.exe. The attacker can also send a message to the victim, opening a dialog box for two-way chat. Source: Kaspersky Lab. As Leonid Bezvershenko, a senior Kaspersky GReAT expert, said in a comment to “Kod Durova”, the malware is under active development and support by its creators. He expects victim numbers to rise as the campaign’s geography widens. Experts advise downloading apps only from official stores, installing a reputable antivirus, and enabling file-extension display in Windows to avoid accidentally launching .EXE, .VBS or .SCR files. C2 addresses for crypto-stealing malware found on Spotify and Chess.com Researchers at Solar 4RAYS found that hackers hide the controlling servers for the MaskGram stealer in Spotify and Chess.com profiles.  MaskGram targets the theft of accounts and cryptocurrencies and can fetch additional modules. The malware collects data about the system, running processes and installed applications, and takes screenshots. It harvests information from Chromium-based browsers, crypto wallets, email clients, messengers and VPN apps. Attackers distribute the software via social engineering, posing as cracked versions of paid tools for mass checking of logins and passwords against leaked databases, such as Netflix Hunter Combo Tool, Steam Combo Extractor and Deezer Checker. According to experts, the malware uses the “dead drop” technique, or Dead Drop Resolver (DDR), which allows operators to store C2 information on public services and rotate it quickly. An infected machine reaches out not to a suspicious IP but to Spotify or Chess.com, mimicking ordinary user activity. The “about” field in a Chess.com user profile. Source: Solar 4RAYS. Each platform uses its own markers. For Chess.com, for example, it is the user profile’s about field. The extracted string is decoded into the server domain. In March, Aikido specialists documented the use of the dead-drop technique by the GlassWorm stealer in crypto transactions on the Solana blockchain. Hacker charged over $53m theft from Uranium crypto exchange  US prosecutors charged Jonathan Spalletta with stealing more than $53m from the Uranium Finance crypto exchange and laundering the proceeds. In April 2021, Spalletta (also known as Cthulhon) hacked the BNB Chain-based Uranium decentralized exchange (DEX). The shortfall forced the company to shut down. In February 2025, during a search, law enforcement seized valuables from the suspect’s home and restored access to cryptocurrency worth around $31m. According to authorities, Spalletta laundered the stolen assets through DEXs and the mixer Tornado Cash. He spent the proceeds on collectibles: a Magic: The Gathering “Black Lotus” card — ~$500,000; 18 sealed Alpha Edition Magic: The Gathering boosters — ~$1.5m; a complete first-edition Pokémon base set — ~$750,000; an ancient Roman coin minted to commemorate the assassination of Julius Caesar — over $601,000. He faces up to ten years in prison on computer-fraud charges and up to 20 years if convicted of money laundering. Researchers find updated seed-phrase stealer targeting Apple and Android Kaspersky Lab researchers found a new variant of the SparkCat cryptocurrency-stealing malware in the Apple App Store and Google Play Store, The Hacker News reports. The stealer masquerades as innocuous apps such as corporate messengers and food-delivery services. In the background it scans victims’ photo galleries for crypto-wallet seed phrases. Experts analyzed two tainted apps in the App Store and one in Google Play. They are aimed mainly at crypto users in Asia: iOS variant. Scans crypto-wallet mnemonic phrases in English. This approach makes the iOS version potentially more dangerous globally, as it can affect users regardless of region; Android variant. The updated version adds several layers of code obfuscation compared with earlier builds. It uses code virtualization and cross-platform programming languages to evade analysis. It also looks for keywords in Japanese, Korean and Chinese, underscoring a focus on Asia. Experts believe a Chinese- or Russian-speaking operator is involved. The threat is actively evolving, and those behind it have strong technical skills. European Commission confirms data breach after ShinyHunters attack The European Commission (EC) confirmed a data leak following a cyberattack on the Europa.eu web platform, for which the ShinyHunters extortionists claimed responsibility. The EC said the incident did not disrupt the portal’s operations and was contained. Although the Commission provided no details, the attackers told BleepingComputer they had stolen more than 350GB of data, including several databases. They did not reveal how they compromised AWS accounts but shared screenshots indicating access to some EC staff accounts. The group also posted on its dark-web leak site, claiming more than 90GB of files were taken: mail-server dumps; databases; confidential documents and contracts; other sensitive materials. Source: BleepingComputer.  Also on ForkLog: Solana project Drift Protocol lost $280m. CertiK warned of cryptocurrency-theft risks via OpenClaw. What to read this weekend? Drawing on research teams’ data, corporate reports and the state of play, ForkLog examines how brain–computer interface technologies are evolving.

forklog.media ZachXBT Criticizes Circle for Delays in Freezing $420 Million in Illicit USDC Funds

On-chain detective ZachXBT has criticized Circle for its unacceptably slow response to numerous cases of illegal activities involving the stablecoin USDC. 1/ Welcome to the Circle $USDC files.$420M+ in alleged compliance failures since 2022, including fifteen cases of the US-regulated stablecoin issuer taking minimal action against illicit funds. pic.twitter.com/OiWZz5MrVM— ZachXBT (@zachxbt) April 3, 2026 According to the analyst, the issue involves more than $420 million linked to suspicious or illegal transactions that were not promptly blocked. ZachXBT claims that the stablecoin issuer does not always promptly use the asset freezing mechanism, despite having the technical capability to intervene at the smart contract level. The researcher has compiled 15 such cases since 2022, including the recent hack of the DeFi project Drift Protocol involving $280 million. "The attacker used the CCTP protocol to transfer approximately 232 million USDC from Solana to Ethereum in over 100 transactions over six consecutive hours," noted ZachXBT. The hacker was able to launder funds through Circle's native cross-chain bridge without any USDC being frozen, he emphasized. According to findings by Diverg, TRM Labs, and Elliptic, the attack was attributed to the North Korean group Lazarus. ZachXBT's list includes several incidents to which the stablecoin issuer simply did not respond. For instance, in August 2022, the company had 30-45 minutes to freeze $45 million withdrawn from Nomad Bridge. In January 2026, perpetrators moved $13 million stolen from SwapNet over several hours. Circle ignored requests from on-chain researchers. "On May 22, 2025, the Cetus protocol was hacked for $223 million. The attacker used CCTP to transfer 61 million USDC from Sui to Ethereum in over 60 transactions within an hour and a half," wrote ZachXBT. Despite requests from the Cetus team and private experts to freeze the assets, Circle blacklisted the address only a month after the funds had been converted to ETH, the expert noted. "Circle builds good products, and I myself hold USDC. This post is not about hoping they fail. But the compliance decisions they have made have had serious consequences for real people," concluded ZachXBT. Back in March, ZachXBT accused Circle of mistakenly freezing 16 wallets as part of a civil lawsuit in the United States.

bitcoinist.com ‘The Circle USDC Files’: ZachXBT Finds $420M In Suspect Transactions, Weak Oversight

On-chain investigator ZachXBT has published a new report, titled “The Circle USDC Files,” alleging more than $420 million in compliance failures tied to the company’s USDC stablecoin since 2022.  The analysis, released on social media platform X on Friday, chronicles multiple high‑profile decentralized finance (DeFi) exploits in which Circle allegedly failed to use its on‑chain […]

bitcoinist.com USDC Exchange Inflows Spike To $778M—Largest Since Bitcoin’s ATH

On-chain data shows the Exchange Inflow indicator has shot up for USDC, something that could be relevant for Bitcoin and other digital assets. USDC Exchange Inflow Has Hit The Highest Level In Months As highlighted by CryptoQuant community analyst Maartunn in a new post on X, the Exchange Inflow recently observed a surge for Circle’s […]

news.bitcoin.com What Is Hermes Agent? Nous Research’s Self-Improving AI Explained

Nous Research’s Hermes Agent has cracked the one flaw Openclaw users complain about most: the artificial intelligence (AI) that forgets you exist by morning. Nous Research Hermes Agent: Open-Source AI With Built-In Self-Improvement Loop The MIT-licensed framework launched in February 2026 and collected 22,000 GitHub stars and 242 contributors within weeks. That pace reflects a […]

bitcoinist.com Metaplanet’s Q1 Buying Spree Earns It Top 3 Bitcoin Treasury Status

Tokyo-listed investment firm Metaplanet generated close to $19 million in operating revenue during the first quarter of 2026 from a Bitcoin options strategy that runs separately from its main treasury — and that money is being funneled back into buying more of the cryptocurrency. Related Reading: Bitcoin Could Be Taiwan’s Lifeline In Conflict, Think Tank […]

themerkle.com Ethereum Foundation Shifts Strategy Toward Staking, Which Signals Stronger Long-Term Confidence

The Ethereum Foundation is making a noticeable shift in how it manages its ETH holdings, and the market is paying attention. According to on-chain data tracked by Arkham, the Foundation has staked an additional $46.64 million worth of ETH, bringing its total staked position to around $96.59 million. At first glance, it looks like just another treasury move. But when you zoom out a bit, it starts to look like something bigger, a change in direction. For years, one of the recurring concerns around the Foundation has been its periodic ETH sales to fund operations. Those sales, while understandable, often The post Ethereum Foundation Shifts Strategy Toward Staking, Which Signals Stronger Long-Term Confidence appeared first on The Merkle News.

themerkle.com Circle’s $420M Compliance Gap Exposed As USDC Freeze Failures Raise Industry Concerns

A new report from on-chain investigator ZachXBT is putting Circle under intense scrutiny, alleging more than $420 million in compliance failures tied to its flagship stablecoin, USDC, since 2022. Dubbed the “Circle USDC files,” the report outlines a pattern of delayed or absent intervention in cases involving hacked or illicit funds. While other stablecoin issuers acted swiftly to freeze assets in similar scenarios, Circle is accused of repeatedly failing to act in time, even when given clear signals or direct requests from law enforcement and private investigators. 1/ Welcome to the Circle $USDC files. $420M+ in alleged compliance failures since The post Circle’s $420M Compliance Gap Exposed As USDC Freeze Failures Raise Industry Concerns appeared first on The Merkle News.

blockmanity.com Ultimate Infographic Guide: Major Web3 Events Shaping April 2026

Why April 2026 is a Game-Changer for Web3 and Crypto April 2026 brings a storm of big events in the Web3 world. Think macro policy shifts, new rules, token unlocks worth hundreds of millions, and top global conferences. These could […] The post Ultimate Infographic Guide: Major Web3 Events Shaping April 2026 appeared first on Blockmanity.

bitcoinist.com XRP’s Active Users Reach New Milestone, But Will Price Follow?

The XRP Ledger is recording some of the strongest network activity figures in its history. Daily active addresses have climbed back above 200,000, the number of daily transactions has set an all-time record, and the ledger’s total wallet count recently breached a threshold not seen in its 13-year existence.  On the other hand, the XRP’s […]

news.bitcoin.com SEC Warns Fake Officials Exploit Trust With Fraud Tactics Targeting Investors

SEC warns of rising impersonation scams using official branding and fake identities to exploit investor trust, highlighting growing risks tied to social media and text-based fraud schemes targeting financial data and funds. SEC Warns Investors About Impersonation Scams, Fraud Tactics The U.S. Securities and Exchange Commission (SEC) shared on social media platform X on April […]

blockonomi.com Why RWA Regulation Is the True Foundation of Tokenized Asset Infrastructure

TLDR: The tokenized US Treasury market hit $12B, far below the $6T traditional money market fund sector. Regulatory obligations follow the entities managing assets, not the tokens representing them onchain. Embedded compliance built into RWA protocols removes costly intermediary layers found in traditional markets. Major jurisdictions including the EU, Singapore, Hong Kong, and Japan are [...] The post Why RWA Regulation Is the True Foundation of Tokenized Asset Infrastructure appeared first on Blockonomi.

blockonomi.com Chainlink’s $42M LINK Transfer to Binance Sparks Caution as Whale Wallets Hit a One-Year High

TLDR: Around 4.9 million LINK tokens worth roughly $42M were transferred to Binance during a low-volume weekend session. A single wallet address was responsible for moving 2.5 million LINK directly to Binance in one concentrated transfer. Chainlink whale wallets holding 1M or more LINK grew from 100 to 125 between April 2025 and April 2026. [...] The post Chainlink’s $42M LINK Transfer to Binance Sparks Caution as Whale Wallets Hit a One-Year High appeared first on Blockonomi.

blockonomi.com Tokenized Real-World Assets Hit $27.65B as Ondo Finance Dominates Equities With 60% Market Share

TLDR: The tokenized RWA market reached $27.65B in April 2026, growing 4.07% while most crypto sectors contracted. U.S. Treasury debt leads the RWA market at $12.78B, nearly half the total, followed by commodities at $5.4B. Tokenized equities hit $941M with a $2.94B monthly transfer volume, marking an 85.78% jump in 30 days. Ondo Finance controls [...] The post Tokenized Real-World Assets Hit $27.65B as Ondo Finance Dominates Equities With 60% Market Share appeared first on Blockonomi.

blockonomi.com Best Crypto to Buy Now as the Search Leads to Pepeto With $8M Raised and 100x Before Binance Listing

The search led right here. The best crypto to buy now is not SOL at $80.49 grinding toward 36% or ADA at $0.24 waiting for a hard fork. It is a presale at millionths of a cent that raised more than $8 million during extreme fear because wallets found it before the crowd had reason [...] The post Best Crypto to Buy Now as the Search Leads to Pepeto With $8M Raised and 100x Before Binance Listing appeared first on Blockonomi.

bitcoinist.com Ethereum Foundation Just Changed Its Playbook. The Signal Is Hard to Ignore

Ethereum is trying to hold $2,000. The market is coiling for a significant move. And the organization that has been selling this asset for months has just changed what it is doing with its ETH. Data from Arkham Intelligence has confirmed a behavioral shift at the Ethereum Foundation that the market has been waiting for […]

news.bitcoin.com Coinbase Clarifies ‘We Are Not Becoming a Bank’ After Receiving Conditional OCC Nod That Hints at Bigger Moves

Coinbase’s OCC trust charter approval cements a federally regulated path for crypto infrastructure, with CEO Brian Armstrong clarifying it is not becoming a bank as the firm advances institutional custody ambitions without entering traditional lending or deposit activities. Coinbase OCC Trust Charter Signals Federal Crypto Oversight Shift Crypto exchange Coinbase (Nasdaq: COIN) said it is […]