Ripple paid Veria Labs the $250,000 program maximum for an XRP Ledger bug that could have minted about 18.45 trillion XRP. ZachXBT called the sum too small and warned it could tempt the next finder to exploit instead of report.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 30%
- Investor
- Investor 42%
Reality
- Evidence60
- Adoption80
- Hype gap+25
- Incentives60
- Confidence62
ZachXBT paid a Chinese laundering network 5% an order to trace $12M in stolen Bybit funds
Investigator ZachXBT posed as a paying client of a Chinese laundering network and traced more than $12 million of North Korea's stolen Bybit funds. The trace covers under 1% of the roughly $1.5 billion taken, so the broker proved reachable even as recovery stayed small.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence40
Manhattan federal jurors convicted Jonathan Spalletta of computer fraud and money laundering over the $53.3 million Uranium Finance exploit of 2021. Where the roughly $31 million in crypto seized in February 2025 ends up now turns on restitution and forfeiture rulings still to come.
Perspective Coverage
10 publishers
- Builder
- Builder 30%
- Operator
- Operator 42%
- Investor
- Investor 28%
Reality
- Evidence85
- Adoption
- Not scored
- Hype gap+8
- Incentives40
- Confidence78
ZachXBT says he fronted $349.7K in USDC to pose as a client of the Chinese syndicate laundering North Korea's Bybit haul. The only recovery on record, a 442K USDT freeze by Tether, covers at most 3.7% of the $12M+ cluster he says the sting exposed.
Perspective Coverage
8 publishers
- Builder
- Builder 15%
- Operator
- Operator 54%
- Investor
- Investor 31%
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+35
- Incentives40
- Confidence55
NEAR Intents got back all $3.8 million drained through a bug between its Omni deposit-and-withdrawal layer and its contract, after encrypted talks. Whether that layer is safe now rests on the patch, since every user who lets the protocol choose a bridge depends on it.
Perspective Coverage
4 publishers
- Builder
- Builder 31%
- Operator
- Operator 45%
- Investor
- Investor 24%
Reality
- Evidence74
- Adoption55
- Hype gap+15
- Incentives60
- Confidence72
Near Intents halted its cross-chain swap service after a bug in its Omni deposit layer let an attacker take about $3.8 million. Crypto balances carry no deposit insurance, so affected users are relying on the operator's promise to repay them in full.
Perspective Coverage
5 publishers
- Builder
- Builder 23%
- Operator
- Operator 44%
- Investor
- Investor 33%
Reality
- Evidence70
- Adoption55
- Hype gap+15
- Incentives60
- Confidence65
Suspected North Korean hackers have moved $3.8 million of Bitget's $387.5 million into Zcash's shielded pool, about 1% of the haul. About $24 million of stolen ZEC remains in transparent addresses that exchanges and police can still freeze.
Reality
- Evidence64
- Adoption
- Not scored
- Hype gap+12
- Incentives50
- Confidence60
Grayscale's Zcash fund loses a tenth of its net inflows in a single day
Grayscale's Zcash ETF recorded a $30.25 million net outflow on Sept. 30, leaving cumulative net inflows near $268 million. With ZEC 21% below its late-September peak, the next flow prints will show whether the fund's buyers stay with the coin after its run.
Reality
- Evidence45
- Adoption35
- Hype gap+10
- Incentives
- Not scored
- Confidence45
Bitget CEO Gracy Chen expects to recover little of the $388 million stolen from the exchange, citing Bybit's 3.5% freeze rate. On that benchmark about $13.6 million is frozen within a year and roughly $374 million stays with whoever carries the loss.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence50
Wallets tied to the $387.5 million Bitget hack moved 2,746 ZEC, about $3.9 million, into Zcash's Ironwood shielded pool on September 30. The deposit is about 1% of the theft, and across every route tracked so far roughly 13 dollars have gone dark for each dollar frozen.
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence65
Revolut released customer data to a request that only looked official
Fraudsters posing as a verified government requester tricked Revolut into handing over sensitive records on about 640 customers. The breach defeated a human process.
The exchange reports $5.36m of reserves, most of it its own token, against CoinMarketCap volume of $272.6m. The proof-of-reserves report it promised in May is now 90 days late.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+45
- Incentives60
- Confidence50
Prosecutors valued the take at 4,100 bitcoin, more than $245 million, drained after one Washington holder granted Google Drive access and read out security codes; every other victim named in the case totals about $14.8 million.
Perspective Coverage
5 publishers
- Builder
- Builder 19%
- Operator
- Operator 49%
- Investor
- Investor 32%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence64
Revolut says an impersonation scam used a legitimate government agency domain to ask for customer records, and the fix it has described is blocking one email address. It has not said how many customers were affected.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence55
The request came from an unauthorized account on a real government domain, and Revolut acted on it. The company calls the number of affected customers limited, and it declined to say how many or name the agency.
Perspective Coverage
5 publishers
- Builder
- Builder 23%
- Operator
- Operator 55%
- Investor
- Investor 22%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence66
The fraudulent request passed domain authentication because it genuinely came from the agency's mail domain, sent by an account the agency had not authorised. Revolut found out only when it called the agency to check.
Perspective Coverage
8 publishers
- Builder
- Builder 11%
- Operator
- Operator 70%
- Investor
- Investor 19%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+5
- Incentives55
- Confidence66
The group calling itself iamnotavillain wants 6,000 Monero within 24 hours and Revolut says no demand has reached it. The data went out through a government email account the bank was obliged to answer.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 51%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence55
Investigators traced a $240m bitcoin theft to a $47,500-a-month rental in Encino
The 4,100 coins left a Washington wallet after two callers talked their way into the holder's Google Drive, and the arrests followed an exchange signup made from a home IP plus a month of spending loud enough to advertise itself.
Reality
- Evidence62
- Adoption68
- Hype gap−6
- Incentives45
- Confidence58
Eighteen defendants are charged over the August 2024 heist, and the alleged ringleader reaches a plea agreement hearing on Tuesday. Prosecutors describe laundering built to hide the money, but one account signup exposed it.
Reality
- Evidence64
- Adoption78
- Hype gap+15
- Incentives58
- Confidence66
A $47,500-a-month rental's IP address broke one of the largest bitcoin thefts in US history
Malone Lam's plea hearing closes a case that started with a phone call and unravelled over a nightclub tab, at a moment when FBI crypto fraud complaints have risen nearly 50% and the DOJ's crypto unit is gone.
Reality
- Evidence62
- Adoption70
- Hype gap+25
- Incentives58
- Confidence60