on-chain
Dormant 2013 wallet named in Noah Doe lawsuit moves 411.45 BTC
A Bitcoin address funded on September 11, 2013 and tagged by Galaxy Research as 'Noah Doe #970' moved 411.45 BTC (~$33.4M) on October 18 — its first-ever outgoing transaction.
Stories tagged: #on-chain
exploit
Qubic halts network after 1,404 wallets drained via weak iOS seeds
Attackers drained 2.94T QU (~$1.3M) from 1,404 Qubic wallets created with weak 55-character seeds in Safari and the iOS app; validators halted the chain at tick 85,371,949.
on-chain
Chip-stock perp liquidations hit $52M in 10 minutes with Wall Street shut
Round-the-clock chip-stock contracts on Binance and Trade XYZ (Hyperliquid) saw ~$51.6M forced-closed between 21:22 and 21:32 UTC on Saturday with no U.S. share price to anchor them.
regulation
El Salvador's Bitcoin reserve reaches 7,807 BTC despite IMF buy limits
The National Bitcoin Office's public wallets held 7,807 BTC on October 16, up from ~6,070 BTC when a $1.4B IMF program began in early 2025. The IMF attributes recent additions to private donations.
on-chain
Uniswap books $14.81M in September fees, Robinhood Chain delivers 53%
Token Terminal data compiled October 17 pins Uniswap's September 2026 fee take at $14.81M, with Robinhood Chain alone contributing roughly $7.8M at a 0.465% capture rate.
regulation
Brooklyn DA, FBI disrupt 112 servers behind Russian-language crypto fraud network
Brooklyn DA Eric Gonzalez's office and the FBI seized or disrupted 112 servers and 241 websites behind a crypto fraud scheme targeting Russian speakers; $300k recovered of tens of millions stolen.
regulation
Taiwan court blocks Coinbase and Kalshi over suspected election betting
A New Taipei District Court on Oct. 15 authorised blocks on Coinbase and Kalshi after the Criminal Investigation Bureau cited the Public Officials Election and Recall Act; Nov. 28 local polls loom.
on-chain
Covid-era wallet moves 4,582 BTC worth $378M to five addresses
A dormant wallet that received 4,582 BTC on March 3, 2020, split them across five addresses on October 12. Arkham and mempool.space data confirm the transfer; recipients have not moved coins.
regulation
UK High Court: Chinese law governs claims to 61,245 seized BTC in Qian Zhimin case
Mr Justice Mark Turner rules Chinese law applies to victim claims over 61,245 BTC (about $5.1B) seized from Qian Zhimin's London accounts. Fieldfisher is appealing.
exploit
Ledger-theft funds swap into USDD on SUN.io, past Tether's freeze reach
On-chain tracing by Specter and MistTrack shows the Ledger / CryptoBilis cluster swapping USDT for USDD through SUN.io on October 9, moving the stolen float onto a stablecoin Tether cannot blacklist.
on-chain
ZachXBT fronts $349,700 to infiltrate Chinese launderers linked to Bybit hack
On-chain investigator ZachXBT ran six months of controlled transactions through a Chinese OTC syndicate operating for Lazarus, surfacing a Tron collection address and a $12M Bybit-linked cluster.
exploit
Base vault loses 1,783 wstETH ($6M) after multisig signs attacker twice in 90 seconds
An unidentified Base vault's 3-of-7 Safe approved an attacker contract, let it drain 1,783 wstETH via Aave V3, then re-approved it — $31.7M still exposed under the same multisig.
protocol
Metaplanet sold 10,000 BTC and bought back 11,000 in Q3 to prove liquidity
Metaplanet disclosed a Q3 round-trip of 10,000 BTC sold for ¥124.7B and 11,000 BTC repurchased for ¥149.9B — a net +1,000 BTC to 44,000, framed as a liquidity demonstration to rating agencies.
protocol
Strategy books $20.9B Q3 fair-value gain, buys 334 BTC, repurchases $176M of STRC
Strategy's October 5 filing reports a $20.91B Q3 fair-value gain on bitcoin, a 334-BTC purchase for $28.7M between September 28 and October 4, and $176.3M of STRC preferred-share repurchases.
regulation
Treasury designates two France-based charities over $2M Hamas crypto fundraising
OFAC added Association Baraka, Ensemble C Mieux and three individuals to the SDN list for routing over $2M to Hamas Al-Qassam Brigades between 2020 and 2026, part via cryptocurrency transfers.
on-chain
Binance's SAFU fund now holds 15,000 BTC at $1.27B, ~$270M in the money
Binance's insurance reserve, converted from stablecoins in February, sits at roughly $1.27B against a $1B cost basis. The wallet is public and verifiable on-chain.
on-chain
Ethereum exit queue hits 850K ETH as MetaMask drives 61% of 2026 high
Beaconcha.in puts the ETH exit queue at 850,736 ETH on Oct 2, a ~14.77-day wait. MetaMask Staking's precautionary exits account for ~523,000 ETH across 17,000 validators.
exploit
NEAR Intents recovers full $3.8M after 48-hour ultimatum to exploiter
General Manager Alex Shevchenko issued a public 48-hour deadline on X; the attacker returned the funds and NEAR Intents closed its investigation on October 4.
regulation
Philippine Court of Appeals freezes 25 crypto wallets in flood-control plunder probe
The AMLC-driven freeze covers 86 bank accounts, four investment accounts, one insurance policy and 25 virtual-asset wallets tied to an unnamed lawmaker under Republic Act 7080.
on-chain
Tokenized stocks on Solana cross $12.4B YTD DEX volume, Raydium carries 90%
Solana spot DEXs have cleared $12.4B of tokenized-stock volume in 2026, with xStocks dominant and Raydium routing more than 90% of the flow.
exploit
Chainalysis attributes $387M Bitget heist to DPRK, pushing 2026 crypto theft past $1B
Chainalysis formally pins the September Bitget hack on North Korea-linked actors, says in-house AI compressed 20 hours of bridge reconciliation to minutes. Bitget publicly credits Near Intents.
protocol
Hyperliquid routes first $14.5M USDC reserve yield to HYPE buybacks under AQAv2
AQAv2's first Assistance Fund payment lands on October 3, 2026 — ~$14.5M in USDC reserve yield routed to HYPE buy-and-burn, on top of the trading-fee buyback engine.
on-chain
TRUMP team wallets have deposited 81.87M tokens to Binance and OKX over 8 months
Arkham and Ember Monitoring tag $249M of TRUMP sent from team-attributed wallets to Binance and OKX since February; the team still holds 71.8% of supply.
exploit
Bitget attacker moves 2,700 ZEC to Zcash Ironwood after Near SHIELD rejects $50M in swaps
ZachXBT flags 2,700 ZEC (~$3.8M) into Zcash's Ironwood shielded pool after Near Intents' SHIELD system blocks $50M of the Bitget hacker's cross-chain swaps.
exploit
Ostium halts Arbitrum trading after OLP vault drained via oracle signer key
An attacker used a compromised Ostium oracle signer to push future-dated prices through the protocol's PriceUpKeep forwarder on July 15, draining $18–24M from the OLP vault.
on-chain
US government moves $288M in seized BTC and ETH to Coinbase Prime
Arkham data shows ~3,800 BTC and 30,007 ETH — from the Ryan Farace, BTC-e and Brian Krewson cases — reached Coinbase Prime on July 13, testing the Strategic Bitcoin Reserve no-sell posture.
exploit
Summer.fi loses $6M as attacker manipulates FleetCommander totalAssets()
A flash-loaned donation to Summer.fi's Ark inflated FleetCommander.totalAssets() and let an attacker redeem $70.9M from a $64.8M deposit. Lazy Summer vaults paused; funds are moving to Tornado Cash.
regulation
OFAC lists 134 ISIS-K crypto wallets; Tether freezes 131 TRON
OFAC added 134 wallets tied to ISIS-K to the SDN list on July 1: 131 TRON, 3 Monero. Tether froze the TRON balances within hours; the Monero side stays out of reach.
exploit
Polymarket frontend vendor compromise drains ~$3.1M in PUSD from 11+ user wallets
A poisoned JS dependency on Polymarket's frontend drained ~$3.1M in PUSD from 11+ wallets on June 25, swapped into ~1,893 ETH. Contracts untouched; refunds promised.
on-chain
ZachXBT flags AscendEX: stalled withdrawals, hot wallets thin on ETH, USDT, SOL
On June 26 the on-chain investigator said the BitMax-era exchange's known hot wallets on Arkham and TRM lack large-cap reserves. AscendEX has not responded.
exploit
Taiko halts L2 block production after bridge proof-verification exploit
Taiko's chain state verification was compromised on June 22; proposers stopped producing blocks, the ERC20 Vault on Ethereum was drained for an estimated $1.7M, and all bridges are flagged unsafe.
exploit
Jaredfromsubway.eth MEV bot drained for $7.5M in counter-MEV trap
Attacker farmed approvals from Ethereum's largest sandwich bot using 66 fake WETH/USDC/USDT tokens, then swept ~1,474 WETH, 2.87M USDC and 2M USDT in a single sweep tx.
exploit
Aztec Connect's deprecated RollupProcessorV3 drained for $2.19M via ZK proof boundary mismatch
On June 14, an attacker exploited a numRealTxs vs decoded_slots gap in Aztec Connect's immutable rollup contract and drained 909 ETH, 270,513 DAI and 167.89 wstETH.
exploit
Raydium loses $1.34M as forged LP mint drains 5 legacy AMM V3 pools
An attacker minted a counterfeit LP token, called withdraw on Raydium's deprecated AMM V3 program, and drained 150,177 RAY, 5,603 SOL and 893,700 USDC from 5 Serum-era pools.
on-chain
Whitehat unlocks 1,003 ETH stuck in 2016 HongCoin ICO contract
Researcher 0xFlorent_ found an integer-overflow path in the HongCoin admin function and unlocked 1,003.62 ETH (~$2M) trapped in the 2016 ICO refund contract for nine years.