Evaders

Newsview Daily Jackpot Pot: 🪙 3 — a slice of every win, drawn tonight. Yesterday's top chatters: 1. WardenMaxFive — 376 msgs (+🪙 30) 2. pironcorp — 294 msgs (+🪙 20) 3. 𝘚𝘢𝘮𝘢𝘦𝘭 — 224 msgs (+🪙 10) The month's top chatters win real cash: $40 / $20 / $5 (and it scales as we grow). Spam won't win it: gibberish and bot activity are auto-filtered, and winners are hand-reviewed before any payout. Grab your free daily points two ways: tap Claim in the app, or /claim once you're in the chat group. Then chat to earn more, gamble at /dice /flip /slots /duel, and redeem for Telegram Stars, Premium and a $100 crypto prize. Jump into the chat and games below.

🚨SlowMist TI Alert🚨 💸 Loss: 14.411518807585587 ETH 🔍 Root Cause: Storage slot collision between ATOHook.rewards mapping slot and Solady ReentrancyGuard fixed slot (0x02215292eb9609279094554c6e223f800950648ddfa3da30329838d6c170928d). The nonReentrant modifier in getReward() writes sentinel value 0xffffffffffffff to the guard slot, which is simultaneously read as rewards[attackContract] due to the collision. This inflated reward is paid as ETH each call, allowing 200 repeated claims. 📌 Attacker (EOA): 0x2d2aafc193c24e59bd16139056ac9b4df4d37ad0 📌 Victim Contract: 0xa10de71ddb4e0d51938ef6e0118822e157a62888 📌 Attack Contract: 0x2441e480f62bf609a08da09143e4baf8a817d757 Storage collision between reward accounting and reentrancy guard enables unlimited reward drainage. Powered by #SlowMist.AI via x.com/SlowMist_Team The reentrancy guard was literally paying the attacker to trigger it, 200 times. 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

ZachXBT Flags JuCoin Over Withdrawal Issues and Reserve Concerns ZachXBT said multiple users have reported withdrawal issues on JuCoin over the past week. He also questioned the exchange’s reported $511 million reserves, alleging most consist of USDC and USDT issued on its own JuChain without clear backing. ZachXBT further noted JuDAO suffered a $20 million incident in 2025 and a $225,000 exploit in April 2026, while JuCoin attributed the delays to platform upgrades and restructuring. via x.com/WuBlockchain $511M in reserves where most of it is stablecoins they printed on their own chain is not reserves, that's a screenshot of a number. "Platform upgrades and restructuring" is doing a lot of heavy lifting when Zach's already walking through the receipts. Two incidents and a withdrawal freeze and they're still in the upgrades explanation.

UPDATE: Following the exposure of the fake @dices sale that resulted in a user losing $5,000, @side (Khaos) has started accusing virtually everyone around him of being scammers — including Telegram-related staff, Major, verification providers, and community members. His latest position appears to be simple: everyone is a scammer except him. The community is still waiting for one thing only — the return of the victim's $5,000. SOURCE @godspeed

Just in⚠️: A verified member + @Major staff (@side) has scammed @ton4life for 5000💲! All proofs of him scamming can be found here: https://t.me/khaosdwc. DO NOT DEAL WITH HIM until everything is figured out. SOURCE @OGULounge! 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

Weekly Project Updates: Hyperliquid Perp Volume Hits Record, Radiant Capital Prepares Shutdown, Polymarket suspects industrial espionage from Kalshi, Hacker Drains Kelp DAO Bridge Funds, etc via x.com/WuBlockchain Radiant prepping shutdown while Kelp gets drained and Polymarket thinks Kalshi sent a spy, genuinely just a normal content week in this industry. Hyperliquid perps are the only green in the whole roundup and even that feels ominous at this point. You're here for the carnage, might as well get paid for it. Earn points just for being active, then cash them in for Telegram Stars, Premium, even a $100 crypto prize. Open 💀 The Damage to start.

JUST IN: 🇺🇸 $1.75 trillion wiped out from the US stock market today. $130,000,000,000 wiped out from the crypto market cap. via x.com/WatcherGuru Crypto was supposed to be the hedge and it just caught the same cold as everything else, on a Monday, before lunch. $1.75T gone from stocks, $130B gone from crypto, and somewhere a boomer is nodding so hard his reading glasses fell off.

$5.4M gone from @gravity_bridge. An attacker minted worthless tokens on Osmosis, poisoned the token registry with a fabricated denom string, and walked out with real assets. They didn't break the code. They just found where it stopped asking questions. via x.com/RektHQ The registry trusted a string it never should have met. 🪤 Attacker minted garbage tokens, slipped a fake denom into the registry like a counterfeit bill in a vending machine, and collected $5.4M in real money on the way out. The code didn't fail. It just never learned to be suspicious.

🚨 SlowMist TI Alert 🚨 A new Rust-based supply-chain malware campaign, IronWorm, actively targeting developer environments and Web3/crypto ecosystems via malicious npm packages. Potential attacker actions include credential theft, wallet seed and password theft, GitHub repository tampering, malicious package publishing, CI/CD secret exfiltration, Tor-based command-and-control, and stealth via an eBPF rootkit. Security teams should audit repositories for backdated commits, suspicious branches, unexpected build hooks, and commits attributed to automation-like identities such as claude, dependabot, renovate, or github-actions. Remove or deprecate affected package versions, publish clean releases, rotate all exposed secrets and tokens, review GitHub Actions artifacts, and rebuild potentially compromised developer or CI systems from clean images. Thanks to @JFrogSecurity for the discovery… via x.com/SlowMist_Team Devs really said "let's build the financial system of the future" and left the door unlocked, the windows open, and a welcome mat that says npm install trust-me. IronWorm doesn't need to be clever, it just needs you to not check your build hooks. Rotate your secrets, or don't, the malware already has them. 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

#CertiKInsight 🚨 We have seen an exploit of ~$243K on ATM token. The transferFrom() includes logic to swap 20% transfer amount of ATM for BSC-USD, so the attacker can repeatedly swap out extra after transfer. Stay vigilant! via x.com/CertiKAlert Someone shipped a transferFrom() that hands out a 20% bonus to anyone clever enough to loop it, and yes, people did loop it. $243K gone because the ATM token's core function was basically a coupon that never expires.

⚠️JUST IN: Meta and Coinbase are directly working with the FBI to arrest online scammers. So far, law enforcement has arrested 60+ suspected threat actors, Coinbase has seized over $3M in stolen crypto, and Meta has disabled more than 1.4M accounts linked to scam activity. SOURCE @DWCusers 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️JUST IN: Instagram appears to be reverting usernames that were claimed through an exploit. Multiple handles obtained via the PATCHED exploit are currently being returned to their rightful owners. SOURCE / @DWCusers

❗️JUST IN: EARLY APOLLO ABOUT TO EXIT FOR $1300 BTC ⚠️ LINK - https://oguser.com/Thread-Ghosted-from-Hawk OP sent $1.3k btc to @/Hawk (early apollo rank, 327 reputation, 33 deals) to buy some twitchcon cape codes. @/Hawk confirmed the payment and started immediately stalling. It's been 5 days with @/Hawk being active on tele, but ghosting. ❗️ go first to an early apollo in 2026 huh? ❗️DWC, @/Hawk is likely exiting on more people as of this moment  ⚠️

📢 JUST IN: UK FCA: Football Clubs Face Legal and Money Laundering Risks From Unauthorized Crypto Sponsors Reuters reported that the UK Financial Conduct Authority warned Premier League and other football clubs that sponsorship deals with unauthorized crypto firms and trading platforms could expose them to legal liability, money laundering risks and reputational damage. The FCA said some unauthorized firms may be using high-profile club sponsorships to promote products to football fans despite not being allowed to operate in the UK, and has urged clubs to strengthen checks on their partners. Source： via x.com/WuBlockchain Zero trophies, zero FCA registration, but somehow still on the sleeve. 🦺 The FCA is reminding Premier League clubs that "they paid us well" is not a compliance framework, and that laundering money through a stadium sponsorship is still laundering money. Turns out due diligence doesn't care how many followers your shirt sponsor has.

⚠️JUST IN: A victim lost ~$310K after connecting their wallet to a fake crypto exchange The malicious site tricked them into connecting their wallet, which allowed the attacker to drain the funds shortly after. SOURCE @DWCcove 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️V12sec, AI cybersecurity agency, reported critical vulnerability to Thorchaij but got jewed On April 28th security researchers from V12sec, discovered critical vulnerability in Thorchain that could lead to $32mil in loses Despite it being so critical, Thorchain refused to pay, citing that "the bounty program is retired" SOURCE @DWCupdate 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

❗️JUST IN: VERIFIED @/R5 BANNED OVER $1250 ( AGAIN ) 🇮🇳 Link - https://oguser.com/Thread-VERIFIED-R5-EXITS-FOR-1250-IG-CLAIM Staff member @/bevo made a good job by throwing thrash out ❗️If @/R5 gets unbanned and still remains verified, I will make a petition for /bossed to get unbanned as well 🤡 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️WARNING: Any “method” being sold or leaked for claiming 1L usernames is a scam. Only @e, @f, and a few other 1L usernames were claimed and secured through an unknown employee. There is no public method, exploit, or process to obtain them. Anyone claiming they have a working method is lying to your face and trying to scam you. SOURCE @DWCusers 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

⚠️ It seems a new instagram exploit just came up with @e and @f being claimed around 20 minutes ago SOURCE @FEDS 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.

❗️JUST IN: APOLLO HAS JUST EXIT'ED FOR $23 000 ⚠️ Link - https://oguser.com/Thread-poor-fag-scams-21k OP sent $21 000 in Monero to @/Cortisol (apollo rank, 667 reputation, 129 deals, 2020 reg date) to exchange for a wire transfer, @/Cortisol received it and immediately blocked and cleared chat with OP. | Another scam instance involves @/Cortisol receiving $1750 zelle on an exchange and scamming out right after. $22 750 total scammed ❗️Be careful, @/Cortisol is likely exiting on more people as of this moment ⚠️ 💧 Exclusive Giveaways & Rewards USE CODE: evaders On Sign Up. If your location is restricted use a VPN.