Classified News

⚠ JUST IN: Arbitrum has frozen 30,766 ETH ($71M+) linked to KelpDao North Korean exploit. Arbitrum has taken emergency action in coordination with law enforcement to transfer the funds to a temporary frozen wallet. The attacker no longer has access to the stolen funds, and any next steps will be handled through Arbitrum governance. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ UPDATE: Rhea Finance attacker has returned 100% of all stolen funds back to protocol. Following the incident, over $18M taken across multiple chains has been returned by the attacker, an uncommon resolution in cases of this scale. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Per ZachXBT, a crypto whale was drained out of $280M+ across Ethereum and Arbitrum. The stolen money was moved into a fresh wallet an hour ago, and is believed to be the result of a social engineering compromise 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠UPDATE: The attacker behind Rhea Finance has been identified and has started returning the stolen funds. The Near Intents team was able to identify the attacker after a centralized exchange (CEX) revealed the owner’s identity, leading to the return of partial stolen funds. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Rhea Finance releases a detailed article and confirms they were drained out of $18.4M. The team has revealed that the attack was carefully planned over a two-day period, during which approximately $18M was stolen from the protocol. Since then, the attacker has returned $5M to the protocol, while $3.3M has been frozen by Tether. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ UPDATE: Hyperbridge revises its April 13 exploit losses from $237k to $2.5M. The Hyperbridge team initially reported $237K in losses, with total losses now exceeding $2.5M across Ethereum, Base, BNB Chain, and Arbitrum. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: CoW Swap attack has already resulted in $1M+ being drained across a few wallets. Several victims have already been affected by the malicious crypto drainer, with the largest on-chain single loss so far being ~$630k USDC. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: CoW Swap has been compromised with a drainer attached to the site. CoW has confirmed its frontend was compromised, allowing a malicious crypto drainer to target users interacting with the platform. Users are advised to immediately revoke all approvals made today. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Crypto exploits and phishing caused ~$482M in losses across 44 incidents in Q1 2026. Over the past three months, 44 major incidents led to ~$482M in crypto losses, with $306M stemming from social engineering and phishing attacks targeting users. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Per ZachXBT, a fake Ledger Live on the Apple App Store drained $9.5M from 50+ victims. Apple removed the fake app yesterday, which operated for just five days and stole $9.5M from 50+ victims across multiple chains. The three largest victims lost seven figures each, the stolen funds were then laundered through KuCoin. Top losses: April 8 - $1.95M April 9 - $3.23M April 11 - $2.08M 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: A Hyperbridge contract on Ethereum has been exploited for 1B Polkadot Tokens (~$236k). The attacker minted 1 billion DOT by exploiting a Hyperbridge contract and then swapped the tokens through Uniswap, but due to low liquidity, the attacker only received 108 ETH ( ~$236k). 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: A crypto whale lost 5.92 BTC (~$400k+) after installing a malicious "Ledger" app from the Apple store. A fake Ledger Live app on the App Store is prompting users to “recover” their device by entering their seed phrase, allowing attackers to gain full access to their funds. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Rockstar Games confirms a data breach through their partner Anodot. The ShinyHunters hacking group threatened to leak company data after gaining access through a third-party breach; however, the material is only limited to GTA 6’s economic data and future plans for the game. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Elon Musk and Pavel Durov says WhatsApp's end to end encryption is compromised and fake. Both CEOs state that WhatsApp misleads users about its end-to-end encryption, even going as far as to read users’ messages and share data with third-party companies. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Fragment has removed KYC for buying and selling usernames. Users are no longer required to complete KYC to bid on and sell usernames on Fragment, including the ability to transfer Telegram gifts onto the blockchain. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: FBI confirms Americans lost a record ~$11.36B to crypto-related fraud in 2025. Per the FBI, social engineering and customer support impersonation were among the most effective methods used for theft, resulting in over $2B in crypto stolen throughout the year. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Drift Protocol has released a detailed report on how the $280M attack was staged over 6 months. The hackers built trust by meeting Drift Protocol in person at a crypto conference, and over the next six months, they worked on integrations and invested over $1M to appear legitimate. In the end, the attackers shared a malicious software that compromised an admin, ultimately leading to the theft. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: ZachXBT releases “USDC Files” after ~$420M was stolen since 2022 Per ZachXBT, the USDC contract has a freeze and blacklist function, yet funds tied to exploits and hacks have not been frozen over the past 4 years. Over $400M+ in USDC has been successfully laundered as a result of this lack of action. Even in the recent $280M Drift Protocol exploit, the attacker moved funds for 6 straight hours, including through Circle’s native bridge, without any USDC being frozen. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: The official Trust Wallet Discord vanity was hijacked. The official Discord invite being advertised by Trust Wallet has been compromised and has been placed on a fake server, redirecting users to a phishing site when joined. 💧 Sponsored by @rainbetcom — rainbet.com @Classified

⚠ JUST IN: Drift Protocol has confirmed the hack on their official X page. Drift Protocol says they’re currently investigating the exploit and warns users not to deposit any funds, adding that this is not an April Fools’ joke and to proceed with caution. 💧 Sponsored by @rainbetcom — rainbet.com @Classified