Classified News

⚠️ JUST IN: North Korea’s Lazarus Group just closed out the most devastating six months in crypto hacking history - stealing more than every other criminal actor on earth combined. A July 29 report from blockchain security firm Blockaid counted 212 exploits draining $1.1 billion in H1 2026, the worst half-year on record. Lazarus took $643 million of it — 66% of global losses - anchored by a $292 million strike on KelpDAO and $285 million on Drift Protocol. They’re far past crude exchange hacks now: AI deepfakes to clear KYC, executive impersonation to authorize transfers, custom malware paired with DeFi oracle manipulation. Every sanctions package built to starve Kim Jong Un of weapons money has the same gap — and no regulator has a patch. 😀 @Classified

⚠ UPDATE: jaredfromsubway has offered a 50% white hat bounty to the exploiter. In an on-chain message to the exploiter, it was stated that all law enforcement involvement and recovery efforts will be called off if 2150 ETH is returned within 48 hours. @Classified

⚠ JUST IN: The most popular MEV bot jaredfromsubway has been drained for over $15M. The attacker swapped the stolen funds for 4.4k ETH (~$7.6M) and has already deposited 1k ETH (~$1.9M) into Tornado Cash. @Classified

⚠ JUST IN: Toncoin will officially be renamed to Gram. TON’s native token was renamed from Toncoin back to Gram, its original prototype name, with multiple centralized exchanges and wallets already beginning the transition to the updated branding. @Classified

⚠️ JUST IN: Trenton Johnson and Yelotree have pleaded guilty to social engineering $13M after impersonating Google and Trezor support. Trenton forfeited $3.9M last week after spending two months in custody and is now cooperating with federal authorities. Yelotree was charged with helping threat actors launder funds through his Miami rental car business and faces up to 30 years in prison. @Classified

⚠️ JUST IN: Nine threat actors have been apprehended in the UAE and is being reportedly tortured. These nine individuals who have a past of sim swapping and draining have been in Dubai flexing expensive watches, partying with models, showing off expensive cars, etc. The full extent is currently unknown, however reports indicate they were beaten, had fingers broken, and teeth pulled while in UAE detention. @Classified

⚠️ JUST IN: Ritual (@Ritual) has returned after a year of absence. Following nearly a year of inactivity after an OGU ban related to a $20K Twitter username, Ritual has returned and has started posting proxies in his channel. @Classified

⚠️ JUST IN: Zcash security researchers discover exploit through Claude AI allowing unlimited ZEC creation. Researchers have no way to prove whether the exploit had been exploited already due to ZEC's privacy properties. @Classified

⚠️ UPDATE: All exploited Instagram usernames have been fully reverted back to their original placeholders. The exploit allowed full access to any account, leading to numerous high-tier usernames being swapped and quickly sold. @Classified

⚠️ JUST IN: May 2026 recorded more than 3,863 wallets compromised by wallet drainers. Compared to April, suspicious approvals increased, while total losses fell from $1.58M to $835k. The largest loss also dropped significantly, from $517k to $51k. @Classified

⚠️ UPDATE: Biggest Instagram exploit bypasses 2FA and allows full access into any account. What appears to be the biggest Instagram exploit ever has led to $5M+ in account value being hijacked, with rappers and other high-value accounts being locked out every minute. The exploit is still ongoing, despite hours of ongoing abuse and can bypass 2FA. @Classified

⚠️ JUST IN: Instagram exploit allows access into any account Per Cupid MM, an Instagram exploit is circulating that allows unauthorized access to accounts, with high-value users being the primary targets. It is recommended to add 2FA and to temporarily disable you accounts to avoid hacks until this issue is resolved. @Classified

⚠️ JUST IN: Gravity Bridge was exploited with $5.4M+ stolen. The hacker has laundered a portion of the stolen assets through ChangeNow & Binance, and is still holding 2,024 ETH (~$4.1M). @Classified

⚠ JUST IN: DxSale DeFi has been exploited for ~$7.3M. The vulnerability sat unnoticed in DxSale’s legacy locker contracts for 9 months before an attacker began draining funds from abandoned 2021 memecoin liquidity pools. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified

⚠ JUST IN: New York has arrested an Inside Trader on Polymarket that profited over $1M+ Earlier this morning, Polymarket announced the second arrest tied to insider trading in the industry, with the suspect maintaining a 100% win rate on Polymarket. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified

⚠ JUST IN: A contract on Ethereum has been exploited for ~$3.2M. An exploiter was able to steal ~$3.2M from 86 Gnosis Safes in less than 2 hours. All stolen tokens have been swapped to DAI via Uniswap V3 pools. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified

⚠ JUST IN: Binance Founder CZ denies rumor claiming he went missing after being swept away by a rip current in Dubai. CZ states nothing has happened after posts circulated on Telegram and related apps falsely claiming he had gone missing. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified

⚠ JUST IN: A crypto whale lost 231 BTC (~$18.8M) on May 14. Per ZachXBT, threat actors linked to “The Com” have claimed responsibility for the theft to attract more callers, though the claims appear illegitimate due to Russian-linked laundering indicators. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified

⚠ JUST IN: ZachXBT warns users of impersonators scamming on Instagram. Impersonators of ZachXBT are reposting old clips on Instagram and offering fake “crypto recovery” services in DMs, charging victims a small upfront fee before blocking them. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified

⚠ JUST IN: Github confirms a security breach that exfiltrated 3,800 internal repositories. Attackers compromised an employee's machine with a VS Code extension that had malware, which led to a breach that stole over 3,800 internal repositories with critical API keys. 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @rainbetcom @Classified