Alert

⚠️ UPDATE: Ledger Confirms Hardware Implant Linked to Drains Ledger’s official support account on X has confirmed that an unauthorized hardware implant was found in at least one device of users affected by yesterday’s wave of wallet drains. The affected devices were purchased from CryptoBilis. It appears a Chinese national named Jiaming quietly bought CryptoBilis from its Malaysian ex-owner in March and put him under an NDA contract so he couldn’t publicly talk about the sale. This now suggests the new owner most likely installed the chips in the Ledger devices and drained the victims’ wallets. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ UPDATE: Ledger Investigates CryptoBillis Reseller Link to Wallet Drains Ledger has addressed the reported wallet drainings and is investigating reports of stolen funds from users in Southeast Asia who purchased their devices from a reseller named CryptoBillis. Users who have already set up their devices are reportedly still experiencing ongoing drains. Ledger advises affected users to consider moving their assets to a new Ledger signer with a new seed phrase. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ $86M+ Stolen in Ledger Wallet Draining Wave According to on-chain investigator Specter, a wave of Ledger wallet drainings is currently being reported by users on X and Reddit, with total losses exceeding $86 million across Bitcoin, Tron, and Ethereum. Some users claim their assets were stolen despite never leaking their seed phrases and having minimal interaction with on-chain applications. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⭐️ $4.5M Telegram Stars Exploit A user from the Arab community reportedly exploited a vulnerability for two months, generating over $4.5M worth of Stars and successfully withdrawing $1.5M in total. ℹ️ How It Worked:

The exploit reportedly involved Telegram’s internal marketplace. First, the user sold a gift to their second account for 100,000 Stars through the marketplace. They then transferred the Stars to a bot before refunding the original sale. This resulted in a negative balance of 100,000 Stars on the second account, while 80,000 Stars remained on the main account and another 100,000 Stars remained in the bot.

Telegram has now started blocking gift transfers and restricting many gifts purchased using the exploit, including:

🕯 https://t.me/nft/MirageLamp-2 🕯 https://t.me/nft/MirageLamp-5 🕯 https://t.me/nft/MirageLamp-7 🕯 https://t.me/nft/MirageLamp-9 🕯 https://t.me/nft/MirageLamp-10 🕯 https://t.me/nft/MirageLamp-11 🕯 https://t.me/nft/MirageLamp-17 🕯 https://t.me/nft/MirageLamp-18 🕯 https://t.me/nft/MirageLamp-19 🕯 https://t.me/nft/MirageLamp-20 🕯 https://t.me/nft/MirageLamp-21 🕯 https://t.me/nft/MirageLamp-22 🙂 http://t.me/nft/LuckyLocket-12

➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ Sim Swapper “AJ” Sentenced to 2.5 Years in Prison A 25-year-old Ajay Shinjin, also known online as “AJ Marley Cruz,” who helped steal $260,000 in crypto through SIM-swapping in 2021, was sentenced to 2.5 years in prison today at a London court. According to authorities, he used the stolen funds to fund an expensive lifestyle, including luxury holidays in Dubai, renting expensive cars, and buying gold-plated dental grills. He was arrested at the airport while returning from Dubai in 2023. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ UPDATE: It Appears That Rey (@medusa) Used His Mom’s Device for Fraud An IntelOps investigation from 2025 revealed that Rey had previously used his mom’s device and identity to complete KYC and then withdraw stolen funds from fraudulent activities directly to crypto exchanges such as Binance and Bybit. His full name was also leaked after Krebs and IntelOps conducted two separate investigations, during which they found emails linked to him, including zainakhader111@gmail(.)com, where he used his real name, as well as passwords such as saif1313, which could have helped the FBI locate and arrest him. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ ShinyHunters Member "Rey" Arrested One of the ShinyHunters key members, Saif al-Din Khader, aka “Rey” (@medusa on Telegram), has reportedly been arrested in Jordan, according to Reuters. According to multiple sources, he was arrested earlier this week, taken into custody on Tuesday, and is now reportedly cooperating with law enforcement. This is now the second ShinyHunters member to be arrested, just 8 days after the group’s alleged FBI data hack. 💬 Do you think more ShinyHunters members will be arrested soon? ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ $450,000+ Exit Scam by @f777 A known and reputable Chinese user in the community, @f777, has reportedly exit scammed after a couple of deals totaling over $450,000. According to reports, the user stole 50 Anonymous Numbers from one client and 22 from another, totaling 72 stolen Anonymous Numbers, along with a few thousand USDT. He is now liquidating the stolen NFTs. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ Near Intents Exploited for $3.8M ZachXBT has reported that Near Intents was exploited for over $3.8M after its BSC hot wallet saw multiple irregular outflows. The Near wallet has since been paused, and the vulnerability has been fixed. The team has also stated that affected users will be fully compensated, with the full service expected to resume within an hour. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ Alleged ShinyHunters Member Suspected of Ordering Two Murders An alleged ShinyHunters member, Pepijn van der S., was arrested on hacking charges yesterday and has now been ordered to remain in custody for at least 90 more days while the investigation continues. Dutch police revealed that investigators found information on his laptop related to two planned killings abroad that were suspected to have taken place in 2025. Authorities say there are indications that he may have ordered the killings, leading to a separate suspicion of attempting to solicit two murders. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

💎 GRAM Transfers With Usernames In the new beta version of Telegram for macOS, users have discovered a new feature for Gram Wallet. With the new update, you will now be able to link your GRAM wallet address to your Telegram account and send money directly using a username instead of copying and pasting a GRAM wallet address, similar to .ton domains. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

🚨 $351M Bitget Hack Linked to Lazarus Group Earlier today, Bitget Exchange was hacked for over $351 million after attackers compromised the backend wallet service, enabling unauthorized fund transfers. An on-chain analyst traced the stolen XRP, which was bridged the same way as the AFX exploit that stole $24M in July, linking the stolen funds directly to the Lazarus Group. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

🚨 8 Years in Prison for 130 Stars A 57-year-old Russian man has been sentenced to 8 years in prison today for allegedly sending 130 Telegram Stars as paid reactions under posts in channels linked by authorities to terrorism. This is now the 4th time a citizen has been jailed in Russia for the same reason under the same criminal code. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

🔥 User Burns a $15,000 Anonymous Number Less than a day ago, a random Chinese user purchased the anonymous number +888 0825 2500 for $15,000 and shortly after sent it to a TON burner address. At the moment, the TON burner address holds 32 anonymous numbers, 7,300 gifts, and over 600 usernames. 🧐 What do you think could be the reason for the burn? ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ Curaçao Gaming Authority Portal Has Reportedly Been Breached CGA, the licensing body for issuing Curacao gaming licenses, has announced that their portal was reportedly breached. The access has since been contained, but as of now investigators are still unclear which data was accessed. The CGA holds identity documents for license applicants, owners, and stakeholders across its roughly 500–600 online casino operators, including well-known platforms such as Stake and Shuffle. If any of that data was accessed, it could potentially expose and dox the owners of those casinos. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ Telegram Trading Bot Has Been Drained for $2,000,000+ The Solana trading bot Fasol on Telegram has reportedly been drained of over $2,000,000 after attackers withdrew the users’ entire balances to their own wallet. The official team has also confirmed that they were attacked, with their own wallets being drained as well. They also said they are currently working on refunding all affected users. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

🚨 ShinyHunters Breach Cl0p Ransomware Leak Website The ShinyHunters extortion group has reportedly breached Cl0p’s Tor data leak website by exploiting a Grav CMS vulnerability. They uploaded a taunting message, fully defaced the page with their branding, and claim to have stolen server data, logs, source code, and the website’s onion private keys. ShinyHunters are now using the stolen material to extort the Cl0p ransomware gang. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ Discord Is Down Worldwide Discord is currently down for users on both desktop and mobile apps. When opening the app, users are seeing a “Session Unavailability” error. Over 12,000 reports have been submitted on Downdetector within 10 minutes. The reason for the downtime is currently unknown. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

👀 Fragment Has Disappeared from Google Fragment.com has completely disappeared from Google search results, while it still appears in other search engines. 💬 What do you think could be the reason for this? ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert

⚠️ UPDATE: Hackers Are Now Demanding a Ransom Payment from Revolut The attackers who obtained data from Revolut have started leaking sensitive customer information, including that of Gamdom CEO Felix Römer and tennis player Shevchenko. The threat actors are threatening Revolut that they will continue posting more high-profile clients’ data until the company starts paying them. ➖➖➖➖➖➖➖ 💧 Rainbet.com the #1 Non-KYC Crypto Casino & Sportsbook @Rainbetcom 🔔 Subscribe: @alert