Crypto scam reports
Search community and official reports of crypto scams: wallet addresses, scam websites, pig-butchering and investment fraud, phishing, hacks and sanctions designations. Every reported address and website has its own page. Reporting a scam is free and needs no account.
Report a crypto scam · How to report a crypto scam
Newest reports
- DCpz2V…ALHv: Dogeparty 2014-era web-wallet drain on Dogecoin (2026): DOGE consolidation and token sweeper addresses and downstream wallets · Hack · 2026-10-24
- GBO7VU…2WXC: YieldBlox (Stellar Blend V2 pool) exploit follow-up (2026-02-22): four Stellar attacker accounts · Hack · 2026-10-24
- rwt8PJ…Fgb5: tx (formerly Coreum) XRPL bridge drained of 199,916 XRP (2026-08-09): attacker's two XRP Ledger receiving accounts and Ethereu… · Hack · 2026-10-24
- Dash wallet scam sites listed in Dash Core Group's documentation: dash-wallet[.]com, electrumdash[.]org and 4 more · Phishing · 2026-10-24
- 193 phishing domains impersonating Stellar wallets LOBSTR and Freighter on MetaMask's and ScamSniffer's blocklists (Oct 2026) · Phishing · 2026-10-24
- 242 phishing domains impersonating XRP Ledger wallet Xaman (Xumm), plus Sologenic and GateHub, on public blocklists (Oct 2026) · Phishing · 2026-10-24
- Fake Flare Network / FXRP staking site fxrpntwork[.]com took 3.4M XRP from 71 investors (Oct 2025), per Seoul police · Scam · 2026-10-24
- xrpl.js npm supply-chain backdoor (2025-04-21): five malicious xrpl versions sent XRPL secret keys to 0x9c[.]xyz · Hack · 2026-10-24
- bc1qh0…6wq9: mewchain[.]exchange fake MEW platform follow-up: two Bitcoin sweep addresses that collected the victim-reported deposits · Pig butchering · 2026-10-24
- 0xbb8f…7b35: AccGN[.]club 'AI trading' scam follow-up: two Ethereum gas wallets, a BSC bridging wallet and four TRON wallets incl. TNgvWRdn · Investment scam · 2026-10-24
- 0x8191…5466: Nexus Equity (nexusequity[.]com) 'IOCP' scam follow-up: second gas wallet 0x8191ab46, which cashes out to the cluster's KuCoin… · Investment scam · 2026-10-24
- 0x95d9…5fb1: xn--os-g7s[.]com (Eos) CryptoScamDB follow-up: site's suspected address 0x95d986f9 · Phishing · 2026-10-24
- 0x0000…0000: Fake Galxe/Mezo 'checker-tasks' drainer follow-up: funder 0x000037bb (Etherscan Fake_Phishing188250, scam-flagged on Blockscou… · Phishing · 2026-10-24
- TNBtBt…Ti4X: velxton[.]com fake trading site follow-up: TRON (USDT-TRC20) deposit address displayed on its deposit page · Pig butchering · 2026-10-24
- 0x00eb…3f59: ethnow[.]org (Trust-Trading) CryptoScamDB follow-up: site's suspected address 0x00eb4cc5 · Scam · 2026-10-24
- 0x7ff8…e055: elon-gives[.]com (Trust-Trading) CryptoScamDB follow-up: site's suspected address 0x7ff8caeb · Scam · 2026-10-24
- 0xa0d4…b2d0: quarkchain[.]de (QuarkChain) CryptoScamDB follow-up: site's suspected address 0xa0d4bee1 · Phishing · 2026-10-24
- 0xb29a…7ceb: quarkchain-ico[.]io (QuarkChain) CryptoScamDB follow-up: site's suspected address 0xb29a0b9b · Phishing · 2026-10-24
- 0xde4d…4c7f: GOXCOINS[.]com (FBI-seized domain) scam follow-up: consolidation that received all of the victim-reported wallet's 58,158 USDC · Pig butchering · 2026-10-24
- 0xdfe9…2037: Melloncrypto[.]com fake trading platform follow-up: gas wallet that funded two victim-reported deposit wallets · Investment scam · 2026-10-24
- 0x8399…b8b3: ulinkexclub[.]com ('Ulink') scam follow-up: consolidation 0x8399bc56 and gas-giving deposit wallet 0xe86d92ec · Pig butchering · 2026-10-24
- 0x3854…977f: ofxsvip[.]com fake 'OFX' platform follow-up: two wallets paid by both victim-reported deposit wallets · Pig butchering · 2026-10-24
- 0xf0b4…41c6: coinbaseai[.]ai / ethaigood[.]com fake exchange follow-up: six relay and hub wallets in the deposit address's round trips and… · Pig butchering · 2026-10-24
- 0xf09a…c170: MakerDAO legacy auction-keeper drain follow-up (2026-10-06): malicious adapter module created by the attack contract, per Cert… · Hack · 2026-10-24
- bc1qwx…7jxm: BigONE exchange exploit follow-up (2025-07-15): attacker's Bitcoin and two Solana addresses named by SlowMist and Lookonchain · Hack · 2026-10-24
- terra1…m28n: CL8Y DEX (Terra Classic) incident follow-up (2026-10-15): Terra Classic relay wallet [HACKER_C] per CL8Y's incident archive · Hack · 2026-10-24
- 0x6061…e2cc: 'J·B·G·AG' fake exchange follow-up: USDT-ERC20 and ETH deposit address displayed on jbgags[.]com's deposit page · Scam · 2026-10-24
- 0x084e…25c8: 'Worldex' fake exchange follow-up: two collection wallets and gas funder linked on-chain to the tipster-supplied address (low… · Scam · 2026-10-24
- 0xea9d…489a: cwgmain[.]cc fake exchange follow-up: two intermediary wallets first funded by deposit address 0x1fae712e (316 ETH forwarded) · Pig butchering · 2026-10-24
- 0xfd01…e5c0: qsjt66[.]com / Bifrost-wallet scam follow-up: five operator-side wallets around DOJ forfeiture target 0xe6d328 (gas funding an… · Pig butchering · 2026-10-24
- 0x9ed8…e4f8: Aztec 2.0 rollup exploit follow-up (2026-06-17): three onward wallets that moved the attacker's ETH, incl. a 10 ETH Tornado Ca… · Hack · 2026-10-24
- 0x7314…8300: NGRAVE LIQUID phishing follow-up (2026-10-17): 39 Hyperliquid accounts holding ~3,590 XMR1 bought with the stolen funds · Phishing · 2026-10-24
- kii1a5…lrw9: KiiChain exploit follow-up (2026-08-22): attacker's kii1 vesting/helper accounts, second attacker wallet and exploit helper co… · Hack · 2026-10-23
- thor16…n84q: THORChain vault exploit follow-up (2026-05-15): malicious node operator address named in THORChain's own exploit report · Hack · 2026-10-23
- 0x7b58…a1f9: Gravity Bridge exploit follow-up (2026-05-29): theft wallet, deployer, rogue validator 'julia666' and its Gravity, Osmosis and… · Hack · 2026-10-23
- cosmos…6tjt: Fake 'ATOM Airdrop' governance proposals on Cosmos Hub, Osmosis and Stride (Apr-Jul 2026): 14 vetoed proposals, 5 proposer acc… · Phishing · 2026-10-23
- mantra…hwva: MANTRA Chain Cosmos EVM exploit (2026-08-20): 720.9M MANTRA (~$3.6M) taken from burn address and genesis multisig, attacker wa… · Hack · 2026-10-23
- secret…03vm: Axelar-Secret IBC bridge exploit (2026-06-10): ~$4.67M unbacked saToken mint, attacker's Secret, Axelar, Osmosis, Ethereum and… · Hack · 2026-10-23
- init1m…m89u: Initia exploit follow-up: attacker's Initia L1 account init1mkfz...m89u sent the linked fake-mint transaction and shares the E… · Hack · 2026-10-23
- 0xdd92…edfa: Initia L1 unbacked-mint exploit (2026-10-23): reported ~$2.7M bridged to Ethereum, attacker and holding wallet per Spreek and… · Hack · 2026-10-23
- cosmos…6c4n: Neutron governance takeover (2026-09-22): attacker's Cosmos Hub address per Cosmos Labs, plus Neutron, Noble and Ethereum wall… · Hack · 2026-10-23
- 0xee2e…bd65: Meter chain and Passport bridge exploit (2026-09-23): unbacked MTR/MTRG minted, 1B wMTRG on BNB Chain, two attacker addresses… · Hack · 2026-10-23
- 0x9a47…0f71: Swell swETH/rswETH reported rate manipulation and staged ETH-sweep contracts (Oct 2026): actor wallets per researcher Spreek,… · Hack · 2026-10-23
- Repo 'sol-live' on GitHub, presented as a Solidity interview exercise, hides a download-and-execute backdoor: SlowMist IoCs (1 IP, 4 domain… · Phishing · 2026-10-23
- Correction to fake-job 'order task' scam kit report (20 sites): they use real businesses' names, and the shared logo bucket was seen on 202… · Scam · 2026-10-23
- 0x3d1d…6a7d: Correction to ILITY bridge breach report (2026-10-16): the Foundation's security notice is X status 2113355096419377568, poste… · Hack · 2026-10-23
- 4RZDCg…mxL4: Suspected $kimchi pump-and-dump on Solana (2026-10-22): Lookonchain names three wallets among those it says sold for over $385… · Rug pull · 2026-10-23
- Fake-exchange kit follow-up: 7 more 'calm-ui' sites incl. doostoken[.]com, labswap[.]io, nozdex[.]com, cryptrex[.]io (Oct 2026) · Scam · 2026-10-22
- 0x3d1d…6a7d: ILITY cross-chain bridge breach (2026-10-16/17): wallet named by ILITY Foundation that received the stolen assets, plus two ne… · Hack · 2026-10-22
- 0x0166…5070: WAX Multi-Chain Bridge exploit (2026-10-22): attacker addresses on WAX, Ethereum and Solana, about $90.5K released without pay… · Hack · 2026-10-22