4 Aug 2026, 17:09 UTC23 views15 reactionsread 6 August 2026 Photo
🔞 From 500 Wallets to $114M: Three More Waves of COLDCARD Attacks
In our previous investigation, we covered the first wave of mass BTC theft, where 594.477 BTC was drained from 500 Bitcoin wallets. BitOK analysts traced the complete flow of the stolen funds.
Further investigation revealed that this was not an isolated incident.
BitOK identified three additional waves of coordinated wallet drains that took place be…
❤6👍5🔥4
31 Jul 2026, 14:37 UTC51 views15 reactionsread 6 August 2026 Video
💵 500 Wallets Drained in 15 Minutes: Where Did 594 BTC Go?
On July 30, attackers drained 594.477 BTC from 500 Bitcoin wallets in a coordinated operation.
The funds were first consolidated into a single address before 562.019 BTC were moved to a second wallet. BitOK traced the entire flow of funds.
⚙️ How the Funds Were Moved
All 500 transactions were executed within just 15 minutes. BitOK analysts identified seve…
🔥6❤5👍4
30 Jul 2026, 14:00 UTC49 views14 reactionsread 6 August 2026 Photo
✔️ BitOK's "Clean or Dirty" KYT Trainer is now available on Telegram
We've launched a Telegram mini-game where you make KYT decisions under time pressure.
🧠 Every transaction gives you 2–6 seconds to decide whether to allow or block it. Run out of time, and the transaction is processed automatically.
There are 9 shifts in total, each introducing new screening rules and a faster transaction flow.
Cases include exch…
🔥6❤5👍3
29 Jul 2026, 11:03 UTC48 views13 reactionsread 6 August 2026 Video
🐾 "Sign here." That became the most expensive lesson in Triple-A's history
Between July 24–25, an attacker drained more than $9M from wallets publicly linked to the project.
This wasn't a smart contract exploit. It wasn't a blockchain hack.
Every transaction was valid because it was signed with legitimate keys. The attacker didn't break the protocol — they compromised the wallet signing infrastructure.
The BitOK …
👍5🔥5❤3
28 Jul 2026, 13:04 UTC49 views14 reactionsread 6 August 2026 Photo
🔞 Why is July 23 being called crypto's unofficial Hacker Day? Let's break it down with BitOK
On July 23, the crypto industry was hit by three major exploits within just a few hours.
B² Network, Verus Bridge, and AFX Bridge were all compromised, with combined losses exceeding $35 million.
What makes these incidents stand out is that none of them relied on a conventional hack.
Each exploit followed a different att…
❤6👍4🔥4
28 Jul 2026, 07:01 UTC≈1,220 views18 reactionsread 6 August 2026 Photo
🚀 AML has become one of the fastest-growing areas of the crypto industry
Just a few years ago, AML was a specialized discipline within the digital asset market. Today, it is a core part of the industry’s infrastructure.
💻 As the market continues to develop, demand is growing for tools that help organizations assess crypto risk and meet evolving compliance requirements.
BitOK is growing too, and we are expanding ou…
❤7🔥6👍5
24 Jul 2026, 15:04 UTC61 views19 reactionsread 6 August 2026 Photo
🧠 Coincidence or a new trend? Breaking down the B² Network exploit
Another multi-million dollar exploit where the root cause wasn't a traditional smart contract vulnerability.
In the B² Network incident, the attacker gained control of the staking contract's upgrade authority. Using the legitimate upgrade mechanism, they replaced the contract implementation, allowing B2 to be withdrawn to an attacker-controlled addr…
❤8🔥6👍5
24 Jul 2026, 12:58 UTC51 views16 reactionsread 6 August 2026 Photo
📊 It has been a rough week for cross-chain bridges
First, AFX Bridge lost $24M without a smart contract vulnerability. Then came Verus, where an attacker drained another $7.5M by submitting a proof that the bridge accepted as valid, even though no corresponding assets had actually been locked on the other chain.
🧠 Different attacks, different attack vectors. But they point to the same trend: multi-million dollar lo…
❤7🔥5👍4
24 Jul 2026, 12:20 UTC48 views13 reactionsread 6 August 2026 Photo
🐾 An Attack Without an Exploit: How AFX Bridge Lost $24M
On July 22, $24.15 million in USDC was withdrawn from AFX Bridge.
No smart contract vulnerability was involved. Instead, the attacker obtained 5 of the 7 validator signatures required to authorize withdrawals, and the protocol approved the transactions as legitimate.
📊 The funds moved within minutes:
• nearly all liquidity was drained in 3.5 minutes;
• the …
❤6🔥4👍3
23 Jul 2026, 11:55 UTC54 views15 reactionsread 6 August 2026 Photo
🔞 $1M Stolen Without Hacking: How 42DAO Was Exploited
On July 22, Balance Coin (BLC), the stablecoin of the 42DAO ecosystem, lost its dollar peg and crashed by more than 99% within hours.
No private keys were stolen. No smart contract was exploited. The weakness was in the protocol's economic logic.
A manipulated BTCB price was accepted without sanity checks. The protocol triggered liquidations and sold collateral…
❤7👍4🔥4
20 Jul 2026, 09:49 UTC73 views17 reactionsread 6 August 2026 Photo
🐾 One transaction. $1.65M drained. How the Allbridge Core attacker laundered the funds
On July 19–20, the attacker used a Kamino flash loan to execute a series of transactions against the Allbridge Core liquidity pool on Solana.
By manipulating the pool's internal accounting and pricing logic, the attacker withdrew more assets than should have been available. The flash loan was repaid within the same transaction, w…
❤7👍6🔥4
16 Jul 2026, 13:12 UTC69 views15 reactionsread 6 August 2026 Photo
🤑 $290M in Seized Crypto. Two Days. One Route to Coinbase Prime
On July 13–14, the U.S. government transferred a large batch of seized digital assets into the Coinbase Prime infrastructure.
🔍 BitOK analysts reconstructed the complete on-chain flow, tracing the funds from government-controlled wallets to Coinbase Prime deposit addresses.
Over two days, 3,800.42 BTC (about $235M) and 30,006.75 ETH (about $53M) were …
❤7👍4🔥4
Showing the 12 most recent of 17 posts we hold for @bitok_global. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.