CEO of Titanium Blockchain Infrastructure Services pleads guilty to securities fraud

CEO Michael Stollery of Titanium Blockchain Infrastructure Services (TBIS) pled guilty to securities fraud in connection to a $21 million cryptocurrency scam. The company promoted its BAR token during 2017–2018, and did not register with the SEC for its ICO. TBIS made false claims including that they had ties to companies including Apple, Boeing, and IBM, and offered various services that did not actually exist. At least 75 people participated in the ICO, giving TBIS a combined $21 million, some of which went directly to Stollery's bank account and personal expenses like a condo in Hawaii.

Crypto platform Immutable lays off 17% of its gaming division staff

Screenshot of gameplay of a digital trading card game. There is a streamer overlaid in the bottom left corner.Gods Unchained gameplay (attribution)
The Australian crypto company Immutable fired 17% of staff from its gaming division. Immutable has said this amounted to 18 workers, though the Games Workers Australia union disputed the number and said that 30 roles were cut. The fired employees all worked on the Gods Unchained blockchain-based trading card game, and were given 24–48 hours notice of their firing.

The fired employees quickly began preparing a legal fight against immutable, questioning whether their firing was legitimate when many of the people who were sacked were about to reach the vesting date for more than $1 million in stock options.

Brazilian authorities challenge NFT company Nemus after it claims ownership to land in the Amazon, allegedly pressures Indigenous people to sign documents they could not read

Aman in a polo shirt stands in the rainforest with a sign reading "NFT"Image from Nemus's "Non-Fungible Territory" press release (attribution)
Nemus is an NFT project already described in W3IGG for its plans to become "Guardians" of the Amazon rainforest and saviors of its Indigenous populations by selling Ethereum NFTs and reopening a Brazil nut plantation.

On July 20, they issued a press release claiming that "the World's First Non-Fungible Territory has been officially renamed by indigenous people in Brazil in coalition with Nemus". The company claims to own 41,000 hectares (~100,000 acres) of land in the Amazon.

On July 25, Brazil's Federal Prosecution Office (MPF) issued a statement that they had demanded Nemus provide proof of ownership of the areas they claim, clarification on the projects they've been promising online they would undertake, and proof that they've received authorization by the National Indian Foundation (FUNAI) or any other public body that would allow them to operate in the area and engage with various Indigenous groups.

According to the MPF, members of Indigenous groups in the area reported the company had violated their rights. They also explained that Nemus had expressed to them their plans to use heavy machinery to open an airstrip and build a road in order to access Brazil nut groves in the area. Apurinã leaders alleged that company representatives had pressured Indigenous people who do not read well to sign documents, and did not provide them with copies.

After five years in prison for a Ponzi scheme and a lifetime ban from the pharmaceutical industry, Martin Shkreli announces his new venture: a web3 drug discovery platform

Martin Shkreli sits at a table, arms crossed and smirkingMartin Shkreli (attribution)
Martin Shkreli, sometimes known as "Pharma Bro", earned notoriety after obtaining the patent for an anti-parasitic drug and hiking the price from $13.50 a pill to $750. An FTC lawsuit ordered Shkreli in January 2022 to return almost $65 million in wrongfully obtained profits, and banned him for life from the pharmaceutical industry.

In 2018, he was sentenced to federal prison for unrelated securities fraud; a U.S. Attorney stated he "essentially ran his company like a Ponzi scheme". He spent five years in prison, and was released in May 2022.

Shkreli is also banned from the securities industry, and from serving as an officer or director of any publicly traded company.

If this was anyone other than Martin Shkreli, I might have been surprised to hear that, only a little over two months out of prison and while still staying in a halfway house, Shkreli is launching a "web3 drug discovery software platform".

$4.5 million taken from Teddy Doge project in apparent rug pull

The Teddy Doge defi project saw its token price plummet over 99% as 30 billion TEDDY were transferred from the project's deployer and distributed to various wallets, which then converted the TEDDY to over 10,000 BNB ($2.56 million) and 2 million BUSD, a dollar-pegged stablecoin.

Although the project admins blamed the theft on an outside attacker, writing on Telegram that they were "not certain whether it is a bug in our cross-chain bridge or a leaked developer wallet", that is a common refrain by developers who rug pull their own projects.

Attacker makes off with $1.1 million after successful governance attack on the Audius web3 music platform

An attacker was able to create and pass a governance proposal to transfer out 18.5 million AUDIO tokens from the community treasury. They then successfully swapped these for 705 ETH (~$1.1 million).

Audius halted the token and smart contracts while they patched the bug, and brought the network back online shortly afterward. The attacker had found and exploited a vulnerability in the way the contracts were written which allowed them to rewrite the governance voting rules and delegate 10 trillion AUDIO tokens to themselves for voting purposes. They then used those tokens to pass the malicious proposal. The contracts had been audited by OpenZeppelin and Kudelski, but neither group caught the vulnerability. Audius stated that a plan for dealing with the loss of community funds was still under discussion.

GameStop's new NFT platform features an NFT mimicking a victim of 9/11

A rendering resembling the famous "The Falling Man" photo. A man in an astronaut suit falls headfirst, with a striped background resembling a tall office tower.Falling Man NFT (attribution)
GameStop's brand new NFT platform, which launched on July 12, is off to a less than promising start. Unlike some other NFT platforms like OpenSea, Gamestop does not allow just anyone to create and list NFTs — creators have to apply and be approved individually.

One of their artists, "Jules", created an NFT clearly modeled after The Falling Man, a well-known photograph of a man falling from the upper floors of the World Trade Center during the September 11 attacks in New York City. The NFT is also titled Falling Man, and pictures a model in the same position, but wearing an astronaut suit.

Not only is GameStop selling an NFT of the victim of a tragedy, it's a featured image when Googling "GameStop".

Celsius customers send letters to the judge in the bankruptcy case

Correspondences of my email sent to support on 15 Jun 2022:  To: support@celsius.network Cc: ceo@celsius.network  Dear Alex and Celcius support, I am writing this email to ask for your special consideration to allow me to make a small withdrawal on my BTC held in Celcius. I understand that Celsius made the decision to pause withdrawals in a volatile market condition, but do hope that you review my case and give me special permission.  I am 5.5 months pregnant with my third child. I am expecting to give birth in early October and I do need the fund to pay for the hospital, doctor and baby items such as cot, clothes, nappies etc. I also need the fund to pay for school fees for my two other schools aged children.  I have attached a recent scan of my baby and a letter from my obstetrician confirming my pregnancy and planning for admission into the hospital.  Scan of my baby that am carrying: [ultrasound photo of a fetus]Email to Alex Mashinsky and Celsius support (attribution)
Celsius customers have begun to send letters to the judge presiding over Celsius Network's bankruptcy case in the Southern District of New York. More than fifty letters have been entered into the docket since July 15, and new letters are continually being added.

Many customers write of being convinced by Alex Mashinsky personally, particularly in his weekly "AMA"s where he regularly claimed that Celsius was a safe platform with substantial reserves that could cover any potential losses. Mashinsky often denigrated traditional banks, referring to Celsius as a better and safer option.

Some of the letters are particularly heartbreaking, with customers referring to suicidal ideation or saying that they've been too ashamed to share the news of their financial losses with their family. One woman included a copy of an email she sent to Mashinsky and Celsius support, pleading for them to allow her access to her crypto, and including an ultrasound photo of a baby. "I do need the fund to pay for the hospital, doctor and baby items such as cot, clothes, nappies etc. I also need the fund to pay for school fees for my two other school aged children," she wrote.

Founder of My Big Coin convicted of $6 million crypto fraud

Randall Crater, founder of the cryptocurrency company My Big Coin, was convicted of multiple charges including wire fraud for a crypto scheme in which he stole more than $6 million from investors. Crater falsely marketed his business, which he operated between 2014 and 2017, as operating "a fully functioning cryptocurrency backed by $300 million in gold, oil and other valuable assets", which he fraudulently stated was partnered with MasterCard. According to the U.S. Attorney's Office, Crater used the $6 million in stolen funds "for his own personal gain and spending on goods, including hundreds of thousands of dollars' worth of expenses on antiques, artwork and jewelry".

Former Coinbase product manager charged with tipping off co-conspirators about tokens that were about to be listed on the exchange

Ishan Wahi, a former product manager for Coinbase, was indicted on two charges of wire fraud and two charges of wire fraud conspiracy for allegedly tipping off his brother and friend to make trades based on his insider knowledge.

Wahi allegedly used his access to highly confidential information around which cryptocurrency tokens would be listed and when the news would be announced to tip off his brother and friend, who would then use multiple anonymous Ethereum wallets to purchase large quantities of the token before the prices spiked on the news. According to the press release, the two took positions in at least six tokens before Coinbase announced in April 2022 that they would be listing them on the exchange. The DoJ said that the scheme had generated approximately $1.5 million in gains. The DoJ acknowledged a "Twitter account that is well known in the crypto community", likely referring to Cobie, who identified the suspicious activity.

The DoJ also reported that when Coinbase's director of security operations contacted Wahi in May asking him to attend a meeting regarding the suspicious activity, Wahi purchased a one-way flight to India in an attempt to flee the country. He was stopped by law enforcement.

The U.S. Attorney for the Southern District of New York stated in the press release, "Today's charges are a further reminder that Web3 is not a law-free zone... fraud is fraud is fraud, whether it occurs on the blockchain or on Wall Street."

Each of the charges (four against Wahi, two each against his brother and friend) carried a maximum sentence of 20 years. In May 2023, Ishan Wahi was sentenced to two years in prison; Nikhil was sentenced to ten months in prison.

Blockchain.com lays off 25% of its employees

The cryptocurrency exchange Blockchain.com announced they would be cutting 25% of their employees, or around 150 people. They attributed the decision to the crypto market conditions, as well as the need to compensate for financial losses — likely alluding to the $270 million loss they're facing due to a loan to the now-insolvent Three Arrows Capital crypto hedge fund.

Blockchain.com also announced that they would close their Argentina-based offices, cancel plans to hire in several countries, and cut executive salaries.

Blockchain-powered carbon offset company Land Life starts 35,000-acre forest fire in Spain

Still frame from a video of the Ateca fireStill frame from a video of the Ateca fire (attribution)
Five villages were evacuated and a rail line was closed as a wildfire has burned 14,000 hectares (~35,000 acres) near Ateca in northwestern Spain. The fire was reportedly sparked by equipment used by a contractor to dig trees for Land Life. Land Life is a carbon offset company that focuses on reforestation, and speaks about its "autonomous planting, remote monitoring and blockchain verification". The Dutch company raised €3.5 million in a Series A round in October 2018.

The wildfire is reportedly the second fire in that same location attributed to the company in the last month. Spain has been facing devastating fires brought on by record-breaking temperatures and drought, and Land Life acknowledged that contractors should not have been working during the heat wave due to the extreme fire risk.

NFT collector Franklin loses 100 ETH (~$150,000) in a joke gone wrong

The image representing the ENS domain for stop-doing-fake-bids-its-honestly-lame-my-guy.eth, with the default blue gradient background.A pricey joke (attribution)
Bored Ape aficionado franklinisbored has apparently found a new source of entertainment by placing high bids on his own ENS domains with amusing names, causing a Twitter bot that announces ENS domain offers to tweet about it. After amusing himself by placing 100 ETH bids on joebiden.eth, elonmusk.eth, barackhusseinobama.eth, and donaldjtrumpjr.eth, he solicited suggestions on Twitter for what ENS domain he should create and then place a fake bid on next.

Based on a follower's suggestion, he created the ENS domain stop-doing-fake-bids-its-honestly-lame-my-guy.eth and placed a 100 ETH bid on it. To his surprise, another person came along and offered him 1.9 ETH (~$2,900). Apparently excited to receive a sizeable offer for a gag NFT, franklinisbored accepted the offer and took to Twitter to write about his good fortune: "Well this is the most surprising 1.891 ETH I have ever made. I owe it all to #ENS and @gweiman_eth's creative idea. #Marketing101".

Meanwhile, he had forgotten to cancel his joke 100 ETH offer, which remained active. The new buyer accepted the offer and sold the NFT back to him, pocketing 98 ETH in the process. Franklinisbored wrote on Twitter, "I was celebrating my joke of a domain sale, sharing the spoils, but in a dream of greed, forgot to cancel my own bid of 100 ETH to buy it back. This will be the joke and bag fumble of the century. I deserve all of the jokes and criticism." He also sent the 1.9 ETH back to the other person, with a message asking them to reverse the transaction. The other person replied, "No, thank you for the money though."

Tesla announces they sold 75% of their Bitcoin

Tesla announced in their Q2 financial report that they had sold about 75% of the Bitcoin they had been holding. The company first bought $1.5 billion of Bitcoin in January 2021, at between $30,000 and $40,000, but sold 10% of that shortly after.

In their report, Tesla stated that "Conversions in Q2 added $936M to our balance sheet." Assuming this is all Bitcoin, this suggests Tesla sold at around $28,900 — a 7–10% decrease from their buy price. The company stated in a shareholder presentation that the "Bitcoin impairment" had damaged the company's Q2 profitability.

This is grim news for some crypto enthusiasts, a group that overlaps considerably with Tesla and Musk superfans. Musk's Bitcoin purchases helped to convince many new people to buy in, and the news of Tesla's decision caused a sharp 2.5% decrease in Bitcoin prices.

Zipmex indefinitely halts withdrawals

Singapore-based crypto exchange Zipmex is the latest in a long string of crypto platforms to suspend customer withdrawals. "Due to a combination of circumstances beyond our control including volatile market conditions, and the resulting financial difficulties of our key business partners, to maintain the integrity of our platform, we would be pausing withdrawals until further notice," they wrote on Twitter.

According to CoinDesk, Zipmex faces an enormous loss on a loan of $100 million worth of assets to Babel Finance, an exchange that suspended withdrawals in mid-June and is now hiring restructuring attorneys.

On July 21, the Thai Securities and Exchange Commission sent a letter to Zipmex asking them to explain their decision, requesting details on customer assets under custody and where they were invested — particularly around any assets deposited in Celsius or Babel Finance.

Minecraft announces they will not support or allow NFTs

Cover of the video game Minecraft, showing a group of blocky characters standing on grassy ledgesMinecraft cover art (attribution)
Minecraft is a massively popular sandbox-style video game that had almost 140 million monthly active users as of 2021. Its developer, Mojang Studios, published a blog post detailing upcoming guidelines to clarify their position on NFTs and blockchain more generally. They wrote that "NFTs ... can create models of scarcity and exclusion that conflict with our Guidelines and the spirit of Minecraft." They announced that "blockchain technologies are not permitted to be integrated inside our client and server applications, nor may Minecraft in-game content such as worlds, skins, persona items, or other mods, be utilized by blockchain technology to create a scarce digital asset."

Korean authorities raid seven cryptocurrency exchanges in relation to Terra investigation

Korean police cars parked outside an office building at nighttime. A lit "Upbit" sign is visible.Korean police executing one of the raids (attribution)
Prosecutors working on the fraud case around the May Terra/Luna collapse raided seven cryptocurrency exchanges in South Korea including Bithumb, Upbit, and Coinone. They also raided eight other offices and residences in connection to the investigation. The investigators are reportedly looking for evidence to determine whether Terra founder and CEO Do Kwon may have intentionally spurred the collapse of the ecosystem.

$20 million taken from Raccoon Network and Freedom Protocol in likely rug pull

20.8 million BUSD, a dollar-pegged stablecoin on BNB Chain, was transferred from Raccoon Network and the Freedom Protocol on July 19. Security firm PeckShield identified the incident as a scam perpetrated by the people running the projects, although Raccoon Network has tried to claim the transfers were the result of a hack.

Raccoon Network is a metaverse project. Freedom Protocol invested in the project in late June, and announced they would be working together. Freedom Protocol is a defi project that advertises an 183,394.2% APY "compounded by scientific calculations".

$7,500–$300,000 NFT-holders-only club set to open in SF, holders still have to pay for their food

Artist rendering of a building with curved Japanese-temple-like roofs, amidst a park surrounded by skyscrapersArtist's rendering of the Sho Restaurant (attribution)
Salesforce Park, a suspended park area underneath the Salesforce Tower, has been described as intentionally unwelcoming to the many unhoused San Franciscans it looms atop. Parts of the new restaurant intended to loom over Salesforce Park were even more ostentatious and exclusive — people would need to pay between $7,500–$300,000 to gain access to the members-only Sho Club at the Sho Restaurant, which was set to open in autumn 2023.

The Sho Restaurant said they planned to allow members of the public as well as NFT holders, and even the holders would still have to pay for their food. NFT holders were also promised access to the exclusive Sho Club, and things like "Access to all future Sho Club lounges" (no such lounges appeared to be in planning). Those who paid $15,000 or $300,000 for the top two tiers of NFTs were told they would receive access to perks including a "Monthly curated omakase members dinner (food & beverage not included).

None of this ever came to pass, though, because the project fell silent and then was confirmed to have been abandoned in September 2023 — around the time it was supposed to open.

FBI warns of fraudulent crypto apps that have stolen an estimated $42.7 million

The FBI's Cyber Division issued a notification about fraudulent cryptocurrency investment apps that are successfully being used to defraud American investors. The scammers typically claim to offer cryptocurrency investment services to their targets, then convince them to download mobile apps that resemble genuine crypto trading apps (sometimes mimicking actual exchanges). The apps typically show the users' accounts increasing in value, but when users try to withdraw funds they find they're unable. Sometimes the apps defraud their victims even further by claiming they need to pay an additional "tax" before they can withdraw.

The FBI stated they had identified 244 victims, and estimated the total loss associated with these fraudulent apps to be around $42.7 million.

Bexplus crypto exchange closes, gives users only 24 hours to withdraw funds

The cryptocurrency exchange Bexplus announced that "due to force majeure, Bexplus will stop service from now on". Users were told to close their open positions and withdraw any funds within only a 24-hour period, before positions would be automatically closed and the withdrawal service would become unavailable.

Only four days prior, on July 14, Bexplus had published a press release offering "rewards worth up to $5,000 to new users who sign up and make their first deposit". The project also promised its users up to 21% interest on bitcoin kept with the exchange. Bexplus had also promised a 100% match on deposits to the platform, up to 10 BTC (currently priced at $235,550).

BlockFi offers employee buyouts to further reduce headcount one month after cutting 20% of staff

The cryptocurrency lender BlockFi is reportedly offering employees buyouts — sorry, a "voluntary separation program" — in an effort to reduce their headcount even further. Those employees receive 10 weeks of paid leave, 10 weeks of continued health insurance, and unemployment eligibility if they resign.

The move came only a month after BlockFi laid off 20% of their employees, or around 170 people. The company appears to be struggling to stay afloat, soliciting $400 million in loans from Sam Bankman-Fried's FTX crypto exchange and signing a deal with FTX that gives the exchange the opportunity to acquire them.

Gemini lays off second round of employees in less than two months

After laying off 10% of its workforce in the first week of June, Gemini has performed a second round of layoffs. The layoffs have not been announced externally, nor were they widely communicated internally, according to employees who spoke to TechCrunch. One employee said that 68 members, or 7% of the employee base, were no longer in the company Slack channel on Monday morning.

The week prior, an internal operating plan document was shared to the anonymous employee platform Blind, which outlined a plan that would reduce company headcount to around 800 — a 15% reduction. The plan was taken down shortly after. Gemini co-founder Cameron Winklevoss wrote in a Slack message that the leak was "super lame", and wrote that "friendly reminder that Karma is the blockchain of the universe — an immutable ledger that keeps track of positive and negative behavior."

Anthony Scaramucci's SkyBridge Capital suspends redemptions from crypto-exposed fund

SkyBridge Capital, an investment firm founded by Anthony Scaramucci, reportedly suspended redemptions from its "Legion Strategies" fund. Around 18% of the $230 million fund is allocated to crypto-related investments, including Bitcoin and Sam Bankman-Fried's private FTX crypto exchange.

The fund is down 30% YTD. According to Scaramucci, the suspension was to avoid "damag[ing] investors that want to stay in the funds" if many investors decide to exit in a less than "orderly" fashion.

Binance faces €3.3 million fine for operating in the Netherlands without registering

Binance, the world's largest crypto exchange, was fined €3.3 million ($3.35 million) by De Nederlandsche Bank (DNB) for operating in the Netherlands without the required registration. According to NOS, the fine was higher than most fines imposed for this type of infraction, partly due to Binance's enormous size. The regulators had issued a public warning about Binance operating without registration in August 2021.

The fine was imposed on April 25, 2022, and Binance filed an appeal in June. This is not Binance's first time playing fast and loose with regulatory bodies — in February, Binance halted activities in Israel due to being unlicensed. In December 2021, the Ontario Securities Commission released a statement to say that Binance wasn't registered in the province, but Binance continued to operate there anyway for several more months.

Police shut down the AEX crypto exchange

The AEX crypto exchange paused all withdrawals on June 16, estimating a 36-hour outage "to avoid unnecessary panic withdrawal". Then, instead of re-enabling all withdrawals, they re-enabled them in a piecemeal fashion, with several announcements each day that withdrawals were enabled for some extremely minor altcoins, but never for the more popular cryptocurrencies.

Then, on July 17, the exchange released a new announcement: "Due to cooperation with the police investigation, the platform has suspended related services... Please wait for the police announcement." They also wrote in the post, "AEX reserves the right of final interpretation of this announcement", and below the signature wrote, "The closer you look, the further you see."

PREMINT NFT tool hacked, user wallets drained

PREMINT is an NFT service intended to help project creators build access lists for new NFT projects based on various qualifications. The project was compromised on July 17, and users were asked to sign transactions that allowed hackers to drain all assets from their wallets. 314 NFTs were stolen, including from pricey collections such as Bored Ape Yacht Club, Otherside, Moonbirds Oddities, and Goblintown. The thiefs were able to flip the stolen NFTs for 270 ETH ($375,000), which they then tumbled through Tornado Cash.

On July 20, PREMINT's CEO announced they would be compensating all users affected by the hack by sending them ETH equivalent to the floor price of the stolen NFTs. "I realize that the NFTs stolen were not all floor NFTs... You might feel like this compensation isn't enough. But I don't think there's any other scalable and objective way to do this," he said. The total repayment will amount to about 340 ETH ($525,000). PREMINT also bought the two most expensive stolen NFTs from their new owners for the prices they had paid to buy them from the hacker — 92 ETH ($138,000) for a Bored Ape and 12 ETH ($17,800) for an Azuki. Those NFTs were returned to their original owners.

NFTs valued at $150,000 stolen via phishing link posted to the hacked Twitter account of NFT artist DeeKay

A colorful illustration of a conveyer belt ziz-zagging upwards. On the bottom level is a small boy with a butterfly over his head, amidst houses and trees. The second level has a larger town. The third level has an illustration of New York, with skyscrapers and the Statue of Liberty. The fourth level has San Francisco, with the Golden Gate Bridge. The fifth and final level has hills and a gravestone, with a ghostly angel next to it.Frame from the animated "Life and Death" NFT sold to Snoop Dogg (attribution)
On July 16, hackers compromised the Twitter account belonging to the well-known NFT artist DeeKay, who sold an NFT for 310 ETH (then $1 million) to Snoop Dogg in April. The 180,000 followers of DeeKay's compromised Twitter account saw it post a link announcing a new limited quantity airdrop, which directed them to a website mimicking DeeKay's real site. Some people fell for the scam, and in trying to claim their NFTs, actually approved transactions that allowed the scammers to empty their wallets. One victim lost four Cool Cat NFTs and three Azuki NFTs, which have floor prices of around 4 ETH (~$5,350) and 12 ETH (~$16,200) respectively.

Altogether, the stolen NFTs were valued at around $150,000. DeeKay reported that he wasn't sure how his Twitter account had been compromised, but that "my guess is that [two-factor authentication] was off for that specific time". DeeKay wrote that he was considering compensating his followers who were victim to the scam, but that "[a] few are pretending to be affected and looking for opportunities", and "this also encourages hackers to keep doing their thing". "There were some kind souls who were affected and have shown me great flexibility for me to compensate in different ways. Some are asking for high demands as if I was the hacker...😪", he wrote in the thread.

Coinbase plans to shut down its affiliate-marketing program, sparking rumors of an impending crisis

A leaked email revealed that Coinbase is planning to temporarily end its affiliate-marketing program, which pays influencers to convince their followers to sign up. Some influencers were earning $40 for each person they pulled on to the platform in early 2022, though the rewards had reportedly dwindled to as low as $2/person more recently. In the leaked email, Coinbase stated that they would be shutting down the program on July 19 "due to crypto market conditions and the outlook for the remainder of 2022". They also said they planned to re-enable the program at some point in 2023.

The news sparked rumors about Coinbase, including that they might be facing a liquidity crisis or insolvency. Others dismissed those rumors as unfounded, and normal behavior for a company facing a market downturn. Coinbase CEO Brian Armstrong tweeted that Coinbase was "well capitalized".

Boneheads rug pull for $3.1 million

A screaming skull with glowing pink eyes, wearing a beige t-shirt, grey cargo pants, red high top sneakers, and a grey baseball cap stands in front of a cyan backgroundBonehead #2006 (attribution)
Crypto sleuth zachxbt has accused the NFT project "Boneheads" of rug pulling only weeks after the project minted in August 2021. Although they promised physical collectibles, more NFT collections, merch giveaways (including, of all things, rugs), and other perks, they never followed through.

zachxbt traced the funds to various centralized crypto exchanges, and also found that some of the money had been used to purchase other pricey NFTs including Bored Apes, CryptoPunks, and others. He also identified two individuals he suspected were behind the pseudonymous creators of the project, who had mysteriously begun posting luxury trips, designer purchases, and an expensive Mercedes after the project mint.

After zachxbt's thread, the project tweeted for the first time in a very long time, writing "for the 2736463266474th time, itz not rug 😪, just a very deliberately slow creative process, lots of pivots..." However, the project never followed through on their promised new deadline. The social media account showing evidence of the alleged creator's lavish spending was also deleted.

Betty Boop launches "Boop & Frens" NFT project

A 3D rendering of Betty Boop, overlaid with horizontal lines somewhat resembling an old televisionBetty Boop NFT promotional art (attribution)
The studio behind Betty Boop decided there was no better time to launch a Betty Boop NFT collection than during a period of record low interest in NFTs (or, more likely, they started the project during the NFT craze and decided they'd sunk too much money into it to pull the plug). The Betty Boop Twitter account announced Boop & Frens, an 8,888-piece NFT collection.

Reception on Twitter was brutal, with one person commenting, "And that's another one for Beloved Icons Ruined By Pyramid Scheme Bingo". Another described the decision to launch an NFT project as "jumping on the bandwagon while it's actively collapsing". The reception on Discord was also tepid, with only 130 people joining the server in the two days following the announcement.

OpenSea NFT marketplace lays off 20% of employees

OpenSea, the largest NFT marketplace, announced that they would be laying off around 20% of their employees, or around 60 people. CEO Devin Finzer blamed "crypto winter" for necessitating the decision, a common phrase that has been referenced by multiple CEOs who have announced layoffs in the past two months.

John McAfee associate fined $376,000 for pump & dump scheme and undisclosed promotion of ICOs

Portrait of John McAfee, speaking at a microphoneJohn McAfee (attribution)
In October 2020, the SEC filed charges against anti-virus software magnate, two-time Libertarian presidential candidate, and all-around shady character John McAfee, as well as his bodyguard, Jimmy Watson Jr. They alleged that the two had promoted several initial coin offerings (ICOs) without disclosing that they were being paid to do so. The SEC also charged the pair with participating in a pump and dump scheme, where they secretly bought large amounts of a cryptocurrency token before hyping it on Twitter (where McAfee had millions of followers), then selling the tokens as the price increased.

McAfee died by suicide in June 2021 in a Spanish prison, shortly before he was due to be extradited to the United States on tax evasion charges. His death kicked off a tornado of conspiracy theories by QAnon followers.

Now, the SEC has wrapped up the investigation, finding his partner in crime responsible for the undisclosed promotion and pump and dump scheme. In addition to a $376,000 fine, Watson is prohibited from any professional cryptocurrency trading.

Celsius files for bankruptcy

One month after pausing customer withdrawals, crypto lending firm Celsius Network filed for Chapter 11 bankruptcy. Celsius had recently hired a new group of restructuring lawyers from Kirkland & Ellis, the same group counseling Voyager Digital in their bankruptcy proceedings announced on July 6.

Citizen Finance claims to have been hacked for around $100,000

Citizen Finance, a multichain platform that has something to do with NFTs and blockchain gaming, claimed to have suffered an attack by an outside party who obtained access to a private key for the BNB and Polygon chains. The attacker then used their access to transfer 244 BNB (~$55,000), 57,637 MATIC (~$32,300), and 7,000 USDC for a total windfall of around $94,300. The theft also caused the value of the CIFI token to plummet more than 50%.

As with many of these attacks, it's not immediately clear if there was truly an outside party who gained unauthorized access, or if the "attack" was actually a rug pull or an inside job. The project tweeted on July 16 that they were "continu[ing] to investigate" and had hired outside security firms to try to help them identify the hacker and recoup lost funds.

More than $8.17 million stolen in phishing attack targeting Uniswap users

In a successful, broadly-targeted phishing campaign, more than 70,000 addresses connected to Uniswap were airdropped tokens that baited users into approving transactions that allowed attackers to control their wallets. After some initial confusion that there might be a vulnerability in Uniswap itself, it was determined that the thefts were being perpetrated through the airdrop, which also linked users to a website that resembled the authentic Uniswap site. Users were tricked into signing the contract, and cryptocurrency and NFTs were stolen from wallets.

One single wallet targeted by the phishing attack lost more than $6.5 million worth of Ether and Bitcoin, and another targeted by attackers lost around $1.68 million worth of those currencies.

Vauld is short around $70 million

Crypto lending firm Vauld, which suspended withdrawals and announced they were considering restructuring on July 4, have disclosed to their creditors a shortfall of around $70 million. They explained this was due to mark-to-market losses relating to the declining pricess of Bitcoin, Ether, and Polygon, as well as exposure to the now-collapsed Terra stablecoin UST. They also attributed some of the shortfall to longterm loans that can't be called back for another 3–11 months.

Several weeks prior, Vauld had cut 30% of staff, slashed executive salaries, and began various other cost-cutting measures.

Rival firm Nexo has said it is considering acquiring Vauld, though some have expressed skepticism that Nexo is in a position to afford such an acquisition.

Report claims that Binance served Iranian customers in violation of sanctions

The latest Reuters investigation into Binance has alleged that the company processed transactions for Iranian users, despite U.S. sanctions and the company's claim to be compliant with them. Iranian traders interviewed by Reuters stated that they were able to take advantage of Binance's poor KYC checks to use the service despite the sanctions.

The usage of the exchange by residents of sanctioned countries could draw the attention of US regulators. It's also the latest in several investigative reports by Reuters into Binance, in addition to a June report that the exchange facilitated $2.35 billion in illicit transfers from 2017–2021, and an April report that Binance supplied the Putin regime with information about crypto donors to opposition leader Alexei Navalny.

More than $2.25 million stolen from Bifrost's BiFi platform

Bifrost is a platform that allows developers to create dApps across multiple blockchains. They run the service BiFi, which is a defi platform built atop Bifrost. On July 10, they inadvertently exposed the key to their Bitcoin address-issuing server. An attacker was able to use this to self-sign their own deposit address, then make a fake deposit into the BiFi Bitcoin lending service in exchange for 1,852 ETH ($2.25 million).

Bifrost wrote in their post-mortem analysis that because the attack was limited to the BTC address registration server, and the hack didn't exploit any smart contract or protocol vulnerabilities, a security audit performed by Theori "is still valid" — leading one to wonder why anyone should trust an "audited" platform if $2.25 million in assets can be stolen without invalidating an audit.

Hackers steal $1.43 million from Omni NFT lending platform

Hackers used a flash loan attack to steal around 1,300 ETH ($1.43 million) from the NFT lending platform Omni. Omni allows users to borrow cryptocurrency against their NFTs.

Hackers used NFTs from the popular Doodles collection as collateral to borrow wETH, then withdrew all but one of the NFTs, allowing them to perform a re-entrancy attack. The attacker then laundered the funds using the Tornado Cash cryptocurrency tumbler.

According to Omni, only funds belonging to the platform that were being used for testing were taken by the attacker.

CoinFLEX sues Roger Ver to try to recover claimed $84 million debt

Portrait of Roger VerRoger Ver (attribution)
When CoinFLEX suspended withdrawals on June 23, they blamed "continued uncertainty involving a counterparty".

Although they initially dodged naming the counterparty, CEO Mark Lamb eventually publicly stated that this counterparty was Roger "Bitcoin Jesus" Ver, who he said failed to meet a $47 million margin call. However, Ver publicly refuted this claim, stating that CoinFLEX in fact owed him money. Both parties went back and forth, each accusing the other of misrepresenting the situation.

On July 9, the company stated that they would be seeking arbitration to recover $84 million from Ver — an updated figure that they said factored in the "significant loss in liquidating his significant FLEX coin positions".

Vauld seeks protection against creditors

Cryptocurrency exchange Vauld, who suspended withdrawals on July 4, filed for a moratorium against creditors in Singapore, a process that's conceptually similar to Chapter 11 bankruptcy proceedings in the U.S.

In late June, the exchange laid off 30% of staff and took other measures to cut costs. They later disclosed they were short $70 million, partly from exposure to the Terra ecosystem which collapsed in May.

Three Arrows Capital founders are nowhere to be found

Kyle Davies and Zhu Su, the founders of Three Arrows Capital, have apparently disappeared after the firm entered bankruptcy proceedings. Although lawyers for the duo have said they intend to cooperate with the proceedings, their whereabouts are unknown, and the liquidators' lawyers stated they had "not yet received any meaningful cooperation" from either. Those lawyers have expressed concerns that the pair might make off with the remaining funds — a substantial portion of which are cash, cryptocurrencies, and NFTs, and could be easily transferred.

Hypernet Labs shuts down shortly after being hit with a fraud lawsuit

Ivan Ravlich, founder of the nebulous crypto firm called Hypernet Labs, announced on Twitter that "Hypernet's road has reached an end". "Hypernet was impacted by the same market headwinds that have touched millions around the world since May. Unfortunately, the treasury was also held in Ethereum, which disproportionately exacerbated the bear market's impact on our balance sheet", he wrote.

What he didn't mention was the lawsuit that had just been filed against the company, by investors who allege that Ravlich and his co-founders lied to investors and never created any usable product or service. Investors claim to have lost millions in cryptocurrency, and one alleged that Ravlich and his compatriots used a shell company in the Cook Islands to make it harder for him to recoup his losses.

Hypernet initially promised to build a system for renting unused computing power, and in 2018 raised around $20 million in an initial coin offering. In late 2021, Hypernet "pivoted hard" into NFTs, which one investor stated was a "knee jerk reaction to the flavour of the day" and a "last-ditch attempt to find a non-existent market for a non-existent product".

Blockchain.com faces a $270 million loss from their loan to Three Arrows Capital

Crypto exchange Blockchain.com announced in a letter to shareholders that they could lose the $270 million in cryptocurrency and USD they loaned to Three Arrows Capital, a now-insolvent crypto fund that is pursuing bankruptcy. The ripple effects of the 3AC implosion have been felt throughout the crypto ecosystem, contributing to liquidity issues and the outright failure of some other platforms. Blockchain.com assured customers that they would not be one of those platforms, writing that the company "remains liquid, solvent and our customers will not be impacted", but they also would not be the first crypto company in recent weeks to assure customers that everything is fine shortly before being forced to reveal that everything is not fine at all.

Former asset manager for Celsius files lawsuit alleging the company was a Ponzi scheme

Jason Stone, founder of the KeyFi company who formerly managed assets for Celsius, filed a complaint against Celsius Network in a New York court, alleging the company was operating as a Ponzi scheme and owes them "a significant sum of money". Stone alleged that, despite claiming that Celsius's trading teams would properly hedge against any impermanent loss or loss due to token fluctuation incurred by KeyFi, they were doing nothing of the sort. Upon learning this in March 2021, they terminated their relationship with Celsius. However, Stone alleges that Celsius owes KeyFi "a significant sum of money", which Celsius has not acknowledged. Instead, Stone claims, Celsius has accused them of theft.

The legal complaint reads, "Prior to Plaintiff coming on board, Defendants had no unified, organized, or overarching investment strategy other than lending out the consumer deposits they received. Instead, they were desperately seeking a potential investment that could earn them more than they owed to their depositors. Otherwise, they would have to use additional deposits to pay the interest owed on prior deposits, a classic 'Ponzi scheme.' The recent revelation that Celsius does not have the assets on hand to meet its withdrawal obligations shows that Defendants were, in fact, operating a Ponzi-scheme."

Reddit launches more NFT avatars, but won't call them NFTs

A collage of six cards, each showing a different illustration of Reddit's "Snoo" characterReddit's "Collectible Avatars" (attribution)
Reddit announced that they will be selling "Collectible Avatars", artist variations on the Reddit "Snoo" figure that users can then customize. Amusingly, Reddit's announcement carefully dodges describing them as NFTs, instead writing that "Collectible Avatars are backed by blockchain technology". Despite this, the avatars are indeed NFTs, created on the Polygon blockchain, though users will be able to buy them with plain ol' fiat.

This is not Reddit's first foray into NFTs. The platform launched four 1-of-1 "CryptoSnoo" NFTs in June 2021, which allow the four holders to display the NFTs on their profile. The "Collectible Avatars" appear to be an attempt to open this same functionality to a broader group of Redditors, while simultaneously appearing to try to sidestep the more negative sentiment around NFTs that has developed since their last project.

Crypto platform 2gether closes user access to accounts

The Spanish cryptocurrency platform 2gether suddenly announced that they were "forced to close service for private accounts" due to "lack of resources and crypto winter". Users found themselves unable to access their accounts via the website or the app, which showed an "under maintenance" message. The company also closed all social media accounts. The previous day, the company had announced they would begin charging a €20 ($20.33) fee for users because it was "impossible to maintain the free service", but apparently decided to go much further. Around 100,000 users found themselves unable to withdraw their funds.

2gether had previously made news in August 2020, when hackers stole 114 Bitcoin and 276 ETH — then worth around €1.183 million ($1.2 million), and representing 15% of customer funds. The company successfully raised €1.5 million ($1.52 million) in a financing round several months later to cover the loss.

User trying to swap $5 in stablecoins via Decentral Bank ends up with "$10 trillion"

A user tried twice to swap $5 of the USN stablecoin for Tether on the Decentral Bank platform. Both times, the transaction failed due to a bug that prevented users who didn't already hold Tether from swapping other currencies for Tether. The refund mechanism also had a bug, and both times the system failed to process the transaction, the user ended up being refunded $5 trillion instead of $5.

Decentral Bank paused the smart contract upon noticing the decimal point bug, and burned the excess $10 trillion supply to restore the proper amount of stablecoins in circulation.

Luckily for them, they were able to pause the contract before anyone exploited it in ways that were not so easily rectified. The ability to receive $1 trillion in USN out of $1 could have easily been used to drain the USN/USDT liquidity pool.

Bitstamp tries to launch "inactivity fee", cancels it after backlash

The cryptocurrency exchange Bitstamp announced its plans to charge a €10 (~$10.17) monthly fee to inactive users outside of the US who had account balances below €200 ($203.38). The exchange explained that "keeping inactive accounts on the books is a cost", and that users could buy or sell crypto, make deposits or withdrawals, or sign up for staking to avoid the fee.

The plans enraged some of their users, who called the company a scam and questioned the decision to charge only the users with the least funds. Following the backlash, Bitstamp walked back the decision to impose the fee.