SudoRare NFT exchange rug pulls for $820,000

Six hours after its launch, the team behind the new SudoRare NFT exchange took the money and ran, deleting the project website and social media. People had already warned about issues in the project contract that signaled it could be a scam, but those were either unseen or unheeded by the people who put a collective $820,000 of various tokens into the project.

At least one of the scammer wallets interacted with the Kraken crypto exchange, a U.S.-based exchange that requires KYC, so it's possible that Kraken could help identify the scammers — though they've not made any public moves to do so.

Group charged for stealing over $4 million in transaction reversal scheme

The U.S. Attorney's Office of the Southern District of New York announced charges against three men responsible for a scheme in which they stole millions from cryptocurrency exchanges and traditional banks. The group used stolen identities to buy cryptocurrency from various crypto exchanges, then convinced the banks that the fraudulent transactions were, well, fraudulent. The banks would refund the transactions to the thieves, who would then make off with both that and the cryptocurrency they had purchased.

The three men were charged with wire fraud, bank fraud, and identity theft charges, and face potential decades in prison if convicted.

Bank run leaves BendDAO with 5 ETH and a bunch of NFTs they can't sell

Honestly, who can blame BendDAO for failing to consider that the hype bubble around Bored Apes and other NFT projects might not last forever! "We underestimated how illiquid NFTs could be in a bear market when setting the initial parameters", the project wrote in a governance proposal.

BendDAO allows people to take out loans with their NFTs as collateral. However, if the floor price of those NFTs drops too far and the borrower doesn't pay back some of the loan to adjust its risk rating, other people can bid on the NFT.

The problem with this whole plan was revealed when lenders' confidence was shaken when it was reported that $5.3 million in Bored Apes were at risk of liquidation. Panicked users withdrew their assets from the platform, resulting in a bank run that drained the reserves to a low of 5 ETH (~$8,200). BendDAO had other assets, of course: the NFTs below the liquidation threshold. However, a lack of interested buyers willing to pay the minimum prices (95% of the collection floor price) left the project in a tough spot.

Since the extremely close brush with a liquidity crisis, the project has begun to consider a proposal that would reduce the threshold at which NFTs can be liquidated, reduce auction and liquidation protection periods, remove the 95% floor price bid requirement, and increase interest rates.

OpenSea's stale listing issue burns another collector

An illustration of a white penguin wearing a bow tie and gold crown on a light blue backgroundPudgy Penguin #2951 (attribution)
The same issue that led to OpenSea paying out $1.8 million to users who lost their NFTs is apparently still alive and well (despite OpenSea's introduction of an "Inactive listings" panel). Users who have listed NFTs for sale and never removed the listing have occasionally been surprised in a very bad way when their NFT suddenly sells for an old price — sometimes much different than the going prices for those NFTs.

In this case, a person successfully sold their Pudgy Penguin NFT for 8.69 ETH a year ago ($27,500 at the time of sale). Those particular NFTs have been having a comeback lately, and so the collector bought the same NFT back — this time for 20 ETH ($31,500 at the time of sale). However, an old listing from their previous ownership was still active, and someone was able to snap up the NFT from them for only 9.89 ETH ($15,600) within minutes.

The collector's near-instantaneous $20,000 loss has a happy ending for them, though — the person who bought the NFT was willing to reverse the trade.

Someone buys a Bored Ape, gets scammed out of it two hours later

An illustration of an ape with black fur, sticking out its tongue, wearing a tuxedo t-shirt and a gold stud earringBored Ape #887 (attribution)
In what might be a new record, someone bought a Bored Ape NFT for 70.69 ETH (~$116,000) and had it stolen from them less than two hours later. The scammer quickly flipped the NFT for 61.6969 ETH (~$101,000), then bridged the funds through RenBridge to cover their tracks.

Hodlnaut seems to have lied about their Terra exposure

When Terra was collapsing in May, concerned users of the Hodlnaut lending platform asked whether the firm was exposed. CEO JT wrote on Twitter, "Hodlnaut as a firm did not take any losses on UST, users who held/bought UST on our platform did". Their social media manager wrote, "[Holdnaut] had 0 company exposure to [Anchor Protocol]", referring to the Terra-based lending protocol.

However, documents from the legal proceedings surrounding the now-underwater firm revealed that Hodlnaut had 317 million UST, which it liquidated at a loss when the previously dollar-pegged UST hit $0.85. In the filing, they wrote, "Due to the market's lack of liquidity, the average exit price of UST to USDC was around 42 cents on the dollar, resulting in realized losses to Hodlnaut Trading Ltd of about USD 189.7M. As a result, Hodlnaut's total debt to depositors of USD 500M became backed by realisable assets of around USD 315M as of 13 May 2022 due to the de-pegging event."

Swyftx crypto exchange cuts 21% of staff

The Australian crypto exchange Swyftx laid off 21% of its workforce, affecting 74 employees. One such employee was on her honeymoon in Hawaii when she learned she was suddenly out of a job. The company blamed "an uncertain business environment, with levels of domestic inflation not seen in over two decades, rising interest rates, highly volatile markets across all asset classes, and the potential for a global recession" for the cuts.

Swyftx had announced in June that it would be merging with trading platform Superhero in a $1.5 billion deal.

Sub-primate lending: $5.3 million in Bored Apes used as loan collateral are at risk of being liquidated

Chart showing the floor price of the Bored Ape collection over the last 30 days. On July 20 the floor price was 92.7 ETH; it is now at 69.4 ETH.Bored Ape Yacht Club floor price over the last 30 days (attribution)
When people started sinking hundreds of thousands of dollars into Bored Ape NFTs, it wasn't long before people came up with the genius idea of using those NFTs as collateral for loans. BendDAO is one such platform offering the service, allowing people to post their Ape as collateral in exchange for a crypto loan equal to 30–40% of the Bored Apes collection's floor price. At one point, one borrower had 10,000 ETH (~$17.5 million) in loans from BendDAO against his 60-ape-strong collection (though he since repaid the loans).

However, NFTs in general haven't been doing so hot lately, and the Bored Apes haven't been immune from the slump. As the Bored Apes collection floor price has decreased, more than 15% of the apes used as collateral for BendDAO loans are in the "danger zone" — close to being auctioned off. These 45 apes are valued at roughly $5.3 million. Liquidation could lead to cascading liquidations, as the auctions could themselves cause the floor price to decrease.

As Bennett Tomlin put it, "I hate that y'all somehow created a risk for cascading liquidations of JPEG backed loans".

The FDIC sends cease and desist letters to FTX US and other entities who claim their products are insured

The Federal Deposit Insurance Corporation (FDIC) sent cease and desist notices to the FTX US crypto exchange and four websites that they allege are falsely claiming their products are FDIC-insured. Most people are familiar with FDIC insurance because it covers up to $250,000 per account with federally regulated banks, but crypto companies enjoy no such protections.

In July, the FDIC and Federal Reserve sent a cease and desist to Voyager, a company currently undergoing bankruptcy proceedings, which drew in customers with false promises that USD entrusted to the company were safe from any potential Voyager collapse thanks to FDIC insurance.

After choosing to keep the crypto, divorcee wants a do-over

A letter-writer seeking advice from the Financial Times wrote, "I got divorced last year and as part of the financial agreement, my ex-wife and I agreed that I would keep my cryptocurrency assets while she got the lion's share of my pension and other investments, and we split the family home. When we negotiated last autumn, the crypto market was riding high and I was convinced it would go higher still, but following the recent crash my digital assets have more than halved in value. I'm now considerably worse off than my ex and worried about my financial future. She says I only have myself to blame and won't discuss the matter further. Can I go to court to renegotiate our financial order?"

As expected, the lawyer consulted by the FT informed them that their chances of a do-over were pretty slim, and suggested that individuals negotiating a split with a partner don't take on all the high-risk assets like this person did.

As of August 20, Bitcoin was trading at around $21,200–70% lower than at its all-time-high of $69,000 in November 2021. Other major cryptocurrencies are faring similarly poorly, with ETH down 67% to $1,630 from its all-time-high of $4,890.

DegenTown NFT project rug pulls after promotion from Magic Eden

Cel shaded illustration of a humanoid figure with purple skin smirking. They have a roof of a house on their head with Japanese characters and lanterns hanging from it, and are wearing a grey cape with a black clasp. Behind them is fire and a night sky with a large moon.Degen Degen #4901 (attribution)
DegenTown, a collection of brightly-colored cel shaded humanoid figures, launched with much promotion from Magic Eden on their Launchpad minting service. Magic Eden aims to provide collectors with a level of trust in the project by requiring creators to disclose their identities to the company.

DegenTown first suffered issues in July, when the project's Twitter account was allegedly hacked, and users were tricked into approving a contract that drained their wallets. One individual behind the project promised they would compensate the users whose wallets were drained, but never did.

The project ultimately rug pulled instead, with Magic Eden acknowledging it in a blog post and Twitter thread on August 17. They wrote that they were "urging the original Degen Town founders to return the funds" — however, this is complicated somewhat by the fact that the identity of one of them is not known to Magic Eden. They explained, "Our prior policy was that we doxxed founders. NFTRamo claimed to be an advisor but we learned that he was actually the founder of the project and used being an advisor as a way of skirting our doxxing processes." This is not the first time their identity verification process was sidestepped — they introduced it after a serial rugpuller used their platform to anonymously sell and then rug pull another NFT project, but that same person was able to do it again only a few months later.

The DegenTown project minted 8,000 NFTs for 3 SOL apiece, bringing in $923,000. Beyond that, the creators took 7.5% in royalties on secondary sales. Magic Eden has said that they were able to get one of the two founders to return the funds they'd earned from the mint, and that they planned to use them to compensate buyers.

Bribe Protocol team disappears after raising $5.5 million

The Bribe Protocol promised a DAO infrastructure tool where "token holders get paid to govern", and raised $5.5 million in funding in January to work on their extensive roadmap. However, the project leaders have effectively disappeared. There are no posts on the project's Twitter account since May, their Medium page has been untouched since March, and the Discord is a ghost town aside from the occasional message asking about the status of the project and the inevitable reply that the developers had rug pulled.

Bribe Protocol was incubated by Advanced Blockchain AG and Composable. Composable might ring a bell, because in February its pseudonymous head of product, 0xbrainjar, was revealed to be Omar Zaki, who had settled with the SEC over charges that he had misled investors while operating an unregistered investment advisement company and hedge fund. At the time, he wrote that "I do not want a mistake in my youth to cloud all of the team's efforts", though the SEC charge was filed less than three years prior, when Zaki was 21.

An employee of Figment Capital, one of the investors in Bribe Protocol, claimed that the project had formally shut down and returned 86% of the funds raised from institutional investors, though "retail took a huge L". However, this doesn't appear to have been publicly announced by the project.

Bribe Protocol is, of course, not to be confused with the other Bribe Protocol, a defi project that was abandoned in May 2021.

Experienced crypto trader suffers $470,000 theft after signing malicious message

An experienced crypto trader lost $470,000 to a hack when they signed a malicious message that permitted an attacker to drain all of their USDC stablecoins from their crypto hot wallet. Unlike most crypto hacks that involve approving malicious contracts, this hack was perpetrated when the trader was tricked into simply signing a malicious message. Signing a message tends to be a safer and more common action with crypto wallets, and so traders are not always as careful, though as this trader discovered, it can still have catastrophic impacts.

Crypto.com reportedly lays off hundreds more employees than they announced, tries to hide it

In mid-June, Crypto.com announced they would be laying off 260 people, or around 5% of their employees. However, The Verge has reported that "hundreds more" employees were quietly laid off since then. They report: "Crypto.com has been trying to limit knowledge of the extent of these departures even within the company, with CEO Kris Marszalek refusing to answer a question about the total figure in a recent employees-only town hall meeting."

Marszalek also tried to discourage employees from leaking about the layoffs, saying at a company town hall: "A number [of employees laid off] makes for a great headline, it's a great thing to gossip about. [But] as co-owners of this company, you should ask yourself, 'is it in my interest for this number to be out there?'" One employee told The Verge that this did nothing to assuage their fears about the layoffs, and that "[it felt like] I got told to shut up and get back to work. It felt insulting."

One recent review on Glassdoor claims that Crypto.com had laid off "more than 1,000 employees", and alleged that "They've removed the company directory so we can't see the numbers go down."

South Korea moves to block sixteen unregistered crypto exchanges

The South Korean Financial Services Commission (FSC) reported to investigators sixteen unregistered crypto exchanges that were serving Korean users and hosting events marketing to Koreans. The exchanges include MEXC, KuCoin, CoinW, CoinEX, ZB.com, Bitglobal, Bitrue, Poloniex, BTCEX, Phemex, XT.com, Pionex, BTCC, DigiFinex, AAX, and ZoomEX.

Although the FSC informed the exchanges they needed to register and report their activities, the exchanges did not comply. The FSC has moved to block access to these exchanges in the country, including by asking communications authorities to block access to the exchanges' websites. The FSC pointed to the risk of user data leaks and money laundering as motivations for their action.

Those operating unregistered exchanges in the country could face up to five years imprisonment or a ₩50 million ($37,900) fine, and be barred from registering in the country for five years.

Binance exec claims that scammers are using deepfakes to impersonate him

Screenshot of messages between a blurred individual and Patrick Hillman.
Individual: "Hi Patrick this is [blurred], I had a conversation with Mark J Marshall, can you confirm the Zoom call we had on Thursday with you?"
Patrick Hillman: "That wasn't me."
Individual: "they impersonated your hologram
[LinkedIn link]
This person sent me a zoom link then your hologram was in the zoom , please report the scam""They impersonated your hologram" (attribution)
Binance's chief communications officer, Patrick Hillman, has come out with a blog post claiming that "Scammers created an AI hologram of me to scam unsuspecting projects". (Hologram?) He claimed that scammers were using these meetings to ask token creators to pay a listing fee for their tokens, something that Binance also does, but has been more squirrely about.

The only evidence Hillman provided was a redacted conversation via LinkedIn, where he denies meeting with someone, and they reply: "they impersonated your hologram. This person sent me a zoom link then your hologram was in the zoom". (Again, hologram?) Amusingly, Hillman waxes poetic about the importance of security at Binance throughout the whole post, while also including a LinkedIn screenshot with a name that's blurred so poorly it remains completely legible.

Hillman goes on to claim, with no further evidence, that "a sophisticated hacking team used previous news interviews and TV appearances over the years to create a 'deep fake' of me". If so, this would be remarkable, as to date video deepfakes have mostly been limited to robotic-sounding and grainy pre-recorded Elon Musk impersonations, rather than anything that can respond naturally and quickly to alive conversation.

Another possible explanation is that Hillman is trying to cover Binance's collective ass after being caught taking listing fees for tokens they never list. But who's to say, really — maybe deepfakers have made a considerable breakthrough with startling implications, and Hillman just didn't feel it was important to elaborate on.

Adam Neumann continues to fail upwards as VCs throw even more money at the ex-WeWork CEO

Adam Neumann, standing on stage wearing a microphone and a white shirt that says "Made by We" repeatedly in rainbow colors, pointing at the audienceAdam Neumann (attribution)
In a just world, people would probably not be able to fail upwards quite to the extent of Adam Neumann, who engaged in all sorts of self-dealing and lost billions of dollars, among many other allegations, when he was CEO of WeWork until September 2019.

But Neumann has so far enjoyed a comeback thanks to the likes of Andreessen Horowitz, who led a $70 million funding round in May for Neumann's "Flowcarbon" startup, which aims to sell tokenized carbon credits — sorry, "Goddess Nature Tokens" — to companies trying to green up their image.

Andreessen Horowitz is now enabling another one of Neumann's new crypto schemes to the tune of $350 million — its largest investment to date. This one is just called "Flow", in which Neumann is returning to the real estate industry in a company that aims to help with the residential housing crisis... with blockchain, somehow.

God forbid the venture capitalists give money to deserving founders who haven't already been given, and squandered, a chance. Responding to the news that a16z had put $350 million into Neumann's new gambit — an amount larger than the money raised by all Black-founded startups in the US combined in Q2 — author and investor Kathryn Finney said it was a "slap in the face". "It sends a signal that you can really mess up as a white guy and still get second chances to win," she said.

HUSD stablecoin depegs

Month chart showing HUSD maintaining a $1 peg until dropping below $1 on August 17. The coin dipped to around $0.93, briefly returned to around $0.96, and then on August 18 dropped to $0.84HUSD to USD month chart (attribution)
HUSD, a stablecoin linked to the Huobi crypto exchange, lost its peg and dropped to around $0.85. HUSD is a cash-backed stablecoin intended to be pegged to the US dollar, but the coin lost its peg due to "liquidity issues". HUSD later tweeted that, "We had made the decision to close several accounts in specific regions to comply with legal requirements, which included some market maker accounts. Due to the time difference in banking hours, this resulted in a short-term liquidity problem". The stablecoin restored its peg on August 18.

Several weeks earlier, major crypto exchange FTX announced that they had removed HUSD from their USD basket, meaning they would not be able to be used as collateral.

Huobi worked to distance itself from HUSD as the coin de-pegged, emphasizing that the token is maintained by a different entity and claiming to have exited their stake in that entity in April. However, the token was originally launched by Huobi in 2018, and Huobi has continued to run promotions involving the token as recently as July.

Celer Network's cBridge suffers BGP hijacking attack, users lose combined $240,000

The Celer Network's cBridge project was targeted with a BGP hijacking attack. Users who tried to access the bridge's frontend were instead shown a site that prompted them to authorize transactions that drained their wallets. The attacker was able to steal around 128 ETH (~$240,000) before the exploit was discovered and Celer took the frontend offline. The stolen funds were quickly transfered to the Tornado Cash cryptocurrency tumbler.

Genesis lays off 20% of employees, jettisons CEO after Three Arrows Capital disaster

Crypto broker Genesis is laying off 20% of their employees and reshuffling their leadership in the wake of a several-hundred-million dollar loss related to the Three Arrows Capital implosion. With 260 employees, the 20% workforce cut will affect around 50 employees. Genesis also announced that their CEO Michael Moro would be "stepping down".

Canadian pension manager says they invested "too soon" in the crypto sector after $150 million loss

Canadian caisse de dépôt et placement du Québec (CDPQ), Canada's second-largest pension fund manager, sunk $150 million into Celsius during a WestCap-led funding round announced in October 2021.

Needless to say, this hasn't worked out so hot for CDPQ — Celsius locked up its customers' funds in June and filed for bankruptcy in July, and the courts are in the middle of trying to figure out how to untangle it all. "For us it's clear when we look at all of this, even if the last chapter has not been written, that we went in too soon into a sector that was in transition", said CDPQ's CEO.

CDPQ reported a $33.6 billion loss in the first half of 2022, which they attribute mostly to declines in equity and bond markets.

SEC files complaint against Dragonchain in relation to their 2017 ICO

The U.S. Securities and Exchange Commission filed a complaint against an individual and his companies in relation to their sale of Dragon tokens in 2017. The ICO raised $16.5 million, but the SEC has said the event was an unregistered securities offering, and has demanded the proceeds be returned and a penalty be paid.

Hodlnaut applies for creditor protection

After halting withdrawals on August 8, Singaporean crypto lender Hodlnaut has applied for protection against creditors: a process similar to the U.S. Chapter 11 bankruptcy.

They explained in a statement that they made the decision in order to try to avoid forced asset liquidation, "as it is a suboptimal solution that will require us to sell our users' cryptocurrencies at these current depressed asset prices".

Claims of racist imagery in Bored Ape Yacht Club NFT project make it to court

Two side-by-side images. On the left is a Pepe meme from 4chan, where Pepe is wearing a hachimaki reading "神風" ("kamikaze", but the characters are reversed in order). On the right is a Bored Ape wearing an identical hachimaki.Comparison between a racist 4chan Pepe meme and an identical Bored Ape attribute (attribution)
In a motion to dismiss a trademark lawsuit filed by Yuga Labs (the company behind the Bored Ape Yacht Club NFT project) against Ryder Ripps and various others, the defendants outlined in detail their beliefs that the Bored Apes project intentionally includes racist and Nazi dogwhistles, and that Yuga's lawsuit is a strategic lawsuit against public participation (SLAPP) intended to silence criticism.

Ripps is a part of a group of people who have vocally criticized the Bored Apes project for being racist and antisemitic, with what they believe are intentional hat-tips to 4chan culture. Ripps also created his own NFT project, called RR/BAYC, where he clones the Bored Ape NFTs and sells them in what he says is a "critique [of the] hateful imagery". Because Yuga Labs has never brought action against any of the many Bored Ape ripoff NFT collections, he and his lawyers are arguing this lawsuit is an attempt to silence his criticism.

Some of Ripps' and others' individual claims about dogwhistles in the project are more believable than others, but in their entirety they are pretty damning. Ripps is not the only one who has been outspoken about the issue, and is joined by people in and outside of the NFT world.

BitGo plans to seek damages from Galaxy Digital after they called off their $1.2 billion acquisition

In May 2021, investment management firm Galaxy Digital announced their plans to acquire crypto custodian BitGo for $1.2 billion in what would be the first $1 billion dollar deal for the crypto industry. At the time, crypto prices were near all-time-highs.

Galaxy Digital claims that BitGo failed to provide audited financial statements for 2021 by the deadline they had agreed upon, and for that reason they decided to end the deal.

BitGo claims they've still got time to provide the statements, and that Galaxy Digital owes them $100 million for breaking the deal, which they plan to pursue in court.

Galaxy Digital just reported a ~$555 million dollar loss in the second quarter, which may have contributed towards their choice to back out of the acquisition.

In June 2023, the Delaware Court of Chancery dismissed BitGo's complaint with prejudice, finding that Galaxy Digital had a "clean termination right" based on BitGo's failure to provide financial statements.

Eqonex closes its crypto exchange

The Nasdaq-listed firm Eqonex has announced they will close their "underperforming" crypto exchange, hoping to change their money allocation to "reflect the current market conditions and the opportunities that we are best placed to capture". They cited " extreme market volatility and declining trading volumes" as making it challenging to keep the exchange afloat.

They announced that the exchange will stop trading on August 22, and customers have a month to withdraw their funds.

Collector loses four Bored Apes valued at over $500,000 to phishing attack

An illustration of a white-furred ape, with a bandage around its eyes, wearing a toga.Bored Ape #2393, the one stolen NFT yet to be sold (attribution)
An NFT collector who goes by ASEC_APE lost four Bored Ape Yacht Club NFTs to a phishing attack. The attacker quickly flipped three of the four NFTs for a total of around 200 ETH (~$387,000). The fourth is listed for sale on the NFT platform X2Y2 for 84.59 ETH (~$159,000) — a total profit of $546,000 for the scammer if they find a buyer at that price.

ASEC_APE had just purchased the four NFTs between July 15 and August 13 for a combined total of 326 ETH (~$532,000 based on ETH prices at the time of each purchase; ~$631,000 at the price on the day of the theft).

One of the stolen NFTs, Bored Ape 9012, had just been stolen a week before from Cameo CEO Steven Galanis when his wallet was compromised, as were a handful of other pricey NFTs. ASEC_APE had purchased it from the person who purchased it from the hacker shortly after the August 6 theft.

Brazilian crypto lender BlueBenx halts customer withdrawals and lays off employees after $32 million "hack"

The Brazilian crypto lending platform BlueBenx suddenly shut its doors after announcing they had suffered an "extremely aggressive" hack of 160 million BRL (US$32 million). However, they shared very little in the way of details, leading investors to question the veracity of their story.

All 22,000 customers of BlueBenx suddenly found them unable to withdraw funds from the platform. The platform also reportedly laid off the majority of its employees.

Misconfiguration in the Acala stablecoin project allows attacker to steal 1.2 billion aUSD

A misconfiguration in a newly-deployed liquidity pool allowed an attacker to mint 1.2 billion aUSD, a stablecoin built on the Polkadot network. The exploit caused aUSD to lose its USD peg, initially dropping as low as $0.60 and hovering around $0.90.

Acala paused the protocol shortly after the attack, and disabled the transfer functionality of the stolen aUSD and of Acala-based tokens the attacker had swapped for some of the aUSD. It's important to note that the attacker could not earn a profit anywhere near $1.2 billion USD from the erroneous creation of new, unbacked tokens — they likely made off with around $1.6 million. Acala subsequently burned most of the new tokens, which helped the aUSD token return to between $0.90 and $0.94 — much closer to its intended peg.

Scammer trades fake ApeCoins for Bored Ape NFT

An ape with fur colored like television static wears a rainbow-colored hat with a propeller. Its eyes are closed, it's biting its lower lip, and it's wearing a black shirt with a skeleton printed on it.Bored Ape #8373 (attribution)
A scammer created a fake ApeCoin contract on the NFT Trader service, with tokens that appeared identical to the true ApeCoins but were actually worthless. After "chatt[ing] for a long time about location, jobs, the space", the owner of Bored Ape #8373 was convinced to trade it for 26,500 "ApeCoin", which would be valued at $163,770 if they were real. "I didn't bother double checking the contract as I figured [NFT Trader] only allows [OpenSea] verified collections and contracts anyway," the victim wrote on Twitter. The scammer flipped the NFT several minutes later for 78 ETH ($154,774).

Team member admits to taking more than $400,000 from Velodrome to try to recoup personal losses

On August 4, the team behind the Velodrome exchange and liquidity marketplace noticed that $350,000 had been taken from a team-operated wallet that was normally used for operational funds. They announced they were beginning an investigation into the theft, which they initially believed was due to a compromised wallet. Their team member Gabagool tweeted more details, underscoring that no user funds were lost.

On August 13, Gabagool posted a long confession to his Twitter account, writing that he had stolen the $350,000, and had previously taken $56,000 over the course of two months, to try to "revenge trade" the money he had lost in the crypto crash. Explaining why he took the $350,000, he wrote, "I thought I could make the 56k back and return all of the funds, which was delusional". He also wrote that "the majority of the funds have been returned to the Velodrome team. The rest will be." Velodrome later confirmed they had recovered all of the stolen money.

Gabagool had become a somewhat prominent part of the crypto community, providing insights into various crypto happenings as someone who was adept at tracing blockchain transactions. In June, he was featured in a Vice documentary titled, "Is Everything in Crypto a Scam?". He spoke about, among other things, his October 2021 discovery that the crypto-focused venture capital firm Divergence Ventures was Sybil attacking airdrops to claim millions in rewards. That particular incident ended with Divergence returning the money they had gained from the strategy, and Ribbon awarding 5% of that amount — equivalent to about $545,000 at the time — to Gabagool as a "bounty".

Crypto YouTuber sues someone for calling him a "dirtbag influencer"

Ben Armstrong ("Bitboy Crypto") pictured sitting in a car, midsentence. Overlaid is the text "Use crypto risk free", the Bitcoin logo, and a wallet with coinsThumbnail of a Bitboy YouTube video (attribution)
"BitBoy Crypto" (Ben Armstrong) has sued "Atozy" (Erling Mengshoel Jr.) over a video in which Mengshoel accuses Armstrong of "lacking integrity as a cryptocurrency commentator" and repeatedly calls him a "dirtbag". He also states that Armstrong "cannot be trusted with financial advice because you don't know whether he's trying to enrich you or himself."

Armstrong has claimed that the video cost him more than $75,000 in damages, and has caused him emotional distress including anxiety and depression.

Oddly, in the lawsuit, he writes that he is "in the business of providing advice and commentary on cryptocurrency investments" — a strange thing to do for someone who, like most crypto influencers, constantly tries to claim that his videos are not financial advice.

Armstrong has promoted crypto projects including Celsius. He has also posted and then deleted videos on cryptocurrency projects that later failed, such as Ethereum Yield, Cypherium, and MYX Network. According to a recent CNBC story, he claimed he "could easily make more than $100,000 per month in promotions alone", though it was not clear to which time period he was referring.

Armstrong announced on August 24 that he planned to drop the lawsuit against Mengshoel, stating that "I didn't understand that my name is now so big that if I file a lawsuit it would be found and be made public" — a strange thing to be blindsided by given he sued a YouTuber with 1 million followers who predictably told his audience about the suit. "We are going to drop the lawsuit, 100%. I'm sorry it became public."

Researchers estimate that an insider trader profited from 10–25% of new crypto listings at Coinbase

It's no secret that insider trading has happened at Coinbase, with the U.S. Attorney's Office of the Southern District of New York filing charges in July against three individuals, including a former Coinbase product manager, for their involvement in a scheme to trade on non-public information. However, researchers at the University of Technology Sydney have published a study showing that a group of four connected wallets appeared to trade based on the knowledge of tokens that were about to be listed by Coinbase. The trader(s) took positions in the coins ahead of the announcements, then sold the tokens soon after the listing announcement when they increased in value based on the news. The wallets involved in the trading scheme made a total profit of around 1,003 ETH ($1.88 million), which the researchers note is a conservative estimate of insider profits at Coinbase.

However, some have pointed out that issues with Coinbase's API leaked information about which coins were about to be listed, which could have enabled people to obtain the information allowing them to make such trades without an insider connection.

India freezes assets of FlipVolt, Vauld's Indian exchange

India's Enforcement Directorate froze $46.5 million of assets belonging to FlipVolt, the Indian branch of the Vauld cryptocurrency exchange. Vauld had previously filed for protection from creditors — a process in Singapore that is similar to Chapter 11 bankruptcy in the U.S. — on July 8, only four days after suspending withdrawals. Vauld subsequently announced a shortfall of around $70 million due to the Terra collapse and other factors, and reportedly owes creditors $363 million.

According to India's ED, 23 entities deposited Rs 370 crore (~$46.5 million) into FlipVolt, which the ED says were the proceeds of criminal activity. FlipVolt had "very lax KYC norms, no EDD [enhanced due diligence] mechanism, no check on the source of funds of the depositors, no mechanism of raising STRs [suspicious transaction reports], etc" and reportedly enabled the entities to launder the proceeds of crimes via the exchange.

Martin Shkreli dumps his project's token in "hack"

Martin Shkreli sits at a table, arms crossed and smirkingMartin Shkreli (attribution)
I've almost got to give it to him. When I wrote up Druglike, Martin "Pharma Bro" Shkreli's new "web3" project for drug discovery, and asked him some questions in the project Discord, I expected him to run into issues with the fact that he's trying to build a pharmaceutical software platform after being banned from the pharma business. But he seems to have exceeded my high expectations for this grift, pulling off a scam even before anything got off the ground.

The value of $MSI, Martin Shkreli Inu (really), plummeted 90% from $0.000014 to a mere $0.0000014 when a wallet owned by Shkreli suddenly dumped its tokens. The MSI token originally was a fan-made token, but Shkreli adopted it as the token "powering" Druglike (despite zero information as to how it's actually used to power the project). The MSI were swapped for 239 ETH (~$459,000).

Shkreli claimed via his Twitter persona "Enrique Hernandez" that "I got hacked last night." (Shkreli was banned from Twitter after being creepy to a journalist, and so now uses the thinnest of veiled identities to somehow evade Twitter suspension). Shkreli claimed that when he had tried to torrent a file called, no joke, [BigTitsRoundAsses] 17.12.14 - Jazmyn [1080p], he ended up with a remote access trojan. However, crypto research project Rug Pull Finder tweeted, "Bruh - why is the attackers wallet funded by you then".

Suspected Tornado Cash developer arrested in the Netherlands

A suspected developer of the Tornado Cash cryptocurrency tumbler was arrested in the Netherlands, according to the country's Fiscal Information and Investigation Service (FIOD). They said that he was "suspected of involvement in concealing criminal financial flows and facilitating money laundering". Wallet addresses used by Tornado Cash were sanctioned by the United States several days prior due to their use in laundering the proceeds of criminal activities.

It's not immediately clear from the statement whether the activities that led to the arrest involved more than just contributing to the Tornado Cash codebase, but it would be very concerning if not. There are complexities around the sanctioning of Tornado Cash — a fairly decentralized software project — that raise concerns about the criminalization of code. For many, it brings to mind the "Crypto Wars" (where "crypto" is referring to cryptography rather than cryptocurrency).

The largest Ethereum miner starts blocking Tornado transactions

The Ethermine mining pool is responsible for over a quarter of all Ethereum mining, making them the largest miner for that blockchain. On August 11, three days after OFAC added the project to its sanctions list, Ethermine stopped including Tornado Cash transactions in their blocks.

This came as a shock to some crypto enthusiasts, who were taken aback that such a large number of blocks in a "decentralized" and "censorship-resistant" project would reject Tornado Cash transactions. Others worried that more miners would do the same, which could eventually prevent Tornado Cash transactions from being validated at all.

Game studio pauses development on their game after sinking Kickstarter funds into crypto

A 3D rendered woman stands next to a green dragon-like creator, with her hand shading her eyes looking up into the distance. Behind her is grass and then a tropical beach. The title says "Untamed Isles" and there is a graphic in the bottom right that says "over 420% funded"Untamed Isles artwork (attribution)
Over 3,000 backers put a combined ~NZ$841,000 (~US$535,000) into Untamed Isles, a Pokémon-like MMORPG. Although the developers did eventually plan to add optional crypto elements for players who wanted them, it was not primarily a crypto game.

On August 11, about a year after the Kickstarter launched, the creators posted an update: they would be pausing development and putting the project on hold because they had run out of money. "We leaned into the crypto market and expanded rapidly off the back of the positive interest. When the crash came, we ended up heavily exposed with too short of a runway."

Project backers were not impressed by this announcement, with many asking for refunds — which the developers had promised if the game never launched. However, the game developers wrote that "Due to our cash reserves being empty, we are not in a position to refund our initial backers."

"Really disappointed by this- I put money into funding this game to back a game, not to throw money into the crypto market," wrote one backer. "Gutted and to be honest pretty appalled," wrote another.

Mailchimp bans a slew of crypto companies according to their no-crypto policy

The email marketing company Mailchimp reportedly suspended accounts belonging to several prominent companies and individuals in the crypto sphere, including crypto analytics tool Messari, blog Decrypt, wallet provider Edge, NFT artist Jesse Friedland, and the founder of the Cryptoon Goonz NFT collection.

Daniel Roberts, CEO of Decrypt, wrote on Twitter that they had used Mailchimp for more than four years, but that the company had "deactivated our newsletter account with no warning or explanation".

Mailchimp's acceptable use policy bans businesses offering "Cryptocurrencies, virtual currencies, and any digital assets related to an Initial Coin Offering". It's listed among other industries that they identify as having "higher-than-average abuse complaints, which can jeopardize deliverability" including work-at-home scams, make money online, and lead generation opportunities; gambling services or products; and multi-level or affiliate marketing. In an email reportedly sent to Friedland regarding his suspension, Mailchimp wrote, "We cannot allow businesses involved in the sale, transaction, trading, exchange, storage, marketing, or production of cryptocurrencies, virtual currencies and any digital assets."

In April, Mailchimp had experienced a security breach in which audience data was taken from around 100 accounts in finance and crypto-related industries.

OpenSea changes its policy, requires a police report to freeze NFTs

The dominant NFT platform, OpenSea, has changed its policy around NFTs that are reported as stolen. OpenSea now requires those who have reported an NFT as stolen to produce a police report within seven days, or else they will re-enable trading of the asset.

Some have praised the change as a good step towards preventing false reports, whereas others have complained that the change does not apply retroactively to assets that have already been frozen from trading on the platform. Others have raised concerns about the new requirement that they engage with police.

Coinbase stopped sending price notifications during crypto crash

Mother Jones has reported that the Coinbase crypto exchange stopped sending the email notifications that it had previously sent some users when the price of a cryptocurrency changed noticeably. Coinbase had been trialling these price change alerts in January, and some users had grown to rely on them to notify them when cryptocurrency prices changed noticeably. However, the company quietly stopped sending these emails sometime in February, before they were re-enabled for all users.

While the choice could be chalked up to the end of an A/B test, some legal experts have expressed concern about the sudden and unannounced change in behavior: "It's potentially illegal... This seems straight up deceptive. They said we'll email you price alerts and then stopped doing it without saying they were [going to stop]." He also noted that even if a customer didn't sue for damages, depending on the number of users who saw the alerts, "if they caused harm to people who didn't sell crypto that they would have sold, that is potentially actionable by regulators." Another expert observed that a traditional brokerage firm would likely be penalized by FINRA if they did something similar.

Celsius CEO Alex Mashinsky reportedly sells off some of his $CEL holdings during price increase and attempted short squeeze

Alex Mashinsky sitting onstage, wearing a Madonna microphone and a t-shirt reading "Banks are not your friends." with the Celsius logoAlex Mashinsky (attribution)
A wallet identified as belonging to Celsius CEO Alex Mashinsky sold off 17,475 CEL (the native token of the Celsius lending platform) for around $28,000. Celsius is undergoing bankruptcy proceedings, and users remain without access to their cryptocurrency that's locked in the platform.

CEL enjoyed an all-time-high of around $8 in June 2021, but has been trading for less than half that for this year. The token hit $0.15 on the day Celsius announced they would be pausing withdrawals, but has, oddly, recently spiked above $2. Some have attributed this to the ill-advised attempts at a short squeeze by a group of people who believe that exchanges are somehow running out of CEL tokens to provide to short-sellers, and that a properly-coordinated short squeeze could somehow realistically send the token to $100. Protos did a useful explainer on why this is unlikely to work, but those pushing the idea have a fervency not unlike what was seen with those pushing the GameStop short squeeze, and enjoy dismissing those who question the strategy as "CEL shorters" who are trying to ruin any chance of a Celsius recovery.

All the same, Mashinsky can possibly thank the short squeeze folks for helping him pump his bags, and sell off a pile of tokens for over 10x more than what he previously could have.

Analytics firm Elliptic says RenBridge has been used to launder more than $540 million in proceeds from crimes over the last two years

Two days after OFAC sanctioned crypto tumbler Tornado Cash, the blockchain analytics firm Elliptic pointed to cryptocurrency bridges as a likely future target for sanctions if the Treasury Department continues its attempts to crack down on crypto money laundering. In addition to their purpose of allowing different currencies to be used cross-chain, cryptocurrency bridges are a useful tool for obscuring the path of cryptocurrencies, as it can be difficult for outside observers to link cryptocurrencies flowing into a bridge with the destination wallet(s) on the other end.

Elliptic singled out the RenBridge chain in particular, saying that at least $540 million in funds linked to crimes have been moved through the bridge in the last two years. $153 million of this, they say, originated from ransomware plots, and $53 million is allegedly linked to the Russia-based group behind the Conti ransomware.

Blur Finance rug pulls for over $600,000

The yield aggregator Blur Finance rug pulled, taking more than $600,000 in assets from the BNB Chain and Polygon-based projects before deleting their website and social media accounts. The project had only been active for about a month, and had accumulated about 750 users on its original BNB Chain implementation, and on August 5 had announced their launch on Polygon. In the announcement, they boasted returns of over 4,000% APR.

Hotbit crypto exchange suspends trading due to criminal investigation

Tweet from Hotbit News: 📢Announcement on the Suspension of Hotbit Website Service on August 10th, 2022 Details👉https://hotbit.zendesk.com/hc/en-us/articles/8074249353495 ⚠️User's assets are safe, please don't worry. We are sorry for any inconvenience caused!😢
Followed by a GIF of Anya Forger from Spy x Family cryingHotbit announcement tweet (attribution)
The Hotbit cryptocurrency exchange abruptly announced they would be suspending services because they were under criminal investigation, and law enforcement had frozen some of their assets. Hotbit claims that the investigation pertains to a former employee who was involved in a "project" unbeknownst to Hotbit, which investigators believe was illegal. Hotbit urged that all customer funds were safe, which seems a bit of a bold statement when their funds are currently frozen to the point where the exchange can no longer operate.

Hotbit announced the suspension on Twitter with a GIF of a crying Anya from the anime series Spy × Family which, despite demonstrating their good taste in shows, does not seem like it would exactly inspire confidence among customers.

CoinFLEX files for restructuring

The cryptocurrency exchange CoinFLEX announced they had filed for restructuring, a move that probably didn't surprise too many people after they stopped customer withdrawals in June, sued Roger Ver over $84 million they claimed he owed them in July, and then significantly cut staff in order to try to massively reduce their costs.

As tends to happen with insolvent exchanges, they are hoping to "compensate" their depositors with a mix of CoinFLEX-issued tokens and equity, rather than actual money or more liquid, established cryptocurrencies.

Nuri crypto exchange files for insolvency

The German cryptocurrency exchange Nuri, formerly known as Bitwala, filed for insolvency. Interestingly, they did not stop customer withdrawals — as have many exchanges who later announced they were insolvent — allowing its existing users to continue to withdraw funds and otherwise use their services.

Their announcement began by saying, "We would like to inform you about an important development that does not affect our services, funds or investments with Nuri," and throughout the post they stressed that customer funds were safe.

Nuri blamed the insolvency on everything from "the ongoing after-effects of the Corona pandemic" to "the economic and political uncertainties in the markets after Russia's invasion of Ukraine" to the more recent crypto bear market.

On October 18, the company announced they would be shutting down after failing to find someone to acquire the company. They asked customers to withdraw their funds by December 18. Unlike many of the services that faced insolvency crises this summer, Nuri is closing without any loss of customer funds.

Curve Finance frontend compromised, $620,000 stolen but later recovered by exchanges

Curve Finance's frontend at curve.fi was compromised, prompting users to give token approval to a malicious smart contract. Stolen funds were then transferred out to the FixedFloat cryptocurrency exchange and the Tornado Cash tumbler. It appears that at least 362 ETH (~$620,000) have been stolen.

Curve acknowledged the apparent exploit, tweeting at the iwantmyname domain platform to say they believed the issue was on their end. Around an hour after the issue was widely noticed, Curve announced the "issue has been found and reverted", and to use the alternate Curve Finance domain until DNS changes propagated for the affected domain. They also urged users to revoke any recent contract approvals they'd made on the Curve platform.

FixedFloat tweeted that they had been able to freeze 112 of the stolen ETH (~$192,000) that had been transferred to their platform. Binance later announced that they'd recovered the remaining stolen funds, with founder CZ tweeting, "The hacker kept on sending the funds to Binance in different ways, thinking we can't catch it. 😂"

Truth in Advertising sends letters to 17 celebrities about undisclosed promotion of NFTs

A collage of sixteen of the seventeen recipients of TINA's letters: Drake Bell, Tom Brady, DJ Khaled, Eminem, Jimmy Fallon, Paris Hilton, Eva Longoria, Madonna, Floyd Mayweather, Meek Mill, Von Miller, Neymar, Shaquille O'Neal, Gwyneth Paltrow, Logan Paul, and Snoop DoggSome of the recipients (attribution)
Non-profit advertising watchdog organization Truth in Advertising (TINA) sent letters to seventeen celebrities, urging them to follow FTC requirements on clearly disclosing when they are being paid to promote a brand. TINA had also previously sent such letters to Justin Bieber in relation to his promotion of the inBetweeners NFT project, and to Reese Witherspoon in relation to her endorsement of World of Women.

The celebrities who received letters from TINA were Drake Bell, Tom Brady, DJ Khaled, Eminem, Jimmy Fallon, Paris Hilton, Eva Longoria, Madonna, Floyd Mayweather, Meek Mill, Von Miller, Neymar, Shaquille O'Neal, Gwyneth Paltrow, Logan Paul, Snoop Dogg, and Timbaland.

At least 101 NFT Discord servers compromised in July

A fluorescent green skull with blond hair, a piece of cheese floating above its head, a rainbow connecting its eye sockets, and padded armorTasty Bones' Discord was hacked twice in July (attribution)
I've largely stopped covering crypto Discord compromises because they occur so frequently it would drown out everything else. OKHotshot has been keeping count, though, and according to them, at least 101 servers have been compromised in the month of July. Four of the projects — EY3KON, Tasty Bones, Universe by Barnabe, and Angry Dinos — were each compromised twice in that month.