Rubic cross-chain exchange hacked, $1.4 million in user funds stolen

The Rubic cross-chain exchange suffered an exploit in which attackers were able to siphon a total of around $1.4 million in user funds from their wallets. The exploit was enabled by an error by the project team, who erroneously added the USDC stablecoin address as a router, which allowed attackers to arbitrarily withdraw USDC held by Rubic users. The hacker then transferred the stolen funds through the Tornado Cash cryptocurrency mixer.

Rubic paused their project to limit further thefts, and stated they would pursue audits before coming back online. They also stated that they would "strive to compensate for the losses".

Police arrest two executives of shuttered AAX exchange

The Hong Kong-headquartered AAX cryptocurrency exchange suddenly halted withdrawals on November 13, claiming they were performing temporary system maintenance. However, withdrawals were never re-enabled, and customers quickly realized the exchange was unlikely to resume withdrawals. Some even began searching for the whereabouts of AAX execs, showing up at offices in Hong Kong and Singapore.

Now, Hong Kong police have arrested Liang Haoming and Thor Chan, two executives connected to AAX. Police have reportedly accused the men of using the maintenance excuse to halt customer withdrawals while dealing with a liquidity crisis.

Defrost Finance fails to rug pull

Defrost Finance, a defi trading platform built on the Avalanche Network, apparently tried and failed to rug pull its users. The project claimed on December 23 that they were "sad to announce that our V2 has suffered a hack, with an attacker using a flash loan function to withdraw funds". They later announced that this "hacker" had also managed to exploit the v1 version of their project. Altogether, it appeared that tokens valued at around $12 million had been stolen.

Observers were quick to notice that the "hack" was made possible by the addition of a fake collateral token, which was then manipulated to liquidate the protocol's users, suggesting the "hack" was likely an inside job.

On December 26, Defrost claimed that the "hacker" had miraculously returned the money. The announcement didn't seem to convince the project's users, who left comments like, "It was never hacked. You tried to rug your users".

Defrost Finance's team had previously run a project called FinNexus, which also suffered a "hack" in May 2021 that was widely believed to have been a rug pull.

The latest Pokémon knockoff is stopped in court

Knock-off Pokémon crypto products — including NFTs and blockchain games — have been so prevalent in the past two years that they've earned their own collection on this blog.

Now, it seems that The Pokémon Company International (TPCI) is doing something about it. They hired private investigators to try to locate and serve a company called Kotiota with legal papers, though ultimately were unsuccessful in finding their offices or any employees.

Kotiota was engaged in unusually brazen Pokéfraud, sending legal letters to news outlets who had written about the real Pokémon games and insisting they be named as a developer. Their website falsely claimed Kotiota had been working on various recent Pokémon games, and the company had even forged an agreement with TPCI to claim they had a license agreement.

Kotiota had been planning to release a Pokémon-based play-to-earn blockchain game and collection of NFTs in January 2023, but an Australian court has barred the company from doing so, and ordered them to stop using the Pokémon brand or claiming to have developed the games.

FTX executives Caroline Ellison and Gary Wang plead guilty to criminal charges, are cooperating with investigation

Side-by-side photos of Caroline Ellison and Gary WangCaroline Ellison and Gary Wang (attribution)
Two of Sam Bankman-Fried's inner circle, Caroline Ellison and Gary Wang, have pled guilty to federal criminal charges and are cooperating in the case against Sam Bankman-Fried. Ellison was the CEO of Alameda Research, the trading firm founded by Sam Bankman-Fried in 2017. Wang was a co-founder of FTX alongside Bankman-Fried, and served as its CTO.

Ellison's and Wang's pleas were announced in a short message by U.S. Attorney Damian Williams, who did not elaborate on what the charges were. He again urged any others who had knowledge of criminal activity at FTX to come forward, and warned that these were not the last charges he expected to file.

Simultaneously with the charges from the Justice Department were civil complaints from the Securities and Exchange Commission, which alleged that both had been involved "in a multiyear scheme to defraud equity investors in FTX". In particular, the SEC accused Ellison of artificially manipulating the price of FTT, the FTX-issued token that formed a large portion of Alameda's balance sheet. The SEC accused Wang of creating a backdoor in FTX software that allowed Alameda to move customer funds from FTX for use in its trading activities.

The CFTC filed an amendment to their complaint against Sam Bankman-Fried, adding Ellison and Wang as defendants.

Paxful crypto marketplace delists ether, citing "scams that have robbed people of billions"

Peer-to-peer crypto marketplace Paxful announced that it will be delisting ether, citing "scams that have robbed people of billions".

So close. You're almost there.

Paxful CEO Ray Youssef said in an email to the platform's claimed 11.6 million customers that the decision was based on Ethereum moving from proof-of-work to proof-of-stake, not being decentralized, and spawning an ecosystem of scammy Ethereum-based altcoins. The email featured a header photo of Youssef himself posing triumphantly, and Youssef spent much of the subsequent day tweeting memes he made from pictures of himself.

With the loss of ether, the platform will only allow swaps of Bitcoin, Tether (USDT), and USDC — despite both Tether and USDC being Ethereum-based tokens.

Swan Bitcoin releases a new product to streamline the process of losing your house speculating on Bitcoin

"Convert home equity into Bitcoin", Swan Bitcoin advertises with their new home equity product. Relatively few details are available on the new loan product they're offering, but they advertise that you can close on the loan in "as little as 5 days", obtain loans with no income or credit check, and obtain loan amounts from $20,000 to over $1 million. What could go wrong?

"Rates starting at 7.5%, with 80% Bitcoin upside appreciation", they say. Downside risk is, naturally, not mentioned.

For those unfamiliar, Swan Bitcoin is a US-based Bitcoin-only crypto platform (although CEO Klippsten would surely yell at me for saying it is a "crypto platform", as he insists at every opportunity that "Bitcoin is not crypto").

Core Scientific Bitcoin mining firm files for bankruptcy

Core Scientific warned in October that it was teetering on the edge of bankruptcy, so it was no huge surprise when the company filed for bankruptcy protection on December 21. Core Scientific is one of the largest Bitcoin miners, responsible for around 10% of the computing power on the Bitcoin blockchain. The company operates around 143,000 miners, and host an additional 100,000.

Core Scientific is only one of many Bitcoin miners in distress, as low Bitcoin prices and other factors make mining much less profitable. Other mining firms, including Argo Blockchain and Greenidge Generation, have warned that they may face bankruptcy in the near future. Some firms, such as Iris Energy, have powered off a significant amount of their mining capacity.

Auros files for bankruptcy

Crypto market maker Auros filed for bankruptcy protection in the British Virgin Islands, not long after a missed loan repayment to the Maple defi lender in late November signaled something was amiss. At the time, Auros attributed the missed payment of 2,400 wETH (valued at ~$3 million at the time) to a "short-term liquidity issue as a result of the FTX insolvency".

Now, however, Auros is seeking a "light touch" liquidation path that would allow them to continue operations while they develop a restructuring plan. Meanwhile, they have missed another Maple loan repayment, this time for $7.5 million.

Court filings have revealed that "a significant proportion of the Company's assets" are frozen with FTX, leaving the company insolvent. These assets have an estimated value of $20 million.

Waves founder announces a new, "undepeggable" stablecoin as USDN even more dramatically de-pegs

A one year chart of the USDN price, showing it repeatedly dipping below the intended $1 peg, and becoming very unstable beginning in late August 2022USDN price over the last year (attribution)
Apparently adopting Do Kwon's belief that the solution to a crashing algorithmic stablecoin project is creating another project, Waves founder Sasha Ivanov has announced, "I will launch a new stable coin". This comes after Neutrino USD — aka USDN — has spent much of the year de-pegged, recently plunging dramatically to around $0.50.

The USDN stablecoin remained within a few cents of its intended USD peg for about a year, before losing its peg in April. Since then, it has had a pretty bumpy road, spending much of the year more than a few cents off the dollar peg, and dropping much farther below it in early November.

A less-than-enthused commenter responded to Ivanov's Twitter announcement of a new coin, writing, "My brother in Christ more stablecoins to depeg is not the answer". "It will be undepeggable", replied Ivanov. Well, in that case.

Scammer steals fourteen Bored Apes from one victim, flips them for over $1 million

A Bored Ape with grey fur, wearing a red baseball cap, a green army jacket, and a blindfold over its eyesBAYC #2060, which the scammer claimed to want to license (attribution)
A scammer spent a month setting up a con in which they stole fourteen Bored Ape NFTs belonging to one individual. Posing as a casting director at a real film production company—complete with a fake website, a fake partner company, and fake individuals pretending to have signed deals with the company—a scammer was able to convince the collector that they were interested in paying $13,000–$17,000 to license a Bored Ape for use in an animation.

After some back-and-forth, with legitimate-looking contracts and falsified emails appearing to come from the real company's real founding director, the NFT collector was asked to use their crypto wallet to sign a contract, via the fake company partner website that had been set up.

When the collector did so, the smart contract drained the collector's wallet of its fourteen pricey Bored Ape NFTs, then accepted the highest offers that were outstanding on each of the Bored Apes, netting 852.9 ETH. The scammer converted the stolen ETH to the DAI stablecoin, making off with $1,075,000 in DAI.

Over 100 Bitcoin moved from dormant QuadrigaCX wallets in "unauthorized" transfer

QuadrigaCX was a Canadian crypto exchange that shut down and filed for bankruptcy in early 2019, with hundreds of millions more in liabilities than in assets. It later became apparent that the exchange's founder, Gerald Cotten, had taken customer funds for his own personal use. Cotten reportedly died shortly before the exchange's collapse, though there have been questions around whether he may have faked his own death to pull off an exit scam. Poor accounting processes have made the bankruptcy process — which is still ongoing — a nightmare for those in charge of trying to locate and recover assets.

Now, someone has moved 104 BTC (priced at $1.75 million today) from what is supposed to be a Quadriga cold wallet. In 2019, Quadriga's bankruptcy trustee Ernst & Young revealed they had erroneously transferred these roughly 100 Bitcoin to that wallet, which they could not access. Oops.

Most of the stolen BTC was transferred to a privacy service to obfuscate its ultimate destination. Ernst & Young subsequently confirmed the transfers were "unauthorized transactions" and not performed by them.

Raydium exploit results in ~$5 million loss

An exploit on the Solana-based Raydium decentralized exchange project resulted in a total loss to the platform of $4.4 to $5.5 million. The attacker's actual spoils were less — somewhere around $2–3.5 million.

Raydium claims the exploit was a trojan attack, though they've provided no further evidence to substantiate this. According to Raydium, a trojan allowed an attacker to compromise the private key belonging to the pool owner account. With control over the private key, the attacker was able to withdraw a mix of assets from the pools. They bridged at least $2 million to Ethereum and tumbled them through Tornado Cash; another $1.5 million remained on the Solana chain, where some projects began freezing assets.

Raydium has offered a 10% "bug bounty" to the hacker if they return the stolen funds.

Auditing firm cuts ties with crypto clients, deletes Binance's "proof of reserves" report they issued days prior

The accounting firm Mazars Group has ceased working with cryptocurrency clients, including Binance, KuCoin, and Crypto.com. A statement from the firm attributed their decision to "concerns regarding the way these reports are understood by the public".

On December 7, a branch of Mazars Group had published a "proof of reserves" report for Binance — though it only accounted for Bitcoin, and did not reflect liabilities for Binance's lending product. On December 9, Crypto.com also published a "proof of reserves" report that had been produced by the firm.

As of December 16, the Binance audit — which had been hosted on Mazar's website — had been deleted.

"Proof of reserves" reports have been offered by various cryptocurrency exchanges in lieu of proper audits, but have reasonably failed to reassure many customers of those exchanges. These reports do not involve the scrutiny that would be applied by a full audit — they only reflect a snapshot of assets at a point in time, and do not show a firm's liabilities.

Donald Trump teases a "major announcement" that's just NFTs

Social media post by Donald Trump: "MAJOR ANNOUNCEMENT! My official Donald Trump Digital Trading Card collection is here! These limited edition cards feature amazing ART of my Life & Career! Collect all of your favorite Trump Digital Trading Cards, very much like a baseball card, but hopefully much more exciting. Go to collecttrumpcards.com/ & GET YOUR CARDS NOW! Only $99 each! Would make a great Christmas gift. Don't Wait. They will be gone, I believe, very quickly!"Donald Trump NFT announcement (attribution)
It's finally happened. The siren song of NFT grifting proved too much for Donald Trump.

Trump supporters got all excited when Trump posted on social media to tease a "major announcement". Was he going to run for speaker of the House? Return to Twitter? Unveil a presidential running mate?

His supporters were surprised — and not exactly thrilled — when the announcement turned out to be a collection of 45,000 NFTs (sorry, "digital trading cards") featuring artwork of himself in heroic outfits and poses. The NFTs are "just" $99 apiece, and money goes to Trump, not his campaign.

Even some of his strongest supporters were nonplussed. Steve Bannon said, "I can't do this anymore," and opined that he should fire whoever advised him to make the collection. A source working for Trump said that he is "supposed to be running for president right now", and questioned how "fleecing our supporters for $99" was in service of that goal.

Nevertheless, the NFTs seemed to sell decently well, with more than 30,000 minted by that evening.

Binance withdrawals surge due to concerns over the company's reserves

Binance, the largest cryptocurrency exchange in the world, processed at least $1.9 billion in withdrawals in a 24-hour period—considerably more than it processes in a typical day. In fact, the company briefly had to pause withdrawals of the stablecoin USDC because they needed to swap various stablecoins in order to continue to process withdrawals—something they could not do while the New York-based bank was closed.

These mass withdrawals signal concerns about Binance, whose users are looking for reassurance that the company is not engaged in similarly shady practices as their now bankrupt rival FTX. Recent news that the US Department of Justice is considering criminal charges against the company has not helped reassure customers.

Sam Bankman-Fried arrested

Sam Bankman-Fried pictured from the shoulders upSam Bankman-Fried (attribution)
Sam Bankman-Fried has been arrested by Bahamian authorities, who said in a press release that they took the action "follow[ing] receipt of formal notification from the United States that it has filed criminal charges against SBF and is likely to request his extradition".

Argo Blockchain faces possible bankruptcy

When the company accidentally published draft bankruptcy documents to its website, Argo Blockchain was forced to reveal that it is in last-ditch negotiations to raise capital. The company stated that they were still hoping to avoid a Chapter 11 filing, but that they were "at risk of having insufficient cash to support ongoing business operations within the next month". The company has been trying to raise $25–35 million since late August, and when a $27 million equity deal fell through in early November, the miner acknowledged it might soon have negative cash flow.

As a result of the inadvertent publication of bankruptcy documents, the London Stock Exchange and Nasdaq paused trading on the company's stock. The company published a statement saying they had requested trading be re-enabled, since they had not actually filed for bankruptcy (yet).

U.S. Department of Justice is considering filing criminal charges against Binance

Reuters has reported that the U.S. Department of Justice is considering filing criminal charges against Binance executives, including CEO Changpeng Zhao ("CZ"). This comes as a part of a four-year-long criminal investigation into money laundering and sanctions evasions. According to Reuters, DoJ prosecutors are "split" on whether to take aggressive actions against Binance executives, or to spend more time reviewing evidence.

Reuters reports that Binance's defense attorneys have argued, among other things, that "a criminal prosecution would wreak havoc on a crypto market already in a prolonged downturn." Well then.

Decentraland adds that one feature we've all been waiting for: landlords

A square made up of blue, grey, and red pixels representing a land mapThis Decentraland plot just sold for $19,000 (attribution)
If the idea of dropping thousands of dollars to "own" a plot of "land" in the Decentraland metaverse doesn't do it for you, have I got news for you: Decentraland has just introduced official support to allow its users to become a part of the rentier class. Exciting!

In case you were wondering, I checked, and yes. Someone has already come up with the concept of metaverse mortgages.

Personally, I'm excited to see other horrific parts of the system of homeownership get recreated virtually. Metaverse homeowners associations. Metaverse building permit red tape. Metaverse NIMBYs. Metaverse property liens. Metaverse neighborhood watch.

Lodestar Finance attacked and drained of nearly $7 million in assets

The Arbitrum-based crypto lending platform Lodestar Finance was attacked by an exploiter who was able to manipulate the price of the plvGLP token, allowing them to "borrow" the entire available liquidity of the Lodestar platform with the inflated token. The attacker made around $6.4 million in profit. Some of the stolen tokens were burned—hence the difference between the attacker profit and the loss to the platform.

According to Lodestar, they think they may be able to recover around $2.4 million of the stolen funds. Meanwhile, they have attempted to contact the thief to try to negotiate the return of stolen funds. "We will generously reward your collaboration," they wrote on Twitter.

CEO of crypto media outlet The Block resigns after it's revealed he took tens of millions in loans from Sam Bankman-Fried

The Block is a cryptocurrency-focus media outlet that was originally founded in 2018 by Mike Dudas. In 2020, Michael McCaffrey became CEO of the company, and in 2021 he led a buyout to make the company employee-owned. Dudas says that at the time, he believed "McCaffrey's family was wealthy and loaned him money to buy out [his stake] and the VCs so the team could assume full independent ownership."

Now it has come to light that McCaffrey had actually taken a series of loans amounting to $43 million from Sam Bankman-Fried, founder of the now-collapsed FTX exchange and Alameda trading firm. According to McCaffrey and various others at The Block, he was the only one who knew of the arrangement.

The original $12 million loan was used for the company buyout. Another $15 million loan in January 2022 went towards company operations. A third $16 million loan was used... to buy personal real estate in the Bahamas.

Meanwhile, The Block's disclosures page reads, "It is critical that The Block is fully transparent about our own financial holdings so as to avoid any appearance of bias or impropriety. The most valuable asset that we hold and strive to earn again every day is our reader's trust. Therefore, we have implemented a financial disclosure policy that is industry leading."

Class action lawsuit against Jimmy Fallon, Paris Hilton, Justin Bieber, Gwyneth Paltrow, and others accuses them of undisclosed NFT promotions

Paris Hilton, wearing a neon green dress, sits onstage next to Jimmy Fallon, who is at his desk on the Tonight Show. He is holding up two cardboard printouts of Bored Ape NFTs.Paris Hilton and Jimmy Fallon talk up their Bored Apes in an excruciating segment of The Tonight Show in January 2022 (attribution)
A class action lawsuit against the company behind Bored Apes and its executives, those on the board of "Ape DAO", a whole host of celebrity promoters and brands, and the MoonPay service has accused the group of a scheme to employ celebrities to promote Bored Ape NFTs and ApeCoin without proper disclosures. The suit goes on to claim that MoonPay, a service known for brokering big-ticket celebrity crypto purchases, was used to obfuscate payoffs, and itself benefitted from the publicity earned from brokering these deals. The suit alleges that each of the "promoters" were compensated in some way, either through direct payments or via financial stake in MoonPay.

The promoters listed in the lawsuit are: talent manager Guy Oseary, digital artist Beeple, Madonna, Paris Hilton, Jimmy Fallon and related entities, Justin Bieber, Gwyneth Paltrow, Serena Williams, Diplo, Post Malone, Snoop Dogg, Kevin Hart, the Chainsmokers, Steph Curry, Future, The Weeknd, DJ Khaled, and Adidas.

Former Love Island Australia contestant Vanessa Sierra rug pulls her NFT project

A simple illustration of a blue blob shape wearing a rainbow pastel beanie and beige hoodie with a yellow smiley face on it, smoking a cigarette.SmolBoy #128 (attribution)
After a stint on Season 2 of Love Island Australia, Vanessa Sierra has made a career as a successful OnlyFans performer. In 2021, she also began offering crypto trading tips in a Telegram channel that now has more than 10,000 subscribers, and in March 2022 she launched her first NFT project: "Smol Boyz Land". The project was supposed to involve acquiring metaverse land, and was based around her opinion that "it's clear statistically and exponentially that [metaverse land] prices will trend upwards". What could go wrong?

An investigation by OKHotshot has reported that Sierra rug pulled the NFT project, using project funds to wash trade her own NFTs before cashing out. In total, she withdrew 120 ETH (at the time worth around $316,000; today worth around $151,000). Throughout, Sierra claimed that "absolutely none of the funding has been taken by founders".

In addition to the allegations around her NFT project, OKHotshot identified other shady behavior by Sierra, such as pumping-and-dumping other NFTs she'd purchased, and placing lowball offers in $DAI on big-ticket NFTs, hoping that their owners would mistake them for ETH.

After OKHotshot published the thread, Sierra blocked them on Twitter, and deleted the NFT project's Twitter account and website.

Digital Surge enters administration

The Australian crypto broker Digital Surge entered voluntary administration several weeks after suspending withdrawals in the wake of the FTX collapse. In their announcement, executives proposed a "proposed rescue plan" that will be voted upon by customers, and which would involve cash infusions from the company's directors.

Some of Digital Surge's customers reported having entrusted the company with hundreds of thousands of dollars from their superannuation funds (retirement pension). "I lost everything," said one customer who had put his entire superannuation of more than AU$150,000 (~US$102,000) into his Digital Surge account, where it is now frozen.

FTX-hosted NFTs break after website is redirected to a restructuring page

A Coachella NFT on the Magic Eden platform titled "Reflection '15 #47". The image for the NFT is a large grey square, because the image can't be loaded.Broken FTX NFT shown on an external NFT platform (attribution)
After FTX declared bankruptcy, the entire FTX.us domain was redirected to a page providing information on the bankruptcy proceedings.

However, NFTs that had been minted on the FTX platform relied on metadata from an API at that domain, meaning that the NFTs are now pointing to broken links. Owners of these NFTs can still see that the NFT exists, but images no longer work—even when viewing the NFTs in their own wallets, or when listing them for sale on other platforms.

Other projects that rely on the FTX NFT platform's API, such as the Coachella NFT project, also broke: the Coachella NFT platform shows 0 NFTs in existence. Those NFTs still show up where they are listed on external NFT platforms, although the images and metadata are broken.

Koinly lays off 14% of staff

UK-based crypto tax company Koinly announced they would be letting go of 14% of their team. This amounted to more than 100 employees, including the entire London- and Sydney-based teams. The company attributed the decision to the crypto market decline, as well as "fewer people reporting crypto on their tax returns". Hmm.

The layoffs were reportedly "terribly" executed, with days of uncertainty and employees receiving little or no notice before being fired.

Swyftx lays off another 40% of employees

Following a round of layoffs in August that cut 21% of their workforce, Australian cryptocurrency exchange Swyftx has just performed another round of layoffs less than four months later. This time they're cutting 40% of their staff, around 90 people.

Swyftx's CEO admitted the company had grown too fast. He attributed the decision to the continued downturn in the crypto market and shaken trust as a result of FTX, though Swyftx says they had no direct exposure to the bankrupt crypto exchange.

Orthogonal Trading is insolvent, defaults on $36 million in loans

The unsecured lending platform Maple Finance published a blog post announcing that they were severing ties with Orthogonal Trading, who had "misrepresented its financial position" for a month. "It is now clear that they have been operating while effectively insolvent, and it will not be possible for them to continue operating a trading business without outside investment," wrote Maple.

On December 3, Orthogonal Trading admitted to Maple that they were unable to meet loan repayments. The group was unable to repay a $10 million loan due the following day. The group has $36 million in liabilities across various loans on Maple's USDC and wETH pools.

Orthogonal Credit, a sister group to Orthogonal Trading, published a blog post distancing themselves, writing that they were "shocked and dismayed" by Trading's misrepresentation. "We are speechless by the extent of the exposure and liquidity position of Orthogonal Trading’s book of business," they wrote. They attributed the insolvency to FTX exposure.

Bybit lays off another 30% of employees

After reducing their staff by 20–30% in June, Dubai-based cryptocurrency exchange Bybit is doing another round of layoffs. This time the cut is estimated at around 30%, which is likely around 750 people based on their headcount.

In a Twitter thread, Bybit CEO attributed the layoffs to the "deepening bear market" and said the layoffs touch all departments.

"We are all saddened by the fact this reorganisation will impact many of our dear Bybuddies and some of our oldest friends," he wrote. On the bright side, they no longer have to be called "Bybuddies".

Genesis owes $900 million to customers of Gemini Earn

After a domino effect in which Gemini suspended withdrawals from its "Earn" lending product due to Genesis suspending withdrawals due to FTX's collapse, it's been revealed by the FT that Genesis holds around $900 million in Gemini customer assets.

Gemini has formed a creditor committee to try to recoup funds from Genesis, as well as Genesis parent company DCG.

AAX customers search for executives

On November 13, the AAX cryptocurrency exchange suspended withdrawals, claiming they were dealing with a botched system upgrade. Shortly before, they had reassured their customers that they had stable reserves and no exposure to FTX.

On November 28, the company's vice president for global marketing and communications acknowledged that he had resigned from the company, explaining on Twitter that "I did fight for the community but none of the initiatives we came up with were accepted."

Upon realizing that the exchange was unlikely to resume withdrawals, some customers have taken it upon themselves to try to find AAX's executives. Some showed up at the Hong Kong headquarters, only to find it deserted. Another user appeared at their Singaporean coworking space, also to find it empty. Users have been posting leaked personal identity documents of listed executives on Telegram, hoping to locate them.

Oracle attack on Helio, enabled by a separate hack on Ankr, allows attackers to steal $15 million

Attackers were able to take advantage of an exploit on the Ankr protocol to obtain around 183,000 aBNBc tokens for only 10 BNB (~$2,900). Before the Ankr exploit, which crashed the price of aBNBc, this many aBNBc tokens would have had a notional value of around $55.5 million. An issue with the price oracle on the staking platform Helio allowed attackers to borrow 16,444,740 HAY, a stablecoin intended to be pegged to the US dollar. The attackers then swapped those HAY for around $15 million in the BUSD stablecoin. Meanwhile, the HAY stablecoin lost its peg, crashing as low as $0.20.

Ankr defi project exploited for over $5 million

The BNB Chain-based Ankr defi protocol suffered an exploit of their aBNBc token. "We are currently working with exchanges to immediately halt trading," they wrote. However, the attacker had already bridged and tumbled around $5 million in funds from the exploit before the announcement was even made.

The attacker, and possible subsequent copycat attackers, used a vulnerability in the project smart contract to mint quadrillions of aBNBc, which they then swapped to various other tokens.

Binance halted trading on aBNBc tokens, as well as on HAY tokens, a stablecoin project that was subsequently exploited. Ankr also tweeted that "We have been in touch with the [decentralized exchanges] and told them to block trading", although decentralized exchanges are typically not supposed to be able to "block trading".

Ankr later blamed the hack on an employee, who they say had inserted malicious code into the protocol that was used to exfiltrate the private key.

Maersk and IBM announce the discontinuation of their blockchain-based TradeLens platform

Tough news for folks who insist that blockchains' obvious use case is for supply chains: IBM and Maersk have discontinued their private blockchain-based TradeLens platform due to lack of interest.

The idea was to use a private blockchain to "promote more efficient and secure global trade" by allowing shipping companies to share information including shipping container contents and tracking. However, it was apparently tough to convince these companies to actually adopt the project, and Maersk and IBM pulled the plug.

Auros misses loan payment due to FTX exposure

Crypto trading firm Auros missed a payment on its 2,400 wETH (~$3 million) loan from the Maple defi lending project. According to M11 Credit, the operator of the credit pool from which Auros has taken the loan, this was due to "a short-term liquidity issue as a result of the FTX insolvency".

In total, Auros has 8,400 wETH (~$10.7 million) and $7.5 million in USDC in loans from M11 credit pools, plus another $2.4 million in loans from the Clearpool defi lending project, for a total of more than $20 million in unsecured loans.

Kraken pays over $360,000 to settle violations of sanctions against Iran

The US cryptocurrency exchange Kraken settled charges from the Office of Foreign Assets Control (OFAC) alleging that they had violated sanctions against Iran. In the agreement, Kraken will pay $362,158.70 for the potential civil liability, and agree to commit $100,000 in various compliance controls.

The OFAC investigation was first revealed in July, in reporting from the New York Times.

Kraken lays off 1,100 employees in 30% cut

The US cryptocurrency exchange Kraken announced that it had laid off 30% of its employees, or about 1,100 people. They blamed "macroeconomic and geopolitical factors" resulting in less trading and fewer clients. "Unfortunately, negative influences on the financial markets have continued and we have exhausted preferable options for bringing costs in line with demand," they wrote.

Bitso lays off more employees

After cutting around 10% of their employees in May, the Latin American crypto exchange Bitso has performed another round of layoffs.

The company didn't reveal how many employees were affected by the layoffs, but Portal do Bitcoin estimated that around 100 employees were let go — around 15–20% of the company's remaining staff. One employee wrote on LinkedIn that he was among "dozens" who were laid off.

Block subsidiary TBD announces they will trademark "Web5", cancels plans after completely foreseeable backlash

TBD is a subsidiary of Block (formerly Square), a tech company co-founded by billionaire social media mogul and Twitter founder Jack Dorsey. In July, they unveiled the concept of "Web5", which they define an "extra decentralized web platform".

Who could have predicted that people might balk when TBD then announced they would try to trademark the term? Apparently they saw no irony in their attempt as a single, powerful entity to gain control over the trademark.

The same was not true of the people who responded to the post, who wrote things like, "We need to make sure web 5 is truly open by copyrighting it", and simply "🤡🤡🤡🤡🤡".

Six hours later, the company tweeted, "we have heard the community and we are responding to their concerns". They issued a statement acknowledging that "we have heard loud voices in the community who are concerned about the potential for abuse of trademark law in ways that would undermine the mission of decentralization." Gee, you think?

And no, they still haven't explained what happened to web4.

BlockFi files for bankruptcy

Crypto lending firm BlockFi has filed for Chapter 11 bankruptcy in the wake of the FTX collapse. The company was in dire straits in the spring after Terra and Three Arrows Capital blow-ups, but was bailed out in June by a $250 million loan from FTX, followed by a deal giving BlockFi a $400 million credit facility and giving FTX the "option to acquire" BlockFi.

Because of this dependency, it was no surprise when BlockFi announced they were once again in crisis following the FTX explosion. On November 15, the Wall Street Journal reported they were preparing for possible bankruptcy and considering layoffs.

On November 28, BlockFi filed for bankruptcy. Their filing estimates they have more than 100,000 creditors (the maximum option on the form), between $1–10 billion in assets, and between $1–10 billion in liabilities.

Shitcoin project tests the limits of cringe by building $600,000 statue of Elon Musk and delivering it to Tesla HQ

A large silver statue of Elon Musk's head, atop a rocket shaped structure. The sculpture is on the back of a flatbed truck.Elon Musk statue (attribution)
A shitcoin project desperate for the kind of pump that sometimes occurs when Elon Musk tweets about a cryptocurrency has gone to new lengths to get his attention. The group spent $600,000 and six months on a six-ton statue that's supposed to be Elon Musk's head on a rocket ship, but looks rather like a giant Elon Musk caterpillar.

The group then delivered the sculpture to Tesla HQ in Austin, Texas, and is reportedly refusing to leave until he accepts the statue. Unfortunately he may be too busy burning Twitter to the ground to have noticed.

Despite receiving press coverage in outlets including the Wall Street Journal, Fox Business, and USA Today, the project has as of yet failed to achieve much of a pump, and the token is trading around where it was several months ago. I've not named the token here in the hopes of not contributing to the goals of their viral marketing stunt.

150 companies seek Binance's bailout for organizations "facing significant, short term, financial difficulties"

On November 14, CZ of Binance announced an "industry recovery fund", which he said would devote money to ending "further cascading negative effects of FTX [and] help projects who are otherwise strong, but in a liquidity crisis".

In a blog post outlining the $1 billion initiative, Binance also divulged that "we have already received around 150 applications from companies seeking support under the [Industry Recovery Initiative]" — only a week and a half after it was announced.

Lemon Cash crypto exchange lays off almost 40% of its staff

The Argentinean cryptocurrency exchange Lemon Cash announced that they had laid off 38% of their employees, or around 100 people. The CEO blamed the international crypto environment, as well as a "recessionary period" in startup investments. He also urged that the announcement was not related to the FTX collapse, and explained that although the company had user funds stored with FTX, they withdrew them prior to FTX halting withdrawals.

Lemon had closed a $44.1 million series A funding round earlier this year, which they kicked off in July 2021.

Users unable to withdraw from CoinList due to protracted "technical difficulties"

Beginning in mid-November, users of the CoinList exchange and ICO platform reported that they couldn't withdraw assets from the platform. On November 24, CoinList tweeted, "There is a lot of FUD going around that we would like to address head on. CoinList is not insolvent, illiquid, or near bankruptcy. We are experiencing technical issues that are affecting deposits and withdrawals." This was not entirely reassuring, given the number of companies in the crypto industry who have announced they were just fine before being revealed to be deeply underwater.

CoinList lost $35 million in the June Three Arrows blowup. Shortly after the FTX collapse, CoinList claimed to have "no material exposure to FTX, FTT, Alameda or any credit exposure to any affiliate of FTX". However, they stopped processing withdrawals shortly after.

Iris Energy defaults on $100 million+ loan, unplugs miners

After announcing earlier in the month that they were close to defaulting on a $100 million+ loan, Iris Energy has defaulted. Unable to pay the $7 million/month in debt obligations with their $2 million/month gross profit, Iris Energy has powered off 3.6 EH/s worth of mining capacity.

Iris Energy's stock has plummeted to $1.66, down 93% from its $24.80 peak when the stock first began trading a year ago.

New York institutes two-year ban on new crypto-mining operations at fossil fuel plants

An aerial photo of a power plant, with trees and a lake in the backgroundGreenidge Generation in upstate New York (attribution)
Governor Kathy Hochul signed legislation to ban for two years the issuance of permits to new crypto-mining operations at fossil fuel plants. This seeks to cut down on the enormous energy costs of proof-of-work crypto-mining used for cryptocurrencies such as Bitcoin.

New York has been the home of some battles against crypto-miners who have set up shop at dormant fossil fuel plants. The Greenidge Bitcoin mining operation near Seneca Lake has been the locus of some particularly bitter battles against the industry: a dormant coal power plant that was converted to natural gas and devoted to Bitcoin mining in 2019, its permit renewals have been the focus of fierce protests. It will not be affected by this particular legislation, which only bans mining operations who have not already submitted applications for new or renewed permits.

Genesis warns of bankruptcy if it can't raise $1 billion

Genesis Global Trading has reportedly been telling investors that Genesis may need to file for bankruptcy if its attempts to raise at least $1 billion in new capital don't succeed. The firm revealed its exposure to FTX last week, halting withdrawals from its lending service and acknowledging that its derivatives arm has $175 million in funds locked in the bankrupt exchange.

The Wall Street Journal then reported that Genesis had been seeking a $1 billion emergency loan due to a "liquidity crunch due to certain illiquid assets on its balance sheet".

The halting of withdrawals from Genesis' lending business has already had major downstream impacts, as it is a major partner of other crypto lending services. Gemini and Coinhouse both followed Genesis in suspending withdrawals, as did other firms including Donut and GOPAX.

A Genesis bankruptcy would be a monumental event in crypto, with enormous downstream exposure.

Grayscale Bitcoin Trust suffers due to FTX collapse and doubts over reserves

Chart showing the premium/discount of the GBTC fund. The fund started at a premium of over 60% in 2017, and traded at a premium before crossing into a discount in early 2021. The discount has continued to grow since, and has recently dipped to 45%GBTC discount or premium (attribution)
Grayscale Bitcoin Trust (GBTC), the largest publicly traded crypto fund, hit record lows in the wake of the FTX collapse. The fund was trading at nearly a 50% discount on the underlying Bitcoin asset, as holders rushed to sell off their GBTC holdings.

This was not helped by Grayscale's response to those in crypto who were pushing Grayscale to follow suit with some other crypto platforms and publish proof of reserves. Grayscale announced that "due to security concerns, we do not make such on-chain wallet information and confirmation information publicly available through a cryptographic Proof-of-Reserve, or other advanced cryptographic accounting procedure". They did not elaborate on what these "security concerns" might be, and stoked fears in some that the company might not have the backing they ought to have.

Grayscale published a letter from Coinbase that basically said "we have Grayscale's assets, we promise", which did not seem to assuage the fears that have formed around centralized entities promising they have the assets they claim. This is understandable, given that FTX made similar promises, only to collapse.

Hoo Exchange vanishes

On June 19, the Hong Kong-based crypto exchange Hoo announced that they would be pausing withdrawals for "24–72 hours" while they transferred some assets to top up their hot wallet.

Since then, there has been little communication and a series of shady activities. According to HOO CEO Rexy Wang on Twitter on July 15, Hoo employee and former Binance head of security Fang Wenbin (known as "Top") "took advantage of his position at Hoo to delete the company system privately, causing everyone in the company to be unable to access the system, resulting in a temporary failure of the main domain name". Top replied to allege that, "Rexy himself has transferred most of the assets from the platform. Employee salaries and platform users cannot withdraw coins".

At some point after that, Wang made his Twitter private. Hoo's social media channels have been inactive. On November 18, the exchange website was replaced with a post that identified the "Hoo de facto controller", Xu Tong Hua, and said: "Currently all permissions for Hoo's wallet and website programs are controlled by Mr Xu, so please contact the official email if you have any questions."

Meanwhile, customers have been active on social media complaining about the apparent fraud, and some have formed an informal group pushing for legal action against Hoo.