🚨 @noble_xyz X account has been compromised and shared a phishing tweet. Please be vigilant! ⚠️

🚨 The official @RubiFi_HL X account has been compromised and is posting phishing tweets. Please be vigilant! ⚠️

1/ Investigating how I was able to identify one of the suspects connected to the $28 million Bittensor hack in 2024 by identifying laundered Anime NFT transactions linked to a former employee, and was awarded a white hat bounty for my efforts.

Victim: 0x4aF9CE37DEdF5C873A8b8a5Ab3B2E06c662Ba27f Scammer: 0x624Fc3Dc249E37E8BFd3e834C4dF81Ff2dA1D0Ca 0x7263A1d00eE7ae0eFC8902e2E2cfb4f3EF7f51A1 0xaF141813F4627FC2eacCD7d4D537627092218094 The victim signed the malicious "permit" and "increaseApproval" signatures.

Victim: 0x2EDB423422d2a9c710c492B79F55B0A99beB0C04 Scammer: 0x624Fc3Dc249E37E8BFd3e834C4dF81Ff2dA1D0Ca 0x124DD571B4d8C16456b743191dD9C550eD20116a 0x7263A1d00eE7ae0eFC8902e2E2cfb4f3EF7f51A1 The victim signed a malicious "license" signature.

Victim: 0x8C427fc354Ae49de8f7537Bd0128e6f708e3EC47 Scammer: 0x2Ab75aF4A74C8528F0f4D3f0D522719761b707FB 0x7FB61CA6e55734F552A3271749a0a9F3B6a9a6F3 0x9c6679cB3379F0ADa92fE42E86250bA4723E20E4 The victim signed a malicious "license" signature.

Victim: 0xf8751cd9e5df2daa464e2ae4f856763cc4554142 Scammer: 0x2Ab75aF4A74C8528F0f4D3f0D522719761b707FB 0x64437C40f366440cbbb12B2B9830c7d5fA3e91fc The victim signed the "permission" phishing signature.

Victim: 0xd2347f14e51cbbd8b46c925d08b10be97ea1101f Scammer: 0xA7Ad03f876Cd617A67E50adEFbEFB08c254dd15a 0x138a3564F6fC605edaA0152f958f4d2CAaF13F93 The victim signed a phishing transaction claiming to increase their limit.

🚨 ScamSniffer September 2025 Phishing Report September Losses: $11.78 million | Victims: 15,513 Compared to August: Losses decreased by 3.2% | Victims increased by 1.9% Key Insight: "License" signature phishing remains dominant. Largest single loss: 0x0d18…D7e3 lost approximately $6.5 million after signing multiple phishing licenses.

Victim: 0x556592f03690DBD8eDD81a48EDffabd69d6Df995 Scammer: 0x70c5698Da7F86487837f59642B1EbE5682dfa3c7 0xA7Ad03f876Cd617A67E50adEFbEFB08c254dd15a • 499 days ago: Phishing approval → 23.36 stETH lost • Today: Another 19.99 stETH lost (approval never revoked) Action: Revoke the expired approval immediately.