ChainCatcher message, crypto detective ZachXBT commented on the recent user data breach incident at Coinbase, pointing out that the exchange's practice of requiring phone numbers is extremely unsafe. He emphasized that scammers have stolen large amounts of money by spoofing calls and texts that appear to be from "Coinbase."ZachXBT stated that since most people have only one phone number and many websites require it, these numbers eventually get exposed in data breaches, making it nearly impossible for technically inexperienced users to defend against such attacks. Previously, reports indicated that some attackers obtained information by bribing Coinbase employees, specifically targeting high-net-worth account users with 7-8 figure assets.

ChainCatcher news, crypto detective ZachXBT commented on "Coinbase's plan to offer a $20 million bounty to informants of data ransom incidents," stating, "Over the past few months, I have flagged many of the thefts committed by these threat actors on X and Telegram, but no capable person is interested in this bounty. This bounty is only paid out upon success, and too much time is required upfront without any guarantee of reward."Previously, in February of this year, ZachXBT reported that a review of Coinbase withdrawals found $65 million stolen from Coinbase users between December 2024 and January 2025. This figure may be much lower than the actual amount stolen, as its data is limited to DM and the thefts discovered on-chain.

ChainCatcher news, on-chain detective ZachXBT tweeted that the police mistakenly detained former Yuga Labs security researcher Sam Curry in the 2022 Bored Ape NFT theft case (involving 14 NFTs worth over $1 million). ZachXBT identified the real suspect's wallet and its associated X accounts (now deleted) by tracking the flow of funds (including the Tornado Cash mixer).He pointed out that the police incorrectly used Curry's IP address (which appeared in the OpenSea logs due to his investigative work) as evidence, while Curry actually discovered the private key left by the attacker during his investigation of the theft.

ChainCatcher news, according to on-chain detective ZachXBT, the Frankfurt Public Prosecutor's Office announced that the crypto trading platform eXch has been seized by law enforcement, with 34 million euros and the platform's infrastructure confiscated.eXch is suspected of providing money laundering services for the Bybit hack, multi-signature vulnerabilities, FixedFloat vulnerabilities, the Genesis Creditor $243 million theft case, and multiple phishing attacks, involving hundreds of millions of dollars in funds, and has refused to freeze related addresses and comply with injunctions.

ChainCatcher message, crypto detective ZachXBT disclosed information on his personal channel that over $45 million was stolen from Coinbase users through social engineering scams last week.ZachXBT added: "In the past few months, I have reported that funds stolen from Coinbase users through similar social engineering scams have reached nine figures. Interestingly, other major exchanges have not experienced the same issue."

ChainCatcher news, according to on-chain detective ZachXBT, in the case where an early Bitcoin holder had $330 million worth of Bitcoin stolen, $7 million in funds have been frozen. The freezing action was assisted by institutions such as Binance.Previous news, ZachXBT referred to the $330 million BTC theft incident as a social engineering theft targeting an elderly person in the U.S.

ChainCatcher news, according to on-chain detective ZachXBT, the $330 million Bitcoin transfer event that caused a 50% surge in the price of Monero (XMR) on April 28 has been confirmed as a social engineering theft targeting an elderly American. The attackers used social engineering techniques to gain access to the victim's wallet and transferred 3,520 BTC (worth $330.7 million).Previously, on April 28, a suspicious transfer occurred at a certain address, amounting to 3,520 Bitcoins (approximately $330.7 million). Subsequently, these funds began to be laundered through more than six instant trading platforms and were exchanged for Monero (XMR), causing the XMR price to soar by 50%.

ChainCatcher news, according to monitoring by ZachXBT, about 9 hours ago, a suspected theft of 3,520 BTC (approximately $330.7 million) was transferred from the account of a potential victim. These bitcoins were transferred to a specific address and quickly exchanged for Monero (XMR) through multiple exchanges, causing the XMR price to rise by 50%.

ChainCatcher news, on-chain detective ZachXBT posted on social media that he has continuously heard two names related to the Mantra incident: Denko (founder of Reef Finance) and Fukogoryushu. It is alleged that in the days leading up to the 90% crash of the OM token, these two sought large loans using their holdings of OM as collateral.It should be noted that Reef Finance has a history of market manipulation; the token was delisted by Binance in October 2024, and its team had previously reached an over-the-counter trading agreement with Alameda Research for $80 million in 2021.

ChainCatcher message, on-chain detective ZachXBT posted on platform X stating: "I have been hearing two names associated with the Mantra incident: Denko (founder of Reef Finance) and Fukogoryushu. It is alleged that in the days leading up to the 90% drop of OM that triggered the collapse, they had contacted some individuals, asking them to take out large loans using OM as collateral.For those unfamiliar with Reef Finance, the project was delisted from Binance in October 2024 and had previously engaged in an $80 million over-the-counter transaction with Alameda in 2021. REEF has also experienced similar market manipulation incidents in the past."

ChainCatcher message, ZachXBT posted on platform X: "In the past month, Coinbase has locked my account twice without reason (once again today), Coinbase's customer data has been leaked but has not been transparently disclosed (leading to theft), therefore I will not recommend Coinbase as an exchange to anyone (even though Coinbase offers a decent APR)."

ChainCatcher message, on-chain detective ZachXBT posted on social media, warning to be cautious of the following high-risk behaviors:Depositing funds into newly launched EVM chain fork DeFi protocols, which are often developed by low-skilled teams and may have vulnerability risks;Investing in projects with fewer Kaito smart followers, especially being wary of projects with fake followers or excessive marketing. These behaviors may lead to financial losses, and users should avoid blindly chasing trends and conduct at least minimal due diligence.

ChainCatcher message, on-chain detective ZachXBT posted in the official channel: "I suspect that a Coinbase user was scammed out of $34.9 million (400.099 BTC) yesterday.After discovering this scam, I noticed that there have been multiple suspected cases of Coinbase users being scammed in the past two weeks. The funds from each theft were transferred from Bitcoin to Ethereum via Thorchain / Chainflip and exchanged for DAI.Despite these scam addresses appearing in the funds of multiple victims, Coinbase has not flagged these addresses in its compliance tools."

ChainCatcher message, on-chain detective ZachXBT criticized Hyperliquid on platform X, stating: "It is outrageous that Hyperliquid officials can manipulate prices at will, but when North Korean hackers use Radiant to steal funds and hold a significant short position on it, they remain indifferent."

ChainCatcher news, after ZachXBT questioned Crypto.com about the reissuance of 70 billion CRO tokens that had been previously destroyed, Crypto.com CEO Kris blocked ZachXBT on social media, to which ZachXBT responded, "The truth is heartbreaking."Previous news, on-chain detective ZachXBT stated that the Crypto.com team recently reissued 70 billion CRO tokens that were promised to be "permanently destroyed" in 2021, accounting for 70% of the total supply. This move severely violates community consensus, as the team controls the majority of the token circulation.ZachXBT criticized this behavior as akin to fraud and questioned why Truth still chose to cooperate with them instead of other platforms like Coinbase or Kraken.

ChainCatcher message, on-chain detective ZachXBT announced commonly used investigation tools, including:Cielo - wallet tracking (EVM, Bitcoin, Solana, Tron, etc.);TRM - create charts for addresses/transactions;LeakPeek - database queries;Arkham - multi-chain block explorer;Archive Today - archive web pages;Etherscan/Solscan - block explorers, etc.In addition, ZachXBT specifically clarified that he does not receive compensation from these platforms and there are no referral links to share.

ChainCatcher news, on-chain detective ZachXBT posted that the Crypto.com team recently reissued 70 billion CRO tokens, which were previously promised to be "permanently destroyed" in 2021, accounting for 70% of the total supply. This move seriously violates community consensus, as the team controls the majority of the token circulation.ZachXBT criticized this behavior as akin to fraud and questioned why Truth still chooses to cooperate with them instead of other platforms like Coinbase or Kraken.Previous news, Trump Media & Technology Group (TMTG) announced that it has reached a preliminary cooperation intention with the crypto trading platform Crypto.com, planning to jointly launch a series of ETFs and related products through its fintech brand Truth.Fi, expected to be officially launched in 2025, pending the signing of a final agreement and regulatory approval.