fei

The Enforcement Directorate (ED) of India has submitted a charge sheet to the PMLA special court in Dwarka, New Delhi, formally accusing Chirag Tomar and his accomplices of participating in a cryptocurrency phishing scam worth approximately $20 million. Investigations reveal that the gang executed attacks by hijacking SEO related to a counterfeit "Coinbase Pro" phishing website, luring users to input account information and further deceiving them into providing 2FA verification, thereby remotely transferring the victims' crypto assets. The funds were subsequently split into thousands of wallets and laundered through P2P transactions with local trading platforms. The case is coordinated with U.S. federal law enforcement actions.Previously, Tomar was arrested by the FBI in the U.S. and sentenced to 60 months in prison for conspiracy to commit wire fraud. The Indian ED stated that it has obtained key evidence through international judicial cooperation and has frozen 129 bank accounts related to the case and assets amounting to approximately 645.5 million rupees, with the involved funds and properties undergoing further recovery and forfeiture procedures.

According to The Block, former Ethereum Foundation researcher Dankrad Feist posted on the X platform, proposing the establishment of a new organization aligned with the Ethereum economy to "save" Ethereum. He believes that the Ethereum Foundation currently holds less than 0.1% of ETH, with no staking or fee income flowing in, so the new organization needs to raise at least $1 billion in funding, managed by competent leaders, with part of the funds coming from staking income, and driven by a more responsible board to boost Ethereum's price.Feist left the foundation last year to join Layer 1 network Tempo. He co-created the Danksharding shard design in the Ethereum community to enhance Layer 2 scalability, was appointed as a strategic advisor in areas such as L1 scaling and user experience during the restructuring of the foundation's leadership, and proposed EIP-9698, which would increase the Gas limit by 100 times.

According to an official statement from JPYC Co., Ltd., when searching for "JPYC" in wallets or DEX, counterfeit tokens with similar names, logos, or symbols may appear.The official reminder is to never judge the authenticity of a token solely based on its name or icon. It is essential to strictly verify that the token contract address matches exactly with what is listed in the official FAQ; even a single character difference indicates a different token. Users are also reminded not to perform any operations such as sending, exchanging, authorizing, or signing with unknown tokens.

SlowMist has issued a security warning stating that a high-risk phishing activity targeting TRON wallet users has been discovered. Attackers created a fake Chrome extension for the TronLink wallet, using Unicode bidirectional control characters and Cyrillic homographs to disguise the brand name. After installation, the extension loads a complete phishing page through a remote iframe, forming a "shell-core separation" credential theft chain.The malicious extension name uses homographs for disguise, and its Chrome Store page inherits the high user count and positive reviews of the real extension, lowering the review threshold. There is very little local code, only loading remote pages, making static analysis nearly impossible to detect malicious behavior. The remote phishing page perfectly replicates the official TronLink web wallet interface, stealing mnemonic phrases, private keys, Keystore files, and passwords, and relaying them in real-time via a Telegram Bot.Built-in anti-analysis features disable right-click, developer tools, drag-and-drop, and printing, and redirect based on the geographic and language settings of Russian users to evade detection. SlowMist recommends immediately uninstalling suspicious extensions, clearing local storage, checking for abnormal traffic, and if credentials have been entered, creating a new wallet and transferring assets immediately.

According to CriptoNoticias, after Western Union launched the official stablecoin U.S. Dollar Payment Token (USDPT) on Solana, at least 24 counterfeit USDPT tokens have appeared on the Solana network.DEXTools data shows that some of these counterfeit tokens were created on platforms like Pump.fun and Raydium, with some created just an hour ago, while others were generated as early as 6 months ago. DEXTools data indicates that one of the counterfeit tokens has seen its price increase by about 100% in the past 24 hours. Such counterfeit tokens carry the risk of a "Rug Pull," leading to a rapid drop in token prices, putting investors at risk of losing their entire principal.

According to DL News, a South Korean forgery gang is selling fake official documents to users via Telegram, prioritizing payments in cryptocurrency or digital gift cards. Among them, a counterfeit Yonsei University diploma is priced at about $200, a certificate of enrollment is quoted at about $100, and a fake diploma from overseas universities is priced at about $341.The report points out that the gang also offers forged materials such as driver's licenses, proof of relationship, certificates of no criminal record, and bank loan documents. South Korean police stated that the number of arrests for forgery cases nearly doubled from 2021 to 2023.

According to the threat intelligence released by the SlowMist security team, its threat intelligence system MistEye has received community feedback regarding an active social engineering attack targeting cryptocurrency users.The attackers contact target users under the pretext of project collaboration, luring them to use a counterfeit "Harmony Voice" software (domain: harmony-voice[.]app) for so-called real-time translation, which is actually malware. SlowMist has synchronized the relevant threat intelligence (IOC) to its corporate clients.

In response to the recent attack on the "ListaDAOLiquidStakingVault" contract, ListaDAO officially released a statement clarifying that the attacked contract was not deployed by the official team, but rather was a counterfeit contract created by an unverified third party using a similar name. All official contracts of ListaDAO were not affected by this incident.According to an in-depth analysis by the GoPlus security team, the attack occurred on April 16, 2026, and the root cause was a business logic flaw in the third-party contract. When a token transfer was made, it triggered the Dividend.setShares() function and altered the share accounting within the contract, which in turn affected the reward calculation in the claimReward() function. The attacker exploited this vulnerability to deplete the assets within the contract.GoPlus reminds that since this logical flaw exists in both segments of the contract code mentioned above, any development projects that fork or reuse this code face a high risk of being exploited. It is recommended that relevant developers promptly conduct code inspections and fixes, and implement continuous auditing mechanisms to ensure the security of smart contracts.

According to Finance Feeds, Apple has confirmed that it has removed a fraudulent app impersonating Ledger Live self-custody wallet from the App Store after an on-chain investigation revealed that over 50 victims lost a total of $9.5 million in cryptocurrency within a week.Previously, on-chain detective ZachXBT disclosed that this counterfeit Ledger Live app was available from April 7 to April 13, 2026. The losses involved multiple blockchains, including Bitcoin, Ethereum, Solana, Tron, and Ripple.

According to on-chain analyst Ai Yi (@ai_9684xtpa), in 2017, the whale 0xead...E9D55 currently holds 42 altcoin positions, of which up to 40 are long positions (only VVV and MON are short positions), with a total value of 49.6 million USD, and has an unrealized loss of 6.22 million USD. His cumulative loss on Hyperliquid is 14.94 million USD.

According to on-chain analyst ZachXBT, a counterfeit Ledger Live application was launched on the Apple App Store, resulting in over 50 users' assets being stolen, with total losses amounting to approximately $9.5 million, involving various assets such as Bitcoin, EVM chain assets, TRON, Solana, and XRP.The stolen funds were subsequently transferred through more than 150 KuCoin deposit addresses and laundered using a centralized mixing service called AudiA6. Data shows that the largest single loss reached $3.23 million. The application has recently been removed by Apple.

According to BBX data, based on official market announcements and corporate regulatory documents, the latest developments in the compliance infrastructure of global brokerage giants and the financial strategies of mining companies are as follows:Charles Schwab clarifies the spot trading timetable: The Charles Schwab Corporation (NYSE: $SCHW) President and CEO Rick Wurster officially confirmed in a letter to shareholders this Monday that Charles Schwab will launch spot trading services for Bitcoin and Ethereum in the first half of 2026. The plan will undergo a limited rollout in the second quarter (Q2), followed by a full expansion to its large customer base.CME derivatives compliance expansion: CME Group Inc. (NASDAQ: $CME) announced that, given the record average daily nominal trading volume of $8 billion for its crypto derivatives in March this year, the company has decided to further enhance its crypto strategy by officially launching futures contracts for Avalanche (AVAX) and Sui (SUI) on May 4, including standard and micro versions.Core Scientific plans to fully liquidate Bitcoin reserves: Core Scientific, Inc. (NASDAQ: $CORZ) in its latest 10-K annual and quarterly regulatory filings provided Wall Street with extremely clear guidance: during 2026, the company expects to "substantially monetize all" of its Bitcoin reserves to enhance liquidity and fund planned capital expenditures. This means the company will completely transform into a spot seller, liquidating its digital treasury to purchase the hardware needed for AI transformation.

According to Bloomberg, the U.S. Commodity Futures Trading Commission (CFTC) announced that it has reached a settlement with former FTX engineering chief Nishad Singh regarding the FTX collapse. Under the settlement agreement, Singh must return $3.7 million in illegal gains, is banned from trading for five years, and cannot register with the CFTC for eight years. Given Singh's active cooperation in the investigation, the CFTC did not impose any additional monetary fines or compensation requirements.

The cryptocurrency data platform Nonce announced a strategic investment and deep incubation of the on-chain sports prediction platform S315, aiming to promote its realization from on-chain products to global capital docking in a full-chain landing.It is reported that S315 is positioned at the decentralized SportFi application layer and infrastructure, supporting users to make on-chain predictions and settlements for "Yes/No" binary contracts or specific match results for major global leagues such as football, basketball, and tennis.

According to Cointelegraph, Andrei Grachev, managing partner of crypto market maker DWF Labs, analyzed that the "Altseason" driven by the overall rise of the crypto market is becoming a thing of the past. The surge in the number of tokens in the market, the limited scale of participants, and the absorption of liquidity by crypto ETFs are changing the market structure. Currently, institutional funds are more inclined to allocate to Bitcoin, Ethereum, and tokenized real-world assets (RWA), further diverting attention and funds away from altcoins. In the future, the market will see shorter narrative cycles and more intense sector rotations, with a large number of mid- to long-tail tokens resembling high-risk investments or "casino-like" assets, struggling to survive solely on speculation.Data shows that over the past 13 months, the market capitalization of altcoins has cumulatively flowed out more than $209 billion, and currently about 38% of altcoin prices are close to historical lows.

Nasdaq-listed company UTime Limited (stock code: WTO) announced the signing of a non-binding letter of intent to acquire 100% equity of Feixiaohao Technology Inc., the operator of "Feixiaohao," for up to $80 million. The transaction structure includes $64 million in stock consideration (common stock or convertible preferred stock) and $16 million in cash.

According to the U.S. Attorney's Office for the District of Massachusetts, the office has filed a civil forfeiture lawsuit seeking to recover approximately 3.444 million USDT (worth about 3.444 million USD), which are suspected to be proceeds from an online investment fraud and money laundering scheme.The case involves at least four victims, including two residents of Massachusetts, one resident of Utah, and one resident of South Carolina. The scammers established contact with the victims through seemingly misdirected messages sent via SMS or encrypted communication apps like WhatsApp and Telegram, and then lured the victims into investing in a so-called Ethereum investment opportunity backed by physical gold. Victims were instructed to purchase ETH and transfer it to an intermediary wallet controlled by the scammers, who then converted the ETH into USDT and transferred it to an unmanaged wallet to steal the funds.

According to the monitoring by Slow Fog Technology's Chief Information Security Officer 23pds (@im23pds), attackers are poisoning Bing AI search results to lure users into downloading and installing a counterfeit OpenClaw program, thereby stealing users' crypto assets and sensitive information.

The National Supercomputing Internet announced that its OpenClaw service has integrated with Feishu and WeChat Work. Users can flexibly choose from various model API calling services based on task scale and access them through the Feishu and WeChat Work clients.Currently, the Supercomputing Internet's OpenClaw has pre-configured various large models (such as MinMax-M2.1, MinMax-M2.5, Qwen-235B, etc.) to provide high-performance, low-cost inference computing power.

According to official news, Li Feifei's AI startup World Labs has completed a $1 billion financing round, with investments from AMD, Autodesk, Emerson Collective, Fidelity Management & Research Company, NVIDIA, and Sea.World Labs is dedicated to accelerating the mission of advancing spatial intelligence by innovating narrative methods, inspiring creativity, driving robotics, and promoting scientific discovery through the construction of world models.World Labs stated that its first product, Marble, allows anyone to create spatially coherent, high-fidelity, and persistent 3D worlds from images, videos, or text.