The Index
Entities
Every project, exchange, person and network that appears across the CryptoMortem archive — grouped by category, ranked by number of recorded events.
Exchanges (20)
- BinanceAn exchange named in the reporting as part of the laundering path for some of the stolen funds.2 records
- BybitCrypto exchange mentioned as the funding source for the freshly created exploiter wallet.2 records
- FTXCryptocurrency exchange whose collapse led to multiple criminal cases involving former executives.2 records
- Binance USThe second winning bidder for Voyager assets, later abandoning the deal in April 2023.1 record
- BitGrailItalian cryptocurrency exchange that lost approximately $170M of Nano (XRB) tokens in February 2018. Bankrupt; founder Francesco Firano found liable by Italian…1 record
- BitfinexHong Kong-based cryptocurrency exchange. Hacked in August 2016 for ~120,000 BTC; the US government recovered ~94,000 BTC in February 2022 by tracing through…1 record
- BlockFiNew Jersey-based crypto lender that filed for Chapter 11 in November 2022 owing approximately $1B+ to retail customers. Cited FTX exposure and 3AC default as…1 record
- Celsius NetworkCentralised crypto lender that offered up to ~17% APY on deposits. Filed Chapter 11 in July 2022 owing approximately $4.7 billion to retail customers.…1 record
- CoincheckTokyo-based cryptocurrency exchange. Suffered the then-largest crypto hack in history in January 2018: $530M of NEM tokens stolen from a hot wallet.1 record
- DMM BitcoinJapanese cryptocurrency exchange founded 2018 as a subsidiary of DMM Group. Lost approximately $305M of BTC to a private-key compromise in May 2024 attributed…1 record
- FTX USThe bidder selected in Voyager's first sale process before the transaction became moot after FTX's collapse.1 record
- Knaken CryptohandelA Dutch crypto platform that let users swap euros for cryptocurrencies and store digital assets. Decrypt says it was offline in early June and operated without…1 record
- KrakenExchange referenced in ZachXBT’s allegations and in CoinDesk’s reporting about M spot listing and withdrawals.1 record
- KuCoinSeychelles-headquartered exchange that lost $281M to a hot-wallet compromise in September 2020. Approximately 84% of the stolen value was eventually recovered…1 record
- Mt. GoxTokyo-based Bitcoin exchange that handled roughly 70% of all BTC trading in 2013. Filed for bankruptcy February 2014 after the disclosure of ~850,000 BTC…1 record
- QuadrigaCXCanadian cryptocurrency exchange whose founder Gerald Cotten died in December 2018 in India, allegedly taking sole access to ~$190M in customer funds with him.…1 record
- Stake.comAustralian-licensed online gambling and crypto-betting platform. Lost approximately $41M of crypto in September 2023 to a hot-wallet compromise attributed to…1 record
- Voyager Digital Holdings, Inc.A crypto brokerage and lending platform that filed for Chapter 11 after a large exposure to Three Arrows Capital and a withdrawal halt.1 record
- WazirXIndian cryptocurrency exchange founded 2017. Lost approximately $235M in July 2024 to a multi-sig wallet compromise attributed to North Korea's Lazarus Group.…1 record
- BithumbSouth Korean cryptocurrency exchange impersonated in the phishing email.
Projects (69)
- PeckShieldBlockchain security firm cited for describing the incident as a phishing campaign.5 records
- BlockaidOnchain security firm cited in the report as offering a preliminary assessment of the root cause.3 records
- Humanity ProtocolA decentralized identity company and protocol. The dossier says it suffered a June 2026 exploit and later said it would refocus on operational security.2 records
- Star Credit HoldingsThe firm prosecutors say was used to conduct the alleged fraudulent crypto investment operation.2 records
- Three Arrows CapitalA crypto hedge fund that defaulted on a loan from Voyager, triggering a major liquidity shortfall.2 records
- AMLBotBlockchain intelligence firm cited by CoinDesk for the updated loss estimate and bridge movement.1 record
- Alameda ResearchQuantitative crypto trading firm founded by Sam Bankman-Fried in 2017. Acted as primary market-maker for FTX and ultimately the conduit through which customer…1 record
- Alleged international hacking groupAn alleged cross-border cybercrime group described by prosecutors as conducting ransomware-style attacks and laundering proceeds in Ukraine.1 record
- Aptos LabsDeveloper organization associated with the Aptos blockchain. In the report, it said it was notified through its bug bounty program and deployed a fix to…1 record
- Asgard vaultThe vault type named in the source summary as being affected by the exploit.1 record
- AudiA6An alleged crypto laundering service referenced in the report.1 record
- Aztec LabsThe team associated with Aztec Connect and the current Aztec Network. It said it had no admin keys or control over the old system.1 record
- BlockSecA crypto security firm that analyzed the exploit and described the verification mismatch.1 record
- ChainalysisBlockchain analytics firm cited in the report for tracing donation addresses and flows.1 record
- ChainlinkOracle provider cited as reporting the correct Alphabet share price.1 record
- ChangeNowA service named in the reporting as part of the laundering path for some of the stolen funds.1 record
- CircleUS-based fintech that issues USDC, the second-largest dollar-pegged stablecoin. Held a portion of USDC reserves at Silicon Valley Bank when it failed in March…1 record
- CoinsultWeb3 security platform cited for describing the backdoor, backdated lock, and withdrawal loop mechanism.1 record
- Cryptocurrency Money Laundering ServiceAn alleged service referenced by prosecutors as having laundered unlawful transactions.1 record
- DxSaleMemecoin launch platform whose BNB Chain liquidity locker was drained in the reported exploit.1 record
- Edel FinanceTokenized equities trading platform and lending protocol referenced in the report.1 record
- Ethereum FoundationSwiss non-profit that supports Ethereum protocol development. Coordinated the contentious July 2016 hard fork that reversed The DAO hack.1 record
- GOOGLxTokenized version of Alphabet's Google stock used in the protocol.1 record
- GnosisGnosis is a long-running Ethereum project best known for smart contract wallet infrastructure and Gnosis Chain.1 record
- Gnosis PayGnosis Pay is a Gnosis product whose card wallet infrastructure was reported to be affected by an active exploit in its delay module.1 record
- Goldfinch PrimeA protocol referenced in the report as being set to shutter after a community vote approved a wind-down proposal.1 record
- HexensSecurity firm that discovered and reported the flaw. The article says its researchers simulated the attack and assessed the systemic risk.1 record
- His companyThe company named alongside the individual in the CFTC charges.1 record
- Hut 8A bitcoin mining and digital infrastructure company. In this dossier, it is the defendant/settling party in a securities class action.1 record
- ISIS-KhorasanIslamic State affiliate active across Afghanistan, Pakistan, and parts of Central Asia.1 record
- Input Output GlobalA Cardano-related company referenced by Hoskinson in relation to the wallet exploit.1 record
- Iran-linked crypto walletsWallets described in the report as linked to Iran and subject to OFAC sanctions.1 record
- Jump TradingChicago-based proprietary trading firm whose Jump Crypto unit was a major investor in the Wormhole bridge. Replenished the entire shortfall from the Feb 2022…1 record
- LayerZeroCross-chain messaging system mentioned in the reported sequence of the exploit; the article states there was no flaw in LayerZero.1 record
- Lazy Summer ProtocolA Summer.fi protocol component named in the report as the venue for the reported redemption.1 record
- M tokenThe token that CoinDesk reported fell roughly 74% in 24 hours.1 record
- MemeCoreBlockchain project associated with the M token. CoinDesk reported that the token collapsed sharply without a confirmed catalyst.1 record
- Parity TechnologiesBerlin-based blockchain company founded by Gavin Wood. Author of the Parity multi-sig wallet contract whose code defect froze approximately $300M of ETH in…1 record
- PlusTokenChinese-origin cryptocurrency Ponzi scheme operating from 2018-2019 across China, Korea and Southeast Asia. Estimated proceeds of $2-3B; founders arrested in…1 record
- PolymarketA prediction markets platform that uses PUSD as its native collateral and settlement token.1 record
- QuantstampBlockchain security company cited in the article for its assessment of the phishing attachment and possible North Korea-linked involvement.1 record
- SEAL911Volunteer security group that opened an emergency warroom after the report was filed.1 record
- SafeA multi-sign wallet platform formerly known as Gnosis Safe that runs on multiple networks and can be extended with optional modules.1 record
- Safe LabsSafe Labs develops the Safe smart contract wallet infrastructure referenced in the article as originally incubated within the Gnosis ecosystem.1 record
- SecondFiA self-custodial platform built on Cardano that rebranded from the Yoroi wallet in April 2026.1 record
- Silicon Valley BankCalifornia commercial bank that collapsed March 10 2023 after a $42 billion withdrawal request in a single day. Federal Deposit Insurance Corporation seized…1 record
- Sky MavisVietnamese game studio behind Axie Infinity and the Ronin Network.1 record
- Slock.itGerman startup that authored The DAO's smart contract and ran the token sale.1 record
- SodotCrypto key-management firm whose co-founder commented that the incident was structurally similar to other deployer-key compromises.1 record
- Specter AnalystBlockchain intelligence platform cited for an estimated-loss figure in the incident.1 record
- SquidA cross-chain protocol that said the exploited module was unrelated to its core protocol and that the contract shared its name but not its code.1 record
- StakeDAODeFi project associated with the vsdCRV token and the affected cross-chain bridge configuration.1 record
- Stichting Knaken PaymentsAn affiliated entity named in the bankruptcy request alongside Knaken Cryptohandel.1 record
- Summer FinanceA DeFi protocol referenced in the report as the target of the exploit.1 record
- SupraOracle provider whose on-chain verifier was cited by Bonzo as the source of the flaw.1 record
- TaikoEthereum Layer 2 project referenced in the report. The dossier indicates it halted block production after an exploit.1 record
- Terraform LabsSingapore-based company that built the Terra blockchain and its algorithmic stablecoin UST. Co-founded by Do Kwon.1 record
- TetherIssuer of USDT that can freeze balances on supported chains.1 record
- U.S. Bitcoin Corp.A company involved in Hut 8's 2023 merger referenced by the suit. The dossier does not establish any wrongdoing by this entity.1 record
- Unnamed CompanyA company described as facilitating illegal overseas transfers via crypto.1 record
- ValveSteam owner referenced in the report as being headquartered in Bellevue, Washington.1 record
- WaltioFrench crypto tax reporting platform. Decrypt reported a January data breach at the company that exposed user information and balances.1 record
- jaredfromsubway.ethAn Ethereum MEV bot known for sandwich attacks. CoinDesk described it as one of Ethereum's most infamous MEV bots.1 record
- wGOOGLxWrapped form of GOOGLx used as collateral in Edel Lending.1 record
- zksync.jpA scam token name alleged to have been used to deceive crypto users worldwide.1 record
- ChangeNowInstant-swap service mentioned as one of the services through which part of the stolen funds were laundered.
- DecryptCrypto news outlet that published the report on June 10, 2026.
- Digital Currency GroupCrypto holding company founded by Barry Silbert. Parent of Genesis, Grayscale, CoinDesk and others.
- Genesis Global TradingCrypto-lending arm of Digital Currency Group. Filed for Chapter 11 in January 2023 owing $3.5B to creditors including Gemini Earn customers.
Protocols (17)
- Tornado CashA crypto mixing service mentioned as a destination for some of the stolen funds.2 records
- Allbridge CoreCross-chain stablecoin bridge operated by Allbridge. The dossier says its Solana deployment was affected and the protocol was paused.1 record
- Atomic WalletEstonian non-custodial cryptocurrency wallet. Approximately 5,500 users lost a combined ~$100M in June 2023 to an attack attributed to North Korea's Lazarus…1 record
- Aztec ConnectA deprecated decentralized finance platform and its immutable smart contract. The contract still held crypto assets after deprecation.1 record
- Bonzo LendA Hedera-based lending protocol. Cointelegraph reported it lost about $9 million in the incident.1 record
- Euler FinanceEthereum-based money market protocol. Drained of approximately $197M in a flash-loan attack in March 2023; attacker subsequently returned the funds following a…1 record
- Gravity BridgeA cross-chain protocol connecting Ethereum and Cosmos. The dossier describes it as a bridge that was halted during investigation after a reported exploit.1 record
- KaminoSolana-based protocol referenced as the source of the reported flash loan.1 record
- Mango MarketsSolana-based decentralised exchange offering spot and perpetual trading on margin. Drained of $114 million in October 2022 through oracle price manipulation.1 record
- Mantra ChainLayer-1 blockchain focused on real-world-asset tokenisation. Its native OM token crashed approximately 90% within hours on 13 April 2025; team attributed the…1 record
- MultichainCross-chain bridge formerly known as Anyswap. Stopped operating in July 2023 after founder and CEO Zhaojun He was reportedly detained by Chinese authorities;…1 record
- Poly NetworkCross-chain interoperability protocol. Drained of $611 million in August 2021 — the largest crypto hack of its era at the time — in an exploit whose…1 record
- RaydiumA Solana-based decentralized exchange and automated market maker protocol.1 record
- THORChainA multichain liquidity protocol referenced in the dossier as having resumed trading after the exploit-related halt.1 record
- The DAODecentralized autonomous organization launched on Ethereum in April 2016 that raised approximately $150M before a reentrancy exploit in June 2016 led to a…1 record
- Uniswap V3A decentralized exchange protocol whose pools were used by the attacker to swap stolen tokens to DAI.1 record
- WormholeCross-chain bridge connecting Solana to Ethereum, Binance Smart Chain, Avalanche and other networks. Backed by Jump Crypto, which replenished the stolen funds…1 record
Networks (10)
- AptosLayer-1 blockchain built on Move. The article says the flaw was in the Aptos Move virtual machine.1 record
- BNB ChainBlockchain network on which the affected liquidity providers and locker contract activity occurred.1 record
- CardanoA blockchain network referenced in the incident report and in the affected wallet software.1 record
- DanburyConnecticut city named in the DOJ release as the location of the attempted robbery and kidnapping.1 record
- EthereumDestination network where the article says the stolen funds were bridged before entering privacy pools.1 record
- HederaThe blockchain network on which Bonzo Lend operates. The article said the incident was not a vulnerability in Hedera’s core network.1 record
- Ronin NetworkEthereum sidechain built by Sky Mavis to power the Axie Infinity game. Used a 9-of-9 validator consensus that was later reduced to 5-of-9, enabling the March…1 record
- RussiaThe sanctions target country referenced in the proposal.1 record
- SolanaBlockchain network where the affected Allbridge Core deployment operated.1 record
- Terra / LUNALayer-1 blockchain whose native token LUNA backed the algorithmic stablecoin UST. Original chain forked to "Terra Classic" after the May 2022 collapse.1 record
People (42)
- Lazarus GroupNorth Korean state-sponsored cybercrime group. Identified by US Treasury as the perpetrators of the Ronin bridge hack and several other major crypto exploits.6 records
- Misam M. AbidiA 47-year-old man from Nolensville, Tennessee, identified in the indictment.2 records
- Alex MashinskyFounder and CEO of Celsius Network. Convicted in November 2024 of securities fraud and commodities fraud; sentenced to 12 years in federal prison in May 2025.1 record
- Avraham EisenbergTrader who executed the Mango Markets oracle manipulation. Argued in court that his actions were legitimate trading. Convicted on commodities fraud,…1 record
- Charles HoskinsonCardano founder who commented that IOG was not connected to the wallet and had no ownership, control, or business relationship with it.1 record
- Do KwonCo-founder of Terraform Labs. Extradited to the United States in December 2024 to face fraud charges related to the UST collapse.1 record
- EmberCNOnchain analyst cited for estimating the token mint and noting that most of the remaining supply had insufficient liquidity to sell.1 record
- Geoffrey K. AuyeungA Washington man identified in the report as having helped launder scam proceeds through crypto and bank accounts.1 record
- Gerald CottenFounder of QuadrigaCX. Pronounced dead in Jaipur, India, on 9 December 2018, with the official cause given as complications of Crohn's disease. Forensic…1 record
- GuoA Chinese billionaire identified in the report as the person sentenced in connection with the fraud conspiracy.1 record
- Isiah Angelo GarciaOne of the two Texas brothers who pleaded guilty in the case. The article says he was 25 and from Waller, Texas.1 record
- Kaja KallasVice president of the European Commission and EU high representative for foreign affairs and security policy.1 record
- Kartik SainiNamed in the DOJ announcement as the defendant sentenced in the tech-support fraud case.1 record
- Kyle DaviesCo-founder of Three Arrows Capital. Renounced US citizenship before the firm's collapse; has remained outside the reach of US-friendly jurisdictions.1 record
- Linked criminal groupAn unnamed group alleged in the report to have distributed the scam token.1 record
- Mark KarpelèsFrench entrepreneur, CEO of Mt. Gox from 2011 until its 2014 collapse. Convicted in Japan in 2019 of falsifying business records; acquitted of embezzlement.1 record
- Martin KöppelmannGnosis co-founder who publicly warned users, then retracted the warning and said the team would make users whole.1 record
- Michelle BondFormer congressional candidate and spouse of former FTX Digital Markets co-CEO Ryan Salame. She faces campaign finance charges in the Southern District of New…1 record
- Newcastle, Washington residentA 47-year-old Newcastle resident sentenced in Seattle federal court for conspiracy to commit money laundering.1 record
- North Carolina manUnnamed individual described in the report as the person charged by the CFTC.1 record
- Overseas fraudstersCoconspirators referenced in the Justice Department release as recipients of forwarded proceeds.1 record
- Rahul RumallaSafe Labs CEO who said the affected accounts did not seem to be operated on the official Safe Wallet product.1 record
- Raymond Christian GarciaOne of the two Texas brothers who pleaded guilty in the case. The article says he was 24 and from Waller, Texas.1 record
- Rodney BurtonA Florida man identified in the DOJ release as 'Bitcoin Rodney.' The release says he pleaded guilty in federal court in connection with the scheme.1 record
- Roman StormCo-founder of Tornado Cash. Arrested by US authorities in August 2023; convicted in August 2025 of conspiracy to operate an unlicensed money-transmitting…1 record
- Rossen IossifovA federal inmate identified in the report as facing new charges related to the alleged taking of government-forfeited cryptocurrency.1 record
- Ryan SalameFormer FTX Digital Markets co-CEO who pleaded guilty and received a prison sentence. The dossier says prosecutors alleged he helped fund Bond’s campaign using…1 record
- Saif FaiqA 22-year-old man from St. Louis, Missouri, identified in the DOJ press release as pleading guilty in connection with the case.1 record
- Sam Bankman-FriedFounder of FTX and Alameda Research. Convicted on seven federal counts of fraud and conspiracy in November 2023. Sentenced to 25 years in federal prison March…1 record
- SpecterAn onchain analyst cited in the reporting. Specter flagged unusual outflows and suggested the bridge contract key may have been compromised.1 record
- Stephen EhrlichFormer Voyager CEO who was later sued by the CFTC over alleged fraud and false statements about customer deposits.1 record
- Su ZhuCo-founder of Three Arrows Capital. Arrested in Singapore in September 2023 for contempt of court; served four months.1 record
- TahaxOnchain analyst quoted in the article regarding the locker ownership transfer and obfuscation steps.1 record
- Terence KwokFounder of Humanity Protocol. He said the exploit stemmed from a compromised employee laptop and that the team was rebuilding accordingly.1 record
- Unidentified attackersThree men allegedly posed as police officers and attacked the couple in Nancy.1 record
- Unidentified coupleThe alleged victims of the fake-police assault in Nancy. Decrypt said the attackers tried to steal their cryptocurrency holdings.1 record
- Ursula von der LeyenPresident of the European Commission who described the scope of the package.1 record
- ZachXBTOn-chain investigator cited by CoinDesk as having publicly questioned M and alleged insider manipulation.1 record
- Zhaojun HeFounder and CEO of Multichain. Reportedly detained by Chinese authorities in May 2023; whereabouts unaccounted for since.1 record
- Zyaire WilkinsA 21-year-old from North Lauderdale, Florida, identified in the report as the arrested suspect.1 record
- 0xInfraA pseudonymous Raydium contributor quoted in the dossier. The contributor said current users were unaffected and that the issue was not a key compromise.
- Chong Yee WaiHumanity Protocol director named in the dossier as the owner of the MetaMask credentials and private keys that were copied.
Regulators (24)
- Department of JusticeU.S. federal law-enforcement and prosecutorial agency.2 records
- Office of Foreign Assets ControlTreasury office that administers and enforces economic and trade sanctions.2 records
- U.S. Department of JusticeThe federal agency that announced the indictment.2 records
- U.S. Department of JusticeThe U.S. federal law-enforcement and prosecutorial agency referenced in the report as bringing the new charges.2 records
- AFMThe Dutch markets regulator referenced as the licensing authority for the platform's activities.1 record
- ARMAUkraine's National Agency for Finding, Tracing and Management of Assets. It received the seized USDT wallet under state management.1 record
- Chinese AuthoritiesAuthorities in China that discovered unusual transactions tied to the company.1 record
- Commodity Futures Trading CommissionU.S. derivatives regulator that brought the charges described in the report.1 record
- Commodity Futures Trading CommissionU.S. regulator that brought a civil enforcement action against Voyager's former CEO in 2023.1 record
- Dutch Public Prosecution ServiceThe Dutch prosecutorial authority that asked the Rotterdam court to declare Knaken bankrupt in the public interest.1 record
- European CommissionThe EU executive branch that proposed the sanctions package.1 record
- FBIFederal investigators described the malware campaign in a complaint and public investigation.1 record
- FIODThe Dutch Fiscal Information and Investigation Service conducting a separate criminal probe into possible offenses.1 record
- Nancy prosecutorsFrench judicial authorities in Nancy handling the indictment described by Decrypt.1 record
- Shanghai CourtA court in Shanghai referenced in the report as having sentenced five people in the case.1 record
- U.S. Attorney's Office for the District of ConnecticutFederal prosecutors who issued the press release describing the guilty plea and the underlying attempted robbery and kidnapping.1 record
- U.S. Attorney’s Office for the District of MarylandFederal prosecutors who issued the press release announcing the guilty plea.1 record
- U.S. Attorney’s Office for the Eastern District of PennsylvaniaFederal prosecutors announcing the criminal charges described in the press release.1 record
- U.S. Attorney’s Office for the Northern District of IllinoisFederal prosecutor’s office that announced the sentencing.1 record
- U.S. Attorney’s Office for the Western District of TennesseeThe federal prosecutor’s office that announced the indictment.1 record
- U.S. Office of Foreign Assets ControlTreasury office responsible for administering and enforcing economic and trade sanctions.1 record
- U.S. TreasuryThe U.S. federal department responsible for economic and financial sanctions policy.1 record
- US District Court for the Southern District of New YorkFederal court handling Bond’s criminal case.1 record
- Ukraine Prosecutor General's OfficeUkraine's prosecutorial authority. It announced the transfer of seized crypto assets to state management.1 record