🚨 $6.3 billion stolen from Binance. The largest crypto heist in history.
They didn’t break cryptography. They broke trust in internal infrastructure.
According to Binance’s preliminary findings, attackers compromised a DevOps engineer’s laptop, gained access to an internal service container, and initiated unauthorized withdrawals.
No evidence of private key leakage has been found. On Ethereum, attackers also leveraged EIP-7702 to gain control over hot wallet operations.
The bigger picture: attackers are increasingly targeting people, processes, and authorization mechanisms - not just cryptographic defenses.
AI is further lowering the cost of reconnaissance and social engineering, making these attacks more accessible and scalable.
The response came down to speed.
Binance reports that roughly $3 billion in assets has been frozen, with Tether, Circle, and other ecosystem participants helping restrict the movement of stolen funds.
But freezing is not recovery.
A significant portion was converted into ETH and BTC - assets that cannot be frozen by a centralized issuer.
The key takeaway: crypto security is only as strong as the entire infrastructure authorized to move digital assets.
#Binance #CryptoSecurity #BlockchainForensics #AML #Cybersecurity
We've launched a new Telegram channel. For technical reasons we can no longer run our previous one, so if you followed us there, please join us here: t.me/MatchSystems_News
We'll cover key events in crypto security, including major hacks, fraud schemes and investigations.
🚨 Walix-Wallet Hack Investigation: Xhash.cash / NEAR Intents
We are currently investigating the Walix-Wallet security breach of July 25, 2026, which resulted in the theft of several million dollars' worth of crypto assets.
Our investigation indicates that more than $1 million in stolen funds appears to have been laundered through Xhash.cash, a privacy-focused exchange service.
According to our findings, Xhash.cash accepts deposits for Any Crypto → XMR swaps directly to deposit addresses associated with NEAR Intents, using the 1Click API.
The funds are subsequently transferred to operational addresses associated with the exchange in the Solana network, including:
• 2WJ98iXf8DwBzhQeL6zsXq9Tze8VjN6zNUijHAdrPCrJ
• BTm25S9wbLdvU64K5dGBPsAVxnPRhSJnPB3XCf6mq6bc
• 2giAscgqYx8U5teiQ78NrmmcmYJHFGHtZofe8kBW9nhX
From these addresses, the assets are further transferred to several centralized exchanges supporting Monero (XMR) trading pairs.
In cooperation with law enforcement agencies, operational addresses involved in the laundering of the stolen assets have been identified and labeled in blockchain analytics platforms and added to NEAR Intents protocol blocklists.
As a result, we are now observing transactions associated with Xhash.cash operational infrastructure being blocked or suspended by NEAR Intents.
One recent example involves approximately 5 BTC, which has remained in PROCESSING status for more than three days:
1click.chaindefuser.com/v0/s…
This case demonstrates why rapid information sharing between investigators, law enforcement, blockchain analytics providers, protocols, and centralized exchanges is critical. Infrastructure used to launder stolen assets can be identified, labeled, and disrupted even across complex cross-chain routes and privacy-focused conversion mechanisms.
The investigation remains ongoing. We encourage infrastructure providers and exchanges that may have interacted with the addresses above to preserve all relevant transaction and user data and cooperate with authorized law enforcement requests.
@near_intents
🎁 Get 10 FREE AML checks in @MsAmlBot.
But first, answer one question:
🚨 How would you lose your crypto?
We’ve launched the Match Systems Security Trainer — an interactive crypto security simulator that tests your ability to recognize real-world threats and identify your weakest point before scammers do.
Every decision affects your:
💰 Funds
🔐 Security
⚖️ Legal risks
📊 Reputation
Complete the simulation without a catastrophic loss and receive a promo code for 10 free AML checks.
▶️ Start now: t.me/MS_SecurityTrainerBot
#AML #KYT #Crypto #Bitcoin #Ethereum #USDT #CryptoSecurity #Blockchain #CryptoScam #ScamAlert #CyberSecurity #Web3 #DeFi #BlockchainSecurity #WalletSecurity
The teams that need compliance and security the most are the ones just starting out. @hexens Builder Support Program fixes that — top-tier tooling for early-stage protocols, at builder-stage prices.
Time to show what we bring to this partnership.
For teams accepted into the program — Match Systems perks:
▸ AML/KYT — risk scoring built on real investigative experience: we don't just flag risks, we trace fund origins, transaction links, and full operation context
▸ KYB — counterparty verification before you trust anyone with your infrastructure
▸ Incident Response — funds stolen or wallets compromised? We launch immediately: on-chain tracing, blockchain investigations, recovery support
Special rates on all services for Builder Support participants.
Apply: hexens.io/pages/builder-supp…
The UK just sanctioned HTX - one of the largest crypto exchanges by volume. 55M users, $3.3T in 2025 trading volume.
This isn't just about the exchange. AML systems retroactively re-label historical transactions. Millions of clean addresses may turn red through no fault of their own.
What does your transaction history look like? 👇
matchsystems.com/htx-sanctio…
#HTX #sanctions #AML #crypto
🔓 Tether unfroze 497 USDT addresses in one day — $79.2M total.
Not a glitch. Not an error. The result of months of dispute work hitting completion at the same time.
We broke down exactly how it works 👇
matchsystems.com/tether-unfr…
#USDT #Tether #TetherFreeze #USDTFrozen #CryptoCompliance #BlockchainForensics #AML #CryptoInvestigation
In 2026, you don't have to be a criminal to get frozen.
You just have to accept USDT from the wrong counterparty.
Tether has frozen $4.4B+ to date — coordinated with OFAC and law enforcement, no advance notice, no appeal window.
One tainted hop upstream. One blocked wallet. Months of dispute ahead.
We help companies screen before it happens — and navigate recovery when it already has.
#USDT #Tether #AML #KYT #Blockchain #Investigations #Crypto #Compliance
$577M in April: Why Stablecoin Issuers Failed to Freeze Stolen Funds, and What It Changes cryptotimes.io/insights/577m… via @CryptoTimes_io
Tether froze USDT of people who did nothing wrong. No hack. No scam. Just received funds from the wrong person - and now their balance is locked with no explanation. Cases like this have multiplied in 2026. Innocent users stuck.
Why it happens and what actually works 👇
matchsystems.com/tether-froz…
Has this happened to you or someone you know?
#USDT #Tether #Freeze #Block #CryptoCompliance #AML #CryptoSecurity #BlockchainInvestigation #CryptoRecovery
Our team at MatchSystems specializes in investigating wallet hacks and tracing stolen crypto. Please reach out if you'd like professional assistance.
🤝 Our partners @FixedFloat published a practical guide: what to do if your crypto is stolen. → ff.io/en/blog/guides/if-cryp…
Covers the most common attack vectors — phishing, seed phrase leaks, address poisoning — and step-by-step actions in the first hours after an incident.
Includes a section on our joint investigations and how coordinated blockchain analysis leads to real asset recovery.
#CryptoTheft #BlockchainForensics #CryptoRecovery #PhishingAttack #AddressPoisoning #MatchSystems
Replying to @Solana4CANADA @6ix9ine
Sorry to see this. Our team at MatchSystems has traced funds from similar cases and supported law enforcement engagement. If you want an honest assessment of your options, feel free to reach out.
Sorry to see this. Our team at MatchSystems has traced funds from similar cases and supported law enforcement engagement. If you want an honest assessment of your options, feel free to reach out.
Replying to @Williphux
Sorry to see this. Our team at MatchSystems has traced funds from similar cases and supported law enforcement engagement. If you want an honest assessment of your options, feel free to reach out.
Replying to @jejackson81
Sorry to see this. Our team at MatchSystems has traced funds from similar cases and supported law enforcement engagement. If you want an honest assessment of your options, feel free to reach out.
Replying to @StonkyLeg69
Our team specializes in investigating these kinds of compromises and tracing the flow of assets. Feel free to reach out if you'd like a professional review of your case.
Replying to @kymonarch @USTreasury
Our team at MatchSystems specializes in forensic blockchain investigations to trace stolen crypto and assist law enforcement. Please reach out if you'd like professional help looking into this.
