Verify this book

4,064.38 BTC (~$238M of the ~$243M total) left the victim's wallet in a single transaction on 2024-08-19 (block 857425, 04:05:26 UTC)

Malone Lam and Jeandiel Serrano were federally indicted for conspiracy to steal and launder over $230M from a victim in Washington, D.C.

ZachXBT published a 14-part on-chain investigation on 2024-09-19 identifying the three principals of the theft

Veer Chetal pleaded guilty, forfeited ~30 designer watches and $36M+ in ETH, and lost bond after a further ~$2M theft while awaiting sentencing

When Paradigm engaged ZachXBT as an incident-response advisor, it put the amount he had helped recover for victims at over $350M

ZachXBT began as an ordinary retail buyer in the 2017 token boom and lost about $15,000 to a wallet compromise in 2018, before any investigative work

A victim sent ~$68M in WBTC to a poisoned lookalike address on 2024-05-03; the attacker returned the full amount on 2024-05-09

The same poisoning campaign had netted ~$1.49M over its prior 66 days (1,147% ROI) from victims who got nothing back

450,000+ wallets carried active malicious EIP-7702 delegations, dominated by the CrimeEnjoyor sweeper-contract family (over 97% of in-the-wild delegations pointed to malicious sweepers)

QuadrigaCX owed customers ~$190-215M (~26,500 BTC, 430,000 ETH, 200,000 LTC) when it announced Cotten's death and suspended withdrawals on 2019-01-14

EY located ~104 BTC in QuadrigaCX cold storage against ~26,500 BTC owed; customer deposits had been commingled and spent by the operator for years

After QuadrigaCX, Canadian securities regulators brought crypto trading platforms under registration and custody-audit requirements (CSA Staff Notice 21-327, 2020)

The Bitcoin genesis block carries the text “The Times 03/Jan/2009 Chancellor on brink of second bailout for banks” in its coinbase parameter — a date that cannot be forged backwards

Ronald Spektor was charged on 2025-12-19 on a 31-count indictment for stealing ~$16M from ~100 users nationwide by impersonating a crypto-exchange representative

Coinbase support impersonation was annualised at $300M+/yr taken from that one exchange's users — an extrapolation from roughly $65M observed over about two months in early 2025, not a count

Dominic Iacovone (who reported it publicly as @revive_dom) lost ~$650-655K in ETH, tokens and NFTs on 2022-04-15 after an Apple ID phish exposed his iCloud-backed vault

MetaMask publicly warned iOS users on 2022-04-17 that iCloud backup includes the password-encrypted MetaMask vault

Android's allowBackup manifest attribute defaults to true; wallet apps that never opted out silently shipped their vaults to users' Google Drive

98.6% of ~7M Pump.fun-deployed tokens (Jan 2024 through early 2025) ended in pump-and-dump or rug-pull outcomes; only ~97,000 kept at least $1,000 in liquidity

$TRUMP fell ~93% from its 2025-01-19 closing high (~$45.50; intraday ~$73) to ~$3.00 by 2026-Q1; retail mark-to-market loss ~$4.3B; insider wallets cleared over $1B

11 insider wallets holding ~$24M in memecoins across Ethereum and Solana were all funded from one address tied to a public ENS

State securities regulators put US penny-stock fraud at about $2B a year in a nationwide study presented to Congress in 1989

Asked in 1997 about the $6B annual penny-stock fraud figure, SEC chairman Arthur Levitt told the Senate he had not seen a study he would call reliable

LastPass disclosed in December 2022 that backup copies of customers' encrypted vaults had been exfiltrated

By late 2023 the tracked drain cohort stood at ~$35M across ~150 victims whose common factor was seed phrases stored in LastPass

~$150M in XRP left Chris Larsen's wallet on 2024-01-30; a March 2025 federal forfeiture action (N.D. Cal.) tied the theft to the LastPass breach and seized ~$24M

TRM Labs traced ~$28M of cohort proceeds through Wasabi Wallet CoinJoin (late 2024 - early 2025) plus ~$7M in September 2025; off-ramps included OFAC-sanctioned Cryptex

Equifax was breached through an unpatched Apache Struts flaw whose fix was published 2017-03-07, ~67 days before the 2017-05-13 intrusion

In 2020 the U.S. DOJ indicted four officers of China's People's Liberation Army for the Equifax breach affecting 147.9M people

Equifax agreed in 2019 to a settlement of up to $700M with the FTC, CFPB and states over the breach

A counterfeit Ledger Nano S Plus contained an ESP32-S3 microcontroller with scraped markings, an antenna trace on the PCB, and the seed phrase in plaintext flash; cohort losses ~$9.5M+ across ~50+ victims on 20+ chains

Counterfeit hardware wallets dwell before draining — the device works normally for weeks after setup, so the victim cannot connect the loss to the purchase; documented across counterfeit cohorts including Trezor Model T units in 2023

The U.S. Treasury sanctioned Tornado Cash smart-contract addresses on 2022-08-08, alleging $7B+ laundered since 2019 including ~$455M by Lazarus Group

Circle froze USDC held at the Tornado Cash-sanctioned addresses on 2022-08-08 — the same day as the OFAC designation

In November 2024 the Fifth Circuit held that OFAC exceeded its authority — immutable smart contracts lack the hallmarks of property and cannot be sanctioned under IEEPA

Lazarus Group laundered $200M+ from 25+ crypto hacks (2020-2023) through Tornado Cash, cross-chain bridges, and P2P marketplaces (Noones, Paxful) to fiat

Between 2022-05-07 and 2022-05-13 LUNA fell from ~$80 to below $0.01 and UST from $1.00 to ~$0.05; ~$40-60B in market value was destroyed

Anchor Protocol paid ~20% fixed yield on UST, subsidised by the Terraform Labs treasury rather than organic lending demand, and held ~72% of all UST (~$14B of ~$18B)

Do Kwon pleaded guilty to conspiracy and wire fraud in August 2025 and was sentenced to 15 years in December 2025, forfeiting over $19M; the SEC's civil action against Terraform Labs had settled in April 2025

On 2025-03-26 a JELLY-token squeeze drove Hyperliquid's HLP vault to a ~$13.5M peak unrealised loss; validators delisted JELLY and HYPE fell ~20%

Hyperliquid validators voted to delist JELLY and settle positions at $0.0095, overriding the manipulated market price; the Hyper Foundation reimbursed non-flagged users