involved

"On-chain detective" ZachXBT stated that the hacker "Dritan Kapplani Jr" transferred approximately $2.59 million in assets, including 1.99 million DAI and 259 ETH. The related funds were transferred from address 0x4487...bba6 to address 0x67ec...125d, and the stolen funds are currently in a stagnant state.ZachXBT indicated that it released an investigation report on May 12, detailing the connections between Dritan Kapplani Jr and Trenton (Trent) Johnson in a social engineering theft case involving 185 bitcoins (approximately $13 million).

ZachXBT posted on platform X that the founder of LAB released philosophical nonsense while participating in the manipulation of the CEX market that harms retail investors; they attempted to contact privately, but the message was read and not replied to; the scammers further undermined the last remaining credibility of the industry.

According to Cryptopolitan, a court in Barcelona is investigating six former Sevilla FC players for their alleged involvement in a fraud case related to the Shirtum crypto project.Newly submitted criminal complaints indicate that the project is accused of selling fake NFTs and manipulated tokens to investors, resulting in losses of over 24 million euros, approximately 28 million dollars. The players named in the complaint include Papu Gómez, Lucas Ocampos, Ivan Rakitić, Nico Pareja, Alberto Moreno, and Javier Saviola. Additionally, El Correo de Andalucía reports that Diego Perotti and Marcelo Guedes were also involved in promoting the project. Thirteen Spanish investors have filed a lawsuit with the Barcelona Investigative Court No. 5, claiming they lost all their funds.It is reported that Shirtum was promoted as a digital collectibles trading platform for football and sold "cinematic NFTs" containing player photos and recordings, priced at around 450 euros each. However, the complainants claim that these NFTs were never minted on any blockchain and cannot be transferred or resold. Furthermore, Shirtum's promoters previously obtained about 3 million euros in BNB from investors for the development of iOS and Android mobile applications, but the app was never launched, and the related funds were neither refunded nor accounted for.

On the X platform, "on-chain detective" ZachXBT pointed out that certain law firms in the United States are using their investigative work and on-chain forensic results to help victims of hacking incidents file legal claims, but this practice may actually affect the victims' ability to receive compensation or recover funds.In previous hacking incidents involving the Lazarus Group, these law firms typically intervene only after their on-chain fund tracking or freezing is completed, and propose follow-up legal actions that are weakly related to the crypto incidents themselves. They have also employed similar strategies for "free-riding claims" in incidents involving Harmony, Bybit, and others. ZachXBT also called for the crypto community to establish a DAO to resist such behavior.

According to the Financial Times, Donald Trump Jr. and Eric Trump merged with a key mineral group in Kazakhstan through a shell company, which received up to $1.6 billion in support from the U.S. government last year for the development of a tungsten mine project.The tungsten mine project involves the Katpar and Upper Kairakty deposits in northern Kazakhstan, with financing previously provided by institutions such as the Export-Import Bank of the United States. Trump's sons joined the advisory board of the relevant company and hold shares by the end of 2024. The report suggests that this is another case of the Trump family's business empire being linked to U.S. government interests.

Multiple independent sources have confirmed to Caixin that the founding partner and director of a law firm in Chongqing has recently been taken away by relevant authorities. This lawyer is Peng Jing, the founding partner and director of Chongqing Jingsheng Law Firm. There is speculation that she has numerous connections with the officials who have recently fallen from grace.According to analysts, lawyers from law firms are usually not taken away by the Central Commission for Discipline Inspection, "but Peng Jing has a very large network, and her case involves too many people." On March 20, 2026, Chongqing Mayor Hu Henghua was reported to be under investigation, and on April 17, Luo Lin, a member of the Chongqing Municipal Committee and secretary of the Liangjiang New Area Committee, was also announced to have fallen. Reports from the local political and business circles in Chongqing suggest that the downfall of Hu Henghua and Luo Lin is related to bribery and money laundering through stablecoins, and "Peng Jing may be a key figure, helping others launder money under the guise of collecting legal fees." Sources indicate that in the Hu Henghua case, Lin Kechuang, the son-in-law of Lin Xiucheng, gave Hu Henghua 30.8 million USDT (approximately 210 million yuan, of which 10 million was for exchange fees). After Hu Henghua was investigated, the cold wallet was controlled, and authorities traced the funds from six other cold wallets held by Lin Kechuang; among them, a transfer of 15.5 million USDT that occurred simultaneously with Hu Henghua's was claimed by Lin Kechuang to have been sent to Luo Lin. Luo Lin was taken away by relevant authorities on April 14, 2026, and his home was searched on the evening of April 15, but this cold wallet was not found. Subsequently, authorities found Luo Lin's cold wallet at a third party's home.

According to Arkham monitoring, the Kyber Network hacker is transferring stolen funds to Tornado Cash.The hacker Andean Medjedovic previously stole $48.8 million from KyberSwap at the end of 2023 and had also attacked Indexed Finance, stealing $16.5 million. He was indicted by the FBI in 2025.

According to Cointelegraph, local police in Spain seized two cryptocurrency cold wallets containing approximately 400,000 euros (about 467,000 dollars) in assets during an operation against illegal comic distribution platforms.The operation was carried out by the Almería police in Spain, who have arrested three suspects and dismantled what is known as the country's largest Spanish-language piracy comic website. It is reported that the platform has been providing free pirated content since 2014, primarily profiting through advertisements, with total revenue exceeding 4 million euros over the past decade. Notably, the cold wallets involved were hidden inside a thermometer in the wall. The police have not yet disclosed whether they have obtained the relevant private keys or access to the funds.

The local police in Spain seized two cryptocurrency cold wallets containing approximately 400,000 euros (about 467,000 dollars) in assets during an operation against illegal comic distribution platforms.The operation was carried out by the Almería police in Spain, who have arrested three suspects and dismantled what is known as the country's largest Spanish-language piracy comic website. It is reported that this platform has been providing free pirated content since 2014, primarily profiting through advertisements, with total revenue exceeding 4 million euros over the past decade. Notably, the cold wallets involved were hidden inside a thermometer in the wall. The police have not yet disclosed whether they have obtained the relevant private keys or access to the funds.

Polish Prime Minister Donald Tusk stated that a cryptocurrency company linked to "Russian gangs and intelligence agencies" is funding political opponents and influencing domestic cryptocurrency regulatory legislation.During a parliamentary vote on Friday, Tusk pointed out that some Polish politicians obstructing cryptocurrency regulatory legislation are serving the interests of a company named Zondacrypto, which is accused of providing "financial support" to political figures and has ties to Russia. Tusk further claimed that the company sponsored the CPAC (Conservative Political Action Conference) event held in Poland last year, during which former U.S. Secretary of Homeland Security Kristi Noem publicly supported President Karol Nawrocki's campaign. Tusk bluntly stated that the company's funding sources involve not only "money related to the Russian mafia (Bratva)" but may also be connected to Russian intelligence agencies.Meanwhile, President Nawrocki won the election in June last year, with support from former U.S. President Donald Trump. The president's office responded that it does not oppose cryptocurrency regulation itself but opposes the "flawed regulatory model" proposed by the government. This controversy arises amid the political tug-of-war in Poland over the cryptocurrency regulatory bill. The bill aims to align with the EU's MiCA (Markets in Crypto-Assets Regulation) framework, but the president previously vetoed the related bill and blocked parliament from overturning the veto in December, hindering the regulatory process.

According to official data, JST has burned 271 million $JST in this single instance, equivalent to a value of approximately 21.3 million USD, accounting for 2.74% of the current total supply. At the same time, the treasury reserves have exceeded the 100 million USD mark, providing a solid guarantee for the continued advancement of the subsequent deflation process. All funds for repurchase and destruction come from the actual income generated by the protocol, thereby establishing an automated deflationary closed loop driven by actual earnings, where repurchase and destruction operate continuously. This marks that $JST is steadily moving towards a sustainable, endogenous, and long-term viable economic model.

According to CoinDesk, Paul Atkins, the chairman of the U.S. Securities and Exchange Commission (SEC), announced the termination of "enforcement-style regulation" and stated that the seven cases related to cryptocurrency registration initiated by the previous administration were a "misallocation of resources" that did not provide direct benefits to investors.

Liquid Capital (formerly LD Capital) founder Yi Lihua stated on Twitter that wherever there are people, there are grievances, and wherever there are grievances, there is a community. He has heard these community stories from the parties involved multiple times, but we can only be bystanders.Yi Lihua called for the parties involved (CZ, Xu Mingxing, Li Lin, Sun Yuchen, He Yi) to resolve this historical grievance and work together to build the industry and prices. He mentioned that gossip and grievances sound exciting, but wallets are more important to everyone.It is reported that CZ mentioned past interactions with Li Lin, Xu Mingxing, and others in his new book, and discussions about the related events are currently trending on platform X.

ZachXBT stated on platform X that Circle has unfrozen ckUSDC (Dfinity bridge) and two hot wallets, including one starting with the address 0x00e. Currently, 5 out of the 16 wallets that were previously frozen have been unfrozen.It stated that after the confidentiality restrictions related to the civil case in New York are lifted, information about the plaintiffs, expert witnesses, and other relevant parties will be disclosed.

According to market news, the Vietnamese Ministry of Public Security has arrested several suspects related to the cryptocurrency platform ONUS, accusing them of issuing and promoting tokens such as VNDC, ONUS, and HNG through the Onus platform, manipulating supply and demand and prices through false advertising and coordinated trading, thereby illegally appropriating investors' funds.The police stated that the gang exercised highly concentrated control over the relevant token market, raising funds amounting to billions of dollars, but did not disclose specific losses. The named suspects include Vuong Le Vinh Nhan, related to ONUS Pro's Singapore parent company XPLOR, ONUS exchange technical administrator Tran Quang Chien, and Ngo Thi Thao, head of HanaGold Jewelry JSC. The Vietnamese police launched operations in multiple locations, summoning over 140 people and seizing relevant evidence. ONUS and its parent company Vemanti have not yet released detailed statements regarding the case.

According to CoinTelegraph, the Vietnamese Ministry of Public Security recently arrested several individuals related to the cryptocurrency platform ONUS, accusing them of inducing investors to purchase tokens such as VNDC, ONUS, and HNG through false advertising, coordinating wash trading, and artificially manipulating token prices, with the amount involved reportedly reaching billions of dollars.Those arrested include Vuong Le Vinh Nhan, a person related to ONUS Pro's parent company XPLOR, platform technical administrator Tran Quang Chien, and Ngo Thi Thao, director of HanaGold Jewelry JSC. The investigation spans multiple cities, and the police have summoned over 140 people to cooperate with the investigation and seized relevant evidence. The ONUS platform has not yet made an official response regarding this matter.

On Tuesday, U.S. President Trump stated that Vice President JD Vance and Secretary of State Marco Rubio are leading negotiations with Iran and expressed optimism about reaching an agreement. Sources from Iran told CNN that Tehran is willing to consider "sustainable" proposals to end the war.Meanwhile, Israel has launched a new round of strikes against Iran, and Tehran has also attacked Tel Aviv. An Israeli official stated that the agreement "does not seem feasible at the moment." Two regional sources said that Iran has indicated to the Trump administration that it does not wish to restart negotiations with envoy Steve Witkoff and Trump's son-in-law Jared Kushner, but prefers to engage with Vice President JD Vance.Additionally, about 1,000 soldiers from the U.S. Army's 82nd Airborne Division are expected to be deployed to the Middle East in the coming days. The Republican side has once again rejected a resolution requiring Trump to seek congressional authorization for future military actions against Iran.

Renowned on-chain investigator ZachXBT released a report today stating that a Russian over-the-counter (OTC) broker named Aleksandr (Aleks) Khinkis is suspected of assisting ransomware groups in laundering over $4.7 million since 2025 through a single cryptocurrency trading platform account.The related funds involve three suspicious ransom payments, totaling approximately 796 bitcoins (BTC). The investigation shows that these funds were transferred in batches to his trading platform's deposit address (0xa756) after being bridged between Bitcoin and Avalanche, completing a total of 75 transactions from 2025 to 2026. Additionally, approximately $16.6 million is currently still held in Aave and is being gradually liquidated.ZachXBT pointed out multiple ransom transactions: a ransom payment of about 72 BTC in September 2025 was bridged to the related address; a ransom of about 164 BTC was also discovered in October 2025 and converted to approximately $3.8 million. Some related addresses were blacklisted by Tether in November 2025, and the subsequently frozen USDT was destroyed three weeks ago, indicating that law enforcement and compliance agencies have intervened.Earlier in 2023, this account was also involved in a ransom transaction of about 560 BTC, which was circulated through multiple intermediary addresses and trading platforms before being bridged back to the Avalanche network in 2024. Furthermore, the investigation pointed out that the source addresses of the related bitcoins have a high correlation with multiple ransomware addresses, suspected of serving as payment transit nodes. Although some funds remain dormant, ZachXBT warned that they may still be laundered in the future and urged victims to report related addresses promptly to freeze the funds.