victim

According to the monitoring by the head of Galaxy Research, it has communicated with over 190 victims of Coldcard vulnerability attacks and has asked victims who have not yet contacted them to reach out via private message so that they can provide tracking information and assist in reporting losses to the relevant authorities.Since August 6, no new attack incidents have been confirmed, but this does not mean that new attacks will not occur, and vigilance is required.

FlashRescue co-founder @DarcyAri posted on the X platform that on July 28, 2026, the funding project ODY targeting victims in China issued an additional 10 billion tokens and absconded with approximately 15 million USDT from the trading pool. Currently, it is known that there are over 10,000 victims, and the case has been accepted and is under investigation.Including subsequent transfers and transaction fees, ODY has aggregated at least 15,669,118 USDT. Further tracking revealed that the same main aggregation address previously received 5,383,428 USDT transferred from the KXG wallet, confirming that ODY and KXG share a common fund pool.

According to SBS, the Financial Supervisory Service (FSS) of South Korea has begun a comprehensive reform of its system to address compensation issues related to financial fraud, including voice phishing involving virtual assets. The FSS launched the "Financial Fraud Loss Compensation System Improvement Project" on August 6. This project aims to reform the existing compensation calculation system centered on the Korean won, in preparation for including virtual asset losses in the compensation scope starting in October this year.The current system primarily calculates compensation amounts based on losses valued in Korean won, but after the reform, a compensation ratio will be adopted, taking into account the type and quantity of virtual assets involved. Additionally, during payment suspensions, the Korean won exchange value of virtual assets will also be included in the calculations.

According to the Dongguan Release public account, the Dongguan Hengli police successfully intercepted a virtual currency investment fraud case, preserving 1.1 million yuan in cash just 5 minutes before the victim's offline transaction with the fraudster, thus avoiding significant economic losses.It is understood that the victim, Ms. Li (pseudonym), previously met an unfamiliar online acquaintance who lured her with "internal investment channels for virtual currency," promising low thresholds and high returns, and created a false impression of investment profits through forged profit screenshots. Subsequently, the fraudster induced Ms. Li to withdraw 1.1 million yuan in cash under the pretext of "needing to exchange cash for USD recharge" for payment. After discovering risk clues, the Dongguan police quickly activated the early warning interception mechanism, organized police forces to rush to the bank to dissuade her, and ultimately successfully prevented the fund transfer before the transaction.

According to a post by Galaxy Research, as of now, approximately 1719 BTC have been confirmed stolen in the Coldcard hardware wallet vulnerability attack, valued at around 111 million USD. Several other transactions are still under verification, and the total loss is expected to exceed 130 million USD. If the unverified portion is ultimately confirmed, the scale of theft could reach over 2300 BTC. In addition, collaborating researchers have received reports from more than 250 victims. Based on the loss situation from the first three waves, most victims are ordinary Bitcoin holders rather than whales.Galaxy Research stated that it is currently tracking over 25 independent attack patterns, including the previous first to third waves, indicating that multiple different threat actors are actively exploiting the vulnerability. All addresses corresponding to the stolen coins were created after the affected firmware was released on March 17, 2021. There is currently no evidence that the vulnerability affects other signing devices or wallets outside of the Coldcard Mk3, Mk4, Mk5, and Q series firmware released after that date.

The Galaxy research director posted on platform X, stating that please continue to share your victim experiences with him via private message. His private messages are full, with over 200 Coldcard victims having contacted him. He is categorizing them using clanker and will eventually reply to everyone.He stated, "You will get through this, Bitcoin will get through this, we will not leave."

Galaxy Research Research Director Alex Thorn tweeted that among a Coldcard attack victim holding nearly 30 BTC, 17 BTC were split and converted to ETH via THORChain, and then deposited into the offshore betting platform Duel.com.Upon tracking, this portion of funds corresponds to approximately 229.72 ETH (worth about $445,000). The victim and the research team have emailed all known addresses of Duel.com, providing all transaction and deposit information and requesting to freeze the funds, but the response stated that the victim should have the police contact them, even though the platform's anti-money laundering policy claims it implements KYC and complies with relevant laws.Thorn stated that this response is unacceptable, and most of the Western regions have passed midnight, meaning the police report cannot be advanced until at least Monday; he believes that if the platform refuses to freeze the funds after receiving notification that they originated from an ongoing cyber attack, it constitutes complicity in theft.Since Duel.com's X account has been banned, Thorn turned to @ several individuals associated with the platform, urging them to push the platform to take the correct actions, and stated that if the funds are not frozen, the platform will face significant legal action.

According to Jinshi, U.S. Treasury Secretary Ben S. Bernanke stated that the United States will actively track down Iranian assets globally to ensure compensation funds for the victims of terrorism supported by Iran. Bernanke emphasized that the U.S. government's military and economic blockade measures against the Iranian regime will continue to advance without any slackening.

On July 18 to 19, the Bangalore branch of the Indian Enforcement Directorate conducted raids at multiple locations involved in a virtual asset over-the-counter trading scam targeting overseas investors, based on the Prevention of Money Laundering Act (PMLA).The criminal gang claimed to supply tokens such as MultiversX, Kava, BEAM, GRASS, SUI, VANA, and AGLD at discounted prices through private social channels, thereby enticing foreign investors to invest funds. The total amount involved in the case is approximately $35 million, initially reported by a Dutch entity.This operation has seized electronic devices, wallet credentials, and cryptocurrency assets worth 8,700 USDT. Law enforcement agencies are continuing to expand leads and dig deeper into the complete criminal chain.

According to Etoday, the Financial Services Commission of South Korea has announced a draft amendment to the "Special Law on Preventing Telecom Financial Fraud and Returning Victim Funds," planning to include funds from phone scams that are transferred to crypto assets within the scope of victim compensation, and to clarify the standards for the return and valuation of crypto assets. The relevant regulations are expected to officially take effect on October 1.According to the new regulations, if the frozen assets are cryptocurrencies, victims will generally be compensated based on the type and quantity of assets; if the defrauded assets differ in form from the frozen assets, compensation will be made in the form of assets that existed at the time the account was frozen. In cases where cash and crypto assets are mixed, the regulatory authorities will value the crypto assets based on the market price at the time of freezing to determine the final compensation amount.The Financial Services Commission of South Korea stated that clarifying the form of returned assets and the timing of valuation will help achieve faster and fairer compensation in complex cases involving mixed funds from multiple victims. It is reported that the public consultation for the draft amendment will continue until August 24.

According to Bitcoin.com, the Singapore Police Force's Anti-Fraud Centre and Cybercrime Investigation Department, in a six-week joint anti-fraud operation from April 16 to May 31, 2026, collaborated with Coinbase, Coinhako, Gemini, Independent Reserve, OKX, StraitsX, and Upbit to identify potential fraud victims using blockchain analysis tools from Chainalysis and TRM Labs. They conducted over 145 targeted interventions through phone calls and on-site visits, preventing potential losses exceeding $4.2 million.Coinbase Singapore posted on X on July 10, stating that it collaborated with the Singapore Police to prevent over 145 individuals from losing a total of more than $4.2 million due to fraud. The Singapore Police stated that they will continue to work with cryptocurrency exchanges and other private sectors to combat cybercrime.

On-chain detective ZachXBT stated on X that unless the case involves recent events, each victim has lost more than $250,000, the jurisdiction is favorable, the relevant chain supports their work, and it does not involve meme coins or prediction markets, they will not review or respond to related case requests.

According to CCTV News, the Shanghai Baoshan District Prosecutor's Office announced a case yesterday, where the defendant Huang was involved in smuggling abroad to participate in telecom fraud activities, enticing victims to invest in virtual currency. After the Myanmar Miaowadi Park was disbanded, Huang continued to engage in "pig butchering" fraud, using AI face-swapping and communication with foreign models to gain the victims' trust, and then guiding them to participate in cryptocurrency investments.Subsequently, the team leader would connect with the victims, deceiving them into registering, recharging, and investing on fake websites, ultimately being sentenced to two years and six months in prison for fraud, along with a fine of 30,000 yuan.

According to Bloomberg, the Singapore International Commercial Court ruled that Terraform Labs and its founder Do Kwon committed fraud in a case related to the 2022 TerraUSD stablecoin collapse, and ordered them to pay over $3 million to 40 claimants.This ruling is part of the second phase of a case involving claims from 275 investors, with the compensation amount calculated based on the number of UST held by the claimants and the duration of their holdings.

The Federal Bureau of Investigation (FBI) reminds victims of the OneCoin international cryptocurrency investment scam that they can apply for compensation through a special program by the Department of Justice (DOJ) before the deadline.This process allows individuals who purchased OneCoin and suffered direct financial losses due to the OneCoin scheme between 2014 and 2019 to submit applications. Victims can submit applications via mail, email, or an online form. However, submitting an application does not guarantee financial compensation.The DOJ stated that global investors in OneCoin have collectively lost over $4 billion.

On-chain security analyst Specter stated that a phishing attack suspected to target Polymarket users is currently occurring, with total losses amounting to approximately $2.94 million.According to its monitoring, attackers have transferred funds from more than 11 victim wallets holding PUSD, converting the stolen assets into ETH, while reminding users to be cautious of phishing risks and stating that the incident is still under ongoing investigation.

According to the Bangkok Post, Thai police raided a scam base in the Saraphi district of Chiang Mai province, arresting 10 Chinese citizens and seizing 67 mobile phones, 7 iPads, and 13 laptops.

On June 5, local time, the High Court of England held a procedural hearing regarding the asset disposal related to the Qian Zhiming case. Regarding approximately 60,000 bitcoins and other assets involved in the case, about 16,000 Chinese victims have registered through multiple UK law firms to participate in the civil recovery process under the UK Proceeds of Crime Act. The registration window closed on May 22.An important topic of this hearing was how multiple law firms would share the common litigation costs. The judge ultimately decided that each law firm would pay their corresponding share of £190,000 into the court account based on the number of victims they represent, with a deadline of June 26 at 4 PM. A special hearing to determine the "legal applicability issue" of whether Chinese victims can claim ownership of the assets involved will be held in July.

According to the "Procuratorial Daily," Lin, Zeng, and Dai conspired to use virtual currency trading as a pretext. During the trading process, they secretly filmed the victim's digital wallet private key and, after the virtual currency was credited, secretly logged into the victim's wallet to reverse the transaction, transferring the related virtual currency back to their controlled accounts. The three committed the crime three times, causing the victim a total economic loss of 660,000 yuan.The first-instance court held that in the absence of a clear judicial interpretation regarding the valuation method of virtual currency and sentencing standards, it was inappropriate to directly determine the amount involved as particularly huge based on the victim's purchase amount of 660,000 yuan. Therefore, they sentenced the three based on "other serious circumstances," imposing prison terms ranging from eight years to five years and six months, along with fines. The Hanyang District Procuratorate of Wuhan City in Hubei Province subsequently filed an appeal, which was supported by the Wuhan City Procuratorate.The prosecution argued that the first-instance court applied the law incorrectly and imposed an excessively light sentence. Prosecutor Dai Wentao of the Wuhan City Procuratorate stated that in the case where the victim had a clear loss amount to refer to, it was contradictory and legally erroneous to claim that the value of virtual currency could not be determined. In judicial practice, using the resale price and transaction price as the basis for determining the amount of theft has become mainstream, and determining the value of virtual currency based on the actual cost paid by the victim has factual, legal, and practical basis.The Intermediate Court of Wuhan accepted the prosecution's opinion in the second instance, revoked the corresponding content of the original judgment, and changed the determination of the theft amount to particularly huge. It sentenced the principal offender Lin to ten years and six months in prison for theft, and sentenced the accomplices Zeng and Dai to eight years in prison each, along with fines.

The British police announced that five people have been sentenced in a "Wrench Attack" case targeting cryptocurrency holders. The suspects met the victims at a bar in Shoreditch, London, in July 2025, forcibly took them back to their homes, and through violent threats and facial recognition verification, coerced them into accessing their bank and cryptocurrency accounts, stealing over £10,000 in cash, cryptocurrency, and other valuables such as watches.During the investigation, the cryptocurrency exchange platform Coinbase reported to the police after discovering unusual activity in the victims' accounts. The police subsequently identified and arrested the individuals involved. The court ultimately sentenced four main offenders to prison terms ranging from 3.5 to 6.5 years, while another individual involved was sentenced to community service for money laundering. The police stated that this case has caused long-term psychological trauma to the victims and their families, highlighting the rising risk of offline violent crimes against cryptocurrency asset holders.