Crypto-wallet users have reported Trust Wallet and Tonkeeper losses, including the claimed theft of a +888 Telegram anonymous number. One user says a Trust Wallet and a Keeper account were drained on 4 October: both were used on an iPhone 15.
DarkSword is a documented iOS exploit chain. Google Threat Intelligence says it has targeted iOS 18.4–18.7 and can use a compromised website to access device data, including crypto-wallet information.
In the media sphere, six victims are currently known of.
XRP Ledger bug could have minted billions of fake coins
A flaw in XRP Ledger’s payment engine may have let attackers create XRP beyond the network’s fixed supply with a specially crafted transaction. The bug appears to have existed since 2015.
Developers patched it in a recent update and say they found no evidence of widespread exploitation.
After the $1.5 billion Bybit theft, blockchain investigator ZachXBT says he found alleged money launderers asking for help in public Telegram and Discord chats.
Posing as a client, he says he routed $349,700 in USDC through one contact, accepting roughly 5% in costs to build trust. The contact then shared wallet addresses, transaction screenshots and details of where funds would move next.
ZachXBT traced a cluster of more than $12 million allegedly linked to the Bybit theft as it moved through Bitcoin, Ethereum, Solana and Tron. Tether later froze about $442,000 in USDT tied to that cluster.
The investigator says the same network discussed $332,000 from the Poloniex hack and roughly $3 million from another fraud victim. His estimate: a Chinese laundering syndicate may have processed more than $1 billion stolen by Lazarus Group across multiple hacks.
ZachXBT says the evidence has been sent to law enforcement.