Case Study
Robinhood's own servers sent the email. It came from [email protected]. It passed SPF, DKIM, and DMARC authentication. It displayed Robinhood's official logo in Gmail. It landed in the primary inbox. And it was a phishing attack trying to steal your crypto seed phrase. This
case-study
A sophisticated, multi-vector phishing campaign stripped 521.99 BTC from a high-net-worth individual despite hardware wallet protections.
case-study
Over 150 counterfeit browser extensions impersonating MetaMask and Coinbase Wallet weaponized the Firefox Add-ons ecosystem to harvest seed phrases at scale.
case-study
One phone call. One compromised investor. 71% of January 2025's total adjusted crypto fraud losses.
case-study
Third-party e-commerce partner compromise exposes Ledger customers to targeted phishing, reprising the company's worst operational nightmare.
case-study
How a commoditized drainer kit deployed across hundreds of fake mint sites systematically harvested NFTs, ETH, and ERC-20 tokens from thousands of victims.
case-study
How ~5,000 malicious lookalike addresses exploited transaction history habits to drain multisig users.
case-study
A social engineering attack exploiting ERC-20 approve mechanics to silently authorize complete token drainage.
case-study
A textbook social engineering attack exploiting OpenSea's Seaport protocol signature mechanics against a high-profile target.