Scams

The PEPE memecoin's official website has been compromised, redirecting visitors to phishing pages designed to steal wallet credentials. Cybersecurity firm Blockaid detected malicious code linked to the Inferno Drainer toolkit embedded in the site's front end. Meanwhile, the PEPE/DOGE trading pair is on track to close its second consecutive weekly gain, marking the first back-to-back weekly advance since June.

A British individual allegedly connected to the theft of $243 million from a Genesis creditor may have been detained in Dubai, blockchain investigator ZachXBT stated on December 5. Approximately $18.58 million in cryptocurrency was reportedly seized from addresses linked to the suspect. UAE authorities have not publicly confirmed any arrests or asset seizures related to the case.

SpaceX moved 1,083 BTC worth approximately $99.81 million to Coinbase Prime Custody addresses, data show. The USPD stablecoin suffered a $1 million exploit through a CPIMP attack that compromised proxy-layer logic during deployment on September 16, 2025. A Cloudflare outage disrupted access to major exchanges including Coinbase, Kraken, and Upbit.

The official Pepe memecoin website has been infiltrated through a front-end exploit involving Inferno Drainer malware. Cybersecurity firm Blockaid issued an alert on December 4, 2025, warning users that malicious code was injected into the site. The attack aims to redirect visitors to phishing pages designed to steal wallet credentials and drain digital assets.

Washington state's Department of Financial Institutions issued a Temporary Cease and Desist Order against Bitcoin ATM operator Coinme on December 1, 2025. The Seattle-based company must halt money transmission services and return over $8 million to customers. The regulator alleges the firm illegally converted unredeemed customer funds into corporate revenue, violating the state's Uniform Money Services Act.

Security researchers captured North Korean operatives in real time after deploying a honeypot workstation that mimicked a developer environment. The operatives, linked to the Lazarus Group's Famous Chollima division, used legitimate AI hiring tools and cloud services to establish trusted insider access rather than exploit code vulnerabilities. The operation revealed systematic use of job-automation software, VPN masking, and persistent remote-access protocols to bypass corporate security measures.

Anthropic's Frontier Red Team demonstrated that AI agents autonomously reconstructed 19 real smart contract exploits from 34 incidents occurring after March 2025, extracting $4.6 million in simulated value. GPT-5 scanned 2,849 BNB Chain contracts at $1.22 per target, uncovering two zero-day vulnerabilities worth approximately $3,694 in simulated profit, according to research published December 1.

MetaMask launched Transaction Shield on December 3, 2025, a paid security feature offering up to $10,000 in monthly coverage for losses from approved transactions. The $9.99 monthly subscription targets signature-based scams across Ethereum, Arbitrum, Polygon, BNB Chain, and Base.

Huione Pay, a payment subsidiary of Huione Group, suspended all withdrawal operations in Cambodia on December 1, 2025. The halt follows liquidity challenges and intensified regulatory scrutiny from U.S. authorities targeting alleged money laundering activities, according to a FinCEN representative. Tether's USDT trades at $1.00 with a market cap of $184.74 billion.

BubbleMaps issued a warning about the PIPPIN meme coin following its 1,000% price surge over two weeks. The blockchain analytics platform identified insiders controlling approximately 50% of the token supply, valued at $120 million. The token's market capitalization jumped from $20 million to $220 million despite minimal team activity or announcements.