Scams

Humanity Protocol said a targeted phishing incident led to stolen director keys that were used in the June 8 $H token exploit, with the BNB Chain deployment now considered permanently compromised. The attacker allegedly upgraded contracts, moved about 141.18 million $H on Ethereum, minted additional tokens on BNB Smart Chain, and sold them via Uniswap and PancakeSwap over roughly eight hours. The project said the Ethereum contract was frozen using a clean multisig, while the canonical Humanity Mainnet bridge was not impacted.

Tether blacklisted a Tron address and froze 72,030,295 USDT on June 12, 2026, after activity tied to a large Monero purchase coincided with a sharp XMR move. The wallet had received 120.2 million USDT on June 11 and then routed funds across exchanges, cross-chain paths, and XMR buys, pushing XMR from around $330 to an intraday peak near $438.

Chainalysis reported on June 11 that an international law enforcement effort dismantled AudiA6, a laundering service it links to ransomware actors and darknet activity. The firm said AudiA6 processed about 10,333 BTC since launching in 2021, historically valued at roughly $389 million, and allegedly relied on more than 6,000 KYC-verified mule accounts plus exchange infrastructure.

U.S. federal prosecutors said they seized about $7.1 million from cryptocurrency wallets tied to an investment fraud case that routed $97.1 million through bank and exchange accounts. According to the U.S. Attorney's Office for the Western District of Washington, Geoffrey K. Auyeung received a five-year prison sentence on June 9, 2026, while prosecutors are also seeking $24,707,031 in restitution.

Bipartisan House lawmakers introduced a bill on Thursday to set up a federal task force to investigate crypto fraud and hacking, led by the U.S. attorney general. The proposal cites more than $11 billion in 2025 losses and aims to coordinate DOJ, FBI, DHS, and Treasury efforts while giving victims a clearer federal reporting route.

On June 11, the U.S. Department of Justice said prosecutors in Philadelphia charged two men accused of operating the AudiA6 crypto-laundering service, which allegedly processed more than $389 million in illicit transactions since 2021. The DOJ said Ruslan Igorevich Tkachuk, 37, and Alexander Vladimirovich Ledenev, 25, were arrested in Batumi, Georgia on June 10, and the U.S. plans to seek their extradition. Authorities allege the network handled about 10,333 BTC and offered laundering services for fees of up to 5%.

Humanity Protocol's H token fell nearly 88% on June 9, sliding from about $0.78 to roughly $0.099 after reports of a wallet-draining security incident. The project said a Humanity Foundation member's private keys were compromised and told users to avoid the bridge and liquidity pools until further notice. Blockchain data later tied the attacker to mints of 200 million H on BNB Smart Chain and sales that produced 18,510 ETH and 1,548 BNB.

Sam Bankman-Fried has submitted a formal clemency application to the White House through the Justice Department's Office of the Pardon Attorney, after months of public outreach from prison. Trump said in January 2026 he would not pardon the former FTX CEO, and the White House reiterated on June 8, 2026 that it has no plans to grant clemency. Separately, his conviction appeal remains pending, while Polymarket markets put his chance of leaving custody by end-2026 at 6% on about $383,000 in volume.

Binance says it is pairing human reviewers with AI systems to counter financial crime and scam activity on its exchange, with compliance-related roles making up roughly 25% of its global workforce. The company says it prevented about $10.53B in user losses from 2025 through Q1 2026 and reports recovering or freezing $114M linked to external hacks in 2025 plus $60.2M so far in 2026.

IBM says it identified a new “man-in-the-browser” campaign dubbed OverlordMX in March 2026 that targeted financial institutions in Latin America. The company says the malware traps users in bank-branded fake overlays while a Spanish-speaking operator watches sessions live, harvests credentials and one-time passwords, and can move funds to mule accounts in real time.