Feel free to save & share it if you know someone who has been scammed or hacked and lost crypto!
You may order an investigation from the amlbot.com/reclaim-crypto (my referral link) or analybits.xyz. You can also directly DM Rata on Telegram or Twitter
Check out:
Important to mention: only crypto-focused tips!
For more InfoSec head to:
I - Bitcoin
-
May order an investigation from the amlbot.com/reclaim-crypto (my referral link) or analybits.xyz. You can also directly DM Rata on Telegram or Twitter ❗️
-
Report here: www.chainabuse.com & cryptoscamdb.org or phishtank.org
-
Establish endpoint cluster (use github.com/OffcierCia/On-Chain-Investigations-Tools-List ) and contact it.
-
Once again, do not hesitate to contact/tag/email/DM CEXes, Wallet’s support, stablecoin-companies, DEXes and Protocols! Ask, ask and ask! Then repeat. Email or message costs 0$ for you.
II — Others (Mostly, EVM)
-
Revoke approvals via revoke.cash or cointool.app or app.unrekt.net or mirror.xyz/0x17e1F2A87F874D4C5E56d323caB45A4301D0325D/8OEm3pJ5vLcPrE8W3IBqfnq-IUGMhKBB368NZtCwz1I
-
If you see zero approve tx — don’t touch it, read: officercia.mirror.xyz/n-sXszeDoNU3wtUUxRQEYvxQlZ6loaFElILzm2gnMzw and mirror.xyz/x-explore.eth/cL3d_CyNujXq8XY7ueP4omNXx_IY1EG5Dz0FD0vJ90M
-
Signing is also dangerous! twitter.com/officer_cia/status/1609273593606578177 use transaction simulators & multi-sig.
-
Establish endpoint cluster (use github.com/OffcierCia/On-Chain-Investigations-Tools-List ) and contact it.
-
May order an investigation from the amlbot.com/reclaim-crypto (my referral link) or analybits.xyz. You can also directly DM Rata on Telegram or Twitter ❗️
-
If you need to escape the rest of the funds (if you seed/key is comprised) head to whitehat.flashbots.net
-
Report here: www.chainabuse.com & cryptoscamdb.org or phishtank.org
-
Establish endpoint cluster and report to CEX/P2P directly.
-
Once again, do not hesitate to contact/tag/email/DM CEXes,Wallet’s support, stablecoin-companies, DEXes and Protocols! Ask, ask and ask! Then repeat. Email or message costs 0$ for you.
Escape funds quickly (EVM/MEV method):
One amazing researcher made this simple flashbots bundler app to help people with white-hat recoveries of compromised accounts:
You can use the UI to generate a new flashbots rpc, build the bundle by sending ETH for gas, then the recovery TX, then withdraw remaining funds. Then when you hit submit bundle it goes through a relayer which is maintained by the community!
We’ve used it to help a few people that had leaked wallets private keys or seeds and, specifically, sweeper bots. If you know anyone who has this issue feel free to send them this way!
Here’s a video walkthrough:
If you use it, I recommend paying around 3x the gas price to get included. And make sure your bundle is over 42k gas or it will be ignored by the network!
Or Use:
Bitcoin:
For Bitcoin there was a similar solution - you can use something like this or this. A private pool. Can be compared to using flash-bots or Taichi on Ethereum…
-
Accelerator (Choose Paid accelerating)
Investigation Methodology:
Also Check Out:
III — Bad Tips
At the moment, you can only block funds through an official appeal…but someone may come up with:
-
Honeypot a hacker via: twitter.com/lordnarfz0g/status/1554649309580300288 CDN NFT honeypot (Canarytokens and Iplogger), or other honeypots:
-
Read: medium.com/@alxlpsc/critical-privacy-vulnerability-getting-exposed-by-metamask-693c63c2ce94
Telegram:
Regarding tracking:
For educational purposes only! You have been warned. Illegal activity is bad!
Support is very important to me, with it I can do what I love — educating users!
If you want to support my work, you can send me a donation to the address:
-
0xB25C5E8fA1E53eEb9bE3421C59F6A66B786ED77A or officercia.eth — ETH, BSC, Polygon, Optimism, Zk, Fantom, etc
-
4AhpUrDtfVSWZMJcRMJkZoPwDSdVG6puYBE3ajQABQo6T533cVvx5vJRc5fX7sktJe67mXu1CcDmr7orn1CrGrqsT3ptfds — Monero XMR