News linked to both this project and an event.
According to on-chain analysis platform Lookonchain (@lookonchain), a newly created wallet deposited 3.56 million USDC into Hyperliquid, opened a long position on 36,000 XMR with 4x leverage valued at approximately $14.33 million, and set take-profit orders in the $475 to $516 range; the current XMR price is approximately $397.
According to Specter monitoring, over $7.9 million was stolen from wallets associated with Coinsbuy on Ethereum and TRON, and the attackers subsequently laundered the funds into XMR through exchanges. Coinsbuy stated that, with the support of ChangeNOW, it has successfully frozen stolen funds amounting to up to six figures. Following the incident, Coinsbuy temporarily suspended deposit and withdrawal services, which have now resumed.
Odaily News: According to on-chain analyst Ai Yi’s monitoring, an address transferred 2 million USDC as margin and then opened a 4x long position of 10,962.78 XMR, valued at $4.18 million, with an entry price of $383.23. This has become the second-largest XMR position on Hyperliquid. The address has also placed a limit buy order worth $1.082 million between $378.2 and $381.4, indicating plans to add to the position if the price drops further.
According to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) updated its sanctions list against ISIS-K (Islamic State Khorasan Branch) on July 1, adding 134 cryptocurrency wallet addresses, of which 131 are on the TRON chain and 3 are Monero addresses. On-chain data shows that the aforementioned TRON wallets have cumulatively received over $1.4 million since 2023 and transferred out over $880,000, with some funds flowing to Syrian crypto exchangers. Currently, Tether has frozen the balances of all 131 TRON addresses. Additionally, on the same day, OFAC also sanctioned two Brazilian individuals and four companies related to the Latin American criminal organization "Primeiro Comando da Capital" (PCC), accusing them of using cryptocurrency to transfer over $30 million in illegal proceeds across borders from the United States to Brazil.
According to on-chain investigator ZachXBT, on June 11, the TRON chain address TA6YHq...zCoQ received 120.2 million USDT and subsequently initiated multiple rapid transfers: over $12 million was sent to KuCoin’s deposit address; approximately $8 million was transferred to several instant-exchange platforms; and more than $8 million was bridged to the Bitcoin and Ethereum networks via the Near Intents cross-chain bridge. Additionally, this address placed a large number of Monero (XMR) buy orders, causing XMR’s price to spike briefly from $330 to $420. Minutes ago, Tether blacklisted and froze 72 million USDT in the address TBzrPE...Ak9W, which is directly linked to TA6YHq.
According to Onchain Lens monitoring, as ZEC and HYPE continue to decline, whale Loracle's 10x leveraged long position in ZEC has suffered losses exceeding $3.2 million, and the 2x leveraged long position in HYPE has lost $1.567 million. The whale also holds long positions in NEAR, TON, ASTER, and XMR, with total losses amounting to $6.65 million.
On-chain monitoring shows that a batch of funds suspected to be linked to hackers or phishing activities has recently been continuously purchasing Monero (XMR), with total purchases amounting to approximately $23 million, significantly impacting the market price.
According to on-chain analyst PeckShield (@PeckShieldAlert), RetoSwap—a peer-to-peer, decentralized exchange for Monero (XMR)—was exploited by hackers leveraging a vulnerability in the Haveno trading protocol, resulting in the theft of users’ funds totaling 7,000 XMR (approximately $2.7 million). Following the incident, the RetoSwap team responded swiftly, blacklisting the attacker’s onion address at 02:33 UTC and pausing all platform trading by enforcing an upgrade to client version 2.0.0. The attack has now been contained.
Odaily Chainalysis posted on X platform, stating that prior to the THORChain theft, wallets suspected to be linked to the attacker had been transferring funds through Monero, Hyperliquid, and THORChain for several consecutive weeks. As early as late April, the attacker-associated wallets deposited funds into Hyperliquid positions via Hyperliquid and the Monero privacy bridge. These funds were subsequently converted to USDC and transferred to Arbitrum, then bridged to Ethereum. Some of the ETH was then moved to THORChain to stake as RUNE for a newly joined node, which is believed to be the source of the attack.Subsequently, the attacker bridged a portion of the RUNE back to Ethereum and split it into four chains. One chain went directly to the attacker, passing through intermediate wallets before transferring 8 ETH to the wallet that would ultimately receive the stolen funds, just 43 minutes before the attack. The funds from the other three chains flowed in reverse. Between May 14 and 15, these wallets bridged the ETH back to Arbitrum again, deposited it into Hyperliquid, and transferred it into Monero via the same privacy bridge, with the final transaction occurring less than 5 hours before the attack commenced. As of Friday afternoon, the stolen funds remain untouched, but the attacker has demonstrated sophisticated cross-chain money laundering capabilities. The Hyperliquid to Monero path may be the next move.
据 Lookonchain 监测，某巨鲸做多多个热门山寨币，包括 NEAR、STRK、XMR、TON、AZTEC、PUMP。当前持仓包括：308 万枚 NEAR（483 万美元）、7555 万枚 STRK（430 万美元）、9561 枚 XMR（380 万美元）、128 万枚 TON（333 万美元）、1486 万枚 AZTEC（35.7 万美元）、7199 万枚 PUMP（14.7 万美元）。