Connect with us
DAPA Banner

Crypto World

Bo Shen reopens $42M crypto hack cxase with recovery bounty

Published

on

Bo Shen reopens $42M crypto hack cxase with recovery bounty

Bo Shen has reopened efforts to recover about $42 million in crypto stolen from his personal wallet in 2022. 

Summary

  • Bo Shen offered a recovery bounty after reopening efforts tied to his 2022 personal wallet hack.
  • Investigators already helped freeze about $1.2 million connected to the stolen crypto, Shen said publicly.
  • Shen said better tracing tools and fresh leads have revived recovery efforts, though uncertainty remains.

The Fenbushi Capital co-founder now offers a bounty to people or groups that help recover the assets, as investigators revisit the case with newer tracing tools and fresh leads.

Bo Shen said he will pay a bounty worth 10% to 20% of any recovered funds. He said the reward will go to any individual or organization that makes a material contribution to the recovery effort.

Advertisement

He also said onchain investigators ZachXBT and Taylor “Tayvano” Monahan have already helped freeze about $1.2 million linked to the stolen assets. Shen said his team will distribute rewards after the recovery process is complete.

The new bounty brings attention back to a case Shen first disclosed in November 2022. At that time, he said attackers drained about $42 million in digital assets from his personal wallet.

Shen said the stolen funds were personal assets and did not affect Fenbushi Capital or related entities. That distinction remains central to the case, as the renewed recovery effort focuses on assets taken from a private wallet rather than company-controlled funds.

Advertisement

Furthermore, blockchain security firm SlowMist later said the theft happened after someone compromised Shen’s mnemonic seed phrase. The firm said the stolen assets included about $38.2 million in USDC, 1,607 Ether, nearly 720,000 USDT, and 4.13 Bitcoin.

According to the case details, the stolen funds later moved through services and exchanges that included ChangeNow and SideShift. These transfers made the recovery effort harder, especially during the early stage of the investigation, when cross-chain tracking tools were still less developed.

New tools give investigators another chance

Shen said tracing tools in 2022 could not fully support a case of this scale and complexity. He said that limit reduced the ability of investigators to follow asset movements across different chains and platforms.

He now says recent progress in artificial intelligence-based analysis and onchain forensics has improved that process. Shen said investigators now have “new leads” and a “clearer picture” of how the funds moved after the hack.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Strategy stretch shares draw retail investors seeking Bitcoin yield

Published

on

Strategy stretch shares draw retail investors seeking Bitcoin yield

Strategy’s “Stretch” preferred shares are drawing strong interest from retail investors as the company keeps using the product to fund Bitcoin purchases. 

Summary

  • Retail investors hold majority of Strategy Stretch shares seeking lower volatility Bitcoin exposure with steady yields
  • Strategy raised over 1 billion dollars through Stretch shares to fund recent Bitcoin purchases
  • Stretch shares offer 11.5 percent dividend while redirecting part of Bitcoin returns to investors

New comments from Strategy executives show that individual investors now make up most of the holders of STRC, a dividend-paying security that the company markets as a lower-volatility way to gain Bitcoin-linked exposure.

Strategy CEO Phong Le said about 80% of the owners of the company’s “Stretch” perpetual preferred shares are retail investors. He said retail buyers prefer “low-volatility, high-yield digital credit” as they look for steadier exposure tied to Bitcoin.

Advertisement

The figures show that demand for Bitcoin-linked products remains active even during a weaker period for the asset and for Strategy’s stock. Michael Saylor and other company executives have increased promotion of STRC as a product for investors who want Bitcoin exposure without taking on the same level of price swings seen in common shares or the token itself.

Strategy relied heavily on STRC sales in March to raise funds for more Bitcoin purchases. Bloomberg reported that about $1.2 billion from at-the-market sales of the preferred shares helped finance one of the company’s recent Bitcoin buys, though the firm later returned to common stock sales for its latest purchase.

Speaking at the 2026 Digital Asset Summit in New York, Saylor said selling a new credit instrument to retail investors is usually difficult. He later told CNBC that the goal is to create “an onramp for people who believe Bitcoin is going to be around for the long term, but they can’t handle the volatility in the near term.”

Advertisement

In addition, Saylor said Stretch removes the first 10% to 11% of Bitcoin’s yearly return and directs it to credit investors. He said the structure is “way overcollateralized” and argued that equity holders could still benefit if Bitcoin rises at a faster pace over time.

The security pays a variable dividend that adjusts monthly in an effort to keep the share price near $100. The dividend stood at 11.5% in March, while the product is structured as a perpetual preferred share with no maturity date.

Strategy expands its funding plans

Strategy has signaled that preferred stock will remain a core part of its Bitcoin funding model. In filings and company materials, the firm has described a broader capital strategy built around different securities that offer varying types of Bitcoin exposure to investors.

The company also disclosed plans to expand its fundraising capacity. According to the report cited in the source material, Strategy plans to raise up to $21 billion through stock sales and another $21 billion through Stretch-related at-the-market programs, showing that the company is preparing to keep using these instruments as it adds to its Bitcoin holdings.

Advertisement

Source link

Continue Reading

Crypto World

New ‘Torg Grabber’ Malware Targets 728 Crypto Wallets

Published

on

🚨

Torg Grabber, a newly identified infostealer malware, targets 728 crypto wallet extensions across 850 browser add-ons, and it is already in active deployment.

The malware exfiltrates seed phrases, private keys, and session tokens through encrypted channels before most endpoint tools register a detection event. Self-custody users running browser-based wallets are the primary exposure surface.

Gen Digital researchers documented the threat after tracing a loader chain through domain reputation data, ultimately compiling 334 samples across a three-month development window. This is not a proof-of-concept. It is a live Malware-as-a-Service operation with identified operators.

Key Takeaways:
Advertisement
  • Threat Scope: Torg Grabber scans 850 browser extensions, 728 of them crypto wallet targets, across 25 Chromium and 8 Firefox browser variants.
  • Attack Method: Dropper masquerades as a legitimate Chrome update (GAPI_Update.exe, 60 MB), deploys payload via a fake 420-second Windows Security Update progress bar, then exfiltrates data using ChaCha20 encryption with HMAC-SHA256 authentication through Cloudflare infrastructure.
  • Who Is at Risk: Browser-extension wallet users — MetaMask, Phantom, and comparable hot wallets — face direct credential theft; hardware wallet users face indirect risk only if seed phrases are stored digitally.

Discover: The best crypto presales gaining institutional momentum right now

The Mechanism: How Torg Grabber Malware Executes the Attack On Crypto Wallets

The infection chain opens with a dropper disguised as GAPI_Update.exe — a 60 MB InnoSetup package distributed from Dropbox infrastructure. It extracts three benign DLLs into %LOCALAPPDATA%\Connector\ to establish a clean-looking footprint, then launches a fake Windows Security Update progress bar running for exactly 420 seconds, complete with animated ASCII art compiled via csc.exe. The delay is deliberate: it creates a plausible installation window while the payload deploys.

The final executable drops under randomized names — v4jkqh.exe, hkjpy08.exe, ln3dkgz.exe — into C:\Windows\ across documented samples. One captured 13 MB instance spawned dllhost.exe and attempted to disable Event Tracing for Windows before behavioral detection terminated it mid-execution.

Post-deployment, Torg Grabber targets 25 Chromium browsers, 8 Firefox variants, Discord, Steam, Telegram, VPN clients, FTP clients, email clients, and password managers in addition to crypto wallets. Data is archived to an in-memory ZIP or streamed in chunks. Exfiltration routes through Cloudflare endpoints using per-request HMAC-SHA256 X-Auth-Token headers and ChaCha20 encryption — a production-grade architecture, not improvised tooling.

Advertisement

Gen Digital’s analysis identified over 40 operator tags embedded in binaries: nicknames, date-encoded batch IDs, and Telegram user IDs linking eight operators to the Russian cybercrime ecosystem. The MaaS model means individual operators can deploy custom shellcode post-registration, expanding the attack surface beyond the base configuration. As Gen Digital researchers described it, Torg Grabber evolved from Telegram dead drops to “a production-grade REST API that worked like a Swiss watch dipped in poison.”

Discover: The best crypto to diversify your portfolio with

The Self-Custody Signal: What 728 Wallets Actually Means

Advertisement

728 is not an arbitrary number. It represents a deliberate configuration sweep, every major browser-based wallet with measurable installation volume. MetaMask alone has over 30 million monthly active users. The extension-targeting logic means Torg Grabber does not need to find a specific victim; it harvests whatever wallet credentials are present on any infected machine.

The broader risk bifurcates cleanly. Self-custody users storing seed phrases in browser storage, text files, or password managers face complete wallet compromise on a single infection. Exchange-held assets are not directly exposed to this specific attack vector, the malware targets local credential stores, not exchange APIs at scale. But session token theft from browser storage can expose connected exchange accounts if login sessions are active.

If Torg Grabber’s MaaS operator base expands, and Gen Digital’s monitoring of its REST API infrastructure suggests active iteration, the wallet targeting list will grow. The 728 figure is a current snapshot, not a ceiling. Comparable infostealers like Vidar and RedLine normalized this model years ago; Torg Grabber is executing the same playbook with more structured infrastructure.

Discover: The best crypto presales gaining institutional momentum right now

The post New ‘Torg Grabber’ Malware Targets 728 Crypto Wallets appeared first on Cryptonews.

Advertisement

Source link

Continue Reading

Crypto World

ARK invest uses Kalshi to track market expectations

Published

on

ARK invest uses Kalshi to track market expectations

ARK Invest is adding Kalshi’s prediction market data to its research process as more institutions test whether these markets can help measure expectations in real time. 

Summary

  • ARK Invest adopts Kalshi data to track real time expectations and guide research decisions
  • Prediction markets expand beyond trading as institutions explore signals for risk management and forecasting
  • Federal Reserve and academia study prediction markets as tools for real time economic expectations analysis

Meanwhile, the move places prediction market signals alongside ARK’s existing work on market trends, policy events, and company milestones, showing how the data is being used for research and portfolio planning beyond direct trading.

According to the announcement, ARK will use Kalshi data to track real-time expectations and support its market-based research. The firm also plans to study signals tied to trading activity, regulatory approvals, and technology progress as part of that process.

Advertisement

Kalshi said ARK will also use the data in risk management and hedging. Cathie Wood said, “Bringing prediction markets into institutional workflows is a natural next step for innovation in financial research,” while ARK Research Director Nick Grous said these markets offer “some of the purest expressions of risk around key economic and company-specific outcomes.”

In an X post, Wood said on X that ARK has also been working with Kalshi on markets tied to topics the firm follows, including macroeconomic releases and scientific milestones. Kalshi CEO Tarek Mansour said some of those markets are already live, including contracts linked to non-farm payrolls, deficit-to-GDP ratios, and business key performance indicators.

The partnership adds to a wider push to use prediction market data as a decision tool. Kalshi has grown into one of the main regulated platforms in the sector, and firms are testing whether market-based probability signals can complement surveys, analyst models, and event-driven research.

Advertisement

Fed and academic research track the same trend

A Federal Reserve paper published last month said Kalshi’s macro markets can provide a “high-frequency, continuously updated, distributionally rich benchmark” for researchers and policymakers. The paper compared Kalshi data with surveys and market-based forecasts and argued that prediction markets can offer a real-time view of changing expectations.

Academic work has also examined how prediction markets react to political shocks. A recent paper using Polymarket’s 2024 presidential election data studied trading around the Biden-Trump debate, the assassination attempt on Trump, and Biden’s withdrawal from the race, showing how traders adjusted positions as events unfolded.

Source link

Advertisement
Continue Reading

Crypto World

MARA Sells 15,133 Bitcoin for $1 Billion Debt Repurchase, Retains 15,627 BTC in Reserve

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • MARA sold 15,133 BTC at ~$65,348 each, generating roughly $989M to fund its debt repurchase plan. 
  • The company captured $88.1M in savings by repurchasing convertible notes at a 9% discount to par.  
  • MARA reduced its total convertible debt by 30%, bringing the balance down to roughly $2.3 billion. 
  • After the BTC sale, MARA still holds 15,627 Bitcoin as long-term strategic reserves on its books.

MARA Holdings, Inc. sold 15,133 bitcoins to complete a $1 billion repurchase of its convertible senior notes. The Miami-based company executed the sales between March 4 and March 25, 2026.

Total proceeds reached approximately $1.1 billion, with the remainder reserved for general corporate purposes. The company, listed on NASDAQ under the symbol MARA, is the largest Bitcoin mining firm in the United States.

Following the deal, MARA retains approximately 15,627 bitcoins as long-term core reserves.

MARA Captures $88 Million Discount on Convertible Note Repurchase

The repurchase targets 0.00% convertible senior notes due in 2030 and 2031. MARA agreed to buy back $367.5 million in 2030 notes for roughly $322.9 million.

It also repurchased $633.4 million in 2031 notes for approximately $589.9 million. Closings are set for March 30 and 31, 2026, respectively.

Advertisement

The transactions capture roughly $88.1 million in cash savings before costs. This equals about a 9% discount to the notes’ par value.

Overall, MARA’s outstanding convertible debt will decrease by approximately 30%. The deal also cuts potential shareholder dilution from note conversion features.

After closing, $632.5 million of the 2030 Notes and $291.6 million of the 2031 Notes remain. MARA’s total convertible debt stood at around $3.3 billion before the deal. That balance is expected to fall to roughly $2.3 billion. Other outstanding note series remain unchanged.

Advertisement

CEO Fred Thiel addressed the decision in a statement. “By retiring over $1 billion of face value debt at a discount, we captured $88 million in value,” Thiel stated.

He added the move reduces shareholder dilution and deleverages the balance sheet. J. Wood Capital Advisors and Paul, Weiss served as financial and legal advisors.

MARA Moves Beyond Bitcoin Mining Into Digital Energy and AI

The 15,133 bitcoins sold averaged approximately $65,348 per coin, generating roughly $989 million. Those funds were directed primarily toward financing the note repurchases.

Remaining proceeds will support general corporate purposes. MARA completed the sales without raising new equity or taking on additional debt.

Advertisement

MARA stated that it is now expanding beyond pure-play bitcoin mining. Digital energy and AI/HPC infrastructure are named as primary growth targets.

This reflects a capital allocation strategy aimed at long-term diversification. New revenue streams from these areas could reduce the company’s dependence on mining income.

Using bitcoin holdings to fund debt reduction allowed MARA to act on its own terms. The company still holds approximately 15,627 bitcoins as a strategic reserve.

That position gives MARA room to respond to future market opportunities. Retaining a strong reserve remains part of the company’s long-term plan.

Advertisement

Thiel said the transaction’s position at MARA, as well as it builds into new infrastructure areas. He noted the deal strengthens financial standing and expands strategic options.

Remaining convertible obligations total roughly $2.3 billion after the repurchases. MARA continues to manage its capital structure with efficiency and long-term growth in mind.

Advertisement

Source link

Continue Reading

Crypto World

Investors yank $171 million from BTC ETFs in largest single-day outflow in three weeks

Published

on

Investors yank $171 million from BTC ETFs in largest single-day outflow in three weeks

Institutional demand for bitcoin appears to be cooling after a strong start to the month.

On Thursday, investors withdrew a combined $171.12 million from the 11 U.S.-listed spot bitcoin exchange-traded funds, marking the largest single-day outflow in just over three weeks, according to data from SoSoValue. BlackRock’s IBIT saw $41.92 million in outflows, while funds such as FBTC, GBTC, BITB and ARKB each recorded withdrawals in the $20 million to $30 million range.

The recent pullback follows a period of robust inflows, with these funds attracting more than $2 billion between late February and mid-month. Since then, momentum has slowed, with just $95.8 million in inflows last week and net outflows of $70.71 million so far this week.

The moderation in flows may point to a pause in institutional accumulation, with investors adopting a more measured approach to these ETFs. Launched in January 2024, the funds allow market participants to take exposure to bitcoin without requiring direct ownership.

Advertisement

The slowdown in demand raises questions about how long bitcoin can maintain resilience near $70,000 amid broader macroeconomic shocks.

Source link

Continue Reading

Crypto World

Bitcoin Whales Bought up 61K BTC In a Month Amid Global Uncertainty

Published

on

Bitcoin Whales Bought up 61K BTC In a Month Amid Global Uncertainty

Large Bitcoin holders accumulated 61,568 more Bitcoin over the past month against the backdrop of escalating conflict in the Middle East and macroeconomic uncertainty. 

Whales and sharks, defined as those holding between 10 and 10,000 Bitcoin (BTC), have increased their holdings by 0.45%, while wallets with under 0.01 Bitcoin have added 0.42%, or 213 BTC, over the past month, Santiment said in an X post Thursday.

The figures support recent data showing that Bitcoin exchange outflows have persisted throughout March, indicating that Bitcoin holders are accumulating rather than looking to sell. 

Santiment analysts added that whale accumulation could be a “promising sign” of an eventual breakout from the range. 

Advertisement

“Ideally, the ranging pattern will break upwards when large wallets are accumulating, while retail is dumping. This has historically been a very reliable pattern to signal the start of bull cycles,” the analysts said.

Source: Santiment

Tensions in the Middle East escalated in February after the US and Israel launched strikes against Iran. Iran retaliated against several neighboring countries, and the conflict has continued since.

Some whales wait for breakout; small holders driven by FOMO

Some Bitcoin whales are taking a different approach. 

On March 19, two Bitcoin whales moved tens of millions of dollars to exchanges as Bitcoin fell and energy prices jumped after attacks on Gulf oil and gas infrastructure deepened during the Iran conflict.

Dominick John, an analyst at Zeus Research, told Cointelegraph that the whales who have been accumulating in the background are likely preparing for the next breakout.

Advertisement

“Whales are scooping up BTC because they’re positioning ahead of a potential breakout, quietly stacking during consolidation periods. Small wallets are chasing the momentum, driven by FOMO during uptrends and the fear of missing the next leg up,” he said.

Related: Binance says US midterms could boost Bitcoin and stocks

“Whales tend to buy in waves, so accumulation could continue if the range holds and macro conditions stay supportive. On the other hand, if retail FOMO overheats, we could see a pause or slight sell-off before the next accumulation phase,” John added.

Fear and greed index in “extreme fear”

Meanwhile, investor sentiment remains deeply uncertain. The Crypto Fear & Greed Index returned a score of 13 on Friday, firmly in “extreme fear” territory.

Advertisement
Cryptocurrencies, Adoption, Social Media, Whale
The Crypto Fear & Greed Index has been firmly in “extreme fear” territory. Source: alternative.me

Thursday’s score was 10, and both the prior week and the month of February averaged “extreme fear” ratings as well, according to the index.

Magazine: Banks want to run Vietnam’s crypto exchanges, Boyaa’s $70M BTC plan: Asia Express