Scams

Moltbook, an AI-focused social media site that attracted about 1.5 million bot accounts, has been shown to contain serious security flaws including open databases and malicious tools targeting crypto wallets. Security researchers documented prompt injection attacks, fake crypto trading utilities, and a major database exposure that revealed roughly 1.5 million bot passwords and tens of thousands of email addresses. Experts warn that as local AI models advance over the next one to two years, it may become impossible for major providers to use "kill switches" to stop harmful AI agents.

Arizona officials have intensified alerts over cryptocurrency ATM fraud after losses reached more than $177 million in 2024. A 2025 state law mandates multilingual warnings, 24/7 live support, and daily caps of $2,000 for new users and $10,500 for existing users. Nationwide figures indicate rising losses and complaints, with older adults heavily affected.

On Monday, Arizona Attorney General Kris Mayes issued a statewide alert after residents lost more than $177 million to crypto ATM scams in 2024, and her office rolled out a new complaint form for victims to report losses within 30 days. The warning coincides with a wider U.S. and international crackdown on crypto kiosks, including state-level transaction caps, lawsuits against major operators, proposed federal rules, outright bans in some regions, and ongoing enforcement actions against firms such as Athena Bitcoin, Crypto Dispensers, Coinme, and Bitcoin Bancorp's expansion plans.

FTX customers and Fenwick & West reached a proposed settlement in a fraud lawsuit, with both sides planning to seek approval from a Florida federal court on Feb. 27. The terms were not disclosed, and the parties asked the court to pause deadlines while they finalize the agreement. The case follows the exchange’s collapse in November 2022.

New York Attorney General Letitia James and Manhattan District Attorney Alvin Bragg sent a letter to Congressional leaders criticizing the GENIUS Act. According to CNN, they contend the law lets issuers keep interest on assets backing flagged coins rather than prioritizing restitution; Chainalysis reports illicit crypto flows hit $154 billion in 2025 with stablecoins at 84%.

CertiK reported $370.3 million in digital assets were stolen via exploits and scams in January 2026, the highest monthly total in 11 months. Phishing accounted for $311.3 million, including a single $284 million social engineering loss, while PeckShield tracked 16 hacks totaling $86 million in the same month.

On February 1, 2026, CrossCurve warned on X that its cross-chain bridge was under attack due to a smart contract vulnerability. The team reported about $3 million in losses across several networks, while Defimon Alerts described a spoofed cross-chain message path and CrossCurve offered a 10% white-hat bounty with a 72-hour deadline for fund returns.

On Friday, the U.S. Treasury’s OFAC blacklisted UK-registered exchanges Zedcex and Zedxion for facilitating Iran’s Islamic Revolutionary Guard Corps transactions. The move also put Iranian financier Babak Morteza Zanjani back under sanctions after his 2024 death sentence commutation. Treasury said Americans are prohibited from dealing with the newly sanctioned entities.

A single wallet lost 4,556 ETH, worth about $12.25 million, in an address poisoning incident. Attackers crafted lookalike vanity addresses that appeared in the user’s transaction history, leading to a misdirected transfer. The case adds to a recent spate of large crypto thefts, including an almost $50 million loss in December 2025.

On January 31, 2026, a U.S. court sentenced Chinese national Jingliang Su to 46 months in federal prison and ordered $26,867,242 in restitution for laundering over $36.9 million from American victims. The scheme routed funds to Deltec Bank in the Bahamas, converted them to Tether (USDT), and moved them to a wallet in Cambodia.