VettedBotsLatest scam alerts
Fresh, sourced alerts from the last day or so: exploits, hot-wallet breaches, phishing drainers and supply-chain tampering. Newest first. Last updated 2026-10-15.
UNCX Vesting V2 exploit drains ~$1.5M across 4 chains
An accounting flaw in UNCX Network's shared Vesting V2 contracts let attackers (and later copycats/MEV bots) drain locked tokens. Blockaid tracked losses rising from an initial ~$86k on Ethereum to about $1.49M across BSC, Ethereum, Robinhood Chain, and Base. UNCX says liquidity lockers and legacy vesting were unaffected; the team raised fees and is coordinating with SEAL 911.
Red flags: Shared vesting pools with cancel/release accounting quirks, Sudden multi-chain drains after a public exploit alert, Copycat and MEV bots amplifying losses once a method is known
Sources: The Crypto Times (Oct 15) · SlowMist on X
Gamdom hot-wallet breach: $3M–$4.2M stolen
Crypto casino Gamdom took systems offline after finding an unauthorized server connection while investigating a suspected disk failure. Hot wallets across multiple chains (EVM, Solana, TRON, Bitcoin and others) were drained. Founder Felix Romer confirmed just over $3M lost; later reports put the multichain total near $4.2M. The company said remaining user funds in cold storage were safe.
Red flags: Platform goes offline with vague 'maintenance' messaging, Large hot-wallet outflows to brand-new addresses, Wait for official confirmations before trusting 'funds are safe' claims
Sources: TokenPost (Oct 14) · FairGambling (Oct 14)
EIP-7702 phishing: dormant wallet authorizations still draining funds
On Oct 14, a wallet tied to sven.eth lost ~9.12 ETH plus tokens after attackers activated an EIP-7702 delegation the victim had signed earlier. Security firms warn this is part of a wider October wave (including a ~$1.54M Scam Sniffer-flagged loss days earlier) where one signature can later empty an entire account via sponsored transactions—no fresh click required.
Red flags: Signature prompts involving 'delegation', 'authorization', or batch execution, Gasless / sponsored / free-claim offers that ask you to sign, Blind-signing hex data in the wallet popup
Sources: Shattered.io (updated Oct 15)
Ledger warns CryptoBilis buyers after tampered hardware wallets
Ledger told customers who bought through Southeast Asian reseller CryptoBilis to stop using those devices. At least one unit contained an unauthorized LTE/eSIM implant that could capture the recovery phrase during setup. On-chain estimates of related drains run about $86M–$93M. Ledger ordered the reseller to halt sales; direct Ledger sales channels were not reported as compromised.
Red flags: Hardware wallets bought from third-party resellers instead of the maker, Any device that asks you to re-enter or 'verify' a seed phrase after setup, Uninitialized reseller devices — leave them unused and start with new hardware + a new phrase
Sources: CryptoBriefing (Oct 14)
Browse the longer known-scams archive →
Summaries of public security reports and reputable coverage. Not financial advice; verify sources before acting.