LIVE · ON-CHAIN · Generated Sunday · July 26, 2026 · 10:16 UTC Issue №2026207 · bluewingintel.com
BlueWing Intel
Fraud Watch · Daily · BTC · ETH · SOL · TRX · BNB · Free
Issue №2026207
Sunday · July 26, 2026 · 10:16 UTC
Ed. #1 · First Edition
BTC
522
OFAC SDN addresses
ETH
107,807
phishing domains tracked
SOL
2,318
phishing domains tracked
TRX
195
OFAC SDN addresses
BNB
1
hack incidents · 30d

0.0 ETH flowed into Tornado Cash in the last 24 hours.

0 discrete deposits across four pool denominations, computed live from on-chain logs. Tornado's smart contracts were sanctioned in August 2022 — the contracts themselves are immutable and keep accepting ETH. This is what the chain actually shows, not an API estimate.

Editor's note — what this edition actually is
This is Fraud Watch №1. Every figure below is pulled live from public sources at generation time. No sample data, no padding. Sections without live signal are hidden, not filled. We lead with Tornado Cash deposit counts because the signal is timely, computable on free public RPC, and missing from every free competitor. Our proprietary labeled-wallet database seeds with every run.
Lead · Mixer Inflows · Tornado Cash · Last 24h

0 ETH in · 0 deposits · 0.00 ETH

PoolDepositsETH inContract
0.1 ETH00.00 ETH0x12D66f87…
1 ETH00.00 ETH0x47CE0C6e…
10 ETH00.00 ETH0x910Cbd52…
100 ETH00.00 ETH0xA160cdAB…
Computed via eth_getLogs against the four canonical Tornado Cash ETH pools. Contracts were designated by OFAC on 2022-08-08; they remain immutable and continue accepting deposits. Anyone who deposited in the last 24 hours has, by Treasury position, touched sanctioned infrastructure.

BTC Whale Moves · Last 24h

Transactions ≥5.0 BTC from mempool (unconfirmed) and the latest block (confirmed). Live from blockchain.info and mempool.space.

SizeTransactionState
35.67 BTC $2.30Mfe1ac8f5…1bb43dconfirmed
7.53 BTC $485.6K02f64ebd…9a11fbconfirmed
6.54 BTC $421.4K83003b52…9fd4f1confirmed
6.08 BTC $392.0Kff87a955…c4d967confirmed

OFAC Designation Changes · Last 7 Days

Live X Alerts · PeckShield / SlowMist / ZachXBT · Last 72h

  • @PeckShieldAlert 2026-07-25 01:54 TRX
    #PeckShieldAlert Specter has reported that @TripleAHQ wallets appear to have been drained of more than $9.7M worth of crypto across multiple chains, including #TRON, #Ethereum, #Polygon, and #Arbitrum. The exploiter bridged the stolen funds to Ethereum. 5,227 $ETH is currently being consolidated at: 0x01F8...53b1
    view post →
  • @CertiKAlert 2026-07-24 13:25
    Your security team should focus on vulnerabilities that matter. CertiK Hunt connects projects with elite, vetted researchers. Cut through the noise. Focus on what matters. Join the Hunt now👇 hunt.certik.com/for-protocol… Video
    view post →
  • @SlowMist_Team 2026-07-24 07:28
    🚨SlowMist TI Alert🚨 💸 @LienFinance Loss: ~542k USD 🔍 Root Cause: The `exchangeEquivalentBonds` function in BondMakerCollateralizedEth lacks proper multiset integrity checks. It only counts total exception occurrences instead of verifying each bondID's appearance per group. By repeating a single exception bondID in th
    view post →
  • @PeckShieldAlert 2026-07-24 04:24 ETH
    #PeckShieldAlert The #Drift Exploiter-labeled address has deposited 23,095.1 ETH (~$44.4M) into #TornadoCash and 0.85 $ETH into #Bybit. Drift suffered an exploit on April 1, 2026, resulting in a loss of ~$285M worth of cryptos.
    view post →
  • @CertiKAlert 2026-07-23 16:02
    4/ To pass proveImports(), the attacker called setLatestData() twice before the exploit etherscan.io/tx/0x8f21bd8f0f… etherscan.io/tx/0x51b1c8341d… to overwrite and promote 'stateRoot' of '20f2...0a' which matched the derivation from attacker-constructed proofs.
    view post →

Stablecoin Footprint · Multi-Chain · By Issuer

Circulating USD-pegged supply by issuer across the seven largest stablecoin chains. Source: DefiLlama, refreshed hourly. The corridor concentration tells you where the fraud rails actually run — USDT dominates Tron, USDC dominates Solana and Base, both fight on Ethereum.

Issuer · AssetETHSOLTRXBNBBaseARBMATICTotal
TetherUSDT$75.5B$3.3B$90.0B$9.2B—$884M$864M$184.3B
CircleUSDC$46.8B$7.7B$28M$1.6B$4.2B$2.2B$1.7B$73.6B
MakerDAODAI$4.2B$510K—$31M—$19M$557M$4.8B
PaxosPYUSD (PayPal)$1.7B$683M$23——$170M$10M$2.7B
PaxosUSDP$15K——$1$81K$1$1$2M
SkyUSDS———$92K$5K——$0M
Chain total$128.3B$11.7B$90.0B$10.8B$4.2B$3.2B$3.1B$265.4B
Forensic reports · when a daily scan is not enough

Stop guessing. Start citing.

A risk verdict in thirty seconds, a filable report in three days, or the full intelligence package in ten. Same evidence discipline every BlueWing PDF has shipped since day one: SHA-256 manifests, confidence-graded findings, and a transaction hash behind every claim.

Free · Risk Check
Thirty seconds · Public
$0
Paste the address. Green, yellow, or red in under thirty seconds. OFAC and sanctions, drainer and scam-registry hits, exposure tags, one-line plain-English summary. Enough to know whether to walk away or pick up the phone. No credit card.
First 3 lookups · no email needed
Then 2 / day · 10 / week · email-verified
Cloudflare Turnstile bot protection
Check a wallet now →
Pro · On-Chain Report
On-chain analysis - 24 hr delivery
$2,500
For the deal that needs a paper trail. Full transaction-graph trace, sweep / consolidation / round-trip pattern detection, mixer entry flags, supply-concentration breakdown, drainer-ring identification across the single entity. Every load-bearing claim Admiralty-graded (A1 / B2 / C3). Watermarked PDF with SHA-256 evidence manifest, independently verifiable by your counterparty. Priced to close on a corporate card. No RFP. No committee.
Request a Pro report →
Founding price
Elite · Full Intelligence
On-chain + OSINT - 48 hrs delivery
13 / 50 founding reports delivered · 37 slots remain
$7,500
$12,500 at list after founding window
For serious matters where counsel is already involved. Everything in Pro, plus cross-chain operator-cluster tracing (up to three chains), sponsored-transaction rotation analysis on Solana, serial-issuer identification, and the OSINT layer that holds up under scrutiny: GitHub scam-site enumeration, IPFS metadata, WHOIS pivots, social and homoglyph cross-reference. Structured JSON export for the data room. Optional on-chain anchoring for chain-of-custody. Used by attorneys in live crypto-fraud matters.
Request an Elite report →
Source status this run: mixer flowsofacofac delta weekrektscamsniffercoingeckosecx alertsbtc whalestrx usdt flowstether frozenphishing domainschainabusedefillama hacksphantom sol