Investigate Crypto without learning any tools mcp.bitquery.io/

On 27 October the ChainPort bridge minted 2.98B wIRON, the Base copy of Iron Fish's IRON, in 14 mints that passed its own checks. That is 38.7 times all the IRON that exists. Two new wallets sold every coin for $197.4K. One sent its share to FixedFloat. The other swapped its share for 0.865 BTC through THORChain, and that bitcoin moved again on Wednesday morning. Then 212 senders burned 192.0M wIRON to claim real IRON. Whether ChainPort pays those claims isn't visible on-chain. Full investigation: bitquery.io/investigations/i…

Every night this October, a cluster of wallets moved about $290M of USDC out of Aave and Sky's PSM, parked it in one wallet at 00:00 UTC, and put it back about half an hour later. It has done so on 394 nights in a row. On a median night, its USDC balance at midnight is 37 times its average over the day, which is what a reward that reads balances once a day would see. For that half hour, Aave's USDC pool is nearly empty of spare cash. The developer Wavey spotted the pattern first. Full investigation: bitquery.io/investigations/u…

Between 22 and 27 October, someone emptied 29 accounts on Predict fun, a prediction market on BNB Chain, and took 397,708 USDT. Each drain was signed with the wallet owner's key, and no Predict fun contract was broken. We found no public report of the 22 October wave. Within two hours of each wave, the money was on Ethereum, and 166.8 ETH of it went into Tornado Cash. Predict fun blames a hacked API docs site and has promised refunds. One more account was drained about an hour after that statement. bitquery.io/investigations/p…

Bubblemaps says memecoins promoted by Solstice, a top trader on the FOMO app, were bundled. Our own data backs that up. One cluster of 542 wallets created and bought five of the six coins in the story, and the sixth was launched the same way. Four dev wallets each took 51.8% of supply at launch and sold within half an hour, and 537 bundle wallets bought small slices within 33 minutes. Later each group cashed out together through stake accounts. Solstice's own public wallet lost money on the coins. But money from the cluster reached an exchange account also paid by a wallet that has swapped $381K with Solstice's account. bitquery.io/investigations/s…

#Solana blocks going down in steps, visualized.

Solana now makes a block, its batch of transactions, about every 0.21 seconds, half the 0.42 seconds it took in early August. The change came in four steps between 21 August and 9 October. The chain did not stop once in the 361 days we checked, and fewer blocks went missing after the change. Each block now holds less, so Solana does about the same work per second in smaller pieces. A typical swap still pays about a tenth of a cent in network fees. Staking rewards now arrive every 26 hours instead of every 51 hours, and the fastest bots buy new coins as quickly as before. bitquery.io/investigations/s…

Solana halved its block time to 0.21 seconds, with no outage bitquery.io/investigations/s…

Early on 26 October, an attacker emptied 48 wallets used with Bloom, a Telegram trading bot, and took 9,408 SOL, about $953K. The wallets belong to nine traders. A script tested one wallet per trader, then drained each trader's wallets biggest first, in 94 seconds. It used the owners' own keys, and its list included wallets that had not traded on Bloom since the first half of 2025. It took only SOL. Almost all of it sits unmoved in one wallet, and Bloom has promised refunds. bitquery.io/investigations/b…

On 24 October, three wallets used X100's own voting system to drain its treasury. X100's Senate has three seats, held by whoever locks up the most X. The first attacker took two of them with a flash loan, by locking one millionth of an X more than a member, then voted to make the treasury sell 400,000 X for $35.68. It left with $4.75M, most of it money the Senate's own members had put into the pool minutes earlier. A second attacker took $96,382 and cashed out through ChangeNOW. The first attacker's 2,022.86 ETH has not moved, and two seats are still open to anyone. bitquery.io/investigations/x…

The X100 hack took $4.85M in USDT from the token's only trading pool in two transactions, 24 minutes apart. bitquery.io/investigations/x…

An account took $90.5K out of the WAX bridge on 22 October by setting each withdrawal's fee to minus the amount. It was charged nothing. bitquery.io/investigations/w…

One account printed $7.48M in tokens on Initia in 13 seconds on 23 October, at face value. None of it was backed by anything. bitquery.io/investigations/i…

$1.16M was taken from Arkadiko and StackSwap, two Stacks apps, on 20–22 October. Arkadiko alone lost $1.09M. bitquery.io/investigations/a…

A thief took $15.99M in USDT from 40 CoinDCX wallets on TRON on 21 October. The exchange says they were old addresses it stopped using in 2025. bitquery.io/investigations/c…

We reviewed 3,170 pump-and-dump wins of $100K+ (Oct 2025 to Aug 2026). Only 26% of the $752.5M was real trading profit. bitquery.io/investigations/w…

59 seconds after a new KIMCHI launched on pump fun, three linked Solana wallets sold every token they held in the old KIMCHI, in one block, while buying the new one. bitquery.io/investigations/k…