Daily News 19

Tag: Lookonchain

  • Trump-Themed GOLD Rug Pull Shows How Viral Pumps Trap Traders

    Trump-Themed GOLD Rug Pull Shows How Viral Pumps Trap Traders

    Trump Digital Gold Memecoin Collapses After Viral X Promotion

    Trump Digital Gold (GOLD), a Solana-based memecoin, rapidly collapsed after a burst of attention on social media, leaving traders who bought near the peak with little opportunity to exit. The token briefly reached a market capitalization of $66 million after the account realtrumpcoins1 promoted its contract address on X.

    The account markets Trump-branded collectible coins and describes itself as an official Trump Organization partner. However, the post was later deleted, raising questions about whether the account had been compromised. Shortly afterward, GOLD’s market capitalization plunged from approximately $55 million to $1 million in just 30 seconds.

    82.45% of GOLD Supply Left Buyers Exposed

    The token’s ownership structure revealed the main risk. Addresses linked to the alleged scam group accumulated 824.54 million GOLD, equivalent to 82.454% of the total supply.

    The addresses acquired the tokens through pre-allocation and purchases made after launch. They later sold their entire position for approximately 9,784.6 $SOL, worth about $1.01 million.

    Blockchain analytics firm Lookonchain also identified 15 newly created wallets that spent only $18,657 to purchase 224.5 million GOLD. The wallets later sold those holdings for roughly 3,178 $SOL, or about $330,000, producing an estimated profit of $312,000.

    That level of concentration meant later buyers were trading against holders capable of selling a substantial share of the available supply. One trader who bought near the peak reportedly lost approximately $62,100 within seven minutes. The rapid loss illustrated how little time remained to react once the promotional catalyst disappeared and selling intensified.

    GOLD’s $55 Million Market Cap Hid Its Liquidity Risk

    The collapse also demonstrated why a memecoin’s market capitalization can exaggerate its practical strength. Market capitalization reflects the latest token price multiplied by the total supply; it does not measure the amount of liquidity available for holders seeking to sell.

    As a result, GOLD could show a valuation above $50 million without having enough buying depth to absorb concentrated selling. Once large holders exited their positions, the quoted valuation vanished almost immediately.

    The episode reflected a risk previously highlighted by the U.S. Commodity Futures Trading Commission. The CFTC has warned that social-media promotion can draw traders into thinly traded tokens before organizers sell into the resulting demand.

    For traders, the Trump Digital Gold collapse shows why viral attention should not replace basic market checks. Holder concentration, liquidity depth, newly funded wallets, insider activity, and supply control are all important factors to assess before entering a fast-moving token.

    Ultimately, the GOLD collapse was not only linked to a deleted promotional post. It showed how quickly social-media momentum can turn into an exit-liquidity trap when insiders control most of the supply and market depth remains weak.

    Related: Specter Flags CodexField as a Potential $85M Rug Pull

    Source: cryptonews.net

  • New GOLD Token Wallets Sell 224.5 Million Tokens in $330,000 Solana Exit

    New GOLD Token Wallets Sell 224.5 Million Tokens in $330,000 Solana Exit

    Lookonchain reported on Aug. 29 that 15 newly created wallets linked by the tracker to the GOLD token team sold 224.5 million GOLD tokens for 3,178 $SOL, worth approximately $330,000. The sale reportedly generated a profit of about $312,000. The original data post is available on X.

    What the GOLD Token Sale Data Shows

    The report provides a limited snapshot of market activity rather than a forecast of future prices. Its figures relate to the wallets, products or market segments identified in the post, and the timing is significant because cryptocurrency activity can change rapidly.

    For the Aster move, the reported return was unrealized. In the GOLD case, the wallet attribution was based on on-chain tracking. The $SOL withdrawals show transfers from named exchanges but do not identify the owners or reveal their intentions. ETF exchange-balance and volume figures are measurements from the named data providers, not official statements from every market participant.

    Why the Developments Matter

    These developments illustrate how trading activity, custody decisions and liquidity can influence digital-asset markets. A new perpetual listing may attract both leverage and attention. A coordinated-looking token sale may raise questions about token concentration and disclosure.

    Large withdrawals can reduce immediately visible exchange balances, but they do not automatically indicate accumulation. ETF inflows may expand regulated access to digital assets, while exchange outflows can result from several factors, including self-custody, staking or transfers between trading venues. Volume dominance measures participation, not the quality or durability of the assets being traded.

    What the Report Does Not Establish

    The posts do not establish that any of the reported moves will continue. They also do not, by themselves, prove intent, ownership or a completed change in market structure. Readers should distinguish realized gains from unrealized positions and observed transfers from wallet labels.

    Indicators to Watch Next

    Follow-up evidence will include whether the activity continues after the initial move, whether additional wallets or filings clarify attribution, and whether liquidity remains available across venues. In the ETF and exchange-balance cases, subsequent daily flows will help show whether the reported direction was temporary or part of a longer-term trend.

    Until further evidence emerges, these developments remain dated market observations. BlockchainReporter will continue to separate sourced on-chain data from interpretation rather than treating a single reading as a forecast. Additional context is available in earlier market coverage.

    Source: cryptonews.net

  • Aster Listing Sends Niu Lai Token Up 510% as Trader Opens $111K Long

    Aster Listing Sends Niu Lai Token Up 510% as Trader Opens $111K Long

    On Aug. 30, blockchain analytics tracker Lookonchain reported that Niu Lai surged more than 510% after being listed for perpetual trading on Aster DEX. According to the report, one trader opened a 5x long position worth approximately $111,000 and was showing an unrealized profit of $49,500. The original data post is available on X.

    What the Data Shows

    The report provides a limited snapshot of market activity rather than a prediction of future prices. Its figures relate to the wallets, products or market segments identified in each post, and the timing is important because crypto markets can change rapidly.

    In the Aster example, the reported return was unrealized. In the GOLD sale, wallet attribution was based on on-chain tracking. The SOL withdrawals show transactions moving from named exchanges but do not reveal the owners’ intentions. ETF inflows, exchange balances and trading-volume figures are measurements from the named data providers, not official statements from every market participant.

    Why These Crypto Market Developments Matter

    These developments highlight how trading activity, custody decisions and liquidity can influence digital-asset markets. A new perpetual listing may attract leverage as well as attention. A coordinated-looking token sale can raise questions about concentration and disclosure.

    Large withdrawals may reduce immediately visible exchange balances, but they do not automatically indicate accumulation. ETF inflows can expand regulated access to digital assets, while exchange outflows may reflect several motives, including self-custody, staking or transfers between trading venues. Trading-volume dominance measures market participation, not the quality or durability of the assets involved.

    What the Report Does Not Show

    The posts do not establish that any reported market move will continue. They also do not, by themselves, prove intent, ownership or a completed change in market structure. Readers should distinguish realized gains from unrealized positions, observed transfers from wallet labels, and on-chain activity from confirmed investor decisions.

    What to Watch Next

    Follow-up evidence will show whether the activity continues after the initial move, whether additional wallets or filings clarify attribution, and whether liquidity remains available across venues.

    For the ETF and exchange-balance data, subsequent daily flows will help determine whether the reported direction was temporary or part of a longer-term trend. Until more evidence becomes available, these developments remain dated market observations. BlockchainReporter will continue to distinguish sourced on-chain data from interpretation and avoid treating a single reading as a forecast. Further context is available in earlier market coverage.

  • Lazarus Group Resurfaces With $19.4 Million Bitcoin Transfer

    Lazarus Group Resurfaces With $19.4 Million Bitcoin Transfer

    Bitcoin wallets linked to the North Korean hacking group Lazarus transferred 244.148 BTC worth approximately $19.42 million, renewing attention on the group’s ongoing cryptocurrency activity.

    Lazarus-linked wallets move 244.148 BTC

    Blockchain analytics firm Lookonchain reported the transfer in an Aug. 28 X post, saying wallets attributed to Lazarus Group had become active and moved 244.148 BTC about an hour before the alert.

    Bitcoin was trading at roughly $79,500 when Lookonchain published its estimate, placing the transaction’s value at about $19.42 million. The analytics firm did not identify the receiving address or say whether the Bitcoin was sent to an exchange, mixer or another wallet controlled by the group.

    Without a disclosed destination, the transfer alone does not prove that Lazarus sold the Bitcoin or attempted to cash out. Public blockchain records show when funds move between addresses, but attributing those addresses to an organization generally depends on labels and analysis from investigators or blockchain intelligence firms.

    The Aug. 28 movement followed another large Bitcoin transfer attributed to Lazarus earlier in the month. On Aug. 12, Lookonchain said the group moved 262.2 BTC, then worth approximately $16.64 million, from an identified wallet to a newly created address.

    At the time, Lookonchain described that transaction as a wallet-to-wallet transfer rather than a sale. Based on the reported dollar values, the two August transactions involved more than $36 million in Bitcoin. However, no source has confirmed that the funds came from the same balance or served the same purpose.

    Earlier wallet activity highlights why the destination of the latest transfer matters. In March 2025, five unknown addresses received a combined 44.07 BTC worth approximately $3.76 million from wallets attributed to Lazarus, according to previous on-chain reporting. The transactions reduced the tracked wallet’s holdings to 13,441 BTC at the time.

    Bybit theft spread Bitcoin across thousands of addresses

    As crypto.news previously reported, Bybit sued North Korea and Lazarus Group in a Washington, D.C., federal court on Aug. 7, seeking to recover assets linked to the exchange’s $1.5 billion theft.

    The lawsuit also named North Korea’s Reconnaissance General Bureau, or RGB, which the U.S. Treasury identifies as the country’s primary intelligence agency. A federal judge issued a preliminary injunction blocking unidentified defendants from transferring, selling or disposing of certain assets connected to the case.

    Bybit filed the civil lawsuit separately from ongoing U.S. criminal investigations. A preliminary injunction preserves identified property while litigation continues and does not represent a final ruling on ownership or liability.

    The FBI attributed the February 2025 Bybit attack to North Korean actors operating under the TraderTraitor name. According to the agency, the attackers converted part of the stolen holdings into Bitcoin and other assets before distributing them across thousands of addresses on multiple blockchains.

    In its public alert, the FBI said it expected the assets to be moved again and eventually exchanged for government-issued currency. The bureau asked exchanges, bridges, decentralized finance services, blockchain analytics companies and node operators to block transactions involving the addresses it identified.

    By April 2025, Bybit CEO Ben Zhou said 27.6% of the stolen funds could no longer be tracked, according to an August report on North Korea’s attack methods. The report said that distributing the assets across numerous Bitcoin wallets had made blockchain tracing more difficult.

    Lookonchain has not directly connected the latest 244.148 BTC transfer to the Bybit theft. No government agency or blockchain intelligence company cited in the available reporting has publicly identified the source of the coins involved in the Aug. 28 movement.

    Lazarus-linked crypto attacks continued into 2026

    Chainalysis estimated that North Korean hackers stole at least $2.02 billion in cryptocurrency during 2025, a 51% increase from the previous year. The firm estimated North Korea’s cumulative cryptocurrency theft had reached at least $6.75 billion by the end of that period.

    According to its December 2025 report, North Korean operations accounted for 76% of the value lost through attacks on crypto services during the year. Chainalysis said the attackers carried out fewer confirmed incidents but extracted larger amounts from successful breaches.

    The firm also found that North Korean operators increasingly targeted companies through impersonation and employee-access schemes. Some actors posed as job applicants to gain entry to crypto businesses, while others pretended to recruit for established Web3 and artificial intelligence companies, according to Chainalysis.

    Activity attributed to Lazarus continued in April 2026, when attackers drained approximately 116,500 rsETH worth about $292 million from KelpDAO’s LayerZero-based bridge. LayerZero attributed the attack with preliminary confidence to the Lazarus Group’s TraderTraitor unit.

    Chainalysis later said the attackers had compromised infrastructure that supplied blockchain information to LayerZero’s verification system. By feeding false data into the system, they caused an Ethereum contract to release assets even though no corresponding token burn had occurred on the source network.

    Rapid intervention blocked a second attempted theft worth approximately $95 million, according to Chainalysis. The Arbitrum Security Council also froze more than 30,000 ETH that investigators connected to the attacker’s subsequent transactions.

    By June, the KelpDAO attacker had moved approximately $220 million in unfrozen assets through privacy services, according to subsequent tracking data. The routes included THORChain, Wasabi, Tornado Cash and Umbra, while approximately $1.7 million remained in the original wallets.

    U.S. sanctions restrict dealings with Lazarus Group

    The U.S. Treasury’s Office of Foreign Assets Control sanctioned Lazarus Group in September 2019 under an executive order targeting the North Korean government. OFAC identified Lazarus, Bluenoroff and Andariel as state-controlled hacking groups connected to the RGB.

    Under the designation, property belonging to Lazarus that enters the United States or comes into the possession or control of a U.S. person must be blocked and reported to OFAC. Treasury regulations also generally prohibit Americans from conducting transactions with sanctioned entities unless authorized by the agency.

    The Treasury said Lazarus had targeted governments, financial institutions, media companies, manufacturers, infrastructure operators and cryptocurrency businesses through cyber theft, espionage and malware attacks. The department linked the group to the 2014 Sony Pictures breach and the WannaCry ransomware attack, which affected computers across at least 150 countries.

    U.S. authorities have also taken action against services used to process funds linked to the group. In 2022, the Treasury sanctioned the virtual currency mixer Blender.io after saying it had processed more than $20.5 million from the roughly $620 million Ronin Network theft. The FBI later attributed the Ronin attack to Lazarus Group and APT38.

    In August 2023, the FBI separately warned cryptocurrency companies about movements involving Bitcoin stolen by North Korean TraderTraitor actors. The agency said the group could attempt to cash out more than $40 million in Bitcoin and published six wallet addresses for private companies to investigate.