Victims of fake Galxe/Mezo checker-tasks phishing drainer 0x1451a2F94F991dA0548a108bB5F85b9138d693D2 organizing coordinated police reports across Moldova and Russia.
Security & Exploits ·
A coordinated effort to document victims of a cryptocurrency drainer is underway across Moldova and Russia. Between July and September 2025, multiple wallets transferred funds to address 0x1451a2F94F991dA0548a108bB5F85b9138d693D2, which operators identify as having conducted a phishing campaign impersonating Galxe and Mezo checker-task services. The affected parties have filed police reports—including case C-1142/26 in Moldova—and notified major exchanges CoinEx and KuCoin.
The outreach strategy relies on on-chain messaging to reach additional victims and consolidate evidence for law enforcement. Those behind the coordination effort emphasize they will not solicit money, seed phrases, or private keys, and are collecting reports via email to build a stronger case. The drainer's operation appears to have exploited users seeking to interact with legitimate credential-verification tasks by directing them to fraudulent sites.
It remains unclear how many wallets have been compromised, what total volume was stolen, or what investigative progress has been made in either jurisdiction. The extent to which exchange compliance teams have engaged with the reports and whether any on-chain recovery or account freezes have been initiated are not yet documented.