TL;DR — One phone call gave hackers full admin access to a $5.3B blockchain lender. 2.5 GB of customer data leaked. Check if your data was compromised. This investigation walks through how the data breach works in practice, the red flags victims missed, the wallets and transactions involved, and the verification steps that would have stopped it.
This is a full investigative report from CryptoStrapon's Dark Bits desk. We document how the data breach works, who runs it, the exact messages victims receive, the wallets involved, and the verification steps that would have stopped it in seconds.
What you will learn
- What this scam looks like in the wild
- Step-by-step breakdown of the playbook
- Red flags and warning signs to watch for
- On-chain evidence, wallets and transactions
- How to protect yourself and recover funds
- Frequently asked questions
Frequently asked questions
- What is the "ShinyHunters Hacked Figure: 1M Users Exposed [2026]" investigation about?
- One phone call gave hackers full admin access to a $5.3B blockchain lender. 2.5 GB of customer data leaked. Check if your data was compromised. CryptoStrapon documents the full playbook, on-chain evidence and verification steps that stop this fraud class in seconds.
- How can I spot this scam before losing money?
- Verify the official domain, cross-check contract addresses on Etherscan or the relevant explorer, distrust urgency or "limited windows", and run the suspicious message through our free Scam Detector before signing anything.
- Can victims recover funds lost to "ShinyHunters Hacked Figure: 1M Users Exposed [2026]"?
- On-chain recovery is effectively impossible once a transaction is signed. The useful steps are: report to the exchange if the attacker tries to cash out, file a police report with the transaction hash, and publish the attacker address so others flag it.
- Is this scam pattern real or an isolated case?
- It is a documented pattern in the "Data Breach" category with verifiable on-chain evidence. It is part of wider trends covered across our 34+ published investigations.
- Where can I learn more about this fraud class?
- Read the full investigation at https://cryptostrapon.com/stories/shinyhunters-figure-breach, browse related cases at https://cryptostrapon.com/#stories, or consult our 161+ term crypto scam glossary.
Continue to the full investigation, browse more scam investigations, or run a suspicious offer through our free Scam Detector.
Enable JavaScript for the interactive version with timeline, on-chain evidence, screenshots and recommendations.