Independent public-interest resource — not affiliated with Multiplifi or any wallet provider. We will never ask for your recovery phrase, private key, or a signature.
Evidence + reporting
First: revoke
If you connected during the compromise window, revoke approvals before
anything else — un-drained approved balances are still at risk:
revoke.cash → paste your BSC
address → revoke approvals to 0x3b2c3fdfadef5237f2d05e61949a56c5a80b2f0d
(and anything else you don't recognize)
Or BscScan → your address → Token Approvals → revoke
Preserve your evidence — now, before it ages
Everything you have right now is perishable. Capture it:
Your BscScan history — export/save your approval tx and the drain
tx (screenshots + raw tx hashes)
The signature prompt — if your wallet logged what you were asked
to sign
Browser history — the URLs you visited and when
Support messages — Discord tickets, DMs, X replies
Wallet logs — connection history, flagged-site warnings (1inch
flagged the site during the window)
Where to report
Chain-level (fastest freezes)
Tether — if USDT was drained, report to Tether's law-enforcement
channel with your drain tx
Circle (USDC) — same, for USDC drains
Exchanges the collectors feed — the collector addresses send to
real CEX deposit addresses; those desks freeze on credible reports
SEAL 911 — @seal_911_bot / seal911.org for live
drains in progress (short, factual: address + txid only)
Law enforcement (needed for any issuer freeze to stick)
US — FBI IC3 (ic3.gov)
UK — Action Fraud
EU — your national cybercrime unit / Europol EC3 referral
AU — ReportCyber
Anywhere — file a local police report; get the report number
Platform
Multiplifi — their HackenProof bug-bounty program and official
channels; the project acknowledged the compromise and owes users a disclosure
timeline