View source for TrustWallet Twitter Phishing Attack LouBapMarketing

{{Case Study Under Construction}}[[File:Trustwallet.jpg|thumb|Trust Wallet Logo]]Twitter user "LouBapMarketing" (formerly "DafiManiac0") reported that he lost $90,689.000248 USDT and $154,807.136786 USDC in a phishing attack. He provided blockchain transactions dated July 19th, 2021. He repeatedly requested help to recover his funds. It doesn't appear that any of his several tweets at the time received any response, and it seems unlikely that any of the stolen funds have been recovered.

== About Lou Bap Marketing ==
LouBapMarketing was formerly known as DafiManiac0<ref name="loubapmarketingtwitter-10010" />, a reference to his passion for the Dafi protocol<ref name=":0">[https://twitter.com/loubapmarketing/status/1403064602678681602 LouBapMarketing - "Welcome to the #DafiSummer  Proud to announce to all our beloved dPARTNERS" - Twitter] (May 11, 2023)</ref>. He first joined Twitter in March 2013<ref name=":2">[https://web.archive.org/web/20230511183547/https://twitter.com/loubapmarketing LouBapMarketing Profile - Twitter Archive May 11th, 2023 12:35:47 PM MDT] (May 11, 2023)</ref>. Presently, he appears to be running a business designing various graphics for the cryptocurrency space<ref name=":2">[https://web.archive.org/web/20230511183547/https://twitter.com/loubapmarketing LouBapMarketing Profile - Twitter Archive May 11th, 2023 12:35:47 PM MDT] (May 11, 2023)</ref>.<blockquote>Create  website, crypto projects, memes, pre sale, apps and evertyhing about GRAPHIC DESIGN</blockquote>He appears to have had investments in both Dafi Protocol<ref name=":0">[https://twitter.com/loubapmarketing/status/1403064602678681602 LouBapMarketing - "Welcome to the #DafiSummer  Proud to announce to all our beloved dPARTNERS" - Twitter] (May 11, 2023)</ref> and Secret Network<ref>[https://twitter.com/loubapmarketing/status/1351118288768659461 Lou Bap Marketing - "Now people can SEND and RECEIVE @SecretNetwork" - Twitter] (May 11, 2023)</ref>.

== About TrustWallet ==
TrustWallet is a wallet available as a browser extension or mobile download for IOS or Android<ref name="trustwallet-10015" />. The wallet was originally released in November 2017<ref name=":1">[https://golden.com/wiki/Trust_Wallet-K46X4E8 Trust Wallet - Golden.com Wiki] (Mar 9, 2023)</ref>. TrustWallet was acquired by Binance on July 31, 2018<ref name=":1" />.<blockquote>
The most trusted & secure crypto wallet.

Buy, store, collect NFTs, exchange & earn crypto. Join 25 million+ people using Trust Wallet.</blockquote>Wallets within TrustWallet are typically secured by a 12 word seed phrase<ref name=":4">[https://trustwallet.com/blog/could-someone-guess-your-mnemonic Could Someone Guess Your Recovery Seed Phrase? - TrustWallet] (Mar 9, 2023)</ref>.
== The Reality ==

TrustWallet warns about the dangers of sharing your seed phrase on their website<ref name=":4" />.<blockquote>Just like your bank account login or email credentials, your recovery phrase needs to be kept in a secure, hidden location. You need to write it on a piece of paper (or engrave it in metal) and ensure that the order of words is followed.</blockquote>Cryptocurrency scammers have many elaborate ways to steal seed phrases of wallet users. One common tactic is to create a website which purports to allow you to connect your wallet, such as for support or to participate in an event. When an attempt is made to connect the user's wallet, the user will typically be greeted with an error connecting the wallet or see a transaction/wallet failure, and be given a request to enter their seed phrase to resolve the issue.

Many new cryptocurrency users will believe that the website is securely associated with their wallet, and that their seed phrase is only being used for the purposes of resolving the technical issue with their wallet. In reality, these websites typically send their seed phrase information directly to an attacker who can then drain all of their funds.

One or more individuals created a series of Twitter accounts which were designed to push users to use one of these websites<ref>[https://twitter.com/loubapmarketing/status/1418193580007608325 LouBapMarketing - "that is SCAM" - Twitter] (May 11, 2023)</ref>. In this case, it appears there was an active attempt using the Twitter usernames: 

* WaIIetHelpHQ<ref>[https://twitter.com/search?q=WaIIetHelpHQ WaIIetHelpHQ Search - Twitter] (Nov 17, 2023)</ref>, which substituted uppercase Is for the lowercase Ls which are present in the standard username<ref>[https://twitter.com/CdricPoirier3/status/1417633058451230723 Seifer Almazy - "Hehe, don't worry, I noticed that. Bad quality scam try ^^" - Twitter] (Nov 17, 2023)</ref>.
* Cihanba23827631<ref>[https://twitter.com/search?q=Cihanba23827631 Cihanba23827631 Search - Twitter] (Nov 17, 2023)</ref>.
* MetaMaskMod<ref>[https://twitter.com/search?q=MetaMaskMod MetaMaskMod Search - Twitter] (Nov 17, 2023)</ref>.
* Nehar98004383<ref>[https://twitter.com/search?q=Nehar98004383 Nehar98004383 Search - Twitter] (Nov 17, 2023)</ref>.

https://twitter.com/Stayhumble786/status/1417225489639428101 

https://twitter.com/Stayhumble786/status/1417224783692025863

https://twitter.com/loubapmarketing/status/1418160593962475529

The scheme is described by another user kfrazine, who almost fell for it<ref name="kfrazinetwitter-10013" />. Multiple accounts on Twitter would all mention that the user shouldn't mention MetaMask in their tweet, and to follow an account "@metamaskmod", which was supposed to provide support<ref>[https://twitter.com/kfrazine/status/1417218782007791624 kfrazine - "I asked a question with MM in it.. and I got 3 people write me tell me not to say MM in tweet and to follow this @metamaskmod" - Twitter] (May 11, 2023)</ref>.<blockquote>
I asked a question with MM in it.. and I got 3 people write me tell me not to say MM in tweet and to follow this @metamaskmod ... When I did that...and messaged them they asked me to click a link ( that asked me for my 12 word seed... ) CRAZY how tricky they try to be</blockquote>

Twitter account Nehar98004383 was not a verified account, and asked for money<ref name="nehar98004383twitter-10012" /><ref name=":3">[https://twitter.com/loubapmarketing/status/1418160593962475529 <nowiki>LouBapMarketing - "It is not verified, not offic[i]al from @TrustWalletApp and they ask money . So probably is your the scammer. People report this NEHAR profile." - Twitter</nowiki>] (May 11, 2023)</ref>. TBD there are limited details here.<blockquote>"It is not verified, not offical from @TrustWalletApp and they ask money. So probably is your the scammer. People report this NEHAR profile."</blockquote><blockquote>"ya i just figgered out that the 3 that are trying to Force me to click the link and give the seeds... are all trying to trick me.. 0 following 168 followers.. .. X 2 of them... man .... they are convincing"</blockquote>

== What Happened ==
The Twitter user was phished and gave up access to their wallet which contained a total of $250k in USDC and USDT.
{| class="wikitable"
|+Key Event Timeline - TrustWallet Twitter Phishing Attack LouBapMarketing
!Date
!Event
!Description
|-
|July 19th, 2021 1:44:06 AM MDT
|Tether Tokens Transfered
|A blockchain transaction occurred for 90,689.000248 Tether<ref name="tronscan-9990" /> from LouBapMarketing's tron wallet<ref>[https://tronscan.org/#/address/TB4PCZPHnhBn7qTVFxxM8exWAxDusT6yAv LouBapMarketing's Tron Wallet - TronScan] (Mar 22, 2023)</ref> to the thief's wallet<ref>[https://tronscan.org/#/address/TWrPe7MrFJFPkMU68HKFitKawfHxB3tXXB Thief's Tron Wallet - TronScan] (Mar 22, 2023)</ref>.
|-
|July 19th, 2021 2:20:12 AM MDT
|USDC Tokens Transfered
|A blockchain transaction occurred for 154,807.136786 USDC<ref name="etherscan-9991" /> from LouBapMarketing's ethereum wallet<ref>[https://etherscan.io/address/0x087296486a5ec574a4f23ede379fe02223637f05 LouBapMarketing's Ethereum Wallet - Etherscan] (Mar 22, 2023)</ref> to the thief's wallet<ref>[https://etherscan.io/address/0x2ff113e60753aa1e5d9f68a03b28aa13f1a8ee8f Thief's Ethereum Wallet - Etherscan] (Mar 22, 2023)</ref>.
|-
|July 19th, 2021 2:50:00 PM MDT
|Twitter Warning By Kfrazine
|Twitter user kfrazine was able to avoid falling for a similar fraud and warned other users. He says "man .... they are convincing"<ref name="kfrazinetwitter-10013" />.
|-
|July 22nd, 2021 1:15:00 AM MDT
|Request For Help From Justin Sun
|Lou Bap Marketing (DafiManiac0 at the time) reports their theft on Twitter, attempting to get assistance from Justin Sun<ref name="loubapmarketingtwitter-10011" />.
|-
|July 22nd, 2021 1:18:00 AM MDT
|Request For Help From Trust Wallet
|Lou Bap Marketing attempts to get assistance from Trust Wallet<ref name="loubapmarketingtwitter-10010" />.
|-
|July 22nd, 2021 1:44:00 AM MDT
|Another Request For Help From Trust Wallet
|Lou Bap Marketing again attempts to get assistance from Trust Wallet<ref name="loubapmarketingtwitter-10009" />.
|-
|July 22nd, 2021 1:48:00 AM MDT
|Multiple Requests For Help From Atomic Wallet and Justin Sun
|Lou Bap Marketing attempting to get assistance from Atomic Wallet and Justin Sun by posting the same message 3 separate times in the same minute<ref name="loubapmarketingtwitter-10006" /><ref name="loubapmarketingtwitter-10007" /><ref name="loubapmarketingtwitter-10008" />.
|-
|July 22nd, 2021 1:53:00 AM MDT
|Request For Help From trondao
|Lou Bap Marketing attempts to get assistance from Twitter user @trondao<ref name="loubapmarketingtwitter-10005" />.
|-
|July 22nd, 2021 1:55:00 AM MDT
|Request For Help From CryptoMichNL
|Lou Bap Marketing attempts to get assistance from Twitter user @CryptoMichNL<ref name="loubapmarketingtwitter-10004" />.
|-
|July 22nd, 2021 2:33:00 AM MDT
|Request For Help From TheMoonCarl
|Lou Bap Marketing attempts to get assistance from Twitter user @TheMoonCarl<ref name="loubapmarketingtwitter-10003" />.
|-
|July 22nd, 2021 2:34:00 AM MDT
|First Twitter Help Request To MartiniGuyYT
|Lou Bap Marketing attempts to get assistance from Twitter user @MartiniGuyYT. They again mention that the hack was for 250k a few days ago and provide a transaction on the Tron blockchain<ref name="loubapmarketingtwitter-10002" />.
|-
|July 22nd, 2021 3:02:00 AM MDT
|Second Twitter Help Request To MartiniGuyYT
|Lou Bap Marketing again tries to get the help of "Mr. Martini"<ref name="loubapmarketingtwitter-10001" />.
|-
|July 22nd, 2021 3:16:00 AM MDT
|Multiple Requests For Help On Twitter
|Lou Bap Marketing attempts to get assistance from Twitter users @eddieoz and @bitdov. The same information is included<ref name="loubapmarketingtwitter-9999" /><ref name="loubapmarketingtwitter-10000" />.
|-
|July 22nd, 2021 3:32:00 AM MDT
|Twitter Help Request To amanusk_
|Lou Bap Marketing attempts to get assistance from popular blockchain researcher amanusk_. They mention the same information that the hack was for 250k a few days ago and provide a transaction on the tron blockchain<ref name="loubapmarketingtwitter-9998" />.
|-
|July 22nd, 2021 3:39:00 AM MDT
|Multiple Requests For Help On Twitter
|Lou Bap Marketing continues to attempt to get assistance from popular blockchain researcher amanusk_ as well as various other Twitter users by posting the same Tweet multiple times<ref name="loubapmarketingtwitter-9989" /><ref name="loubapmarketingtwitter-9996" /><ref name="loubapmarketingtwitter-9997" />.
|-
|July 22nd, 2021 3:43:00 AM MDT
|Lou Bap Marketing Contacts Scammer
|Lou Bap Marketing sends a private message to (what's believed to be) a scam account, which has since been suspended, in an attempt to get help<ref name="loubapmarketingtwitter-10014" />.
|-
|July 22nd, 2021 4:46:00 AM MDT
|Nehar98004383 Scammer
|Lou Bap Marketing appears to have had a confrontation with a Twitter scammer following the incident<ref name=":3" />.
|-
|July 22nd, 2021 5:27:00 AM MDT
|Another Twitter Request For Help
|Another Tweet tags @AtomicWallet, @TrustWalletApp, and @justinsuntron<ref name="loubapmarketingtwitter-9995" />.
|-
|July 22nd, 2021 5:35:00 AM MDT
|Third Twitter Help Request To MartiniGuyYT
|Another Tweet is sent in response to @MartiniGuyYT<ref name="loubapmarketingtwitter-9994" />.
|-
|July 22nd, 2021 10:20:00 AM MDT
|Another Twitter Request For Help
|Having no response yet from amanusk_, they then reach out to Twitter users @TheMoonCarl, @MartiniGuyYT, and Justin Sun, the creator of the tron blockchain<ref name="loubapmarketingtwitter-9993" />.
|-
|July 22nd, 2021 1:17:00 PM MDT
|Yet Another Request For Help
|Having not gotten any response from amanusk_, LouBapMarketing then requests the help of famous American entrepreneur Anthony Pompliano, this time sharing a transaction on the ethereum blockchain<ref name="loubapmarketingtwitter-9992" />.
|-
|January 16th, 2022 2:47:00 AM MST
|Report On Scam Group
|LouBapMarketing reports on a "fake and scam group from dafi protocol with a fake website" to Telegram<ref name=":5">[https://twitter.com/loubapmarketing/status/1482650697212563457 loubapmarketing - "This is a fake and scam group from dafi protocol with a fake website. Please check it out" - Twitter] (Jan 11, 2023)</ref>.
|}

== Technical Details ==
A history of connected accounts can be uncovered through Twitter, which suggests multiple accounts colluded together. From the available information, it appears that they would trick potential victims into visiting an official support website for their wallet, targeting both MetaMask and TrustWallet users. The names of the official accounts mimicked legitimate sounding names. Users were provided the same information from multiple accounts, increasing it's credibility. Once users visited that website, they would be tricked into providing their seed phrase, which could then be used to drain their account.

This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

Did it involve Twitter account Nehar98004383<ref name="nehar98004383twitter-10012" />?<blockquote>"It is not verified, not offical from @TrustWalletApp and they ask money. So probably is your the scammer. People report this NEHAR profile."</blockquote>

== Total Amount Lost ==
The total loss breaks down as follows:

* 90,689.000248 USDT (Tether) from LouBapMarketing's Tron wallet<ref name="tronscan-9990" />.
* 154,807.136786 USDC from LouBapMarketing's Ethereum wallet<ref name="etherscan-9991" />.

The total amount lost adds up to 245496.137034, which has been estimated at $245,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
There don't appear to have been any reactions between the transfers being made on July 19th and a large series of Twitter posts on July 22nd. TBD check more history on Twitter.

"I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction. [Can anyone] help me if I have chances to recover it? I'M DEVASTED." "Any tip what should I do?"

=== Warning By kfrazine ===
Twitter user kfrazine was able to avoid falling for a similar fraud and warned other users<ref name="kfrazinetwitter-10013" />.<blockquote>ya i just figgered out that the 3 that are trying to Force me to click the link and give the seeds... are all trying to trick me.. 0 following 168 followers.. .. X 2 of them... man .... they are convincing</blockquote>

=== Requests For Help On Twitter ===
loubapmarketing repeatedly requested help via Twitter in a series of Tweets from 1:15 AM to 3:39 AM MDT on July 22nd<ref name="loubapmarketingtwitter-10004" /><ref name="loubapmarketingtwitter-10002" /><ref name="loubapmarketingtwitter-10001" /><ref name="loubapmarketingtwitter-9999" /><ref name="loubapmarketingtwitter-9989" /><ref name="loubapmarketingtwitter-9996" /><ref name="loubapmarketingtwitter-9994" /><ref name="loubapmarketingtwitter-9993" />.<blockquote>I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction . Is anyone can help me if I have chances to recover it? I'M DEVASTED.</blockquote><blockquote>I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction . Is anyone can help me if I have chances to recover it? I'M DEVASTED.  any tip what to do MR MARTINI pls?</blockquote><blockquote>Mr Martini, I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction. Is anyone can help me if I have chances to recover it? I'M DEVASTED. any tip what to do pls?  </blockquote><blockquote>Alguma ajuda pfv , fui hackeado I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction . Is anyone can help me if I have chances to recover it? I'M DEVASTED.</blockquote><blockquote>Any tip what should  I do ???pls I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp  and these are the transaction . Is anyone can help me if I have chances to recover it? I'M DEVASTED.</blockquote><blockquote>I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the 2 transactionS . Is anyone can help me if I have chances to recover it? I'M DEVASTED.</blockquote><blockquote>Replying to @TheMoonCarl

I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp

and these are the transaction. Is anyone can help me if I have chances to recover it? I'M DEVASTED. #TRON #TRX 

@justinsuntron</blockquote>

== Ultimate Outcome ==
While LouBapMarketing reached out to multiple celebrities on Twitter, it is unclear what law enforcement entities have been contacted, and whether any investigation may be underway.

The account WaIIetHelpHQ was ultimately suspended<ref>[https://twitter.com/WaIIetHelpHQ WaIIetHelpHQ Suspended Account - Twitter] (Nov 17, 2023)</ref>. The accounts MetaMaskMod<ref>[https://twitter.com/MetaMaskMod MetaMaskMod Account Deleted - Twitter] (Nov 17, 2023)</ref>, Nehar98004383<ref>[https://twitter.com/Nehar98004383 Nehar98004383 Deleted Account - Twitter] (Nov 17, 2023)</ref>, and Cihanba23827631<ref>[https://twitter.com/Cihanba23827631 Cihanba23827631 Deleted Account - Twitter] (Nov 17, 2023)</ref> were deleted.

LouBapMarketing ultimately switched his Twitter account handle from DafiManiac0<ref>[https://twitter.com/dafimaniac0 DafiManiac0 Twitter Account (Deleted)] (Nov 17, 2023)</ref> to LouBapMarketing

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
While LouBapMarketing reached out to multiple celebrities on Twitter, it is unclear what law enforcement entities have been contacted, and whether any investigation may be underway.

LouBapMarketing continues to take extra time to warn others. For example, in January 2022, LouBapMarketing reported on a "fake and scam group from dafi protocol with a fake website"<ref name=":5" />.

== General Prevention Policies ==
It appears that the wallet worked on the basis of requesting a seed phrase. When installing a new wallet, it is important to ensure that the wallet comes from an official source. As even official sources could be tampered with, it is best practice to use a wallet with a smaller amount of money initially, and to keep the majority of funds fully offline whenever possible. Using hardware wallets or multi-signature setups can further reduce the risk. With a hardware wallet, the seed phrase should only be entered in separate hardware, which is significantly more expensive and difficult to tamper with or forge. With a multi-signature setup, you can use a combination of different wallets that all must sign a transaction, meaning that all keys would need to be breached simultaneously to perform an attack.

Once an attack has happened, it is important that the wallet addresses get flagged as soon as possible, so funds can be returned if the thief decides to cash them out through a compliant exchange. Filing a police report is important as most exchanges will only freeze and return funds at the request of law enforcement.

== Individual Prevention Policies ==
{{Prevention:Individual:Never Share Private Keys}}

{{Prevention:Individual:Double Check Transactions}}

{{Prevention:Individuals:Store Funds Offline}}

{{Prevention:Individuals:End}}
== Platform Prevention Policies ==
{{Prevention:Platforms:Cryptocurrency Safety Quiz}}

{{Prevention:Platforms:End}}
== Regulatory Prevention Policies ==
{{Prevention:Regulators:Cryptocurrency Education Mandate}}

{{Prevention:Regulators:End}}

== References ==
<references>
<ref name="loubapmarketingtwitter-9989">[https://twitter.com/dafimaniac0/status/1418143688346247168 LouBapMarketing - "I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp" - Twitter] (Jul 23, 2022)</ref>
<ref name="tronscan-9990">[https://tronscan.org/#/transaction/283a766128528f113c9c26f8a4de618a2c6f12c24c050de8a9f746f0839e1487 Transaction Transferring 90,689.000248 USDT - TRONSCAN] (Dec 12, 2022)</ref>
<ref name="etherscan-9991">[https://etherscan.io/tx/0x5d67f69f296f38e7391c4667a7eb62b50eaaee37b8434406ccd3e86bf223bf1d Transaction Transferring 154,807.136786 USDC - Etherscan] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9992">[https://twitter.com/dafimaniac0/status/1418289235589844992 LouBapMarketing - "these are the 2 transactionS . Is anyone can help me" - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9993">[https://twitter.com/dafimaniac0/status/1418244690894262275 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9994">[https://twitter.com/dafimaniac0/status/1418172764033269760 LouBapMarketing - "I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the 2 transactionS" - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9995">[https://twitter.com/dafimaniac0/status/1418170912659103744 LouBapMarketing - "I have chances to recover it? I'M DEVASTED. #TRON #TRX @justinsuntron" - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9996">[https://twitter.com/dafimaniac0/status/1418143647917350914 LouBapMarketing - "Any tip what should  I do ???pls I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp  and these are the transaction . Is anyone can help me if I have chances to recover it? I'M DEVASTED." - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9997">[https://twitter.com/dafimaniac0/status/1418143609237430276 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9998">[https://twitter.com/dafimaniac0/status/1418141826905739267 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-9999">[https://twitter.com/dafimaniac0/status/1418137947895963648 LouBapMarketing - "Alguma ajuda pfv , fui hackeado I got hacked (phishing ?)" - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10000">[https://twitter.com/dafimaniac0/status/1418137754446270466 LouBapMarketing - "Any tip what should  I do ???pls I got hacked (phishing ?) 250k" - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10001">[https://twitter.com/dafimaniac0/status/1418134428086321155 LouBapMarketing - "Mr Martini, I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction." - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10002">[https://twitter.com/dafimaniac0/status/1418127228672557058 LouBapMarketing - "any tip what to do MR MARTINI pls?" - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10003">[https://twitter.com/dafimaniac0/status/1418127027178192898 LouBapMarketing - "I got hacked (phishing ?) 250k few days ago FROM @AtomicWallet AND @TrustWalletApp and these are the transaction." - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10004">[https://twitter.com/dafimaniac0/status/1418117534256140296 LouBapMarketing - "I got hacked (phishing ?) 250k few days ago" Request To CryptoMichNL - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10005">[https://twitter.com/dafimaniac0/status/1418116855391309825 LouBapMarketing - "I got hacked (phishing ?) 250k few days ago" Request To trondao - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10006">[https://twitter.com/dafimaniac0/status/1418115706630156292 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." Jul 22nd 1:48 AM - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10007">[https://twitter.com/dafimaniac0/status/1418115674283589632 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." #2 Jul 22nd 1:48 AM - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10008">[https://twitter.com/dafimaniac0/status/1418115644558647296 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." #3 Jul 22nd 1:48 AM - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10009">[https://twitter.com/dafimaniac0/status/1418114728803643392 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." Jul 22nd 1:44 AM - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10010">[https://twitter.com/dafimaniac0/status/1418108238273318914 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." Jul 22nd 1:18 AM - Twitter] (Dec 12, 2022)</ref>
<ref name="loubapmarketingtwitter-10011">[https://twitter.com/dafimaniac0/status/1418107298002636801 LouBapMarketing - "Is anyone can help me if I have chances to recover it? I'M DEVASTED." Jul 22nd 1:15 AM - Twitter] (Dec 12, 2022)</ref>
<ref name="nehar98004383twitter-10012">[https://twitter.com/Nehar98004383 @Nehar98004383 Twitter] (Dec 13, 2022)</ref>
<ref name="kfrazinetwitter-10013">[https://twitter.com/kfrazine/status/1417225262304043013 @kfrazine Twitter] (Dec 13, 2022)</ref>
<ref name="loubapmarketingtwitter-10014">[https://twitter.com/dafimaniac0/status/1418144591321223168 LouBapMarketing - "I sent" - Twitter] (Dec 13, 2022)</ref>
<ref name="trustwallet-10015">[https://trustwallet.com/ Best Cryptocurrency Wallet | Ethereum Wallet | ERC20 Wallet | Trust Wallet] (Dec 13, 2022)</ref>
</references>