By Iffa Jayyana 
According to the details shared by the research firm, the malicious actors behind the campaign are leveraging OP_Return outputs—an optional field built into Bitcoin transactions that allows users to permanently store a small amount of arbitrary data on the blockchain. By embedding crafted data strings within these outputs, the attackers are able to target specific dormant addresses and inject fabricated notices designed to look like formal legal or administrative demands.
In one prominent and well-documented case highlighted by the analysts, the scammers set their sights on the heavily scrutinized "1Feex" wallet. This particular address currently holds approximately 80,000 Bitcoin, a massive fortune that is widely believed to have been illicitly acquired during the historic security breach of the Mt. Gox exchange years ago. For this specific target, the attackers engineered a deceptive message that redirects any observer or potential victim to a meticulously crafted fraudulent website.
This fake web portal has been designed to impersonate Salomon Brothers, the prominent Wall Street firm that has long since ceased operations in its original form. Upon visiting the fraudulent site, targets are confronted with a fabricated legal notice asserting that the targeted wallet is legally classified as "lost or abandoned." The platform then instructs supposed owners to step forward and prove their rightful claim to the funds.
To complete this purported verification process, the scammers demand that victims either sign an on-chain message utilizing their private key or submit sensitive personal documentation through an online web contact form hosted on the fraudulent domain. To create a profound sense of urgency and panic, the notice imposes a strict deadline, warning that if no response is received by October 5, the wallet will be officially and permanently deemed legally abandoned under the terms outlined by the impostor entity.
Fake Legal Claims and Fabricated Advisory Boards
As analysts at BitMEX Research investigated the underlying infrastructure and claims of the fraudulent website, they quickly uncovered glaring inconsistencies that exposed the entire operation as a scam. The firm warned the public that the website shows absolutely no credible legal or operational link to the real Salomon Brothers or its former leadership team.
Upon closer inspection, the researchers discovered that the fraudulent platform features a dedicated page listing an "advisory board" composed of real individuals who genuinely worked at Salomon Brothers back in the 1980s. However, after examining the roster, the analysts confirmed that these former Wall Street professionals have no association whatsoever with this newly emerged and spurious entity, indicating that the names and credentials were likely scraped from public records to lend an air of legitimacy to an otherwise baseless fraud.
Furthermore, the research team noted that the overall approach and underlying methodology of this campaign bear striking similarities to an earlier, controversial scam. That previous effort was linked to figures such as Calvin Ayre, who had previously funded legal actions centered around the exact same historical Bitcoin address. By recycling old narratives surrounding the legendary Mt. Gox funds, the modern fraudsters are attempting to clothe their web-based phishing operation in a veneer of high-stakes legal complexity.
BitMEX Research formally summarized the situation in a public statement, cautioning the community about the deceptive nature of the site: "The links between this company and this website are fake. There is a page with an ‘advisory board’ that contains real people who worked at Salomon Brothers in the 1980s, however, these people seem to have no link to this new spurious entity."
Community Reactions and the Threat of Social Engineering
The disclosure by BitMEX immediately sparked widespread discussion across the broader cryptocurrency community, with veteran users and developers weighing in on the mechanics of the attack. Many community members pointed out the fundamental flaws in the scammers’ premise, noting that a legitimate wallet owner wishing to prove activity or ownership would simply need to move a negligible amount of Bitcoin from the address rather than surrendering private keys or transferring full balances to unfamiliar entities.
These observations have led security experts and community analysts alike to conclude that the campaign is not a genuine legal dispute, but rather part of a broader social engineering scam. By manufacturing artificial pressure through fake legal notices and deadlines, the perpetrators hope to bypass the technical caution of holders, tricking them into revealing sensitive information or signing malicious transactions that could compromise their entire digital fortunes.
Security professionals have reiterated that users should exercise extreme caution, emphasizing that individuals must avoid interacting with the suspicious contact forms or providing any personal or cryptographic details. The tactic highlights how scammers are continuously evolving their strategies, moving beyond traditional phishing emails and fake wallet applications to directly weaponize the blockchain ledger itself through the misuse of protocol features like OP_Return.
This sophisticated campaign arrives against the backdrop of an increasingly perilous landscape for digital asset security. According to industry tracking data, the broader cryptocurrency ecosystem has faced mounting pressure from sophisticated threat actors throughout the year. In the first half of 2025 alone, hackers and malicious syndicates managed to steal over $2.1 billion across 75 separate security incidents. This staggering figure represents a notable 10% increase in total losses compared to the same tracking period in 2024, driven in large part by the aggressive tactics of state-backed hacking groups and increasingly elaborate social engineering schemes targeting both institutional holders and individual investors.
Asro 
Layla Zulfa 
Muslim