By Reynand Wu 
Analysts at BitMEX Research have raised a critical security alarm regarding an emerging and sophisticated scam targeting early Bitcoin holders, with a particular focus on long-dormant wallets dating back to 2011. The fraudulent campaign leverages deceptive on-chain transactions and elaborate social engineering tactics to trick unsuspecting cryptocurrency owners into interacting with malicious infrastructure under the guise of legal compliance.
According to findings shared by the research firm, the bad actors behind this scheme are exploiting long-dormant blockchain addresses by injecting false transactions and misleading messages directly into the ledger. These deceptive elements are transmitted using OP_Return outputs, which are an optional field within Bitcoin transactions specifically designed to carry arbitrary data on the blockchain. By embedding messages directly into the transaction data of historical blocks, the attackers attempt to create an aura of authenticity and urgency that catches long-term holders off guard.
Targeting Historic Addresses and High-Profile Wallets
The scope of the campaign became apparent when researchers identified a specific instance targeting the notorious "1Feex" wallet. This well-known address currently holds approximately 80,000 Bitcoins that are widely believed to have been illicitly acquired during the historic compromise of the Mt. Gox cryptocurrency exchange in its early years of operation.
In this targeted attack, the perpetrators crafted a custom message linked to the historic address, directing anyone monitoring the wallet to a fraudulent website. This fake portal was meticulously designed to impersonate the defunct Wall Street investment firm Salomon Brothers, attempting to lend corporate and legal gravity to the scam.
Visitors to the fraudulent website are greeted with a fabricated legal notice claiming that the targeted cryptocurrency wallet is considered "lost or abandoned." The site then prompts supposed rightful owners to step forward and prove their claim. To complete this purported verification process, victims are instructed to either sign an on-chain message utilizing their private cryptographic key or submit sensitive personal documentation through an embedded web contact form.
The fraudulent notice introduces a severe sense of manufactured urgency, warning that if no official response or ownership claim is received by October 5, the wallet will be officially and legally deemed abandoned by the purported corporate entity.
Unraveling the Fake Legal Claims
Detailed analysis by BitMEX Research revealed that the fraudulent website bears no credible connection whatsoever to the real Salomon Brothers or its historic leadership structure. While the scammers attempted to build superficial credibility by displaying a public directory of genuine individuals who actually worked at the Wall Street firm during the 1980s, none of these former professionals have any affiliation with the spurious entity running the campaign.
The research platform noted that the strategic approach utilized in this campaign bears strong similarities to an earlier, controversial series of events associated with prominent figures such as Calvin Ayre, who previously financed various legal maneuvers involving the exact same historic Bitcoin address. However, this current digital incarnation pivots entirely toward fraudulent data harvesting under a false legal pretext.
Highlighting the absurdity of the verification demands, BitMEX Research stated that the links between the shell company and the hosting website are entirely fabricated. "There is a page with an advisory board that contains real people who worked at Salomon Brothers in the 1980s, however, these people seem to have no link to this new spurious entity," the research team noted in their public disclosure.
Wider cryptocurrency community members quickly weighed in on the mechanics of the scam, pointing out glaring security flaws in the attackers’ premise. Blockchain observers emphasized that legitimate wallet owners seeking to prove active control over a dormant address would never need to interact with a third-party legal portal or surrender personal documentation. Instead, a real owner could easily demonstrate control simply by moving a negligible amount of Bitcoin from the address, thereby proving cryptographic signature capabilities without risking their entire balance or exposing private keys.
These glaring inconsistencies have led cybersecurity analysts and community sleuths to conclude that the campaign is merely a component of a broader social engineering effort. Rather than a legitimate legal recovery process, the entire operation appears meticulously engineered to harvest sensitive personal data and compromise private keys under the psychological pressure of a fake legal deadline.
Security experts, including the team at BitMEX, have issued strict warnings advising all digital asset holders to completely ignore these on-chain messages and avoid interacting with any contact forms, web portals, or verification requests originating from the suspicious domains.
The Broader Context of Crypto Fraud
The emergence of this sophisticated wallet-recovery scam underscores the ever-increasing complexity and evolving threat landscape surrounding cryptocurrency-related fraud. As blockchain analysis tools become more advanced, malicious actors are continuously adapting their methodologies, shifting away from simple malware toward intricate social engineering and psychological manipulation.
This incident arrives during a particularly volatile period for crypto security. Statistical data compiled across the digital asset sector indicates that illicit actors and state-backed hacking syndicates have ramped up their operations significantly. During the first half of the year alone, malicious actors successfully stole over $2.1 billion across 75 distinct security incidents and exploits. This staggering figure represents a notable 10% increase in total stolen funds compared to the same tracking period in the previous year, highlighting an urgent need for heightened vigilance among both retail investors and long-term institutional holders alike.
Laily UPN 
Nana 
Nila Kartika Wati