[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1ey85g6pu5unt":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":14,"contentUpdatedAt":13,"source":15,"sourceUrl":16,"sourceUrls":17,"pwnCount":20,"affectedCount":20,"affectedCountStatus":21,"affectedCountLowerBound":13,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":26,"severity":29,"dataClasses":30,"description":37,"seoTitle":38,"seoDescription":39,"logoUrl":40,"isVerified":4,"isSensitive":41,"isSpamList":41,"isMalware":41,"company":42},"6aad2520ffa0bbad4283dcfc","Tokensoft 2022","Tokensoft Data Breach","tokensoft-2022","tokensoft.com","2022-11-16T00:00:00.000Z","2026-09-18T11:48:48.429Z",null,"2026-09-19T17:05:03.709Z","Tokensoft Web3 compliance and airdrop eligibility records","https:\u002F\u002Ftokensoft.com\u002F",[16,18,19],"https:\u002F\u002Ftokensoft.com\u002Fblog","https:\u002F\u002Fsynscan.net\u002F",4338,"known","unknown","en",[23,25],"tr",{"en":27,"tr":28},{"slug":9},{"slug":9},"Low",[31,32,33,34,35,36],"Email addresses","Names","IP addresses","Geographic locations","Crypto wallet addresses","KYC status","\u003Cp>\u003Cstrong>The 2022 Tokensoft data breach\u003C\u002Fstrong> occurred when an internal audit and airdrop compliance dataset from \u003Cstrong>Tokensoft\u003C\u002Fstrong> (\u003Ccode>tokensoft.com\u003C\u002Fcode>), a leading institutional platform for compliant digital asset sales and token distribution, was exfiltrated in November 2022 and circulated across hacking forums.\u003C\u002Fp>\u003Ch2>What information was affected in the Tokensoft incident?\u003C\u002Fh2>\u003Cp>The leaked file (\u003Ccode>tokensoft bad actors.csv\u003C\u002Fcode>) cross-references Web3 participants with their on-chain addresses and offline identities. The breach compromised records for \u003Cstrong>4,338 unique participants\u003C\u002Fstrong>, exposing:\u003C\u002Fp>\u003Cul>\u003Cli>\u003Cstrong>Blockchain & Wallet Identifiers:\u003C\u002Fstrong> Ethereum and EVM-compatible public wallet addresses (wallet_address, softdrop wallets).\u003C\u002Fli>\u003Cli>\u003Cstrong>Identity & KYC Records:\u003C\u002Fstrong> Full legal first and last names, KYC verification completion statuses, and internal identity verification UUIDs.\u003C\u002Fli>\u003Cli>\u003Cstrong>Contact & Network Telemetry:\u003C\u002Fstrong> Canonical email addresses, connection IP addresses, auxiliary network nodes, and wallet clustering metrics.\u003C\u002Fli>\u003Cli>\u003Cstrong>Geographic Identifiers:\u003C\u002Fstrong> Country codes and municipal regions.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>How many accounts were affected?\u003C\u002Fh2>\u003Cp>Strict RFC canonical parsing and deduplication confirmed \u003Cstrong>4,338 unique valid participant email addresses\u003C\u002Fstrong>.\u003C\u002Fp>\u003Ch2>Technical analysis and security risks\u003C\u002Fh2>\u003Cp>Doxxing cryptocurrency wallet addresses with real-world identities and IP addresses completely strips participants of on-chain pseudonymity. This exposes crypto holders to targeted phishing, malicious smart contract signing lures, and targeted social engineering scams.\u003C\u002Fp>\u003Ch2>Recommended actions for affected users\u003C\u002Fh2>\u003Cp>Participants involved with Tokensoft token allocations should:\u003C\u002Fp>\u003Cul>\u003Cli>Consider migrating high-value assets from exposed wallet addresses to new hardware wallets.\u003C\u002Fli>\u003Cli>Exercise extreme caution when prompted to sign smart contract approvals from email notifications.\u003C\u002Fli>\u003Cli>Implement hardware-based multi-factor authentication (MFA \u002F 2FA) across all email and exchange accounts.\u003C\u002Fli>\u003C\u002Ful>","Tokensoft Data Breach (4.3 Thousand Reported Records)","Tokensoft Data Breach. 4.3 Thousand reported records are reported. Reported data: Email addresses, Names, IP addresses. Review the scope, risks, and…","\u002Fuploads\u002Flogo\u002Ftokensoft.webp",false,{"name":43,"sector":44,"country":45,"website":45,"websiteArchiveUrl":45,"websiteStatus":45,"websiteCheckedAt":13},"Tokensoft","Cryptocurrency",""]