FORMAL CRYPTOCURRENCY FRAUD COMPLAINT Subject: Urgent Report of Suspected Account Hacking, Unauthorized USDT Withdrawals, and Cryptocurrency Theft – Financial Trading Art SRL (FXRebate) Incident Type: Suspected Account Takeover / Hacking / Fraudulent Withdrawals / Cryptocurrency Theft Cryptocurrency: Tether (USDT) Blockchain Network: TRON (TRC20) Number of Reported Transactions: 6 Number of Suspected Receiving Wallets: 6 Incident Period: October 31 – November 4, 2026 Total Reported Transaction Fees: 9 USDT Total Amount Suspected Stolen: 3803 USDT 1. Description of the Fraudulent Activity Dear Chainabuse Fraud Investigation Team, We are submitting this formal complaint on behalf of Financial Trading Art SRL, operating under the FXRebate brand, regarding a serious suspected cryptocurrency fraud incident involving unauthorized access to our clients' accounts and subsequent USDT withdrawals. Based on our preliminary internal investigation, we have reason to believe that malicious third parties gained unauthorized access to legitimate FXRebate clients' accounts and fraudulently initiated withdrawal requests. These unauthorized individuals appear to have impersonated legitimate account holders and submitted instructions to withdraw available funds to cryptocurrency wallet addresses potentially controlled by the perpetrators. As a result, Financial Trading Art SRL (FXRebate) processed and executed six USDT withdrawals to the suspected fraudulent wallet addresses. The transactions were processed through the TRON (TRC20) blockchain and have been recorded as successful. We believe these withdrawals may constitute cryptocurrency theft arising from compromised client accounts. We respectfully request that Chainabuse investigate and flag the suspicious cryptocurrency addresses and assist, where possible, with identifying subsequent movements of the funds. 2. Why We Believe These Transactions Are Fraudulent Our suspicions are based on indications that the withdrawals originated from client accounts that had potentially been compromised. The apparent sequence of events is as follows: Unauthorized parties allegedly accessed legitimate FXRebate client accounts. The suspected perpetrators submitted cryptocurrency withdrawal requests while impersonating the legitimate account holders. Financial Trading Art SRL processed the withdrawal instructions submitted through these accounts. USDT was transferred to the six receiving cryptocurrency wallet addresses listed above. The withdrawals were subsequently identified as suspicious and potentially unauthorized. The involvement of the wallet addresses in suspected fraud is being reported for investigation. We do not currently have conclusive evidence establishing the identities or common ownership of the recipients. 3. Requests for Investigation and Assistance We respectfully request Chainabuse's assistance with the following: A. Investigation of Suspicious Wallet Addresses Review all six receiving TRC20 wallet addresses for indications of cryptocurrency fraud, account takeover, or related illicit activity. B. Identification of Subsequent Transactions Where possible, help trace the outgoing transfers from these addresses and determine whether the USDT was transferred to other wallets, centralized exchanges, or cryptocurrency services. C. Fraud Reporting and Wallet Flagging Assess whether the identified receiving addresses should be flagged as associated with suspected fraudulent activity within Chainabuse's reporting systems. D. Coordination With Relevant Parties Where appropriate and within Chainabuse's capabilities, assist with sharing relevant investigative findings with cryptocurrency service providers or competent law enforcement authorities. E. Assistance With Potential Recovery Provide guidance on appropriate channels or procedures that may help Financial Trading Art SRL and the affected clients pursue the recovery of the suspected stolen funds. 4. Evidence and Cooperation Financial Trading Art SRL is prepared to cooperate with relevant investigators and provide supporting information through appropriate secure channels, including: Original withdrawal records and transaction confirmations. Blockchain transaction hashes and receiving wallet addresses. Account access and authentication records, where available. Relevant withdrawal authorization information. Statements or confirmations from affected clients. Additional evidence obtained through our internal investigation. We are also prepared to cooperate with law enforcement authorities and relevant cryptocurrency compliance teams. 5. Urgency of This Complaint Given the nature of cryptocurrency transfers and the possibility that funds may be moved rapidly between different wallet addresses, we respectfully request that this complaint be reviewed as a matter of urgency. Kind regards, Financial Trading Art SRL | FXRebate (legal@fxrebate.eu)