Revenue, also referred to as Revenue Family, was linked by blockchain security firm Salus to malicious USDG permit approvals that allegedly let attackers obtain unlimited spending authority and drain users' wallets in the same transaction. Salus said stolen funds were split 20% and 80% between two attacker-controlled addresses, a structure resembling Inferno's drainer-as-a-service revenue-sharing model, though the firm did not establish that Inferno infrastructure was used. Revenue had suspended swaps days earlier after reporting that its social-media account was compromised. The project presents itself as an independent X Money-to-crypto bridge and says users can receive USDC, USDT, SOL or ETH after making X Money payments to @RevenuePay.