Crypto scams intensified in the first week of September 2026, with four distinct incidents reported within 12 hours. A malicious governance proposal targeting Olas, formerly Autonolas, placed about 40.196 ETH worth $100,000 at risk by disguising an attacker-controlled treasury transfer as a routine ownership migration. The community has three days to reject the proposal. Reddio, an Ethereum-compatible Layer 2 blockchain, suffered an estimated 9.25 ETH loss after a cross-vault accounting flaw double-counted stETH as backing for rsvETH and rsvstETH, creating a potential flash-loan exploit. A purported cryptocurrency theft toolkit targeting Ledger and Trezor users reportedly relies on social engineering and deceptive transaction-signing requests rather than a confirmed hardware vulnerability. Separately, Base co-founder Jesse Pollak said a compromised third-party application connected to his social-media account posted scam content, while Neuralink executive Shivon Zilis's X account was used to promote the SLINK memecoin. An emoji response from Elon Musk made the post appear legitimate and fueled FOMO buying. DeFiLlama data cited in the report put total losses between September 2025 and September 2026 at $1.732 billion, while first-half 2026 crypto theft and fraud losses exceeded $1 billion. First-half 2025 losses were higher at $2.3 billion. Genians also said Kimsuky, a North Korean cyber-espionage group, is using AI to improve its hacking activities.