On-chain analyst ZachXBT tweeted that a Canadian phishing scammer named Soup (Dan) stole millions of dollars in assets by participating in attacks on Discord servers of encryption projects such as Orbiter Finance and Pika Protocol. ZachXBT stated that Soup (Dan) impersonated Decrypt engineer Luke Hamilton and cooperated with other scammers to approach team members of encryption projects and trick them into joining fake Decrypt Discord servers to commit scams. Soup (Dan) was involved in the May 30, 2023 attack on the Pika Discord server and the theft of $220,000, and the May 31 attack on the Orbiter Finance Discord server and the theft of $760,000. Last year, Soup was also involved in the theft of MAYC 21080 (with his partner Faint), and in early January of this year, Soup was involved in the theft of Crypto Punk 6983. Soup (Dan) spent some of the proceeds from these attacks on Roblox-exclusive items, with Soup admitting to making $1 million for himself and more for his partners. He appears to have shown no remorse for his actions after causing financial damage to projects and personnel, and has informed victims that legal action is expected.