> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Lithos DEX Database Sale Claim Lists 173,146 Wallet Addresses and 50,239 IP Addresses
- URL: https://darkwebinformer.com/lithos-dex-database-sale-claim-lists-173-146-wallet-addresses-and-50-239-ip-addresses/
- Published: 2026-11-10T19:29:11.000Z
- Updated: 2026-11-10T19:29:11.000Z
- Author: Dark Web Informer
- Tags: Leaks

Data Exposure Report Cryptocurrency DEX User Data Wallet & IP Data For Sale Unverified 

## Lithos DEX Database Sale Claim Lists 173,146 Wallet Addresses and 50,239 IP Addresses

Claimed lines173,146

Wallet addresses173,146

IP addresses50,239

Claimed size411 MB

SeverityHIGH

### Overview

An actor using the handle **"ChimeraZ"** claims to be selling a database associated with **Lithos**, described in the listing as a decentralized exchange built on the Plasma blockchain.

The post advertises **173,146 records** collected from **2025 to 2026**. It lists **173,146 wallet addresses**, **134,325 usernames**, **112,436 names**, **50,239 IP addresses** and records spanning **142 countries**. The archive is described as **411 MB in JSONL format**. **The dataset, its source, the stated counts and current availability have not been independently verified.**

### Post details

OrganizationLithos

SectorCryptocurrency / decentralized exchange

Actor"ChimeraZ"

Claimed period2025–2026

Claimed lines173,146

Countries represented142

Format / sizeJSONL / 411 MB

Post date shownNov 10, 2026 at 6:30 PM

### What the post claims

- 173,146 total lines
- 173,146 wallet addresses
- 134,325 usernames
- 112,436 names
- 50,239 IP addresses
- 142 countries represented
- 2025–2026 data range
- 411 MB JSONL archive
- Social IDs included
- Country fields included
- Wallet-provider fields included
- Wallet-chain fields included
- Referral-code fields included
- Follow / social metadata included
- Multiple wallet-provider address fields included
- 200 sample records advertised
- Price listed as make offer
- XMR payment requested; escrow accepted

The visible sample contains direct wallet addresses, IP addresses, usernames and other account-level metadata. Those individual values are not transcribed in this report.

Sponsored

[![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg)](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel)

### Screenshots

[Screenshot 1Source screenshot![Lithos database-sale listing showing record counts, country distribution and wallet-provider breakdown](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/lithos.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/lithos.png) [Screenshot 2Source screenshot![Continuation of the Lithos database-sale listing showing sample records, sample mirrors, pricing and actor contact identifiers](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/lithos_2.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/lithos%5F2.png) 

The supplied captures show the Lithos sale claim, record counts, country and wallet-provider distributions, JSONL sample records, sample mirrors, pricing terms and actor contact identifiers. Direct sample mirrors and individual wallet/IP/user values are not reproduced here.

### IOCs & identifiers

Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.

| Type                      | Identifier       | Source          |
| ------------------------- | ---------------- | --------------- |
| Actor handle              | ChimeraZ         | Screenshots 1–2 |
| Telegram                  | @chimeradbs      | Screenshot 2    |
| XMPP                      | chimeraz@xmpp.is | Screenshot 2    |
| Named organization domain | lithos\[.\]to    | Screenshots 1–2 |

The organization domain identifies the entity named in the claim, not malicious infrastructure. Individual wallet addresses, IP addresses, usernames and sample values shown in the source material are intentionally not reproduced here.

### Mapped techniques

**Claimed** identifies behavior explicitly described by the actor. **Inferred** identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.

- Collection[T1213.006](https://attack.mitre.org/techniques/T1213/006/)[Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/)InferredThe listing presents a structured JSONL database containing account, wallet, social and network metadata. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Lithos systems.

### Potential impact

If authentic, the claimed dataset could link **wallet addresses, usernames, names, IP addresses, country information and wallet-provider metadata** across a large population of DEX users. That combination could support user profiling, targeted phishing, wallet-focused social engineering, deanonymization attempts or other privacy-related abuse.

### Status Unverified

Dark Web Informer has **not independently verified** the dataset's authenticity, source, completeness, 173,146-line count, wallet, username, name or IP totals, sample contents or current availability. The supplied screenshots document the listing and visible samples, not independent confirmation of the underlying data.

Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=lithos-data-leak-2026-11-10&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=lithos-data-leak-2026-11-10&utm%5Fcontent=pricing-button)

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=lithos-data-leak-2026-11-10&utm%5Fcontent=footer)