Solana

Blockchain investigator ZachXBT has exposed a sophisticated phishing operation that has managed to compromise over 15 X accounts.
The scheme targeted investors in Solana-based meme coins and has resulted in an estimated loss of $500,000.
<h2 id="solana-meme-coin-fraud">Solana Meme Coin Fraud</h2>
The Blockchain detective revealed in a December 24 social media <a href="https://x.com/zachxbt/status/1871543397875671099" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">post</a> that the operation involved impersonating the X team and leveraging phishing websites to gain unauthorized access to high-profile accounts.
The attackers<a href="https://x.com/zachxbt/status/1871543411695599902" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external"> used</a> fake copyright infringement notices to create a sense of urgency, tricking account holders into visiting phishing websites. These sites prompted users to reset their two-factor authentication (2FA) or passwords.
Once credentials were obtained, the hackers used the compromised accounts to push scams targeting meme coin enthusiasts.
Each compromised account shared a specific contract address tied to fraudulent Solana tokens, urging followers to invest using SOL. Posts often featured the caption “Incoming Transmission,” followed by a token announcement and contract details.
The cybercriminals also <a href="https://x.com/zachxbt/status/1871543404251033884" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">attempted</a> to obscure their operations by bridging stolen funds between the Solana and Ethereum networks. However, ZachXBT’s investigation uncovered that all the hacked accounts were linked through six deployer addresses used for the scams.
The scheme exploited the trust and large audiences of crypto-focused accounts, many of which had over 200,000 followers. Prominent ones affected included Kick, Cursor, The Arena, Brett, and Alex Blania, with the first reported incident occurring on November 26 involving RuneMine, while the most recent was Kick on December 24.
<h2 id="growing-threats-to-social-media-platforms">Growing Threats to Social Media Platforms</h2>
This attack is not an isolated incident but part of a broader social media platform exploitation trend by threat actors. X, a hub for crypto projects and creators, has increasingly been targeted for its prominence within the community.
In a similar investigation in November, ZachXBT <a href="https://cryptopotato.com/zachxbt-connects-social-media-hacks-to-3-5m-celebrity-meme-coin-scam/" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="internal">exposed </a>several account takeovers on X and Instagram, which fueled pump-and-dump schemes tied to meme coins. Victims reportedly lost over $3.5 million during this spree, which began in August 2024.
The pattern of these attacks remains consistent: accounts are breached, fraudulent tokens are promoted, and the proceeds are funneled into anonymous wallets.
Notable examples include the <a href="https://x.com/PeckShieldAlert/status/1842471316638810350" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">hacking</a> of Symbiotic’s X account in October, where phishing links disguised as airdrop checklists led to tokens being stolen. EigenLayer’s account was <a href="https://cryptopotato.com/eigenlayers-x-account-reportedly-hacked-to-promote-fake-airdrop/" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="internal">hijacked</a> that month to promote a fake airdrop campaign. Truth Terminal AI founder Andy Ayrey’s account was also used to promote fraudulent meme coins, netting the hacker $1.5 million.
Following the latest incident, the on-chain sleuth has advised users to increase their account security by limiting the reuse of email addresses across services and using security keys for 2FA whenever possible.
The post <a href="https://cryptopotato.com/zachxbt-exposes-500k-scheme-targeting-solana-meme-coin-investors-on-x/" rel="noopener noreferrer nofollow">ZachXBT Exposes $500K Scheme Targeting Solana Meme Coin Investors on X</a> appeared first on <a href="https://cryptopotato.com/" rel="noopener noreferrer nofollow">CryptoPotato</a>.

ZachXBT Exposes $500K Scheme Targeting Solana Meme Coin Investors on X

Table of Contents

CryptoPotato_News

Other articles published on Dec 25, 2024

Hacken: Access control exploits account for nearly 80% of all crypto hacks in 2024

MicroStrategy Buys a Further 5,262 BTC as Stock Joins Nasdaq 100

Don’t Miss These 5 Altcoins Primed for 10,000% Gains This Winter

Top Cryptos to Join Now: Qubetics to Hit Potential $15 While Litecoin Rebounds 22% and Bittensor ...

MicroStrategy Announces Shareholder Vote on Increasing Bitcoin Holdings

US-Based Spot Bitcoin ETFs Continue to Make Outflows! December Gains Wiped Out! Here Are the Details

Join our free newsletter for daily crypto updates!