Gnosis

Gnosis’ X account was compromised and used to circulate a fake link, prompting PeckShield to warn users not to interact with the account or click any links posted from it. The warning <a href="https://x.com/PeckShieldAlert/status/2070099077170401722?s=20" rel="noopener noreferrer nofollow">centered</a> on @gnosis_, the official Gnosis account on X, after suspicious activity was flagged by a community member.
The active threat is phishing, not a confirmed Gnosis protocol exploit. A compromised project account can be used to push fake airdrops, malicious claim pages, wallet-drainer links or urgent signature prompts while the post still appears to come from a trusted ecosystem handle.
No confirmed stolen-fund amount, attacker wallet, smart-contract exploit or GNO token incident had been disclosed at publication time. The immediate user instruction is to avoid the account’s links and ignore any wallet interaction promoted through the compromised handle.
<h2 id="fake-link-creates-wallet-drainer-risk">Fake Link Creates Wallet-Drainer Risk</h2>
The fake link is the main exposure point. Users who open <a href="https://cryptoadventure.com/wallet-drainer-landing-pages-the-visual-patterns-that-give-them-away/" rel="noopener noreferrer nofollow">phishing pages</a> from a compromised crypto account may be asked to connect a wallet, approve token permissions, sign a message or enter recovery information. Any of those actions can put assets at risk even when the underlying chain, protocol contracts and token remain unaffected.
Crypto account takeovers are especially damaging because attackers can abuse years of project credibility in minutes. A familiar handle, verified badge or old follower base can make a malicious post look legitimate long enough for users to sign transactions or approvals before the project regains control.
The Gnosis warning follows a separate security incident earlier this month, when a <a href="https://cryptoadventure.com/gnosis-pay-hack-hits-delay-module-as-users-told-to-withdraw-eure-and-gno/" rel="noopener noreferrer nofollow">Gnosis Pay delay-module hack</a> forced emergency user instructions around EURe and GNO exposure. That incident involved a smart-account module path, while the current Gnosis X compromise centers on social-media access and fake-link distribution.
<h2 id="gnosis-security-incidents-keep-drawing-attention">Gnosis Security Incidents Keep Drawing Attention</h2>
Gnosis-linked users have already faced multiple security headlines in recent weeks. A separate <a href="https://cryptoadventure.com/squidroutermodule-exploit-drains-86-gnosis-safes-for-about-3m/" rel="noopener noreferrer nofollow">SquidRouterModule exploit drained 86 Gnosis Safes for about $3 million</a> across Ethereum and Base, showing how third-party modules and Safe integrations can create asset-risk paths even when core infrastructure is not the direct point of failure.
The latest account compromise sits in a different category. It does not show that Gnosis Chain failed, that GNO was exploited or that Gnosis smart contracts were drained. It shows that the official communication layer was abused to push a fake link, which can still create immediate wallet-drainer risk for users who trust the account.
At publication time, the active warning covered the compromised @gnosis_ X account and the fake link posted from it. No recovery confirmation, stolen-fund amount or protocol-level exploit had been announced, leaving the user-facing instruction fixed on avoiding the account’s posts, links and wallet prompts until control is confirmed restored.
The post <a href="https://cryptoadventure.com/gnosis-x-account-compromised-as-fake-link-triggers-peckshield-warning/" rel="noopener noreferrer nofollow">Gnosis X Account Compromised As Fake Link Triggers PeckShield Warning</a> appeared first on <a href="https://cryptoadventure.com" rel="noopener noreferrer nofollow">Crypto Adventure</a>.

Gnosis X Account Compromised As Fake Link Triggers PeckShield Warning

Table of Contents

Crypto Adventure

Other articles published on Jun 25, 2026

Join our free newsletter for daily crypto updates!