On March 13, hackers seemingly took management of DB, a well known crypto information platform, utilizing its X account to unfold false details about Donald Trump’s TRUMP memecoin and a fabricated BlackRock ETF submitting for Hyperliquid.
The deceptive posts had a direct impression. TRUMP’s worth surged by 20% earlier than rapidly collapsing, whereas the pretend ETF information induced a separate 6% worth fluctuation for Hyperliquid’s HYPE token.
Blockchain analytics agency Lookonchain revealed {that a} dealer tried to capitalize on the chaos by withdrawing 504,820 USDC from Binance to purchase TRUMP tokens. Nonetheless, after the reality emerged, the dealer offered at a loss, dropping $26,820 in USDC inside minutes.
Following the incident, DB deleted the unauthorized posts and suggested customers to disregard any info shared through the breach.
X account breaches
This assault on DB’s account aligns with a sample of latest breaches concentrating on high-profile crypto-related accounts on X.
DB identified that its compromised account had no linked third-party apps, no API key leaks, and was protected by YubiKey two-factor authentication.
This led the platform to suspect an inside vulnerability or a compromised X worker because the seemingly supply of the breach.
Based on DB:
“[We are] assuming a compromised X worker or related, all keys and periods have been reset regardless.”
Contemplating this, web3 safety platform Harpie famous similarities to earlier assaults on Dogwifcoin, Solana-based Jupiter Trade, and memecoin launchpad Pump.enjoyable.
Blockchain investigator ZachXBT prompt these hacks would possibly stem from social engineering techniques geared toward X workers. He speculated that attackers may be manipulating the social media web site employees with fraudulent paperwork or exploiting weaknesses within the platform’s inside controls.
In the meantime, the growing frequency of those assaults raises issues concerning the safety of crypto-related accounts on X.
Over time, hackers have continued to take advantage of high-profile platforms to unfold false info and deploy phishing schemes which have resulted in important losses for crypto customers.