In a recent series of events that have shaken the crypto community, the Tron DAO X account fell victim to a hacker who managed to illicitly solicit around $45,000 in funds. The breach was discovered on May 2 when the Tron DAO account posted a contract address and sent direct messages requesting payments for promotional advertising on the Tron platform. The Tron public relations team swiftly responded by cutting off access to the hacker and warning the community to stay vigilant, emphasizing that they would never solicit payments in this manner.
Following the breach, Tron DAO regained control of its account and suspected that the hack resulted from a team member being targeted in a social engineering attack, leading to their account being compromised. Despite regaining access, the hacker continued to contact others and offer promotional posts in exchange for payments. The Tron team is currently conducting an investigation and collaborating with law enforcement to address the incident.
Notably, similarities were observed between this attack on Tron DAO and another security breach involving the New York Post's X account on May 3. While the Tron team acknowledged these similarities, they cautioned against making premature connections between the two incidents, as the investigations are still ongoing.
In a separate incident, the decentralized lending protocol Curve Finance also experienced an X account takeover by a malicious actor. The hacker, posing as Curve Finance, shared a link to a fraudulent CRV airdrop in a now-deleted post. Following the attack, Curve Finance founder Michael Egorov confirmed that the account had been silently accessed by the hacker, who not only posted scam links but also blocked users who flagged the account takeover.
The Curve Finance team, with the assistance of cybersecurity experts, regained control of the account and is investigating the breach. They have not yet disclosed the cause of the hack but assured users that there was no client-side compromise. This incident adds to the growing list of high-profile entities that have fallen victim to social media hackers, including UK Parliament member Lucy Powell, crypto data aggregator Kaito AI, and Pump.fun.
As the crypto space continues to evolve, security remains a top priority for all participants. These recent breaches serve as a stark reminder for individuals and organizations to implement robust security measures to protect their assets and sensitive information in the digital realm. The ongoing investigations into these incidents underscore the importance of collaboration between industry stakeholders and law enforcement agencies to combat cyber threats effectively.
Leave a Reply