EigenLayer

EigenLayer’s X account has been compromised, as it displayed a fake airdrop campaign.
An Oct. 18 post on Eigenlayer’s X account showed a new airdrop campaign supposedly for users eligible for the previous one.
However, the airdrop claim redirected users to a malicious link that appeared unrelated to the restaking protocol.
<figure>
 <img alt="EigenLayer X account compromised, shares malicious airdrop link" src="https://s3.cointelegraph.com/uploads/2024-10/01929f31-c6df-7708-9df2-076b6fe648c2" title="">
 <figcaption style="text-align: center;">
 Malicious airdrop post. Source: <a data-ct-non-breakable="null" href="https://x.com/eigenlayer/status/1847218985340637303" rel="nofollow noopener" target="_blank" text="null" title="https://x.com/eigenlayer/status/1847218985340637303">EigenLayer</a>
 </figcaption>
</figure>
The post was deleted minutes after it was distributed, suggesting that the attackers may have lost access to the protocol’s account.
Pseudonymous onchain investigator ZachXBT warned users about the malicious airdrop link. The investigator wrote in an Oct. 18 Telegram post:
<blockquote>
 “Eigenlayer X/Twitter account is currently compromised do not click any links.”
</blockquote>
Considering EigenLayer’s popularity, many users may have already visited the malicious link. EigenLayer is the second-biggest protocol on Ethereum, with more than $11.1 billion in total value locked (TVL), <a data-ct-non-breakable="null" href="https://defillama.com/chain/Ethereum" rel="nofollow noopener" target="_blank" text="null" title="https://defillama.com/chain/Ethereum">according</a> to DefiLlama data.
<figure>
 <img alt="EigenLayer X account compromised, shares malicious airdrop link" src="https://s3.cointelegraph.com/uploads/2024-10/01929f32-5bcb-71a3-88a5-f477940d0132" title="">
 <figcaption style="text-align: center;">
 EigenLayer TVL, all-time chart. Source: DeFiLlama
 </figcaption>
</figure>
 Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/bitcoin-etfs-cross-record-20-b-net-flows-but-btc-subdued-under-68k" rel="null" target="null" text="null" title="null">Bitcoin ETFs hit $20B milestone as price remains stuck in downtrend</a>
<h2 id="more-malicious-airdrop-links">More malicious airdrop links</h2>
Despite the initial post being deleted within minutes, the account has continued displaying malicious links.
It <a data-ct-non-breakable="null" href="https://x.com/eigenlayer/status/1847226105884754150" rel="null" target="null" text="null" title="null">shared</a> another airdrop campaign with a link that looked almost identical to EigenLayer’s blog.
<figure>
 <img alt="Hackers, Airdrop, Scams, Hacks, Staking, EigenLayer" src="https://s3.cointelegraph.com/uploads/2024-10/01929f49-75d8-71a4-b8a4-9e6f93b48176" title="">
 <figcaption style="text-align: center;">
 EigenLayer, malicious airdrop post. Source: EigenLayer
 </figcaption>
</figure>
While EigenLayer’s original blog address is “blog.eigenlayer.xyz,” the malicious link redirects users to “blog.eigenfoundation.org.”
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/ether-price-subdued-l1-wars-analyst" rel="null" target="null" text="null" title="null">Ether price in 7-month decline amid ‘L1 wars,’ says analyst</a>
<h2 id="x-account-compromise-unrelated-to-the-previous-5-7-million-hack">X account compromise unrelated to the previous $5.7 million hack?</h2>
Amid its growing popularity, EigenLayer is becoming a target for scammers. The current account compromise marks the second attack since the beginning of October.
On Oct. 4, the EigenLayer team <a data-ct-non-breakable="null" href="https://x.com/eigenlayer/status/1842268416083653038" rel="null" target="null" text="null" title="null">said</a> it was investigating an “unapproved selling activity” concerning a wallet ending in “f10D.” The wallet address sold about 1.6 million of EigenLayer’s EIGEN tokens, worth about $5.7 million.&nbsp;
On Oct. 5, EigenLayer posted a community update saying that the unapproved token-selling incident was caused by a hack. The EigenLayer team said a malicious attacker compromised an email thread involving an investor’s token transfer into custody.&nbsp;
While the tokens were stolen through a hack, the <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/eigenlayer-5-7m-hack-isolated-incident-no-protocol-vulnerability" rel="" target="_self" text="null" title="https://cointelegraph.com/news/eigenlayer-5-7m-hack-isolated-incident-no-protocol-vulnerability">EigenLayer team assured</a> the community that the incident was isolated and did not affect its broader ecosystem.
The team said that the compromise was not related to any onchain functionality. EigenLayer added that there is no known vulnerability in the protocol or token contracts.&nbsp;
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/rabby-scammer-konpyl-crypto-ceo-mountain-victims/" rel="null" target="null" text="null" title="null">Fake Rabby Wallet scam linked to Dubai crypto CEO and many more victims</a>

EigenLayer X account compromised, shares malicious airdrop link

Table of Contents

Cointelegraph

Other articles published on Oct 18, 2024

Praxis Secures $525M to Turn Vision of a Crypto-Native City Into Reality

Can Ripple (XRP) Actually Change Its Holders’ Lives?

Crypto Super PACs spend $1.3M on candidates as early voting continues

Ripple Price Analysis: XRP Unable to Overcome $0.55, is a Crash Imminent?

Arthur Hayes Invests in Memecoin and Sees Significant Price Surge

Young Man Hacks SEC Account and Manipulates Bitcoin Market

Join our free newsletter for daily crypto updates!