ZachXBT

According to several online reports, the official X account of the restaking protocol EigenLayer appears to have been hacked.
An October 18 post from EigenLayer’s social media account promoted a fake airdrop campaign targeting users eligible for a previous distribution.
<h2 id="fake-airdrop-claims">Fake Airdrop Claims</h2>
Pseudonymous on-chain investigator ZachXBT was among the first to alert users, <a href="https://t.me/investigations/166" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">issuing </a>a warning via Telegram. “EigenLayer X/Twitter account is currently compromised; do not click any links,” he cautioned.
Mudit Gupta, the Chief Information Security Officer at Polygon Labs, <a href="https://x.com/Mudit__Gupta/status/1847220720830472238" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">amplified</a> the message on X advising users not to click on any links. He noted that there was no new airdrop. DeFiLlama also <a href="https://t.me/defillama_tg/1665" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">confirmed</a> the incident through Telegram.
The first post from the hacked account claimed to promote a reallocation of EIGEN tokens for Season 2 of EigenLayer’s stakeholder airdrop and included a malicious link. This was confirmed by the crypto anti-scam platform Scam Sniffer, which <a href="https://x.com/realScamSniffer/status/1847229649371451485" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">shared</a> screenshots of the now-deleted tweets on X.
Clicking the link directed users to a phishing site that was not associated with EigenLayer’s restaking protocol or any legitimate activities.
About ten minutes later, a second message encouraged users to make a claim. It was then followed by a final appeal. All three posts were removed shortly after they were published. Notably, the official Season 2 stake drop was announced in September, and the claim period had already closed.
<h2 id="eigenlayer-s-5-7m-hack">EigenLayer’s $5.7M hack</h2>
The current account compromise is the second attack the protocol has faced since the beginning of October. On October 4, the EigenLayer team <a href="https://x.com/eigenlayer/status/1842268416083653038" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">announced</a> it was investigating “unapproved selling activity” associated with a now-flagged wallet <a href="https://etherscan.io/address/0xa7a1c66168cc0b5fc78721157f513c89697df10d" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">address</a>. It had sold approximately 1.6 million EIGEN tokens, valued at around $5.7 million.
In a community update posted on October 5, the protocol <a href="https://x.com/eigenlayer/status/1842317191045157099" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">confirmed</a> that the unapproved token-selling incident was indeed the result of a hack. The team disclosed that a bad actor had compromised an email thread involving an investor’s token transfer into custody.
They stated that the attacker sold the stolen tokens using a decentralized swap platform and moved stablecoins to centralized exchanges. Meanwhile, the protocol mentioned that they had already reached out to the platforms and authorities, adding that some of the funds had already been frozen.
Despite this breach, the EigenLayer team assured the community that the incident was isolated and did not affect its broader ecosystem. “There is no known vulnerability in the protocol or token contracts and this compromise was not related to any onchain functionality,” they added.
The post <a href="https://cryptopotato.com/eigenlayers-x-account-reportedly-hacked-to-promote-fake-airdrop/" rel="noopener noreferrer nofollow">EigenLayer’s X Account Reportedly Hacked to Promote Fake Airdrop</a> appeared first on <a href="https://cryptopotato.com/" rel="noopener noreferrer nofollow">CryptoPotato</a>.

EigenLayer’s X Account Reportedly Hacked to Promote Fake Airdrop

Table of Contents

CryptoPotato_News

Other articles published on Oct 18, 2024

Radiant Capital Collaborates with FBI to Trace $50 Million Stolen in Cyber Attack

Unequal Justice? Comparing Sentences for Crypto Crimes

BTC price influencer arrested

Paxos Launches Yield Bearing Wrapped $USDL on Injective

Is It Too Late To Buy HACHI? Hachiko Price Goes Ballistic With A 1,114% Surge And This Might Be T...

Is Peter Todd the Mysterious Satoshi Nakamoto? New HBO Documentary Raises Controversial Claims

Join our free newsletter for daily crypto updates!