The Tron DAO X hack has struck again, this time targeting major crypto players Tron and Curve Finance. According to Tron’s security team, the breach led to scammers stealing approximately $45,000 from unsuspecting victims. Curve Finance also fell prey to a similar attack, raising concerns over the security of crypto-related social media accounts.
The incident follows an eerily similar pattern to Curve Finance’s recent X account takeover, where hackers pushed fake airdrop scams to the protocol’s 330,000+ followers. These back-to-back breaches suggest a growing epidemic of verified crypto accounts being compromised, with security analysts noting hackers are increasingly targeting mid-level employees with sophisticated phishing attempts rather than attempting direct platform breaches.
How the Tron DAO X hack unfolded on Tron’s account
On May 2, the official Tron DAO X account was compromised, with hackers posting a fraudulent contract address and sending direct messages soliciting payments in exchange for promotional posts. While Tron‘s security team detected the breach within 90 minutes and revoked access, blockchain records show the hackers managed to siphon approximately $45,000 in TRX and USDT before being stopped. Cybersecurity firm SlowMist later confirmed the stolen funds were quickly laundered through multiple decentralized exchanges, making recovery unlikely.
The Tron PR stated while speaking with journalists:
“Our security team quickly identified the intrusion and cut off access to the hacker, but we ask the community to continue to be vigilant. We will never ask anyone for payments like this via DM or otherwise.”
Investigations suggest the Tron DAO X hack was executed through a social engineering attack, where a team member’s account was compromised. Even after regaining control, the hackers continued reaching out to users, offering paid promotions from Tron’s official account.
Curve Finance also hit by the Tron DAO X hack
The Tron DAO X hack hack claimed another major victim on May 5 when attackers seized control of Curve Finance’s official X account, which boasts over 330,000 followers. The hackers posted a fraudulent CRV token airdrop announcement with a malicious registration link, mimicking the platform’s legitimate communications. Blockchain security firm PeckShield later confirmed the scam contract was designed to drain wallets of approved assets. While vigilant community members like analyst CrediBULL Crypto immediately flagged the suspicious post, the hackers retaliated by systematically blocking critics – a tactic previously seen in the January 2024 SEC account breach.
Curve Finance founder Michael Egorov confirmed the breach, stating:
“No other account appears to be hacked — the control over X account was just silently taken by someone.”
The team regained access with the help of the cybersecurity group SEAL, but the exact cause of the Tron DAO X hack remains unclear.
Growing trend of high-profile crypto account takeovers
The Tron DAO X hack is part of a disturbing trend targeting crypto projects. Earlier this year, other high-profile breaches included:
-
UK Parliament member Lucy Powell – Her X account was hijacked to promote a fake token called House of Commons Coin (HOC).
-
Kaito AI – The crypto data aggregator’s X account was hacked in March, spreading false claims about compromised wallets.
-
Pump.fun – In February, scammers took over its X account to push fraudulent tokens, including a fake governance token.
Security concerns and unanswered questions
While Tron suspects similarities between the Tron DAO X hack and the recent New York Post breach, no definitive link has been established. Meanwhile, Tron founder Justin Sun accused OKX of failing to freeze stolen funds, though OKX CEO Star Xu denied the claims.
As investigations continue, the Tron DAO X hack hack incidents reveal critical vulnerabilities in how crypto projects manage social media access, particularly regarding multi-factor authentication protocols and employee security training.
This incident marks one of the most financially damaging social media breaches in recent crypto history.
The Bit Gazette will keep you abreast of the latest crypto news and expert opinions.
