Crypto hacks on X show no sign off slowing down in 2024

Speculators first theorized that the post was a draft prematurely released, which the SEC denies. Senators hinted that the SEC might’ve manipulated the market, while some think the hack was simply a gag.

Now, the Federal Bureau of Investigations and other law enforcement entities are investigating the compromise.

CoinGecko hacked with calendar meetup

On that same evening, crypto exchange CoinGecko announced that its socials were hacked as well. It told users not to click any links.

Users on X claim the CoinGecko account posted a phishing link pretending to distribute the $GECKO token, a name taken from a separate, unaffiliated crypto project.

Five hours later, CoinGecko revealed that its accounts were secure and that its staff had clicked on a fraudulent Calendly link which gave the hacker access to the account. The exchange stressed it had 2FA enabled.

CertiK hack panicked users

Another Calendly link was used to hack the account of crypto auditing firm CertiK on January 5. In this case, an employee was baited by an account posing as a Forbes journalist.

Hackers were granted access to CertiK’s X account where they panicked users into clicking on a wallet-draining link. They pretended that a Uniswap contract attack was underway and that their phishing link would help recover any lost funds.

A verified account, associated with a well-known media, contacted one of our employees. Unfortunately, it appears that this account was compromised, leading to a phishing attack on our employee.

We quickly detected the breach and deleted the related tweets within minutes. Our… pic.twitter.com/aO7GQjXEz2

— CertiK (@CertiK) January 5, 2024