High-Profile Crypto Accounts Hacked: Tron DAO and Curve Finance Targeted

Recently, the X accounts of Curve Finance and Tron DAO were compromised by hackers, adding to the increasing number of high-profile social media account breaches. A hacker who took control of the Tron DAO X account is estimated to have illicitly solicited approximately $45,000 in funds. According to a Tron spokesperson, on May 2, the Tron DAO account posted a contract address and sent direct messages requesting payments in exchange for promotional advertising. The Tron team responded swiftly, identifying the intrusion and revoking the hacker’s access, but they urged the community to remain cautious. They clarified that they would never request payments via direct messages.

The illicit contract address linked to the hacker suggested that around $45,000 was improperly solicited. While investigators noted some similarities between this incident and a purported hack of the New York Post’s X account on May 3, they emphasized that the investigation is ongoing and no conclusive connection has been established yet. Tron DAO also indicated that the initial breach was likely caused by a team member being targeted through a social engineering attack, which resulted in the account being compromised. Even after the hacker was logged out, they continued to contact others, offering to post on Tron’s main account in exchange for payments.

The Tron team is currently investigating the incident and working with law enforcement. Tron’s founder, Justin Sun, accused the crypto exchange OKX of not acting on a law enforcement request to freeze stolen funds related to the attack. OKX’s CEO, however, denied this claim, and Sun later retracted his original post.

In addition, Curve Finance experienced a similar attack where an attacker gained control of its X account. On May 5, a now-deleted post from the attacker promoted a fake CRV airdrop, which some users quickly identified as fraudulent. Curve Finance’s founder confirmed that the account was taken over silently by an attacker, but no other accounts appeared to be compromised