Hacker Hits Tron DAO : $45,000 Allegedly Stolen in Hours
The crypto ecosystem is reeling from a fresh wave of hacks targeting the X accounts (formerly Twitter) of major projects. Recent devastating attacks on Tron DAO and Curve Finance highlight persisting security vulnerabilities in the Web3 space.
On May 2nd, the official Tron DAO X account was compromised by hackers. They posted a fake smart contract address, luring subscribers to make payments in exchange for advertising services on the Tron network. According to Tron, this social engineering attack allowed the perpetrators to steal the equivalent of $45,000 from the unsuspecting users.
We’re aware that our X account was compromised from 9:25 AM PST on May 2, 2025. During this time, an unauthorized party published a post containing a contract address (CA), sent direct messages (DMs), and followed various accounts unknown to us.
Although the Tron team quickly regained control of the account, they highlight that the hacking likely originated from credentials theft of one of their team members. Investigators also noticed similarities with the hacking of the X account of The New York Post the following day, without establishing a formal link.
A few days later, on May 5th, the Curve Finance X account, a major player in DeFi, was also compromised. A fraudulent message announcing a fake CRV token airdrop was briefly posted, inviting users to register on a third-party site.
Although access to the account was swiftly restored with the assistance of the cybersecurity group SEAL, the Curve team revealed that the hacker had previously blocked some accounts that had tried to alert the community. To date, no specific vulnerability has been identified, with the exact origin of the hack still “unclear” according to officials.
These events are part of a broader context of increasing attacks targeting X accounts (formerly Twitter) related to cryptocurrencies. Since the beginning of the year, numerous other notable cases have been documented, affecting political figures, blockchain start-ups, and even exchanges.
A Crucial Challenge for the Web3 Ecosystem
As the crypto industry matures, securing X accounts – often at the core of project communication – becomes a top priority. The recent attacks on Tron DAO and Curve Finance demonstrate that even experienced players can be vulnerable to social engineering techniques.
To rebuild community trust, crucial for Web3 development, the ecosystem must now move towards more robust security protocols. A daunting yet essential challenge to ensure long-term resilience of the crypto ecosystem.
It is worth noting that these hacks do not only target crypto accounts, as crypto scams have been promoted on McDonald’s Instagram account or on football players’ accounts like Mbappé’s.
#PeckShieldAlert 2023 saw 600+ major hacks in the crypto space, resulting in ~$2.61B in losses, with $674.9M recovered. $1.51B lost to hacks (excluding #Multichain unauthorized withdrawals) & $1.1B to scams. This marks a 27.78% decrease from 2022. #DeFi protocols remained prime… pic.twitter.com/G7PIU3WyrX
Therefore, it is essential to approach such links with caution and protect against such attacks. According to Peckshield, crypto hacks and scams cost 3 billion dollars in 2024, with 71% of the losses attributed to hacks, often propagated through compromised X accounts.
Charles Ledoux is a Bitcoin and blockchain technology specialist. A graduate of the Crypto Academy, he has been a Bitcoin miner for over a year. He has written numerous masterclasses to educate newcomers to the industry and has authored over 2,000 articles on cryptocurrency. Now, he aims to share his passion for crypto through his articles for InvestX.
DISCLAIMER
This article is for informational purposes only and should not be considered as investment advice. Some of the partners featured on this site may not be regulated in your country. It is your responsibility to verify the compliance of these services with local regulations before using them.
DISCLAIMER
This article is for informational purposes only and should not be considered as investment advice. Trading cryptocurrencies involves risks, and it is important not to invest more than you can afford to lose.
InvestX is not responsible for the quality of the products or services presented on this page and cannot be held liable, directly or indirectly, for any damage or loss caused by the use of any product or service featured in this article. Investments in crypto assets are inherently risky; readers should conduct their own research before taking any action and invest only within their financial means. This article does not constitute investment advice.
Risk Warning : Trading financial instruments and/or cryptocurrencies carries a high level of risk, including the possibility of losing all or part of your investment. It may not be suitable for all investors. Cryptocurrency prices are highly volatile and can be influenced by external factors such as financial, regulatory, or political events. Margin trading increases financial risks.
CFDs (Contracts for Difference) are complex instruments with a high risk of rapid capital loss due to leverage. Between 74% and 89% of retail investor accounts lose money when trading CFDs. You should assess whether you understand how CFDs work and whether you can afford to take the high risk of losing your money.
Before engaging in financial or cryptocurrency trading, you must be fully informed about the associated risks and fees, carefully evaluate your investment objectives, level of experience, and risk tolerance, and seek professional advice if needed. InvestX.fr and the InvestX application may provide general market commentary, which does not constitute investment advice and should not be interpreted as such. Please consult an independent financial advisor for any investment-related questions. InvestX.fr disclaims any liability for errors, misinvestments, inaccuracies, or omissions and does not guarantee the accuracy or completeness of the information, texts, graphics, links, or other materials provided.
Some of the partners featured on this site may not be regulated in your country. It is your responsibility to verify the compliance of these services with local regulations before using them.