Wallstreetbets gets hacked, $2.2m worth of meme coins stolen

A security breach on X resulted in the theft of over $2.2 million worth of meme coins on Solana.

Blockchain investigator ZachXBT revealed that the attack exploited a vulnerability in X’s mobile platform, leading to losses on multiple tokens in what appears to be a sophisticated phishing operation against Wallstreetbets.

The attack resulted in the theft of several tokens, with major losses including $1.43 million in PNUT tokens, $400,000 in ZEREBRO tokens, and $130,000 in ALCH tokens.

According to ZachXBT’s Telegram announcement, the attackers exploited a previously identified bug in X’s mobile platform. This allowed them to add access keys to compromised accounts, a vulnerability that remained invisible to account owners. origin and was not correctly processed by the platform support.

The vulnerability affects the platform’s mobile interface, allowing attackers to maintain persistent access even after apparent account recovery attempts.

Wallstreetbets regains account access

Wallstreetbets has since regained control of his account. It also confirmed that unauthorized tweets containing malicious links were posted during the compromise.

The account holder revealed that he had been battling unauthorized access attempts for about a month. The user also works collaboratively with the X security team to resolve ongoing security issues.

In a direct message to the attackers, Wallstreetbets issued a stern warning, claiming to know their identities despite their use of VPN services to mask their activities.

“Hiding your connections to my account with a VPN is a ridiculously weak way to cover your tracks,” the account says. Wallstreetbets has suggested possible legal consequences for this criminal activity.

The account holder also contacted potentially affected users, asking them to share details of any losses via direct messages. This information is intended to be passed on to authorities as part of ongoing investigations into the security breach.

Wallstreetbets wasn’t the only major breach on Sunday. Cardano’s X account has also been piratewith details of a bogus U.S. Securities and Exchange Commission lawsuit published before being taken down.