# Account Takeover · Drain Watch

4 incidents, 1 live. JSON: https://drains.watch/t/account-takeover.json · RSS: https://drains.watch/t/account-takeover/feed.xml

- [Hijacked Snap Store publisher accounts push fake Exodus, Ledger Live and Trust Wallet apps](https://drains.watch/i/snap-store-fake-wallet-updates-expired-domains-jan-2026) (closed, High, Still active, since Jan 21, 2026)
- [Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss](https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025) (live, Critical, Partly contained, since Dec 5, 2025)
- [THORChain co-founder loses about $1.35M after a fake Zoom call showing a deepfake of a friend](https://drains.watch/i/thorchain-founder-deepfake-zoom-wallet-drain-sep-2025) (closed, Critical, Still active, since Sep 4, 2025)
- [Deepfake Zoom calls of Polygon's co-founder push malware to startup founders from a hijacked Telegram account](https://drains.watch/i/polygon-cofounder-deepfake-zoom-calls-may-2025) (closed, Medium, Still active, since May 13, 2025)