{
 "tag": "airdrop",
 "name": "Airdrop",
 "group": "Other",
 "incidents": [
  {
   "slug": "fake-cjup-jupiter-airdrop-drainer-may-2026",
   "title": "Fake $CJUP 'Jupuary' tokens airdropped to Solana wallets lead to drainer sites",
   "url": "https://drains.watch/i/fake-cjup-jupiter-airdrop-drainer-may-2026",
   "json": "https://drains.watch/i/fake-cjup-jupiter-airdrop-drainer-may-2026.json",
   "status": "closed",
   "severity": "medium",
   "threatStatus": "active",
   "verification": "verified",
   "chains": [
    "solana"
   ],
   "method": "fake-airdrop-site",
   "product": "Jupiter (JUP) community and Solana wallet users",
   "tags": [
    "solana",
    "fake-airdrop-site",
    "jupiter",
    "jup",
    "jupuary",
    "airdrop",
    "spam-token",
    "impersonation",
    "solana-floor"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-05-22",
   "closedAt": "2026-05-22",
   "updatedAt": "2026-05-22T12:00:00Z",
   "summary": "In May 2026, Solana Floor warned that scammers were sending counterfeit '$CJUP' tokens to Solana wallets while impersonating Jupiter's Jupuary airdrop. The tokens point holders to phishing 'claim' sites that drain any wallet that connects. Losses were not quantified. Jupiter had not announced a new airdrop at the time, and its only official site is jup[.]ag. If a token you never bought appears with a claim link, ignore it."
  },
  {
   "slug": "dmt-airdrop-dexmaxai-phishing-nov-2025",
   "title": "DMT token airdrop promoted by @dexmaxai tied to $130K phishing loss on Solana",
   "url": "https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025",
   "json": "https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "solana"
   ],
   "method": "fake-airdrop-site",
   "product": "DMT airdrop claimants (@dexmaxai)",
   "tags": [
    "solana",
    "fake-airdrop-site",
    "airdrop",
    "dmt",
    "dexmaxai",
    "x-account",
    "claim-phishing"
   ],
   "amountUsd": 130000,
   "victims": null,
   "startedAt": "2025-11-20",
   "closedAt": "2025-11-20",
   "updatedAt": "2025-11-20T12:00:00Z",
   "summary": "SlowMist's hack database lists a $130,000 phishing loss on Nov 20, 2025, filed under Solana, tied to the DMT token airdrop promoted by the X account @dexmaxai. The airdrop claim was the lure for the phishing. If you claimed DMT, check your wallet for token delegations or unexpected outgoing transfers and move what is left to a new wallet."
  }
 ],
 "changes": [
  {
   "incident": "fake-cjup-jupiter-airdrop-drainer-may-2026",
   "incidentTitle": "Fake $CJUP 'Jupuary' tokens airdropped to Solana wallets lead to drainer sites",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "active",
   "date": "2026-05-22",
   "title": "COINTURK reported Solana Floor's warning about fake $CJUP tokens impersonating Jupiter's Jupuary and linking to wallet drainers.",
   "sourceUrl": "https://en.coin-turk.com/fake-cjup-airdrop-drains-solana-wallets-within-minutes/",
   "url": "https://drains.watch/i/fake-cjup-jupiter-airdrop-drainer-may-2026"
  },
  {
   "incident": "dmt-airdrop-dexmaxai-phishing-nov-2025",
   "incidentTitle": "DMT token airdrop promoted by @dexmaxai tied to $130K phishing loss on Solana",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-11-20",
   "title": "SlowMist's hack database recorded a $130,000 phishing loss tied to the DMT airdrop promoted by @dexmaxai.",
   "sourceUrl": "https://hacked.slowmist.io/?c=Solana",
   "url": "https://drains.watch/i/dmt-airdrop-dexmaxai-phishing-nov-2025"
  }
 ]
}