Skip to content
~/drains.watch_
Soon
← Tags·Platforms & channels

X account hacks

2 incidents, 1 live. 11 days since the last new one.

2 drains in the last 12 months

2 drains in the last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
MonWedFri
Critical 4 · High 3 · Med 2 · Low 1 · Update ½ Less More

Follow this tag

Live

  • Medium✓Contained

    COLDCARD's X account posts fake 'security migration' phishing link

    On 11 October 2026 the official X account of hardware wallet maker COLDCARD published an unauthorized post claiming a flaw in recovery phrase generation in newer firmware and urging users to move their Bitcoin through a 'security migration' site that impersonated COLDCARD. The company deleted the post, said it was investigating how it was published, and said it found no matching login or session record despite offline 2FA. No losses were confirmed. The only official site is coldcard.com; never enter a seed phrase on any website.

    COLDCARD hardware wallet users on X·Bitcoin·Since Oct 11, 2026·

Past

February 2026 1

  • Medium◐Partly contained

    Hijacked Arbitrum DAO X account posts fake 'snapshot confirmed' airdrop linking to phishing site

    On 3 February 2026 attackers took over Arbitrum DAO's official governance account on X (@arbitrumdao_gov) and posted a fake 'Arbitrum snapshot confirmed' airdrop linking to gov-arbitrum[.]com, a lookalike site with a 'Connect Wallet' prompt. Arbitrum told users not to click links from the account and said the protocol and funds were not affected. No losses had been reported at the time.

    Arbitrum DAO followers on X·Arbitrum·Since Feb 3, 2026·

Brief for your AI


Get notified about new drains

Follow every new drain and update in your feed reader, Slack, Discord or Telegram RSS bot:

Only follow a chain or a method you care about: every tag has its own feed at /t/<tag>/feed.xml.

Copied