EigenLayer X hackers who likely stole $800K now posting dog pics

Ethereum protocol EigenLayer has fallen victim to an X (formerly Twitter) hack that shared phishing links and very likely stole $800,000 from a single victim, according to security analysts.
The first phishing link, posted at 11:20 am, claimed that the “EIGEN stakedrop Phase 2 is now open,” and that a supposed supply of EIGEN tokens would be distributed. This post has since been deleted.
However, several similar messages have been uploaded by the account, including a seven-part thread and a disclaimer warning that any posts beyond the final one might be phishing attempts.
The hackers even uploaded a picture of a dog wearing a flower headpiece to bait users into clicking the harmful links.

Read more: Radiant Capital’s $50M crypto hack underlines DeFi’s multisig dependence
Security analyst Scam Sniffer claimed, “EigenLayer’s X account was compromised and posted phishing tweets” and that the link may install malware, steal secret recovery phrases, and feature fake metamask sites.
Scam Sniffer also noted that someone lost $800,000 worth of mETH after signing a permit phishing signature around the same time. “The victim very likely clicked the phishing tweet from EigenLayer,” it noted.


At the time of writing, the account is still sharing phishing links.
Got a tip? Send us an email or ProtonMail. For more informed news, follow us on X, Instagram, Bluesky, and Google News, or subscribe to our YouTube channel.