Connect with us

Crypto

Mandiant X/Twitter hacker linked to $900K cryptocurrency phishing scheme

Published

on

Mandiant X/Twitter hacker linked to 0K cryptocurrency phishing scheme

Mandiant, a Google-owned cybersecurity company, says a “brute force password attack” likely caused the takeover of its X (formerly known as Twitter) account last week.

The account hijacking was part of a cryptocurrency phishing campaign linked to a drainer-as-a-service (DaaS) offering Mandiant calls CLINKSINK, according to a blog post detailing the company’s investigation.

An estimated $900,000 or more in Solana (SOL) cryptocurrency has been stolen in recent campaigns by 35 CLINKSINK affiliates identified in the Mandiant probe. These affiliates typically share about 20% of the stolen crypto with the DaaS operator, who raked in more than $180,000 in SOL since New Year’s Eve, according to the blog post.

Meanwhile, Mandiant is facing scrutiny after admitting that “some team transitions and a change in X’s 2FA policy” resulted in the security lapse that led to the hijacking.

Mandiant is one of several well-known organizations caught up in a recent string of X account hijackings, which most recently hit the U.S. Securities and Exchange Commission (SEC) in an incident that briefly shook up the Bitcoin market. 

Advertisement

Mandiant’s X/Twitter hack explanation, 2FA lapse questioned by critics

Mandiant noted in its blog post that no Mandiant or Google Cloud systems, other than its X account, were compromised in the hours-long incident on Jan. 3.

Referring to a likely “brute force” attack, the company’s statements published on X Wednesday afternoon seem to imply an attacker targeted the social media account by trying multiple passwords until they successfully logged in.

In replies to Mandiant’s post, some critics noted that this explanation was questionable due to X’s policy of temporarily locking accounts after a “limited number of failed attempts” to log in.

“Not possible due to rate limitation except if the password was 123Password,” one user commented.

The exact number of failed attempts needed to trigger this measure is not provided by X, so SC Media tested the log in feature on a personal X account. We received a notice that the account was locked on the sixth attempt to log in with the wrong password.

Advertisement

No alerts about the failed log-in attempts were sent to the email address linked to the account, and we were also able to access the account, during the temporary lock out period, using the option to sign in with Google/Gmail.

Mandiant did not elaborate on the two-factor authentication (2FA) policy change that contributed to the breach, but this likely refers to X’s removal of the SMS 2FA option for non-Premium subscribers on March 20, 2023.

If this is the case, Mandiant’s account likely had no 2FA protection when it was compromised. X users can still use the authentication app or security key methods of 2FA for free.

“We’ve made changes to our process to ensure this doesn’t happen again,” Mandiant said in its statement.

A Google spokesperson declined to provide additional details about the incident to SC Media.

Advertisement

CLINKSINK affiliates impersonate legitimate crypto sites to drain wallets

After compromising Mandiant’s X account, which has more than 123,000 followers, the hijacker changed the account handle to @phantomsolw, impersonating the legitimate Phantom crypto wallet.

In a post on the hacked account, the CLINKSINK affiliate promoted a supposed opportunity to claim free $PHNTM tokens by clicking a link. Upon clicking the link, users would be urged to connect their Solana wallet and sign a transaction to claim the promotional token airdrop.

The JavaScript-based CLINKSINK drainer linked to the phishing site performs checks to verify that victims have the Phantom Desktop Wallet installed and is capable of surveying connected Solana wallets to check details, including balances. CLINKSINK is also set up to split the drained funds between the affiliate and operator accounts, usually at a ratio of 80% and 20%, respectively.

In the case of the Mandiant hijacking, the phishing scheme failed due to Phantom recognizing the site as malicious and blocking users from connecting their wallets, BleepingComputer reported.

The hijacker later deleted the phishing tweet and resorted to using the Mandiant account to mock the company with messages like “Check bookmarks when you get your account back.”  

Advertisement

Mandiant identified other legitimate crypto utilities like DappRadar and BONK being used in related CLINKSAFE campaigns across social media platforms, including X and Discord.

CertiK, Netgear and Hyundai Middle East & Africa (MEA) have also had their X accounts hacked in cryptocurrency-draining schemes this year, but there is no confirmation that these incidents were also linked to CLINKSINK.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Crypto

ADI Foundation and Settlemint Launch ADGM Tokenization Rail for $30.9B RWAs

Published

on

ADI Foundation and Settlemint Launch ADGM Tokenization Rail for .9B RWAs

Integrated Infrastructure for Institutional Adoption

ADI Foundation and Settlemint announced a partnership on May 13 to launch a new digital securities infrastructure on the ADI Chain, aiming to streamline the tokenization of assets within the Abu Dhabi Global Market (ADGM) regulatory framework.

The collaboration integrates ADI Foundation’s compliance-ready Layer-2 blockchain with Settlemint’s digital asset lifecycle platform (DALP). The combined system is designed to handle the entire lifespan of a digital security, from initial token creation and on-chain recording to post-trade servicing and management.

The move addresses a primary hurdle for institutional investors: the difficulty of coordinating issuance, trading, settlement, and custody across fragmented jurisdictions. By providing an integrated architecture, the partners aim to offer a unified pathway for institutions to move traditional assets onto the blockchain.

“The future of investment and trading will not only be digitized, but also available 24 hours a day, 7 days a week,” said Andrey Lazorenko, CEO of ADI Foundation. “Our partnership brings together market infrastructure, institutional-grade blockchain, and a digital asset lifecycle platform to tokenize equities and trade them on secondary platforms.”

According to a media statement, the platform utilizes Settlemint’s implementation of the ERC-3643 standard—a protocol specifically designed for security tokens to ensure compliance with regulatory requirements. While the partnership is initially focusing on equity tokenization, the infrastructure is built to support a variety of other tokenized securities and financial instruments, pending regulatory approval.

The announcement comes as institutional interest in real-world assets ( RWAs) on-chain continues to accelerate. According to data from RWA.xyz, tokenized RWAs currently represent approximately $30.92 billion in on-chain value, with tokenized U.S. Treasuries accounting for roughly $15.20 billion of that total. Market analysts expect this trend to scale significantly. A 2026 analysis by BCG suggests the digital asset market could surge from $0.6 trillion in 2025 to $18.9 trillion by 2033.

Advertisement

Matthew Van Niekerk, co-founder and president of Settlemint, characterized the partnership as a “blueprint” for the broader financial industry.

“This partnership proves that regulated, multi-asset tokenization at national scale on public blockchains is not just feasible, but live,” Van Niekerk said. He added that the infrastructure is intended to be a model that central securities depositories (CSDs), exchanges, and clearing houses can adopt to integrate digital assets into existing operations.

Continue Reading

Crypto

BlackRock COO: Cryptocurrency Demand Surpasses Firm’s Expectations, Signaling a Shift in Value

Published

on

BlackRock COO: Cryptocurrency Demand Surpasses Firm’s Expectations, Signaling a Shift in Value

BlackRock Chief Operating Officer Rob Goldstein revealed that demand for cryptocurrency has significantly exceeded the firm’s initial projections, marking a notable shift in institutional sentiment toward digital assets. Speaking during a Binance online stream, Goldstein addressed the market’s reception of BlackRock’s spot Bitcoin exchange-traded fund (ETF), IBIT, and outlined the asset manager’s broader strategic outlook on blockchain-based finance.

Demand Driven by Value Proposition, Not Speculation

Goldstein emphasized that the global demand for IBIT was stronger than anticipated, describing the interest not as fleeting speculative enthusiasm but as a recognition of a new value proposition rooted in emerging technology. He noted that investors are increasingly viewing cryptocurrency as a distinct asset class with potential for long-term portfolio diversification, rather than a short-term trading vehicle. This perspective aligns with BlackRock’s broader push to integrate digital assets into traditional investment frameworks.

Advertisement

Tokenization and the Future of Capital Markets

Goldstein predicted that the tokenization of capital market instruments remains in its early stages, with future growth expected to be measured in multiples rather than incremental percentages. He argued that blockchain infrastructure could fundamentally reshape how assets are issued, traded, and settled, reducing friction and increasing transparency. This view is consistent with growing industry interest in real-world asset (RWA) tokenization, a trend that major financial institutions are beginning to explore.

AI Agents and Digital Rail Transactions

In a forward-looking comment, Goldstein suggested that artificial intelligence agents will eventually conduct transactions directly via digital rails, or blockchain infrastructure, rather than logging into traditional bank accounts. This vision points to a future where automated systems interact with decentralized finance protocols, potentially streamlining operations across supply chains, payments, and asset management. While still conceptual, the statement underscores BlackRock’s attention to the convergence of AI and blockchain technologies.

The Education Gap Remains a Key Obstacle

Goldstein identified the primary barrier to broader adoption as a lack of investor education regarding the technical aspects of virtual assets and efficient portfolio allocation. Many institutional and retail investors remain uncertain about how to evaluate cryptocurrencies, assess risks, and integrate them into existing investment strategies. BlackRock’s emphasis on education suggests that the firm sees informed participation as critical to sustainable market growth.

Conclusion

BlackRock’s acknowledgment that cryptocurrency demand has exceeded expectations carries significant weight, given the firm’s status as the world’s largest asset manager with over $10 trillion in assets under management. Goldstein’s comments reflect a maturing institutional perspective that views digital assets not as a passing trend but as a structural evolution in finance. For investors, the key takeaway is that major financial players are moving beyond skepticism and actively building infrastructure for a tokenized future, even as educational gaps persist.

FAQs

Q1: What did BlackRock’s COO say about cryptocurrency demand?
Rob Goldstein stated that demand for cryptocurrency, particularly through BlackRock’s IBIT Bitcoin ETF, has exceeded the firm’s expectations, driven by a recognition of its value as an emerging technology rather than mere speculation.

Advertisement

Q2: What is BlackRock’s view on tokenization?
Goldstein described tokenization of capital market tools as still in its infancy, with future growth expected to be exponential. He believes blockchain infrastructure will play a key role in transforming how assets are managed and traded.

Q3: What is the biggest obstacle to cryptocurrency adoption according to BlackRock?
The main challenge is a lack of investor education on the technical aspects of virtual assets and how to allocate them effectively within a portfolio, according to Goldstein.

Continue Reading

Crypto

MEXC Commits to 1,000 BTC Purchase as Guardian Fund Targets $500M Expansion

Published

on

MEXC Commits to 1,000 BTC Purchase as Guardian Fund Targets 0M Expansion

Key Takeaways

BTC and USDT to Serve as Dual Reserve System for Market Stability

Crypto exchange MEXC is deepening its focus on reserve strength and user protection, announcing plans to expand its Guardian Fund fivefold to $500 million and acquire 1,000 bitcoin as part of a broader risk management strategy.

The exchange said the initiative will be rolled out over the next two years and is designed to create a dual-reserve structure combining liquid stablecoin holdings with long-term BTC reserves. The framework is intended to bolster platform stability and improve resilience during periods of market stress.

The announcement comes as MEXC continues to attract new capital and users. According to data from Defillama, the exchange recorded $271.6 million in net inflows over the past month through May 11, reflecting increased trading activity and participation across global markets.

Under the revised structure, the Guardian Fund will continue to hold significant USDT reserves to ensure immediate liquidity and operational flexibility. The addition of bitcoin is intended to provide a longer-term store of value capable of preserving purchasing power across market cycles.

Transparency Remains Key for MEXC

MEXC said the strategy is part of a disciplined reserve management approach rather than a reaction to short-term volatility. The company framed the expansion as an effort to build infrastructure comparable to institutional-grade financial safeguards increasingly expected in the digital asset industry.

Advertisement

“Trust has to be capitalized, not just claimed. The expansion of the Guardian Fund and the addition of bitcoin reserves reflect our commitment to building protection infrastructure that helps users access infinite opportunities with greater confidence,” CEO Vugar Usi said in a statement.

The exchange also emphasized transparency. Wallet addresses tied to the Guardian Fund’s USDT and bitcoin holdings have been disclosed publicly, allowing users to verify reserve balances on-chain in real time. The move highlights a broader trend among large trading platforms seeking to differentiate themselves through stronger balance sheets and more visible proof-of-reserves mechanisms.

For MEXC, the Guardian Fund expansion forms part of a wider push to position itself as a global platform capable of supporting long-term growth. The company said the initiative aligns with its broader strategy of improving transparency, strengthening risk management, and protecting users during periods of heightened market uncertainty.

Advertisement
Continue Reading
Advertisement

Trending