Crypto
Mandiant X/Twitter hacker linked to $900K cryptocurrency phishing scheme
Mandiant, a Google-owned cybersecurity company, says a “brute force password attack” likely caused the takeover of its X (formerly known as Twitter) account last week.
The account hijacking was part of a cryptocurrency phishing campaign linked to a drainer-as-a-service (DaaS) offering Mandiant calls CLINKSINK, according to a blog post detailing the company’s investigation.
An estimated $900,000 or more in Solana (SOL) cryptocurrency has been stolen in recent campaigns by 35 CLINKSINK affiliates identified in the Mandiant probe. These affiliates typically share about 20% of the stolen crypto with the DaaS operator, who raked in more than $180,000 in SOL since New Year’s Eve, according to the blog post.
Meanwhile, Mandiant is facing scrutiny after admitting that “some team transitions and a change in X’s 2FA policy” resulted in the security lapse that led to the hijacking.
Mandiant is one of several well-known organizations caught up in a recent string of X account hijackings, which most recently hit the U.S. Securities and Exchange Commission (SEC) in an incident that briefly shook up the Bitcoin market.
Mandiant’s X/Twitter hack explanation, 2FA lapse questioned by critics
Mandiant noted in its blog post that no Mandiant or Google Cloud systems, other than its X account, were compromised in the hours-long incident on Jan. 3.
Referring to a likely “brute force” attack, the company’s statements published on X Wednesday afternoon seem to imply an attacker targeted the social media account by trying multiple passwords until they successfully logged in.
In replies to Mandiant’s post, some critics noted that this explanation was questionable due to X’s policy of temporarily locking accounts after a “limited number of failed attempts” to log in.
“Not possible due to rate limitation except if the password was 123Password,” one user commented.
The exact number of failed attempts needed to trigger this measure is not provided by X, so SC Media tested the log in feature on a personal X account. We received a notice that the account was locked on the sixth attempt to log in with the wrong password.
No alerts about the failed log-in attempts were sent to the email address linked to the account, and we were also able to access the account, during the temporary lock out period, using the option to sign in with Google/Gmail.
Mandiant did not elaborate on the two-factor authentication (2FA) policy change that contributed to the breach, but this likely refers to X’s removal of the SMS 2FA option for non-Premium subscribers on March 20, 2023.
If this is the case, Mandiant’s account likely had no 2FA protection when it was compromised. X users can still use the authentication app or security key methods of 2FA for free.
“We’ve made changes to our process to ensure this doesn’t happen again,” Mandiant said in its statement.
A Google spokesperson declined to provide additional details about the incident to SC Media.
CLINKSINK affiliates impersonate legitimate crypto sites to drain wallets
After compromising Mandiant’s X account, which has more than 123,000 followers, the hijacker changed the account handle to @phantomsolw, impersonating the legitimate Phantom crypto wallet.
In a post on the hacked account, the CLINKSINK affiliate promoted a supposed opportunity to claim free $PHNTM tokens by clicking a link. Upon clicking the link, users would be urged to connect their Solana wallet and sign a transaction to claim the promotional token airdrop.
The JavaScript-based CLINKSINK drainer linked to the phishing site performs checks to verify that victims have the Phantom Desktop Wallet installed and is capable of surveying connected Solana wallets to check details, including balances. CLINKSINK is also set up to split the drained funds between the affiliate and operator accounts, usually at a ratio of 80% and 20%, respectively.
In the case of the Mandiant hijacking, the phishing scheme failed due to Phantom recognizing the site as malicious and blocking users from connecting their wallets, BleepingComputer reported.
The hijacker later deleted the phishing tweet and resorted to using the Mandiant account to mock the company with messages like “Check bookmarks when you get your account back.”
Mandiant identified other legitimate crypto utilities like DappRadar and BONK being used in related CLINKSAFE campaigns across social media platforms, including X and Discord.
CertiK, Netgear and Hyundai Middle East & Africa (MEA) have also had their X accounts hacked in cryptocurrency-draining schemes this year, but there is no confirmation that these incidents were also linked to CLINKSINK.
Crypto
ADI Foundation and Settlemint Launch ADGM Tokenization Rail for $30.9B RWAs
- ADI Foundation and Settlemint launched a digital securities hub under ADGM’s 2026 regulatory framework.
- BCG projects digital assets will grow to $18.9 trillion by 2033 as institutional RWA adoption accelerates.
- Van Niekerk says the Settlemint blueprint allows global exchanges to launch 24/7 tokenized trading next.
Integrated Infrastructure for Institutional Adoption
ADI Foundation and Settlemint announced a partnership on May 13 to launch a new digital securities infrastructure on the ADI Chain, aiming to streamline the tokenization of assets within the Abu Dhabi Global Market (ADGM) regulatory framework.
The collaboration integrates ADI Foundation’s compliance-ready Layer-2 blockchain with Settlemint’s digital asset lifecycle platform (DALP). The combined system is designed to handle the entire lifespan of a digital security, from initial token creation and on-chain recording to post-trade servicing and management.
The move addresses a primary hurdle for institutional investors: the difficulty of coordinating issuance, trading, settlement, and custody across fragmented jurisdictions. By providing an integrated architecture, the partners aim to offer a unified pathway for institutions to move traditional assets onto the blockchain.
“The future of investment and trading will not only be digitized, but also available 24 hours a day, 7 days a week,” said Andrey Lazorenko, CEO of ADI Foundation. “Our partnership brings together market infrastructure, institutional-grade blockchain, and a digital asset lifecycle platform to tokenize equities and trade them on secondary platforms.”
According to a media statement, the platform utilizes Settlemint’s implementation of the ERC-3643 standard—a protocol specifically designed for security tokens to ensure compliance with regulatory requirements. While the partnership is initially focusing on equity tokenization, the infrastructure is built to support a variety of other tokenized securities and financial instruments, pending regulatory approval.
The announcement comes as institutional interest in real-world assets ( RWAs) on-chain continues to accelerate. According to data from RWA.xyz, tokenized RWAs currently represent approximately $30.92 billion in on-chain value, with tokenized U.S. Treasuries accounting for roughly $15.20 billion of that total. Market analysts expect this trend to scale significantly. A 2026 analysis by BCG suggests the digital asset market could surge from $0.6 trillion in 2025 to $18.9 trillion by 2033.
Matthew Van Niekerk, co-founder and president of Settlemint, characterized the partnership as a “blueprint” for the broader financial industry.
“This partnership proves that regulated, multi-asset tokenization at national scale on public blockchains is not just feasible, but live,” Van Niekerk said. He added that the infrastructure is intended to be a model that central securities depositories (CSDs), exchanges, and clearing houses can adopt to integrate digital assets into existing operations.
Crypto
BlackRock COO: Cryptocurrency Demand Surpasses Firm’s Expectations, Signaling a Shift in Value
BlackRock Chief Operating Officer Rob Goldstein revealed that demand for cryptocurrency has significantly exceeded the firm’s initial projections, marking a notable shift in institutional sentiment toward digital assets. Speaking during a Binance online stream, Goldstein addressed the market’s reception of BlackRock’s spot Bitcoin exchange-traded fund (ETF), IBIT, and outlined the asset manager’s broader strategic outlook on blockchain-based finance.
Demand Driven by Value Proposition, Not Speculation
Goldstein emphasized that the global demand for IBIT was stronger than anticipated, describing the interest not as fleeting speculative enthusiasm but as a recognition of a new value proposition rooted in emerging technology. He noted that investors are increasingly viewing cryptocurrency as a distinct asset class with potential for long-term portfolio diversification, rather than a short-term trading vehicle. This perspective aligns with BlackRock’s broader push to integrate digital assets into traditional investment frameworks.
Tokenization and the Future of Capital Markets
Goldstein predicted that the tokenization of capital market instruments remains in its early stages, with future growth expected to be measured in multiples rather than incremental percentages. He argued that blockchain infrastructure could fundamentally reshape how assets are issued, traded, and settled, reducing friction and increasing transparency. This view is consistent with growing industry interest in real-world asset (RWA) tokenization, a trend that major financial institutions are beginning to explore.
AI Agents and Digital Rail Transactions
In a forward-looking comment, Goldstein suggested that artificial intelligence agents will eventually conduct transactions directly via digital rails, or blockchain infrastructure, rather than logging into traditional bank accounts. This vision points to a future where automated systems interact with decentralized finance protocols, potentially streamlining operations across supply chains, payments, and asset management. While still conceptual, the statement underscores BlackRock’s attention to the convergence of AI and blockchain technologies.
The Education Gap Remains a Key Obstacle
Goldstein identified the primary barrier to broader adoption as a lack of investor education regarding the technical aspects of virtual assets and efficient portfolio allocation. Many institutional and retail investors remain uncertain about how to evaluate cryptocurrencies, assess risks, and integrate them into existing investment strategies. BlackRock’s emphasis on education suggests that the firm sees informed participation as critical to sustainable market growth.
Conclusion
BlackRock’s acknowledgment that cryptocurrency demand has exceeded expectations carries significant weight, given the firm’s status as the world’s largest asset manager with over $10 trillion in assets under management. Goldstein’s comments reflect a maturing institutional perspective that views digital assets not as a passing trend but as a structural evolution in finance. For investors, the key takeaway is that major financial players are moving beyond skepticism and actively building infrastructure for a tokenized future, even as educational gaps persist.
FAQs
Q1: What did BlackRock’s COO say about cryptocurrency demand?
Rob Goldstein stated that demand for cryptocurrency, particularly through BlackRock’s IBIT Bitcoin ETF, has exceeded the firm’s expectations, driven by a recognition of its value as an emerging technology rather than mere speculation.
Q2: What is BlackRock’s view on tokenization?
Goldstein described tokenization of capital market tools as still in its infancy, with future growth expected to be exponential. He believes blockchain infrastructure will play a key role in transforming how assets are managed and traded.
Q3: What is the biggest obstacle to cryptocurrency adoption according to BlackRock?
The main challenge is a lack of investor education on the technical aspects of virtual assets and how to allocate them effectively within a portfolio, according to Goldstein.
Crypto
MEXC Commits to 1,000 BTC Purchase as Guardian Fund Targets $500M Expansion
Key Takeaways
- MEXC plans to expand its Guardian Fund to $500M over two years, along with a 1,000 BTC reserve.
- MEXC logged $270M inflows by May 11, reflecting demand for stronger reserve safeguards.
- MEXC will add on-chain BTC and USDT proof-of-reserves to boost transparency and trust.
BTC and USDT to Serve as Dual Reserve System for Market Stability
Crypto exchange MEXC is deepening its focus on reserve strength and user protection, announcing plans to expand its Guardian Fund fivefold to $500 million and acquire 1,000 bitcoin as part of a broader risk management strategy.
The exchange said the initiative will be rolled out over the next two years and is designed to create a dual-reserve structure combining liquid stablecoin holdings with long-term BTC reserves. The framework is intended to bolster platform stability and improve resilience during periods of market stress.
The announcement comes as MEXC continues to attract new capital and users. According to data from Defillama, the exchange recorded $271.6 million in net inflows over the past month through May 11, reflecting increased trading activity and participation across global markets.
Under the revised structure, the Guardian Fund will continue to hold significant USDT reserves to ensure immediate liquidity and operational flexibility. The addition of bitcoin is intended to provide a longer-term store of value capable of preserving purchasing power across market cycles.
Transparency Remains Key for MEXC
MEXC said the strategy is part of a disciplined reserve management approach rather than a reaction to short-term volatility. The company framed the expansion as an effort to build infrastructure comparable to institutional-grade financial safeguards increasingly expected in the digital asset industry.
“Trust has to be capitalized, not just claimed. The expansion of the Guardian Fund and the addition of bitcoin reserves reflect our commitment to building protection infrastructure that helps users access infinite opportunities with greater confidence,” CEO Vugar Usi said in a statement.
The exchange also emphasized transparency. Wallet addresses tied to the Guardian Fund’s USDT and bitcoin holdings have been disclosed publicly, allowing users to verify reserve balances on-chain in real time. The move highlights a broader trend among large trading platforms seeking to differentiate themselves through stronger balance sheets and more visible proof-of-reserves mechanisms.
For MEXC, the Guardian Fund expansion forms part of a wider push to position itself as a global platform capable of supporting long-term growth. The company said the initiative aligns with its broader strategy of improving transparency, strengthening risk management, and protecting users during periods of heightened market uncertainty.
-
North Carolina3 minutes agoPolice: North Carolina man charged after high-speed chase in Erie County, arrested in the Town of Perry
-
North Dakota9 minutes agoND Emergency Services receives wildfire prevention award
-
Ohio15 minutes agoA unique project asks Ohioans to map Revolutionary War graves
-
Oklahoma21 minutes agoOklahoma teacher turns PB&J’s into a lifeline for students
-
Oregon27 minutes agoWho’s running for a seat in the Oregon House of Representatives?
-
Pennsylvania33 minutes agoShirley Ann Dailey
-
Rhode Island39 minutes agoWeather Now: Showers, T’storm Today
-
South-Carolina45 minutes agoSouth Carolina school administrators honored at annual awards dinner