Crypto Giant a16z Recovers X Account After Hackers Push Fraudulent $a16z Token

Crypto Journalist

Anas Hassan

Crypto Journalist

Anas Hassan

About Author

Anas is a crypto native journalist and SEO writer with over five years of writing experience covering blockchain, crypto, DeFi, and emerging tech.

Author Profile

Share

Copied

Last updated: 

June 19, 2025

Why Trust Cryptonews

Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews

Crypto venture capital giant a16z has successfully regained control of its official X account after hackers briefly compromised it to promote a fraudulent Solana-based token.

The attack, which occurred on June 18, 2025, saw malicious actors exploit a16z’s 850,000-follower account to falsely announce the launch of an official “$a16z” token, complete with contract addresses and claims that the move represented “a pivotal moment in the evolution of crypto.”

The fraudulent token experienced a brief pump before crashing nearly 90% in a classic pump-and-dump pattern. A16z quickly dismissed the incident with characteristic wit, apologizing for “any confusion caused by the clowns who temporarily took over our account.”

The a16z breach represents just the latest incident in an escalating wave of cryptocurrency-focused social media attacks that have targeted everyone from venture capital firms to government officials throughout 2025.

a16z X Account Hackers: The Anatomy of a Modern Crypto Hack Campaign

The a16z attack follows a sophisticated playbook that has become increasingly common among crypto-focused cybercriminals. It involves creating fake tokens paired with authoritative announcements from compromised high-profile accounts.

After taking over the account, the hackers crafted messages that mimicked legitimate corporate communications while including technical details like contract addresses to enhance credibility.

The choice to target a16z is strategic, as the venture capital firm’s endorsement of any crypto project would carry significant weight given their reputation as kingmakers in the space.

The broader pattern of attacks reveals coordinated efforts targeting various segments of the cryptocurrency ecosystem, from government officials to media outlets to development teams.

Most recently, Paraguay President Santiago Peña’s account was compromised. It falsely announced Bitcoin adoption and included requests for users to send Bitcoin to determine the “national rollout scale.”

Similarly, the ZKsync breach combined fake regulatory warnings with phishing attempts, as the hackers layered multiple attack vectors to maximize market manipulation and direct theft opportunities.

The technical execution of these attacks often involves compromised delegated accounts or sophisticated phishing operations that bypass two-factor authentication, as evidenced by Watcher.Guru’s breach despite their “extreme measures” to prevent such incidents.

The cross-platform nature of modern social media operations means that a single account compromise can automatically propagate fraudulent content across multiple channels.

This interconnected vulnerability explains why even brief compromises can generate substantial trading volumes and market movements before being detected and reversed.

Escalating Security Crisis Across Crypto Social Media

The frequency and sophistication of cryptocurrency-focused social media attacks have reached crisis levels. In February 2025 alone, crypto ecosystem losses increased by 20x month-over-month to over $1.5 billion across just nine major incidents.

Over $180M was stolen in March, $92M in April, and $302M in May. In Q1 alone, over $1.64 billion was recorded in the first three months of 2025, although most resulted from only two hacks of two centralized exchanges, Bybit’s $1.46 billion hack and Phemex’s $69.1 million hack.

A recent report also shows that Ethereum remains the most targeted chain, with over $1.5B recorded in Q1.

The attacks have evolved from simple phishing attempts to complex market manipulation schemes that combine fake regulatory announcements, fraudulent airdrops, and pump-and-dump token launches.

The targeting of prominent figures extends beyond cryptocurrency-specific accounts to include luxury brands like Dior, whose Instagram account was used to promote fake Solana tokens, and news outlets like the New York Post.

The pattern suggests organized groups with sophisticated technical capabilities and detailed knowledge of the cryptocurrency market’s information dependencies. These groups consistently target accounts whose endorsements would carry maximum credibility and market impact.