EigenLayer’s X is experiencing a hack, with cybercriminals launching a fake airdrop campaign to scam users.
Restaking protocol EigenLayer’s X account has been hacked as the cybercriminals continue to post fake “stakedrop” (EigenLayer’s version of airdrops) campaign posts. With the first post of the multiple posts that have appeared deleted, it is unclear if EigenLayer regained access to the account and the hackers took over again.
“Eigenlayer X/Twitter account is currently compromised do not click any links,” blockchain investigator ZachXBT mentioned on a Telegram post.
The stakedrop posts have appeared on EigenLayer’s X account, with the redirect links reading “blog.eigenfoundation.org.” While that is the link to EigenLayer’s non-profit’s native website blog, clicking the link leads to a fake website. That website is most likely a crypto drainer designed to act as a phishing trap.
As unsuspecting users visit the website and connect their wallets to it, their assets would get drained in entirety. It is unknown if any users have fallen for the scam, but it is likely since EigenLayer boasts over 300,000 followers. Many, at the least, would have visited the scam website.
The posts for the scam campaign are going up even at the time of writing. They employ urgency to get users to click on the link without thinking twice. Most posts mention October 18 to be the only day to claim the stakedrop. The latest post, as of writing, states that the deadline was changed to October 20.
Source: EigenLayer on X
EigenLayer is a highly popular DeFi protocol in the Ethereum ecosystem for bringing the novel restaking use case, a feature that allows Ethereum validators to hypothecate their assets via the protocol. With that, validators can verify transactions on other protocols to earn more rewards. The protocols, in turn, gain the security of the Ethereum validator base.
EigenLayer Was Hit With a $5.7 Million Hack on October 4
Cybercriminals have taken note of its increasing popularity, as this is the second hack the protocol has witnessed in October. Earlier this month, on October 4, a scammer broke into an email chain between EigenLayer and an investor and diverted $5.7 million worth of assets to their wallet.
EigenLayer revealed the exploit to its community the following day, explaining the details and maintaining that it was only limited to a single email chain. It iterated that the protocol’s contracts did not undergo any exploit and that they were safe to use.
