tl;dr
TRON’s X account was hacked on May 2, 2025, through a targeted social engineering attack. The hacker posted a suspicious contract address, sent unsolicited direct messages to users, and followed unknown accounts. TRON confirmed the breach resulted from a team member being targeted by a malicious sch...
On May 2, 2025, TRON’s official X account was compromised through a targeted social engineering attack. The attacker deceived a team member, gaining access to the account and posting unauthorized content including a suspicious smart contract address. The hacker also sent unsolicited direct messages to users and followed unknown accounts, attempting to spread a fraudulent contract.
Despite TRON regaining control of the account, the perpetrator continued exploiting the breach, prompting TRON DAO to warn users not to interact with any contract addresses or DMs sent from the compromised account on that day. The organization emphasized that it never sends unsolicited messages or posts contract addresses via X.
TRON DAO is actively collaborating with law enforcement and has identified several linked X and Telegram accounts tied to the attacker. Founder Justin Sun publicly urged the OKX exchange to freeze any funds associated with the hack, reinforcing efforts to contain the impact. His message to followers was succinct and cautionary: “Be safe.”
This incident highlights the alarming rise of social engineering attacks in the cryptocurrency sector, which now account for 98% of cyberattacks. In recent months, similarly devastating scams have led to losses of hundreds of millions of dollars, including a $330 million Bitcoin theft involving an elderly victim, and another $40 million stolen from high-net-worth individuals using phishing and impersonation tactics.
Even organizations equipped with robust security measures remain vulnerable to these sophisticated social engineering strategies. TRON’s X account hack serves as a stark reminder that no one is immune, underscoring the importance of vigilance and continuous improvement in security practices throughout the crypto community.