A surge in scam posts on X has been attributed to a third-party auto-posting service called IFTTT (If This Then That). These posts encouraged victims to send Solana’s SOL to a wallet address for a meme token named “PACKY.”
Crypto influencers, including a16z adviser Packy McCormick, Coinbase product director Scott Shapiro, and Twitch co-founder Justin Kan, had their accounts co-opted by scammers promoting the fraudulent token. McCormick promptly alerted users to the hack and advised against clicking any links or sending money.
McCormick and others pointed to IFTTT as the likely entry point for the hackers, noting that they had granted access to Twitter through IFTTT years ago. McCormick urged users to revoke access to connected apps as a precautionary measure.
Shapiro also warned against connecting older third-party apps, emphasizing the importance of revoking access to outdated tokens. Several accounts, including those of Rainbow co-founder Mike Demarais and Asymmetric Finance CEO Joe McCann, were compromised in a similar manner.
Affected users like Bryan Brinkman apologized for the scam posts and confirmed that their IFTTT accounts were breached. Brinkman urged individuals who fell victim to the scam to reach out to him for resolution, emphasizing the importance of staying vigilant despite using security measures like 2FA and Yubikey.
Cointelegraph reached out to IFTTT for comment but did not receive an immediate response.
X has been a frequent target for illicit activity, scams, and hacking incidents. Even the official account of the United States Securities and Exchange Commission was compromised, highlighting the platform’s susceptibility to security breaches.
Get $200 Free Bitcoins every hour! No Deposit No Credit Card required. Sign Up