EigenLayer’s X Account Compromised: Warning About Fake Airdrop Scam

EigenLayer, one of the leading protocols on Ethereum, has suffered a security breach, leading to the distribution of a fake airdrop campaign via its official X account. This incident raises significant concerns about user safety and the potential risks associated with high-value DeFi protocols.

The Fake Airdrop Incident

On October 18, EigenLayer’s X account posted an announcement about a new airdrop for users eligible for a previous campaign. However, this claim redirected users to a malicious link that seemed unrelated to the restaking protocol. The post was deleted just minutes after being shared, indicating that the attackers may have lost control of the account quickly.

Pseudonymous on-chain investigator ZachXBT warned the community, stating in a Telegram post: “Eigenlayer X/Twitter account is currently compromised; do not click any links.” Given EigenLayer’s popularity—boasting over $11.1 billion in total value locked (TVL)—there’s concern that many users may have already fallen victim to the malicious link.

Despite the quick deletion of the initial post, EigenLayer’s account continued to display malicious links. A subsequent airdrop announcement featured a link that closely resembled EigenLayer’s official blog address, redirecting users to a fraudulent site: “blog.eigenfoundation.org,” instead of the legitimate “blog.eigenlayer.xyz.”

Previous Security Breaches

This recent compromise is not EigenLayer’s first brush with security issues. On October 4, the team reported investigating “unapproved selling activity” linked to a wallet ending in “f10D,” which sold approximately 1.6 million EIGEN tokens valued at around $5.7 million. Following this, EigenLayer confirmed on October 5 that the incident was the result of a hack involving a compromised email thread related to an investor’s token transfer.

The team reassured the community that this incident was isolated and did not compromise the broader ecosystem, clarifying that there were no known vulnerabilities in the protocol or its token contracts.

The recent compromise of EigenLayer’s X account highlights the ongoing risks faced by high-profile DeFi protocols. Users are urged to exercise caution and verify the authenticity of communications, especially regarding airdrops or other financial opportunities. As the DeFi space continues to grow, staying informed about potential scams and security issues is crucial for all participants.