Three recent X hacks, including Roaring Kitty's, linked to same group
May 18, 2026, 1:39 AM
Three X account hacks over the past month, including that of GameStop meme stock figure Roaring Kitty, were carried out by the same organization, according to on-chain analyst Specter.
Specter stated on X that after Roaring Kitty's account was compromised on May 11, the Solana memecoin RKC was issued. The hackers, who had pre-loaded several wallets with the token, sold off their holdings as the price surged, netting over $600,000. "By tracing the wallet fund flows, it was determined that this group had accumulated over $14 million by issuing fraudulent tokens like USOR and VDOR using the same method," Specter explained.
The analyst added that the group uses influencers to promote their schemes on platforms like Telegram and then uses the resulting retail buying pressure as exit liquidity. The fund trail also overlaps with a $2.45 million wstETH phishing attack from 2024.
"This is an organization that will use any means, including phishing and hacking, to find opportunities to make money," Specter warned, advising users not to connect their wallets to unknown platforms.
Log in to leave comments!
Share insights, connect ideas
Log In