Bir Hacker, Robinhood CEO'sunun Hesabına Yapılan Tek Bir Tweet'ten 1,2 Milyon Dolar Kazandı

Someone broke into Vlad Tenev's X account on Thursday and used it to launch a fake memecoin. By the time anyone caught on, the attacker had walked away with roughly 650 ETH, somewhere between $1.2 and $1.3 million.

The post claimed a token called Vladhood (VLAD) was the "official mascot" of Robinhood Chain, the company's Ethereum layer-2 network that went live on July 1. It also said VLAD would be listed on the Robinhood app. Neither was true. Within 20 minutes the post had over 175,000 views, and people were already buying. Uniswap volume on the token hit $22 million within a few hours — which tells you something about how fast crypto Twitter moves when a "verified" account posts a contract address.

The clever part isn't the hack. Account takeovers pushing fake tokens go back years — Sydney Sweeney, 50 Cent, the usual list. What's different here is how the money came out. VLAD launched through Pons, a launchpad that locks liquidity but still lets whoever deployed the token pull trading fees. So there was no classic rug pull, no draining the pool in one shot. The attacker just called the fee-withdrawal function repeatedly and let it bleed ETH while the token kept trading underneath. By the time Robinhood's comms account posted a warning and the tweet came down, the money was already gone. Robinhood Chain's explorer has since slapped a scam tag on the contract.

Tenev got his account back and told people he was "awaiting details" from X, and for whatever it's worth at this point,that Robinhood hasn't issued any coin of its own.

There's something a little uncomfortable about the timing. Robinhood built this chain to pitch tokenized stocks and real-world assets. Instead, memecoins have basically taken it over. The network is doing millions of transactions a day, and most of it isn't RWAs.

Tenev's account wasn't even the worst of it that day. Lookonchain flagged three separate exploits happening within roughly 24 hours, AFX Trade, Verus, and B² Network, $35.55 million combined. AFX Trade's Arbitrum bridge lost $24.15 million in USDC after someone compromised its validator signing keys. Verus got hit again — its Ethereum bridge lost $7.54 million, just two months after a near-identical $8 million exploit in May. Blockaid says both attacks used the same contract, same entry path, same bug. Nobody fixed it the first time. B² Network lost roughly $3.86 million in its own token, dumped fast on BNB Chain.

People are calling it "Hackers' Day," half-joking. Four incidents, four different mechanisms - a hijacked account, two bridge exploits, one token dump. Not really one story. But it's the same shape every time: find the one thing nobody's watching closely enough - a private key, a validator set, a launchpad fee function and pull.