What happened
On July 15, 2022, attackers used the compromised Twitter account of NFT artist DeeKay Kwon to promote a fake LetsWalk Collection airdrop. The link led followers to a site imitating the artist's legitimate website, where victims were induced to approve malicious wallet transactions. Contemporary reporting estimated that about 65 NFTs worth more than $150,000 were taken from multiple victim wallets before DeeKay regained the account and removed the post.
The specific method used to compromise the Twitter account was not established in the opened reporting.
How it happened
- Attackers gained control of DeeKay Kwon's Twitter account and posted a supposed limited LetsWalk Collection airdrop.
- Followers who clicked the post were sent to a fraudulent site designed to resemble DeeKay's official website.
- The site prompted visitors to approve wallet transactions for the supposed NFT claim, granting the attacker permission that enabled NFT transfers from victim wallets.
- Reporting based on on-chain activity counted roughly 65 NFTs taken from several victims; DeeKay later regained the account and deleted the malicious post.
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
