Incident Overview
Twitter account of Hayden Adams was hacked. The scammers behind the hack turns out to be related to serial phishing attacks, with approximately 3,600,000 $USD lost.
The Twitter account of Hayden Adams was exploited by scammers who have been active since April 2023. Over the course of several months, these cyber criminals created more than 23 phishing sites. They managed to steal approximately 3,600,000 $USD from around 358 victims.
The most significant loss from a single victim was 2,280,000 $USD, stolen through an ERC20 Permit phishing technique. The phishing scam targeted unsuspecting users, tricking them into sharing sensitive information, which then led to a significant loss of funds.
Attacker Addresses:
https://etherscan.io/address/0xca4ddffe…c046b5
https://etherscan.io/address/0xdd6CF648…55d1b0
Malicious Transactions:
https://etherscan.io/tx/0x9c023408…8eb938
https://etherscan.io/tx/0x30e51b3a…2d0dc0
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Hayden Adams Phishing, these are the critical security checks that could have prevented this incident (July 2023).
- Verify all logic paths related to Phishing are guarded by proper access controls and input validation - see the Phishing Attacks attack class for patterns
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialRelated Attack Classes
The technique used in this hack maps to these vulnerability classes in our security curriculum:
Sources & References
Learn to Prevent the Next Hayden Adams Phishing
The Hayden Adams Phishing hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.