What happened
Hayden Adams's Twitter account was breached on July 20, 2023 and used to post scam links. The malicious posts told UniswapX users to check a purported UNI-token gift on a newly registered website. Scam Sniffer subsequently attributed the account attackers to a wider campaign that it said had created more than 23 phishing websites and stolen about $3.6 million from roughly 358 victims; that is an aggregate campaign figure, not a loss verified solely from this account compromise.
How it happened
- Hayden Adams's Twitter account was breached and began posting links to scam websites.
- A post directed UniswapX users to a newly registered site to check a purported UNI-token gift.
- Scam Sniffer attributed the operators to a broader phishing campaign active since April; its reported victim and loss totals cover that wider campaign, not only the posts from Adams's account.
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
