Official MASTR logo MASTR
Menu
Read the publication

Phishing, exploits & privacy

The Solflare X-account compromise: what the incident affected

To be absolutely clear: if something similar were to happen to us - we never promote tokens. The only tokens we ever mention are our own $MASTR token or $MASTR badged projects, which are typically at least one month old and have passed a…

The original publications are in English. Navigation is available in seven languages.

01

Original on X ↗

It happened again: 🆘🚨

A few hours ago, the @solflare account was compromised and used to promote a scam token.

To be absolutely clear: if something similar were to happen to us - we never promote tokens. The only tokens we ever mention are our own $MASTR token or $MASTR badged projects, which are typically at least one month old and have passed a structured vetting process.

Unfortunately, we expect incidents like this to continue.

While we cannot present conclusive evidence, we hold the opinion - based on patterns we’ve observed - that not all of these compromises stem from external breaches. In our view, some may involve internal access or facilitation. To be clear, we do not believe the affected project teams are involved in any way.

In February and March, a well-known account shared material with us that appeared to raise concerns about potential insider involvement at platform level.

However, we are unable to independently verify the authenticity or accuracy of this information.

Furthermore, in light of potential risks to our own account access, we are choosing not to publish the material at this time.

The account that shared this information was removed from X shortly thereafter. We don’t know the reason.

We encourage everyone to exercise critical thinking and draw their own conclusions.

#SOLFLARE $SOLFLARE

02

Original on X ↗

@solflare Please follow @contrarything

...this is one of our team member’s accounts and will serve as a backup communication channel in case anything happens to our main account. It will also be used to share important updates if needed.

Mentioned accounts

Find where an X account appears in the selected publications. A mention is not an allegation or an endorsement.

@solflare · @contrarything

Related research

Phishing, exploits & privacy

Privacy, surveillance and control

A discussion of surveillance, data collection and the relationship between privacy and personal autonomy.

Original articles4 min
MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet