Kelpdao Twitter Hacked

[Gladitorcomeback]

Twitter/Discord Hacking is increasing day by day. Whenevyuse any dapp be careful and bookmark all official site you use daily. Recently one dao project Kelp dao twitter account has been hacked and scammers tweeted fake phishing link with small change in domain. No news for scammed amount yet.



Original Site: https://kelpdao.xyz/

Fake site:

Code:

https://kelpdao.org/

More Details

[Nwada001]

People keep falling for some kind of scam online, especially when it's coming from the official project's social media account. It's easy to convince their audience that it's real without them even having a second thought about the link shared.
 
The difference between the two sites is just the.org and the.XYZ. This is another reason why project owners should try to buy similar domains that can be slightly mistaken for theirs and used for scams. .com and.org are popular, and many people frequently make the mistake of confusing them both when typing the url.
 
Most times, some people who are very lazy search project names on Google and use even the url that's shown on the first page, which means many people get scammed without even realising that they are in the wrong place.

[albon]

Thank you for sharing this warning.

Fortunately, Kelp DAO has regained control of their account on X. They have stated that their official domain, smart contracts, and dApp were not affected by what happened to their X account, and they assure they are safe to use now. The hacking occurred due to a third-party application that granted unauthorized posting permissions to the attackers in their official X account.

From what happened, we can infer that it's essential not to connect our social media accounts to any unknown third-party applications, as they can exploit these permissions and gain partial or full access to the account. Research, focus, and attention are crucial when encountering suspicious tweets from projects we follow. Never open any link without reading it thoroughly and confirming that it is the official domain.

[1] https://twitter.com/KelpDAO/status/1737518521507250481