Social-media impersonation scam spike
EigenLayer's assessment for RD-F-109 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Sharp uptick in social-media impersonation is applicable and elevated for EigenLayer. Two confirmed social-channel attacks: (1) EigenLayer's X account was hacked (Unchained Crypto report confirms this occurred, exact date unknown from public sources as of 2026-04-28); (2) the October 2024 investor compromise used sophisticated email impersonation — a social-engineering pattern that required brand trust built from EigenLayer's social channels. The DPRK Contagious Interview campaign specifically targets developer communities via Discord/Telegram, and EigenLayer's developer community is a natural target. Score yellow: confirmed X account compromise + email-spoofing attack history + DPRK threat actor active interest in restaking ecosystem = elevated impersonation risk posture.
Sources #
- URLEigenLayer X Account Hacked — Unchained CryptoUnchained Crypto: EigenLayer's X Account Hacked in Latest Social Media Crypto Takeover — confirms X account compromise eventretrieved 2026-04-28
- Explained: The EigenLayer Investor Hack October 2024 — HalbornHalborn: October 2024 EigenLayer investor hack — attacker impersonated both investor and custodian in email thread to redirect 1,673,645 EIGEN tokens ($5.7M)retrieved 2026-04-28
Methodology #
Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.
See the full factor methodology and distribution across all protocols →