Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/holoworldaidistributionphasestwitterxhackphishing.php}} {{Unattributed Sources}} Holoworld AIHoloworld is an AI-powered storytelling platform that provides creators and brands with immersive tools to produce videos, livestreams, memes, and more, offering continuous engagement. It helps creators build unique personalities, connect deeply with audiences, and..."

2025-02-18T18:25:25Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/holoworldaidistributionphasestwitterxhackphishing.php}} {{Unattributed Sources}} thumb|Holoworld AIHoloworld is an AI-powered storytelling platform that provides creators and brands with immersive tools to produce videos, livestreams, memes, and more, offering continuous engagement. It helps creators build unique personalities, connect deeply with audiences, and..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/holoworldaidistributionphasestwitterxhackphishing.php}}
{{Unattributed Sources}}

[[File:Holoworldai.jpg|thumb|Holoworld AI]]Holoworld is an AI-powered storytelling platform that provides creators and brands with immersive tools to produce videos, livestreams, memes, and more, offering continuous engagement. It helps creators build unique personalities, connect deeply with audiences, and develop the lore of their intellectual properties. A recent hack targeted the Holoworld official Twitter/X account, with significant financial losses, including over $1 million worth of ACT tokens from a single victim. While the platform's social media accounts have been restored, there has been no mention of assistance for the victims.<ref name="holoworldaitwitter-18070" /><ref name="slayedethtwitter-18071" /><ref name="nuke609twitter-18072" /><ref name="digikellytwitter-18073" /><ref name="zachxbttwitter-18074" /><ref name="bearbitsnfttwitter-18075" /><ref name="cactusjack1twitter-18076" /><ref name="fourthesauritwitter-18077" /><ref name="denjinktwitter-18078" /><ref name="holoworld-18079" /><ref name="solscan-18080" /><ref name="pluslinotwitter-18081" /><ref name="jordihaystwitter-18082" /><ref name="sigridchester00twitter-18083" /><ref name="certikalerttwitter-18084" /><ref name="0xjaime2024twitter-18085" /><ref name="alxvndrixtwitter-18086" /><ref name="roccoo0101twitter-18087" /><ref name="rietetsuyatwitter-18088" /><ref name="jkong910twitter-18089" /><ref name="nandosnukestwitter-18090" /><ref name="peppentweetingtwitter-18091" /><ref name="agentsdailytwitter-18092" /><ref name="0x0megatwitter-18093" /><ref name="0xjaime2024twitter-18094" /><ref name="wenbullatwitter-18095" /><ref name="jackal131twitter-18096" /><ref name="ouobedtwitter-18097" /><ref name="rajan5gtwitter-18098" /><ref name="elitecityiotwitter-18099" /><ref name="kelimoicfctwitter-18100" /><ref name="avaholotwitter-18101" /><ref name="europower90twitter-18102" /><ref name="rajanmishra5775twitter-18103" /><ref name="elitecityiotwitter-18104" /><ref name="spottiewifitwitter-18105" /><ref name="pperuzzotwitter-18106" /><ref name="spottiewifitwitter-18107" /><ref name="pluslinotwitter-18108" /><ref name="hologramlabstwitter-18109" /><ref name="pluslinotwitter-18110" /><ref name="bkl1023twitter-18111" /><ref name="slayedethtwitter-18112" /><ref name="blocktempotwitter-18113" /><ref name="avemoongodtwitter-18114" /><ref name="ellegetsittwitter-18115" /><ref name="yuayatotwitter-18116" /><ref name="bvbloom1twitter-18117" /><ref name="beosincomtwitter-18118" /><ref name="dannysweb3twitter-18119" /><ref name="roccoo0101twitter-18120" /><ref name="ponzisaurtwitter-18121" /><ref name="rietetsuyatwitter-18122" /><ref name="theftsolanaaddress-18123" /><ref name="thefttransaction-18124" /><ref name="balancechanges-18125" />

== About Holoworld AI ==
Holoworld is an AI-driven storytelling platform designed for a new generation of creators and brands. It offers immersive content creation tools, allowing users to generate videos, livestreams, memes, and more, with 24/7 engagement capabilities. The platform enables creators to craft unique personalities, build deep connections with their audience, and enhance the lore of their intellectual properties (IP). Holoworld fosters an open economy where developers, creators, and researchers collaborate, making storytelling accessible and innovative for all. The ecosystem includes millions of users, creators, and interactions, partnering with major brands and creators.
== About AVA Distribution Phase ==
"Introducing Holoworld's $AVA Distribution Phase 1.

The Phase 1 Distribution is based on your current holdings and on-chain activity.

Users are invited to check their allocation and claim their $AVA tokens on our portal down below."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The Holoworld AI Twitter/X account was breached and multiple users were tricked into approving their wallet to be drained.
{| class="wikitable"
|+Key Event Timeline - Holoworld AI Distribution Phases Twitter/X Hack Phishing
!Date
!Event
!Description
|-
|January 9th, 2025 1:47:00 PM MST
|Mention Of Hacked Account
|One of the first mentions of the hacked account by Slayed_eth.
|-
|January 9th, 2025 2:40:00 PM MST
|Nuke Gets Nuked
|A user named nuke609 reports that their wallet was drained of assets and asks for help from the team. It appears that only scammers reply to offer assistance.
|-
|January 9th, 2025 3:36:54 PM MST
|Cactus Jack Drain Transaction
|Cactus Jack's wallet drain transaction occurs on Solana.
|-
|January 9th, 2025 3:44:18 PM MST
|Large ACT Drain Transaction
|One unfortunate victim later referenced by ZachXBT has 3.39M ACT (worth $1m USD) in ACT drained from their wallet.
|-
|January 9th, 2025 6:50:00 PM MST
|Account Compromise Warning
|Twitter/X user DenjinK posts a warning about the Twitter/X account appearing to be hacked.
|-
|January 9th, 2025 7:36:00 PM MST
|CertiK Alert Posted Online
|CertiK posts an alert on Twitter/X .
|-
|January 10th, 2025 10:05:00 AM MST
|Holoworld AI Account Recovered
|Holoworld AI posts to announce that they have successfully recovered the account. Thanks to swift action by their team and support from @brainchainLLC, they identified and stopped sophisticated phishing attacks targeting their socials. Phishing links and tweets were flagged and removed multiple times, despite attackers using unusual methods to maintain control. After conducting a thorough security audit, Holoworld AI has implemented stronger security measures to secure their accounts across various platforms.
|-
|January 10th, 2025 10:49:00 AM MST
|Jack Got Jacked
|Twitter user _CactusJack_1 requests for the team to "restore some of the $AVA lost to holders" and provides the blockchain transaction showing his drained wallet.
|-
|January 10th, 2025 12:58:00 PM MST
|ZachXBT Weighing In
|Blockchain sleuth ZachXBT provides a screenshot of the original phishing tweet and reports that one victim lost 3.39M ACT (worth roughly $1m USD) from the incident. He reports that funds are presently remaining in a specific theft wallet at this time. However, it appears that ZachXBT misses that funds lost total 3.89M ACT, and were actually split between two different receiving wallet addresses.
|}

== Technical Details ==
There is some suggestion that the attack included tactics to bypass Solana transaction simulation algorithms.

It looks like funds are split between two different wallets, which suggests a partnership with profit splitting. This likely involves a software developer working with an individual able to get into the Twitter/X account.

== Total Amount Lost ==
At least 3.89M ACT (worth over $1m USD).

The total amount lost is unknown.

== Immediate Reactions ==
"I got drained by this hack and it’s inexcusable for a crypto project to get compromised this way in 2025. How many others were drained? What was the total amount of financial loss? Please do not sweep this under the rug. Many of us supporters affected"

== Ultimate Outcome ==
"Our X account has been fully restored after yesterday's security incident.

Through rapid action by our team and invaluable support from @brainchainLLC, we successfully identified and halted the sophisticated phishing attacks targeting our socials.

The phishing links and tweets were flagged and taken down repeatedly while the attackers used a variety of uncommon methods to gain and retain control.

After a thorough security audit, we have implemented enhanced security measures and safeguards to lock down our accounts across multiple platforms."

== Total Amount Recovered ==
It does not appear that HoloWorld has provided any information about potential assistance for victims.

There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="holoworldaitwitter-18070">[https://twitter.com/HoloworldAI/status/1877763633796768224 @HoloworldAI Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="slayedethtwitter-18071">[https://twitter.com/Slayed_eth/status/1877457300169908327 @Slayed_eth Twitter] (Accessed Feb 18, 2025)</ref>

<ref name="nuke609twitter-18072">[https://twitter.com/nuke609/status/1877470606628655326 @nuke609 Twitter] (Accessed Feb 18, 2025)</ref>

<ref name="digikellytwitter-18073">[https://twitter.com/Digikelly/status/1877789361586028553 @Digikelly Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="zachxbttwitter-18074">[https://twitter.com/zachxbt/status/1877807272820375619 @zachxbt Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="bearbitsnfttwitter-18075">[https://twitter.com/bearbits_nft/status/1877842981224394776 @bearbits_nft Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="cactusjack1twitter-18076">[https://twitter.com/_CactusJack_1/status/1877774665994604643 @_CactusJack_1 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="fourthesauritwitter-18077">[https://twitter.com/fourthesauri/status/1877822326969966829 @fourthesauri Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="denjinktwitter-18078">[https://twitter.com/DenjinK/status/1877533463298933000 @DenjinK Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="holoworld-18079">[https://www.holoworld.com/ Holoworld - AI-Powered Character Creation and Storytelling Platform] (Accessed Feb 14, 2025)</ref>

<ref name="solscan-18080">[https://solscan.io/tx/2oGfUYqu8CqAc9FwFwoH1m4YbdwmyQJpdSfe64n235xL43tvLang2TZiR315AN9HjdqpKQyDaFM7KhhgUMGtRJyW https://solscan.io/tx/2oGfUYqu8CqAc9FwFwoH1m4YbdwmyQJpdSfe64n235xL43tvLang2TZiR315AN9HjdqpKQyDaFM7KhhgUMGtRJyW] (Accessed Feb 14, 2025)</ref>

<ref name="pluslinotwitter-18081">[https://twitter.com/PlusLino/status/1877767750883389711 @PlusLino Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="jordihaystwitter-18082">[https://twitter.com/jordihays/status/1888241756929409039 @jordihays Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="sigridchester00twitter-18083">[https://twitter.com/sigridchester00 @sigridchester00 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="certikalerttwitter-18084">[https://twitter.com/CertiKAlert/status/1877544921328136264 @CertiKAlert Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="0xjaime2024twitter-18085">[https://twitter.com/0xJaime2024/status/1877563845805506719 @0xJaime2024 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="alxvndrixtwitter-18086">[https://twitter.com/alxvndr_ix/status/1877603526324437398 @alxvndr_ix Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="roccoo0101twitter-18087">[https://twitter.com/roccoo0101/status/1877538026886148211 @roccoo0101 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="rietetsuyatwitter-18088">[https://twitter.com/rie_tetsuya/status/1877535812138512739 @rie_tetsuya Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="jkong910twitter-18089">[https://twitter.com/jkong910/status/1877525718294475255 @jkong910 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="nandosnukestwitter-18090">[https://twitter.com/nandosnukes/status/1877525134459760706 @nandosnukes Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="peppentweetingtwitter-18091">[https://twitter.com/PeppenTweeting/status/1877483697340838391 @PeppenTweeting Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="agentsdailytwitter-18092">[https://twitter.com/AgentsDaily/status/1877593762630627666 @AgentsDaily Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="0x0megatwitter-18093">[https://twitter.com/0x0Mega/status/1877463539897491807 @0x0Mega Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="0xjaime2024twitter-18094">[https://twitter.com/0xJaime2024/status/1877535247698657703 @0xJaime2024 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="wenbullatwitter-18095">[https://twitter.com/Wenbulla/status/1877690055084347717 @Wenbulla Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="jackal131twitter-18096">[https://twitter.com/jackal_131/status/1877465818260287533 @jackal_131 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="ouobedtwitter-18097">[https://twitter.com/OuO_bed/status/1877551657749467456 @OuO_bed Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="rajan5gtwitter-18098">[https://twitter.com/rajan5g/status/1877570655962488879 @rajan5g Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="elitecityiotwitter-18099">[https://twitter.com/EliteCityio/status/1877467449592885536 @EliteCityio Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="kelimoicfctwitter-18100">[https://twitter.com/kelimoicfc/status/1877476606505021891 @kelimoicfc Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="avaholotwitter-18101">[https://twitter.com/AVA_holo/status/1877482089609588942 @AVA_holo Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="europower90twitter-18102">[https://twitter.com/europower90/status/1877478774184325353 @europower90 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="rajanmishra5775twitter-18103">[https://twitter.com/RajanMishra5775/status/1877570097318961295 @RajanMishra5775 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="elitecityiotwitter-18104">[https://twitter.com/EliteCityio/status/1877479917497061424 @EliteCityio Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="spottiewifitwitter-18105">[https://twitter.com/SpottieWiFi/status/1877790379077931433 @SpottieWiFi Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="pperuzzotwitter-18106">[https://twitter.com/pperuzzo_/status/1877456706805846274 @pperuzzo_ Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="spottiewifitwitter-18107">[https://twitter.com/SpottieWiFi/status/1877473413981184114 @SpottieWiFi Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="pluslinotwitter-18108">[https://twitter.com/PlusLino/status/1877805081057259573 @PlusLino Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="hologramlabstwitter-18109">[https://twitter.com/HologramLabs/status/1877468704209858912 @HologramLabs Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="pluslinotwitter-18110">[https://twitter.com/PlusLino/status/1877835113003635075 @PlusLino Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="bkl1023twitter-18111">[https://twitter.com/BKL1023/status/1877508932106596627 @BKL1023 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="slayedethtwitter-18112">[https://twitter.com/Slayed_eth/status/1877473024456221019 @Slayed_eth Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="blocktempotwitter-18113">[https://twitter.com/BlockTempo/status/1877610001449234564 @BlockTempo Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="avemoongodtwitter-18114">[https://twitter.com/avemoongod/status/1877454686631944522 @avemoongod Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="ellegetsittwitter-18115">[https://twitter.com/ellegetsit/status/1877518361107517802 @ellegetsit Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="yuayatotwitter-18116">[https://twitter.com/Yu_Ayato/status/1877864278595915851 @Yu_Ayato Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="bvbloom1twitter-18117">[https://twitter.com/BV_Bloom1/status/1877769862304710928 @BV_Bloom1 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="beosincomtwitter-18118">[https://twitter.com/Beosin_com/status/1877536638135336965 @Beosin_com Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="dannysweb3twitter-18119">[https://twitter.com/DannysWeb3/status/1877472682339393658 @DannysWeb3 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="roccoo0101twitter-18120">[https://twitter.com/roccoo0101/status/1877631790665597275 @roccoo0101 Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="ponzisaurtwitter-18121">[https://twitter.com/ponzisaur/status/1877517305002996066 @ponzisaur Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="rietetsuyatwitter-18122">[https://twitter.com/rie_tetsuya/status/1877625738331042265 @rie_tetsuya Twitter] (Accessed Feb 14, 2025)</ref>

<ref name="theftsolanaaddress-18123">[https://solscan.io/account/5bN3hmhSjZbvpMHSgKMEqb7HwtuFMYA6xnFdGh4sb1YY Theft Address on Solana] (Accessed Feb 18, 2025)</ref>

<ref name="thefttransaction-18124">[https://solscan.io/tx/3SiVCPJEVgZ7DFTNL5pgpb4VXypKGkJ2W38LRcTc296DbisNKwBhLVPMS4gqkNBCNB1WX6zNAAFdJWENWfPCJek2 Large Theft Including 3.8M ACT] (Accessed Feb 18, 2025)</ref>

<ref name="balancechanges-18125">[https://solscan.io/account/9KjDmak4XeHDomsC2vjo9HdSQJUm4ePnrXQe4c5Yx5jE?page=2#balanceChanges Victim Balance Changes Page 2] (Accessed Feb 18, 2025)</ref></references>

Holoworld AI Distribution Phases Twitter/X Hack Phishing - Revision history