Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/spotonchainxaccountcompromisephishing.php}} {{Unattributed Sources}} Spot On Chain Logo/HomepageSpot On Chain offers insights for those who are more active investors, to help spot trends and market changes. On October 5th, their Twitter account was compromised and used to post an airdrop for EIGEN tokens. The airdrop post was removed, and the account was r..."

2024-11-06T21:53:27Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/spotonchainxaccountcompromisephishing.php}} {{Unattributed Sources}} thumb|Spot On Chain Logo/HomepageSpot On Chain offers insights for those who are more active investors, to help spot trends and market changes. On October 5th, their Twitter account was compromised and used to post an airdrop for EIGEN tokens. The airdrop post was removed, and the account was r..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/spotonchainxaccountcompromisephishing.php}}
{{Unattributed Sources}}

[[File:Spotonchain.jpg|thumb|Spot On Chain Logo/Homepage]]Spot On Chain offers insights for those who are more active investors, to help spot trends and market changes. On October 5th, their Twitter account was compromised and used to post an airdrop for EIGEN tokens. The airdrop post was removed, and the account was recovered. No details were posted about what happened, nor any analysis of who was a victim. It is unclear if anyone was tricked and lost any funds.<ref name="panewslab-16609" /><ref name="spotonchain-16610" /><ref name="platform-16611" /><ref name="dehuafitwitter-16612" /><ref name="theasusual1twitter-16613" /><ref name="spotonchaintwitter-16614" /><ref name="thebitjournal-16615" /><ref name="spotonchaintwitter-16616" /><ref name="spotonchaintwitter-16617" /><ref name="spotonchaintwitter-16618" /><ref name="spotonchaintwitter-16619" /><ref name="spotonchaintwitter-16620" /><ref name="slowmistteamtwitter-16621" />

== About Spot On Chain ==
"Smart Trading For All. The AI-driven platform that makes traders smarter with on-chain insights."

"Streamlined on-chain signals. Stay ahead of the game just by scrolling through our feeds"

"Copy top smart traders. Boost your crypto investments by copying trades from the industry's leading smart traders."

"Discover hidden gems. Unlock new opportunities by finding and investing in under-the-radar assets with high potential."

"Earn with RoboTrade. Unlock passive income with the first ever Proof of Sentiment-driven RoboTrade system."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"The X account of the crypto data tracking service Spot On Chain has reportedly been compromised."
{| class="wikitable"
|+Key Event Timeline - Spot On Chain X Account Compromise Phishing
!Date
!Event
!Description
|-
|October 5th, 2024 7:07:00 AM MDT
|SpotOnChain Tweets
|Spot On Chain tweets prior to the account takeover.
|-
|October 5th, 2024 5:52:00 PM MDT
|Get Control Spotty
|The_As_Usual_1 tweets a response to one of the phishing tweets with "Get control Spotty"
|-
|October 5th, 2024 7:36:00 PM MDT
|PANews Article Published
|PANews publishes an article about the Spot On Chain protocol.
|-
|October 5th, 2024 11:54:00 PM MDT
|DehuaFi Tweet Report
|DehuaFi tweets about the reported hack.
|-
|October 6th, 2024 12:30:59 PM MDT
|The Bit Journal Article
|The breach of thr SpotOnChain account is mentioned in an article published by The Bit Journal.
|-
|October 6th, 2024 8:05:00 PM MDT
|SpotOnChain Tweets
|Spot On Chain tweets following the account takeover. There is no mention of the account takeover in any tweets.
|-
|October 7th, 2024 9:18:00 AM MDT
|SlowMist Summary Inclusion
|The incident is included in a summary put together by the SlowMist team to "see what the damage is like this week".
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"The X account of the crypto data tracking service Spot On Chain has reportedly been compromised. It was said to have posted a fake EIGEN airdrop phishing link this morning, while also disabling the comment section for the tweet. Users are advised to be cautious and avoid interacting with the link."

"The account was hacked and used to post a fake EIGEN airdrop phishing link. Comments were disabled to prevent users from warning others."

"PANews News on October 6th that the X account of Spot On Chain, an encrypted data tracking service, was suspected to have been stolen. It is reported that the account issued a false EIGEN airdropped fishing link this morning, and at the same time closed the tweet review area, users need to be alert to access."

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="panewslab-16609">[https://www.panewslab.com/zh/sqarticledetails/il21k5i9.html 加密数据追踪服务Spot On Chain的X账号疑似被盗 - PANews] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchain-16610">[https://spotonchain.com/en Spot On Chain - Spot the opportunities, unlock insights] (Accessed Nov 6, 2024)</ref>

<ref name="platform-16611">[https://platform.spotonchain.ai/en Spot On Chain - Platform] (Accessed Nov 6, 2024)</ref>

<ref name="dehuafitwitter-16612">[https://twitter.com/DehuaFi/status/1842805660091883845 @DehuaFi Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="theasusual1twitter-16613">[https://twitter.com/The_As_Usual_1/status/1842714415033979091 @The_As_Usual_1 Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchaintwitter-16614">[https://twitter.com/spotonchain/status/1842712644945367274 @spotonchain Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="thebitjournal-16615">[https://thebitjournal.com/crypto-hack-alert-major-platforms-hit-by-security-breaches/ Crypto Hack Alert: Major Platforms Hit by Security Breaches - The Bit Journal] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchaintwitter-16616">[https://twitter.com/spotonchain/status/1843183431871758555 @spotonchain Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchaintwitter-16617">[https://twitter.com/spotonchain/status/1843110266692886573 @spotonchain Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchaintwitter-16618">[https://twitter.com/spotonchain/status/1842552297156722938 @spotonchain Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchaintwitter-16619">[https://twitter.com/spotonchain/status/1842513892888715522 @spotonchain Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="spotonchaintwitter-16620">[https://twitter.com/spotonchain/status/1720327658918277186 @spotonchain Twitter] (Accessed Nov 6, 2024)</ref>

<ref name="slowmistteamtwitter-16621">[https://twitter.com/SlowMist_Team/status/1843310040259969222 @SlowMist_Team Twitter] (Accessed Nov 6, 2024)</ref></references>

Spot On Chain X Account Compromise Phishing - Revision history