Ai16z ElizaOS Founder Shaw Twitter/X Wallet Drain Phish
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32][33][34][35][36][37][38][39][40][41]
About ElizaOS
"Eliza is a powerful multi-agent simulation framework designed to create, deploy, and manage autonomous AI agents. Built with TypeScript, it provides a flexible and extensible platform for developing intelligent agents that can interact across multiple platforms while maintaining consistent personalities and knowledge."
The Reality
Unfortunately the ShawMakesMagic account was able to be hacked.
What Happened
ShawMakesMagic posted about the "Phase 1 Distribution" of the $ElizaOS token. Users who attempted to check their allocation would find their wallet drained.
| Date | Event | Description |
|---|---|---|
| February 16th, 2025 5:13:00 AM MST | Arasthorm/Dooly Warnings | Twitter users @Arasthorm and @doodlely213 warn about the shawmakesmagic account being hacked. Apparently there is already a warning on the official discord. |
| February 16th, 2025 5:14:00 AM MST | Jui-mu/Ren Warning Tweets | Twitter users @ren_Nevermind and @0xjiumu warn about the shawmakesmagic account being hacked. |
| February 16th, 2025 5:16:00 AM MST | SoysalTore Warning Hacked | Twitter users @SoysalTore and @0xjiumu warn that the shawmakesmagic account has been hacked. |
| February 16th, 2025 5:36:00 AM MST | OSINTDAO Screenshot Of Flow | OSINTDAO shares a screenshot video of the tweet and content of the resulting website. |
| February 16th, 2025 5:39:00 AM MST | S4mmyEth Issues Warning | S4mmyEth reports that Shaw's account has been hacked, and users are strongly advised not to interact with it. A fake Eliza scam link is circulating, so it's important to spread awareness and avoid clicking on any suspicious links. |
| February 16th, 2025 5:55:00 AM MST | PANews Report Published | PANews reports that, on February 16, community users disclosed that the X account of Shaw, the founder of ai16z, appeared to have been hacked. Users have been advised to exercise caution and avoid interacting with any suspicious links. |
| February 16th, 2025 1:29:00 PM MST | ShawMakesMagic Addresses Hack | ShawMakesMagic shares that they are unsure what happened with the hack, despite having two-factor authentication, a password manager, and a strong password. They believe the attack was well-designed and targeted. They apologize to anyone who lost funds and express frustration with the challenges in the space. |
Technical Details
It appears that the tweet led users to a wallet drainer which was pretending to be an official ElizaOS site.
The hacker disabled comments on the main post, which caused many users to become suspicious.
Total Amount Lost
The total amount lost is unknown.
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Immediate Reactions
The community has expressed concern and frustration over the hack, with many showing empathy for Shaw and others affected. Users have been sharing warnings about potential scams and phishing attempts related to the incident. There's also a general sense of disbelief, as many recognize the sophistication of the attack despite Shaw’s strong security measures. Some have accused Shaw of faking the hack.
Ultimate Outcome
Shaw issued a notice that he didn't know what happened and is sorry to anyone who lost funds. However, he has not offered any assistance for affected users.
Total Amount Recovered
It is believed that there was no recovery in this case.
There do not appear to have been any funds recovered in this case.
Ongoing Developments
There is limited information available, but it should be possible to determine who received the funds from draining the wallets and bring them to justice.
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ ai16z Founder’s X Account Suspected of Being Hacked, Users Should Exercise Caution - PaNews Lab (Accessed Mar 20, 2025)
- ↑ S4mmyEth - "Shaw is hacked. Do NOT interact. This is a fake Eliza scam link. Spread for awareness." - Twitter/X (Accessed Mar 21, 2025)
- ↑ ShawMakesMagic - "Introducing v2. The Phase 1 Distribution of $ElizaOS is open to $ai16z holders and members of the greater ai16z ecosystem. Very excitedf for v2. I'll be releasing the updated roadmap soon. Check your allocation below." - Twitter/... Post (Accessed Mar 21, 2025)
- ↑ SoysalTore - "HACKED CAREFULL" - Twitter/X (Accessed Mar 21, 2025)
- ↑ Jiu-mu - "SCAM , SHAW GOT HACKED" - Twitter/X (Accessed Mar 21, 2025)
- ↑ ren_Nevermind - "Shaw is hacked" - Twitter/X (Accessed Mar 21, 2025)
- ↑ Arasthorm - "Do not interact! Shaw has been hacked! Check official discord." - Twitter/X (Accessed Mar 21, 2025)
- ↑ Dooly - "shaw is hecked" - Twitter/X (Accessed Mar 21, 2025)
- ↑ ElizaOS - Homepage Archive (Accessed Mar 21, 2025)
- ↑ OSINTDAO - "thx @ddillann1 for clip.. @shawmakesmagic acct is hacked.. DO NOT OPEN THE LINK IN THIS TWEET" - Twitter/X (Accessed Mar 21, 2025)
- ↑ ElizaOS Framework (Accessed Mar 21, 2025)
- ↑ ShawMakesMagic - "I don't know wtf happened with the hack. I have 2FA, password manager, strong password, etc. It was obviously well designed and targeted. Sorry to anyone who lost funds. This space is so tiring tbh." - Twitter/X (Accessed Mar 21, 2025)
- ↑ @Kannumehta750 Twitter (Accessed Mar 21, 2025)
- ↑ @AIFlow_ML Twitter (Accessed Mar 21, 2025)
- ↑ @coleJJ3 Twitter (Accessed Mar 21, 2025)
- ↑ @blockbyblockby Twitter (Accessed Mar 21, 2025)
- ↑ @09pZKuQbSA91Kq3 Twitter (Accessed Mar 21, 2025)
- ↑ @alphastackk Twitter (Accessed Mar 21, 2025)
- ↑ @MSvdZx0 Twitter (Accessed Mar 21, 2025)
- ↑ @XiROSHiBA Twitter (Accessed Mar 21, 2025)
- ↑ @0xjiumu Twitter (Accessed Mar 21, 2025)
- ↑ @justforfunl_n Twitter (Accessed Mar 21, 2025)
- ↑ @0xtitipump Twitter (Accessed Mar 21, 2025)
- ↑ @emmm486 Twitter (Accessed Mar 21, 2025)
- ↑ @Fabi0xeth Twitter (Accessed Mar 21, 2025)
- ↑ @AtownBrown Twitter (Accessed Mar 21, 2025)
- ↑ @0xwitchy Twitter (Accessed Mar 21, 2025)
- ↑ @M4T_NFT Twitter (Accessed Mar 21, 2025)
- ↑ @0xjunkdogg Twitter (Accessed Mar 21, 2025)
- ↑ @chosenryot Twitter (Accessed Mar 21, 2025)
- ↑ @investmentHan Twitter (Accessed Mar 21, 2025)
- ↑ @Tungthuocno Twitter (Accessed Mar 21, 2025)
- ↑ @riotboy2024 Twitter (Accessed Mar 21, 2025)
- ↑ @RMRKableWavin Twitter (Accessed Mar 21, 2025)
- ↑ @Nan_molayo Twitter (Accessed Mar 21, 2025)
- ↑ @katexbt Twitter (Accessed Mar 21, 2025)
- ↑ @gmryot Twitter (Accessed Mar 21, 2025)
- ↑ @JoestarCrypto Twitter (Accessed Mar 21, 2025)
- ↑ @LLcryptoJ Twitter (Accessed Mar 21, 2025)
- ↑ @M4T_NFT Twitter (Accessed Mar 21, 2025)
- ↑ https://x.com/shawmakesmagic/status/1891701289165136083 (Accessed Mar 21, 2025)