PANews Airdrop Twitter/X Account Hacked
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
PANews is a Hong Kong-based Web3 media platform and think tank founded in 2018, with tens of thousands of published articles, known for its in-depth reporting, data insights, and community engagement in the blockchain space. In June 2025, its official X (Twitter) account, @PANewsCN, was hacked and used to promote a phishing scam via a fake domain offering a fraudulent MetaMask wallet "upgrade." Victims were tricked into revealing their seed phrases, likely resulting in stolen assets. The extent of the damage remains unknown, and while the scam posts have been removed, the account has yet to resume normal activity, with no confirmed recovery plan or restitution for affected users.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19]
About PANews
PANews is a Web3-focused media platform and think tank, founded in March 2018. Based in Hong Kong, it was co-founded by Forbes 30 Under 30 Asia honorees and is spearheaded by former China News Service journalist Alyssa Tsai. The outlet compiles a diverse array of content—ranging from science explainers and deep-dive analyses to data insights and interviews—to support entrepreneurs and innovators in the blockchain and digital asset sectors. As of early 2023, PANews had published over 41,000 full articles and 115,000 “Flash News” updates from more than 500 contributors, and offers categories such as PAData, PA Reports, and PA Weekly, building an extensive, searchable Web3 knowledge base.
Operating like a modern think-tank, PANews not only publishes content but also builds tools for the Web3 ecosystem. It offers an event calendar, a curated tool directory, and a "Hot Event Plaza," alongside implementing wallet-based one-click Web3 sign‑ins—making it the first Chinese industry media to embrace native blockchain authentication technology. PANews also extends its reach through partnerships and distribution: its content is featured on platforms like Tencent News, and is cited in mainstream outlets (Forbes, Caixin). It has earned recognition from Tencent News, Toutiao, and The Paper, and maintains a cross‑platform presence on Twitter, Weibo, TikTok, Bilibili, WeChat Video Account, Xiaoyuzhou, and JiKe—with over 120,000 subscribers across social channels.
Beyond publishing, PANews serves as an active convenor in the Web3 community. It hosts the annual “PARTY AWARD” (PANews’ Retrospect of The Year), spotlighting top performers in the Web3 space via a selection process combining data evaluation, public voting, and expert panels. Its Twitter Spaces conversations are among the most influential hosted by Chinese Web3 media, offering a live forum for discourse among industry stakeholders. All told, PANews bridges journalism, research, and community-building—positioning itself as a trusted “Web3 Information Officer” for both creators and operators in the blockchain realm.
The Reality
The PANews Twitter/X account was not properly secured.
What Happened
PANews, a leading Web3 media platform, had its official X account hacked in June 2025 and used in a phishing scam targeting users' crypto wallets.
| Date | Event | Description |
|---|---|---|
| June 26th, 2025 8:08:00 PM MDT | Tongtong Bee Tweet | Tongtong Bee, cofounder and editor in chief Tongtong Bee reports that their Twitter/X account has been hacked, and requests users not to click on any links. Users are requested to spread the word. They appear to be the first person to report the compromised account. |
| June 26th, 2025 9:42:00 PM MDT | SlowMist Posts Alert | SlowMist posts an alert on Twitter/X which reports that the PANews account has been compromised, and not to click on an suspicious or phishing links. |
Technical Details
The PANewsNow domain was registered, which has a similar name to PANews. Visitors were offered a free airdrop, with the hookup of their wallet. However, hooking up the wallet was not really possible. The user would be convinced that their MetaMask wallet was upgrading through a custom screen. Once this was complete, the connection of the wallet would fail. While multiple possible recovery methods were provided, none would work, leaving the user with the alternative of restoring their wallet via the seed phrase. This, of course, would send the seed phrase to the scammers to drain their funds.
Total Amount Lost
Losses are unknown. It is unclear how many users were affected.
The total amount lost is unknown.
Immediate Reactions
Tongtong Bee, the cofounder and editor in chief of PANews, reported that the PANews Twitter/X account was hacked. Various other accounts helped to spread the message.
Ultimate Outcome
The problematic posts have been removed, however the PANewsCN account does not appear to be posting any further information.
Total Amount Recovered
There does not appear to be any recovery in progress.
The total amount recovered is unknown.
Ongoing Developments
The PaNewsCN Twitter/X account may not be fully recovered and resume posting yet.
It remains to be seen whether or not affected users will be made whole.
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ SlowMist - "SlowMist TI Alert. (Accessed Jun 30, 2025)
- ↑ [The @PANewsCN X account has been compromised. Do NOT click on any suspicious or phishing links." - Twitter/X The @PANewsCN X account has been compromised. Do NOT click on any suspicious or phishing links." - Twitter/X] (Accessed Jun 30, 2025)
- ↑ Tongtong Bee - "Our Twitter @PANewsCN account has been hacked, please do not click on any links! Please help spread the word, thank you!" - Twitter/X (Accessed Jun 30, 2025)
- ↑ Bannan - "This thief @PANewsCN Chinese version, is it specifically targeting the Chinese community to scam?" - Twitter/X (Accessed Jun 30, 2025)
- ↑ HashDit - "We have noticed that the @PANewsCN X account has been compromised! Please do NOT interact/trust any of the links from the tweets right now, until it has been resolved." - Twitter/X (Accessed Jun 30, 2025)
- ↑ mz - "According to official news, the PANews official X account @PANewsCN has been hacked. Do not click on suspicious links or interact with false information related to "airdrops."" - Twitter/X (Accessed Jun 30, 2025)
- ↑ Zero 2 Hero Community - "[Crypto Media PANews Official X Account Hacked, Do Not Click Suspicious Links] According to official news, the PANews official X account @PANewsCN has been hacked. Do not click on suspicious links or interact with false information related to “airdrops.”" - Twitter/X (Accessed Jun 30, 2025)
- ↑ Stella Kung - "Hi guys, PANews account @PANewsCN has been hacked, don’t click any airdrop links or any links that request for your any info authorities. We are working on getting it back. But if you do have any legit contact that you could share to help us faster the process, that will be great! Thanks." - Twitter/X (Accessed Jun 30, 2025)
- ↑ AegisWeb3 - "@PANewsCN Account Likely Compromised! Do not interact with the account or approve any transactions. Stay vigilant and steer clear of #SCAM attempts!" - Twitter/X (Accessed Jun 30, 2025)
- ↑ GoPlusZH - "GoPlus Security Alert: Beware of phishing tweets and private messages posted after PANews' Twitter account was hacked" - Twitter/X (Accessed Jun 30, 2025)
- ↑ 0xBBQ - "The official PANews X account @PANewsCN has been hacked. Do not click on suspicious links or interact with fake “airdrop” information. SCAM! Fraud alert! Do not interact! Intern, please handle this quickly @PANewsLab" - Twitter/X (Accessed Jun 30, 2025)
- ↑ Youping - "Spread the word, @PANewsCN's official account has been hacked, everyone please do not click on the phishing links currently being posted." - Twitter/X (Accessed Jun 30, 2025)
- ↑ @Eououo Twitter (Accessed Jun 30, 2025)
- ↑ @XvuX8P1Z6VfWxqd Twitter (Accessed Jun 30, 2025)
- ↑ PANews - LinkTree (Accessed Jun 30, 2025)
- ↑ PANews Homepage (Accessed Jun 30, 2025)
- ↑ PANews Your Web3 Information Officer (Accessed Jun 30, 2025)
- ↑ PANews - LinkedIn (Accessed Jun 30, 2025)
- ↑ Panony - Hong Kong Startup Directory (Accessed Jun 30, 2025)