Holoworld AI Distribution Phases Twitter/X Hack Phishing

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Holoworld AI

Holoworld is an AI-powered storytelling platform that provides creators and brands with immersive tools to produce videos, livestreams, memes, and more, offering continuous engagement. It helps creators build unique personalities, connect deeply with audiences, and develop the lore of their intellectual properties. A recent hack targeted the Holoworld official Twitter/X account, with significant financial losses, including over $1 million worth of ACT tokens from a single victim. While the platform's social media accounts have been restored, there has been no mention of assistance for the victims.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32][33][34][35][36][37][38][39][40][41][42][43][44][45][46][47][48][49][50][51][52][53][54][55][56]

About Holoworld AI

Holoworld is an AI-driven storytelling platform designed for a new generation of creators and brands. It offers immersive content creation tools, allowing users to generate videos, livestreams, memes, and more, with 24/7 engagement capabilities. The platform enables creators to craft unique personalities, build deep connections with their audience, and enhance the lore of their intellectual properties (IP). Holoworld fosters an open economy where developers, creators, and researchers collaborate, making storytelling accessible and innovative for all. The ecosystem includes millions of users, creators, and interactions, partnering with major brands and creators.

About AVA Distribution Phase

"Introducing Holoworld's $AVA Distribution Phase 1.

The Phase 1 Distribution is based on your current holdings and on-chain activity.

Users are invited to check their allocation and claim their $AVA tokens on our portal down below."

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

The Holoworld AI Twitter/X account was breached and multiple users were tricked into approving their wallet to be drained.

Key Event Timeline - Holoworld AI Distribution Phases Twitter/X Hack Phishing
Date Event Description
January 9th, 2025 1:47:00 PM MST Mention Of Hacked Account One of the first mentions of the hacked account by Slayed_eth.
January 9th, 2025 2:40:00 PM MST Nuke Gets Nuked A user named nuke609 reports that their wallet was drained of assets and asks for help from the team. It appears that only scammers reply to offer assistance.
January 9th, 2025 3:36:54 PM MST Cactus Jack Drain Transaction Cactus Jack's wallet drain transaction occurs on Solana.
January 9th, 2025 3:44:18 PM MST Large ACT Drain Transaction One unfortunate victim later referenced by ZachXBT has 3.39M ACT (worth $1m USD) in ACT drained from their wallet.
January 9th, 2025 6:50:00 PM MST Account Compromise Warning Twitter/X user DenjinK posts a warning about the Twitter/X account appearing to be hacked.
January 9th, 2025 7:36:00 PM MST CertiK Alert Posted Online CertiK posts an alert on Twitter/X .
January 10th, 2025 10:05:00 AM MST Holoworld AI Account Recovered Holoworld AI posts to announce that they have successfully recovered the account. Thanks to swift action by their team and support from @brainchainLLC, they identified and stopped sophisticated phishing attacks targeting their socials. Phishing links and tweets were flagged and removed multiple times, despite attackers using unusual methods to maintain control. After conducting a thorough security audit, Holoworld AI has implemented stronger security measures to secure their accounts across various platforms.
January 10th, 2025 10:49:00 AM MST Jack Got Jacked Twitter user _CactusJack_1 requests for the team to "restore some of the $AVA lost to holders" and provides the blockchain transaction showing his drained wallet.
January 10th, 2025 12:58:00 PM MST ZachXBT Weighing In Blockchain sleuth ZachXBT provides a screenshot of the original phishing tweet and reports that one victim lost 3.39M ACT (worth roughly $1m USD) from the incident. He reports that funds are presently remaining in a specific theft wallet at this time. However, it appears that ZachXBT misses that funds lost total 3.89M ACT, and were actually split between two different receiving wallet addresses.

Technical Details

There is some suggestion that the attack included tactics to bypass Solana transaction simulation algorithms.

It looks like funds are split between two different wallets, which suggests a partnership with profit splitting. This likely involves a software developer working with an individual able to get into the Twitter/X account.

Total Amount Lost

At least 3.89M ACT (worth over $1m USD).

The total amount lost is unknown.

Immediate Reactions

"I got drained by this hack and it’s inexcusable for a crypto project to get compromised this way in 2025. How many others were drained? What was the total amount of financial loss? Please do not sweep this under the rug. Many of us supporters affected"

Ultimate Outcome

"Our X account has been fully restored after yesterday's security incident.

Through rapid action by our team and invaluable support from @brainchainLLC, we successfully identified and halted the sophisticated phishing attacks targeting our socials.

The phishing links and tweets were flagged and taken down repeatedly while the attackers used a variety of uncommon methods to gain and retain control.

After a thorough security audit, we have implemented enhanced security measures and safeguards to lock down our accounts across multiple platforms."

Total Amount Recovered

It does not appear that HoloWorld has provided any information about potential assistance for victims.

There do not appear to have been any funds recovered in this case.

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. ↑ @HoloworldAI Twitter (Accessed Feb 14, 2025)
  2. ↑ @Slayed_eth Twitter (Accessed Feb 18, 2025)
  3. ↑ @nuke609 Twitter (Accessed Feb 18, 2025)
  4. ↑ @Digikelly Twitter (Accessed Feb 14, 2025)
  5. ↑ @zachxbt Twitter (Accessed Feb 14, 2025)
  6. ↑ @bearbits_nft Twitter (Accessed Feb 14, 2025)
  7. ↑ @_CactusJack_1 Twitter (Accessed Feb 14, 2025)
  8. ↑ @fourthesauri Twitter (Accessed Feb 14, 2025)
  9. ↑ @DenjinK Twitter (Accessed Feb 14, 2025)
  10. ↑ Holoworld - AI-Powered Character Creation and Storytelling Platform (Accessed Feb 14, 2025)
  11. ↑ https://solscan.io/tx/2oGfUYqu8CqAc9FwFwoH1m4YbdwmyQJpdSfe64n235xL43tvLang2TZiR315AN9HjdqpKQyDaFM7KhhgUMGtRJyW (Accessed Feb 14, 2025)
  12. ↑ @PlusLino Twitter (Accessed Feb 14, 2025)
  13. ↑ @jordihays Twitter (Accessed Feb 14, 2025)
  14. ↑ @sigridchester00 Twitter (Accessed Feb 14, 2025)
  15. ↑ @CertiKAlert Twitter (Accessed Feb 14, 2025)
  16. ↑ @0xJaime2024 Twitter (Accessed Feb 14, 2025)
  17. ↑ @alxvndr_ix Twitter (Accessed Feb 14, 2025)
  18. ↑ @roccoo0101 Twitter (Accessed Feb 14, 2025)
  19. ↑ @rie_tetsuya Twitter (Accessed Feb 14, 2025)
  20. ↑ @jkong910 Twitter (Accessed Feb 14, 2025)
  21. ↑ @nandosnukes Twitter (Accessed Feb 14, 2025)
  22. ↑ @PeppenTweeting Twitter (Accessed Feb 14, 2025)
  23. ↑ @AgentsDaily Twitter (Accessed Feb 14, 2025)
  24. ↑ @0x0Mega Twitter (Accessed Feb 14, 2025)
  25. ↑ @0xJaime2024 Twitter (Accessed Feb 14, 2025)
  26. ↑ @Wenbulla Twitter (Accessed Feb 14, 2025)
  27. ↑ @jackal_131 Twitter (Accessed Feb 14, 2025)
  28. ↑ @OuO_bed Twitter (Accessed Feb 14, 2025)
  29. ↑ @rajan5g Twitter (Accessed Feb 14, 2025)
  30. ↑ @EliteCityio Twitter (Accessed Feb 14, 2025)
  31. ↑ @kelimoicfc Twitter (Accessed Feb 14, 2025)
  32. ↑ @AVA_holo Twitter (Accessed Feb 14, 2025)
  33. ↑ @europower90 Twitter (Accessed Feb 14, 2025)
  34. ↑ @RajanMishra5775 Twitter (Accessed Feb 14, 2025)
  35. ↑ @EliteCityio Twitter (Accessed Feb 14, 2025)
  36. ↑ @SpottieWiFi Twitter (Accessed Feb 14, 2025)
  37. ↑ @pperuzzo_ Twitter (Accessed Feb 14, 2025)
  38. ↑ @SpottieWiFi Twitter (Accessed Feb 14, 2025)
  39. ↑ @PlusLino Twitter (Accessed Feb 14, 2025)
  40. ↑ @HologramLabs Twitter (Accessed Feb 14, 2025)
  41. ↑ @PlusLino Twitter (Accessed Feb 14, 2025)
  42. ↑ @BKL1023 Twitter (Accessed Feb 14, 2025)
  43. ↑ @Slayed_eth Twitter (Accessed Feb 14, 2025)
  44. ↑ @BlockTempo Twitter (Accessed Feb 14, 2025)
  45. ↑ @avemoongod Twitter (Accessed Feb 14, 2025)
  46. ↑ @ellegetsit Twitter (Accessed Feb 14, 2025)
  47. ↑ @Yu_Ayato Twitter (Accessed Feb 14, 2025)
  48. ↑ @BV_Bloom1 Twitter (Accessed Feb 14, 2025)
  49. ↑ @Beosin_com Twitter (Accessed Feb 14, 2025)
  50. ↑ @DannysWeb3 Twitter (Accessed Feb 14, 2025)
  51. ↑ @roccoo0101 Twitter (Accessed Feb 14, 2025)
  52. ↑ @ponzisaur Twitter (Accessed Feb 14, 2025)
  53. ↑ @rie_tetsuya Twitter (Accessed Feb 14, 2025)
  54. ↑ Theft Address on Solana (Accessed Feb 18, 2025)
  55. ↑ Large Theft Including 3.8M ACT (Accessed Feb 18, 2025)
  56. ↑ Victim Balance Changes Page 2 (Accessed Feb 18, 2025)
Retrieved from "https://quadrigainitiative.com/cryptocurrencyhackscamfraudwiki/index.php?title=Holoworld_AI_Distribution_Phases_Twitter/X_Hack_Phishing&oldid=6557"