Kaito AI and Yu Hu Twitter/X Compromised Short Selling

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Kaito AI Logo/Homepage

Kaito AI is a powerful Web3 intelligence platform that helps users make sense of vast, unstructured blockchain data by delivering actionable insights through AI-powered tools. Used by over 500 major teams including Solana, Polygon, and Pantera, it supports faster decision-making in investment and strategy. On March 15, 2025, Kaito and co-founder Yu Hu’s X accounts were briefly compromised, though no other systems were affected thanks to strong security practices. Yu Hu later identified a lead tying the attacker to a previous hack and nearly $1 million in trading profits gained by manipulating Kaito-related token prices. The accounts were recovered without lasting damage to token holders.[1][2][3][4][5][6][7][8][9][10]

About Kaito AI

Kaito AI is a comprehensive Web3 information platform designed to help users navigate the overwhelming amount of unstructured data in the blockchain space. Through advanced AI-driven tools, Kaito allows investors, analysts, and growth teams to easily search and track tickers, topics, and market narratives across thousands of premium sources. The platform transforms terabytes of information into actionable insights, streamlining research and supporting faster, more informed decision-making.

Trusted by over 500 leading teams in the crypto and Web3 industry—including major players like Solana, Polygon, Chainlink, and Pantera—Kaito powers decision-making in investment, marketing, and strategy. Its features include instant insights, reduced research time, and next-gen AI capabilities that help users build market conviction and avoid blind spots. With products like Kaito Pro, Kaito Yaps, and a robust API, Kaito positions itself as a must-have intelligence layer for navigating the future of decentralized finance and blockchain ecosystems.

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

Yu Hu and Kaito’s X accounts were compromised. Yu Hu revealed a lead linking the attacker to a previous hack and nearly $1 million in illicit trading profits.

Key Event Timeline - Kaito AI and Yu Hu Twitter/X Compromised Short Selling
Date Event Description
March 15th, 2025 1:56:00 PM MDT Sandra Says No Wallet Hack Sandra posts an important update stating that the X accounts of Yu Hu and Kaito have been compromised, though no KAITO wallets have been affected. The attackers targeted Yu Hu while he was likely asleep due to his timezone. She urges users to ignore any suspicious activity and notes that efforts are underway to recover the accounts, with further updates to follow.
March 15th, 2025 3:52:00 PM MDT Yu Hu Reveals Lead Yu Hu posts an update revealing that they have a lead from @DefiSquared linking the hacker responsible for their breach to the recent @tier10k account hack. The attacker has reportedly made nearly $1 million in profits from trades on Hyperliquid, including $300K today. Yu Hu shares wallet addresses tied to the exploits and asks anyone with relevant expertise to reach out.

Technical Details

"from our side currently - - no new X log-in history / devices shown on X - no new X log-in notification in emails - for the whole time I was never logged out of either my own or Kaito's account - isolated X hack so far (discord, emails, personal wallets etc all seem fine) - hardware 2fa enabled the whole time and we always keep top level opsec (didnt download anything or clicks any odd links)"

Total Amount Lost

Yu Hu revealed a lead linking the attacker to a previous hack and nearly $1 million in illicit trading profits.

The total amount lost is unknown.

Immediate Reactions

The attacker worked to create panic in the market, lowering the price of tokens related to Kaito. They were able to profit from a short position which they had set up.

Ultimate Outcome

The accounts were recovered and it appears that no permanent harm came to those who held the token.

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. Sandra - "Yu Hu & Kaito’s X accounts have been compromised. There has been no compromised KAITO wallets. They have waited for Yu Hu’s timezone (where he’s asleep) to do it - please ignore. We’re working to get them back." - Twitter/X (Accessed May 9, 2025)
  2. ReDKeV32 - "[O]of fell for it[. T]hanks for the update, after the second post the messaging did seem off" - Twitter/X (Accessed May 9, 2025)
  3. Giga Miland Sei - "It’s good to know that Kaito wallets are safe, but this kind of situation definitely highlights the importance of account security. Hopefully, the team gets things back on track soon. Always a good reminder to enable 2FA and stay vigilant!" - Twitter/X (Accessed May 9, 2025)
  4. Humzy Trades - "Which one should we believe lol. Are the Kaito wallets hacked or the accounts hacked? Or are you trying to reduce fud?!" - Twitter/X (Accessed May 9, 2025)
  5. Dudu BIP420 - "That makes so much more sense. Couldn’t believe that a team as goated as @KaitoAI when it comes to comms and community would just post “bad shit is happening” type stuff with 0 clarity. Back to yapping." - Twitter/X (Accessed May 9, 2025)
  6. Yu Hu - "we have a lead from @DefiSquared - looks like the same hacker associated with the recent hack on the @tier10k account is related to ours. overall profited close to $1mn from opening trades on hyperliquid ($300k today) - wallets below. would appreciate it if anyone who has experience on this matter could reach out to us" - Twitter/X (Accessed May 9, 2025)
  7. Wallet That Front-Ran DB Hack - DextraBot (Accessed May 9, 2025)
  8. Wallet That Frontran Kaito Hack - DextraBot (Accessed May 9, 2025)
  9. "from our side currently - no new X log-in history / devices shown on X - no new X log-in notification in emails - for the whole time I was never logged out of either my own or Kaito's account - isolated X hack so far (discord, emails, personal wallets etc all seem fine) - hardware 2fa enabled the whole time and we always keep top level opsec (didnt download anything or clicks any odd links)" - Twitter/X (Accessed May 9, 2025)
  10. Kaito AI Homepage (Accessed May 9, 2025)