Solv Protocol New Token Twitter/X Account Phishing
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
Solv Protocol is an on-chain Bitcoin Reserve that bridges traditional finance (TradFi), centralized finance (CeFi), and decentralized finance (DeFi), enabling investors to generate returns on Bitcoin through products like SolvBTC and SolvBTC.LSTs. The protocol is backed by prominent investors such as Binance Labs and OKX Ventures, and has undergone security audits by leading firms. On January 5, 2025, Solv's official Twitter account was compromised, leading to the posting of a fraudulent Ethereum address, causing losses for many users. The post was reportedly removed within 15 minutes, and alerts were issued. The protocol repeatedly reminds users to always verify token addresses through official channels and expressed regret for the incident. In response to user complaints, Solv Protocol stated that they are working with @SlowMist_Team to investigate and recover the stolen funds. If recovery is not possible, they promise to compensate verified users.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20]
About Solv Protocol
"Solv Protocol is the on-chain Bitcoin Reserve, bridging TradFi, CeFi, and DeFi to unlock the full potential of over $1 trillion in Bitcoin. Through SolvBTC and SolvBTC.LSTs (Liquid Staking Tokens), Solv enables both retail and institutional investors to generate returns on their Bitcoin—turning it from an idle asset into a yield-generating instrument that seamlessly integrates with the broader financial ecosystem, driving the next era of Bitcoin Finance.
Solv Protocol is backed by prominent investors such as Binance Labs, Blockchain Capital, Laser Digital, OKX Ventures, and others. Solv Protocol has undergone extensive security audits by leading firms, including Quantstamp, Certik, SlowMist, Salus, and Secbit."
The Reality
This sections is included if a case involved deception or information that was unknown at the time. Examples include:
- When the service was actually started (if different than the "official story").
- Who actually ran a service and their own personal history.
- How the service was structured behind the scenes. (For example, there was no "trading bot".)
- Details of what audits reported and how vulnerabilities were missed during auditing.
What Happened
The official X account of Solv Protocol was compromised. Multiple users lost funds due to phishing links which were posted.
| Date | Event | Description |
|---|---|---|
| January 4th, 2025 6:00:00 PM MST | Alleged Time Of Breach | The alleged time of the Twitter/X account breach happening, according to a later post on Twitter/X. |
| January 5th, 2025 6:00:00 AM MST | Update From Solv Protocol | Solv Protocol posts an update that their Twitter/X account was temporarily compromised today, but control has been fully restored. They are strengthening security to prevent future issues. Users are reminded to verify token addresses and links from official sources for safety. The team apologizes for any inconvenience and appreciates the continued trust. |
| January 7th, 2025 1:21:00 AM MST | Solve Protocol Reimbursement Post | Solv Protocol issued a security update. The claim the post was removed within 15 minutes, and alerts were sent out, but some users still experienced losses. Solv is working with @SlowMist_Team to investigate the breach, improve security, and recover the stolen funds. If recovery is not possible, Solv promises to compensate affected users for their losses. |
Technical Details
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?
Total Amount Lost
Limited details have been located on the actual amounts lost.
The total amount lost is unknown.
Immediate Reactions
"On January 5, 2025, at 1:00 AM (UTC+0), Solv's official Twitter account was compromised, resulting in a fraudulent Ethereum address being posted. Within 15 minutes, we removed the post and issued immediate alerts across all channels. Unfortunately, some users incurred losses."
"Our Twitter account was briefly compromised earlier today. We’ve regained full control and are implementing enhanced security measures to safeguard against future incidents.
Reminder: Always double-check token addresses and links from official sources. Stay safe!
We deeply regret any inconvenience caused. Thank you for your understanding and continued trust."
"i lost money - and u write an excuse of check the ca?
we checked the twitter!
this is not suffice" "Scammer protocol. You should airdrop the tokens and compensate for ppl losses. Otherwise no one will use your products. I know I wont"
"As a protocol operating at your level, how would anyone trust operating through you anymore! A mere X account was compromised probably causing many individuals to lose their funds via immediately investing with such an awaited TGE! You should compensate for lost funds with proof!"
"Hey, you didnt have responsibility to keep your official channel safe?? Put all the responsibility to user"
"Link from "official source"? Isn't it wrong to say that? This is the official Solv Protocol account, so which official account should we trust?"
Ultimate Outcome
"We are actively collaborating with @SlowMist_Team to investigate the breach, enhance security measures, and recover the stolen funds. In the event recovery proves impossible, Solv will fully compensate verified affected users for their losses.
We deeply regret this incident and remain committed to transparency, security, and your trust.
Reminder: Always verify token addresses through official and trusted channels.
Thank you for your understanding and ongoing support."
Total Amount Recovered
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?
Ongoing Developments
What parts of this case are still remaining to be concluded?
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ @SolvProtocol Twitter (Accessed Feb 10, 2025)
- ↑ https://solv.finance/ (Accessed Feb 10, 2025)
- ↑ https://docs.solv.finance/ (Accessed Feb 10, 2025)
- ↑ Solv Protocol | Link3 (Accessed Feb 10, 2025)
- ↑ @SolvProtocol Twitter (Accessed Feb 10, 2025)
- ↑ @SolvProtocol Twitter (Accessed Feb 10, 2025)
- ↑ @TH3LFI5TMFI7V Twitter (Accessed Feb 10, 2025)
- ↑ @MIG3218 Twitter (Accessed Feb 10, 2025)
- ↑ @KelvinWan8 Twitter (Accessed Feb 10, 2025)
- ↑ @hkbtc888 Twitter (Accessed Feb 10, 2025)
- ↑ Ifeanyi_gmi - "How did your twitter and discord get hacked at same time" - Twitter/X (Accessed Feb 10, 2025)
- ↑ Anayat Hussain Laskar - "I have lost almost 300$ at bybit web3 wallet bcoz of ur X text, Now I am unable to swap or sale Solv protocol." - Twitter/X (Accessed Feb 10, 2025)
- ↑ evm0010 - "Link from "official source"? Isn't it wrong to say that? This is the official Solv Protocol account, so which official account should we trust?" - Twitter/X (Accessed Feb 10, 2025)
- ↑ @kusbhulaskar9 Twitter (Accessed Feb 10, 2025)
- ↑ Potential Theft Of 166.66 BSC-USD (Accessed Feb 10, 2025)
- ↑ @bixbt_agent Twitter (Accessed Feb 10, 2025)
- ↑ Address 0xa6c9fab2c3f551ca2b3622ce025c64f47f660fb6 | BscScan (Accessed Feb 10, 2025)
- ↑ Solv Token Launch A Step Towards The Future of Bitcoin Finance (Accessed Feb 10, 2025)
- ↑ Solv Foundation (Accessed Feb 10, 2025)
- ↑ Solv Protocol Team – Medium (Accessed Feb 10, 2025)