SuperVerse Fraudulent Airdrop Twitter/X Compromise

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

SuperVerse Logo/Homepage

The SuperVerse is a web3 gaming network powered by the $SUPER token, designed to unify top gaming titles with fast, low-cost transactions on a custom blockchain. It allows crypto holders to access quality games and engage in governance through DAO staking, unlocking rewards and perks. However, the SuperVerse's Twitter/X account was recently compromised and used to post a fraudulent airdrop with a phishing link. The team acted quickly by deleting the malicious post, setting the account to private, and working with security specialists. Despite this, multiple users reported losses, and there has been no official discussion of compensation or support for affected users.

About The SuperVerse

The SuperVerse is a unified web3 gaming network powered by the $SUPER token, designed to bring together top gaming titles under one ecosystem. It offers fast, low-cost transactions through a custom blockchain tailored for gaming, enabling seamless integration with leading web3 games. The network allows crypto holders to easily access quality games and participate in governance through DAO staking, unlocking exclusive rewards and perks. SuperVerse aims to reduce fragmentation in the industry, increasing the chances of mainstream success for web3 gaming. Key partnerships with industry leaders and an evolving technology stack are set to shape the future of decentralized gaming.

About SUPER/CHAMP Airdrop

"We're kicking off the holidays with a gift from our side. Check your eligibility for [a] season 2 $SUPER & $CHAMP airdrop! Rewards are base on on-chain activit[i]es. Claim your $SUPER!"

The Reality

The Twitter/X Account was compromised and the airdrop was fake.

What Happened

Numerous users were tricked out of approving access to drain their wallet.

Key Event Timeline - SuperVerse Fraudulent Airdrop Twitter/X Compromise

Date	Event	Description
January 10th, 2025 9:25:00 AM MST	First Tweet Posted Mention	The first mention of the SuperVerse Twitter/X account having been hacked by Twitter/X user HULLisSUS.
January 10th, 2025 3:05:00 PM MST	SuperVerse Announcement Made	"The SuperVerse X account was compromised and used to post a fraudulent airdrop claim containing a phishing link."

Technical Details

"the SuperVerse account follows best practices with X security:

• No phone number tied to the account • Authenticator app for 2FA • Passkey"

Total Amount Lost

Multiple users have reported losses. Totals have not yet been tallied.

The total amount lost is unknown.

Immediate Reactions

"Earlier today, our X account was compromised and used to post a fraudulent airdrop claim containing a phishing link."

"Our team immediately noticed this unusual activity and quickly took action to mitigate the impact:

• We instantly deleted the malicious post and continuously deleted all posts by the exploiter. • Posted a warning in our Telegram channel and on our team members’ personal X accounts. • Set the SuperVerse account to private to limit further exposure. • Logged out of all active sessions. • Collaborated with a security specialist to blacklist the phishing link. • Submitted an appeal to X for further investigation."

Ultimate Outcome

It does not appear that any further mention of the compromised account was mode.

Total Amount Recovered

There don't appear to be any discussion of compensation for affected users. At least one user reported that they have not been able to get into the Telegram or get any assistance.

There do not appear to have been any funds recovered in this case.

Ongoing Developments

What parts of this case are still remaining to be concluded?

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.