Tor Project $TOR Token Rug Pull Twitter/X Compromise
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
The Tor Project is a nonprofit organization focused on promoting online privacy and human rights through the development of free, open-source software. Its main product, the Tor Browser, allows users to browse the internet anonymously, blocking trackers, ads, and preventing surveillance. Recently, the Tor Project's X (formerly Twitter) account was compromised, and the hacker used it to promote a fake cryptocurrency token. The Tor Project warned users not to trust any posts or links from the account and is working to regain access. This incident was reported on their BlueSky account, though there has been no mention of it on their blog or forum, and no mention of any assistance for affected users.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28][29][30][31][32][33][34][35][36][37][38][39][40][41][42][43][44][45][46][47][48][49][50][51][52][53][54][55][56][57][58][59][60][61][62][63][64][65][66][67][68][69][70][71][72][73][74][75][76][77][78][79][80][81][82][83][84][85][86][87][88][89][90][91][92][93][94][95][96][97][98][99][100][101][102][103][104][105][106][107][108][109][110][111][112][113][114][115][116][117][118][119][120][121][122][123][124][125][126][127][128][129]
About The Tor Project
The Tor Project is a nonprofit organization dedicated to promoting online privacy and defending human rights through the development of free and open-source software. Their mission is to provide tools that allow users to browse the internet securely and anonymously, free from tracking, surveillance, and censorship. Tor's flagship product is the Tor Browser, which ensures users' privacy by isolating websites they visit, blocking trackers and ads, and automatically clearing cookies and browsing history once the session ends.
Tor Browser also defends against surveillance by preventing third parties from monitoring users’ browsing habits, making it difficult for anyone to track the websites you visit. It offers resistance against fingerprinting by ensuring all users appear the same, thereby making it harder for individuals to be identified based on their device or browser information. Additionally, the browser uses multi-layered encryption, relaying traffic through the Tor network, which consists of thousands of volunteer-run servers to further protect users' anonymity.
The Tor Project advocates for unrestricted internet access, allowing users to bypass censorship and access blocked websites. The organization’s broader goal is to advance human rights and privacy through the development of anonymous browsing technologies.
About $TOR Token
"Introducing $TOR! The ultimate token powering your privacy & security with lightning-fast transactions and ultra-low fees! PLUS: All $TOR holders get exclusive access to upcoming betas & events. Be part of the revolution!"
The Reality
This sections is included if a case involved deception or information that was unknown at the time. Examples include:
- When the service was actually started (if different than the "official story").
- Who actually ran a service and their own personal history.
- How the service was structured behind the scenes. (For example, there was no "trading bot".)
- Details of what audits reported and how vulnerabilities were missed during auditing.
What Happened
After being posted on the Tor Project official Twitter/X account, the $TOR token rug pulled.
| Date | Event | Description |
|---|---|---|
| January 30th, 2025 11:01:53 AM MST | First Tor Token Mint Transaction | The first fake $TOR token is minted on Solana. |
| January 30th, 2025 11:03:00 AM MST | Tor Project BlueSky Announcement | Tor Project posts an announcement on BlueSky warning about the compromise of their Twitter/X account. |
| January 30th, 2025 11:16:00 AM MST | VXUnderground Tweet | Twitter user VXUnderground tweets to report that the Tor Project Twitter/X account is compromised. They include a screenshot of the compromise tweet and the account recovery tweet. |
| January 30th, 2025 12:19:00 PM MST | Rug Pull Reports | Users such as JonyMoon ask if the TorProject team has committed a rug pull. |
Technical Details
CA: Du24pykXZDNvpcJBRfDaXV8AtwoxN1UB6AGcjPvupump
Total Amount Lost
The total amount lost is unknown.
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Immediate Reactions
While the Tor Project was able to post on BlueSky quickly, multiple users reported being victims of the rug pull. It appears that many users did not see the BlueSky post.
The Tor Project eventually posted a notice on BlueSky:
"Our X (Twitter) account has been compromised. We are working to regain access. Please do not trust or interact with any posts, DMs, or links from our account until further notice. Stay updated here, Mastadon, or our blog"
Ultimate Outcome
It appears that there is no mention of the hacking incident on the Tor Project blog, forum, or Twitter/X, however the incident remains reported on the Tor Project BlueSky account.
"The Tor Project X account has been compromised. The hacker is using the account to promote a fake token. Users should stay vigilant."
Total Amount Recovered
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?
Ongoing Developments
What parts of this case are still remaining to be concluded?
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ VXUnderground - "The Tor Project X account has been compromised." - Twitter/X (Accessed Mar 17, 2025)
- ↑ Tor Project Homepage (Accessed Mar 17, 2025)
- ↑ $TOR Token Address - SolScan (Accessed Mar 17, 2025)
- ↑ Minting The First $TOR - SolScan (Accessed Mar 17, 2025)
- ↑ Tor Project BlueSky Profile (Accessed Mar 17, 2025)
- ↑ Tor Project - "Our X (Twitter) account has been compromised. We are working to regain access. Please do not trust or interact with any posts, DMs, or links from our account until further notice. Stay updated here, Mastodon, or our blog" - BlueSky (Accessed Mar 17, 2025)
- ↑ JonyMoon - "Did u guys just cash grabed some sol and deleted the CA adress of this token... Am I really seeing this rigth ? Pls tell me you didnt ruined your name with a quick rugk" - Twitter/X (Accessed Mar 17, 2025)
- ↑ @renergy100 Twitter (Accessed Mar 17, 2025)
- ↑ @frxsav Twitter (Accessed Mar 17, 2025)
- ↑ @SebastianCuevas Twitter (Accessed Mar 17, 2025)
- ↑ @JamoliddinNomo1 Twitter (Accessed Mar 17, 2025)
- ↑ @JMIV1 Twitter (Accessed Mar 17, 2025)
- ↑ @BullMktEuphoria Twitter (Accessed Mar 17, 2025)
- ↑ @Bull_Pump Twitter (Accessed Mar 17, 2025)
- ↑ @fumbleandfade Twitter (Accessed Mar 17, 2025)
- ↑ @DukeCallsx Twitter (Accessed Mar 17, 2025)
- ↑ @solhousesignal Twitter (Accessed Mar 17, 2025)
- ↑ @CoinStreak1 Twitter (Accessed Mar 17, 2025)
- ↑ @chaintrader10 Twitter (Accessed Mar 17, 2025)
- ↑ @mosta_yahy64753 Twitter (Accessed Mar 17, 2025)
- ↑ @renergy100 Twitter (Accessed Mar 17, 2025)
- ↑ @coinally1 Twitter (Accessed Mar 17, 2025)
- ↑ @cryptoskier_ Twitter (Accessed Mar 17, 2025)
- ↑ @QQ599720 Twitter (Accessed Mar 17, 2025)
- ↑ @LeeroyCryoto Twitter (Accessed Mar 17, 2025)
- ↑ @Kryptodave001 Twitter (Accessed Mar 17, 2025)
- ↑ @JMIV1 Twitter (Accessed Mar 17, 2025)
- ↑ @kriptoloji22 Twitter (Accessed Mar 17, 2025)
- ↑ @dexboosts Twitter (Accessed Mar 17, 2025)
- ↑ @Web3Suoluosi Twitter (Accessed Mar 17, 2025)
- ↑ @Dalecrypto_ Twitter (Accessed Mar 17, 2025)
- ↑ @LeekPony Twitter (Accessed Mar 17, 2025)
- ↑ @Reader_Ultra Twitter (Accessed Mar 17, 2025)
- ↑ @BurtonTian41094 Twitter (Accessed Mar 17, 2025)
- ↑ @paidaxing5 Twitter (Accessed Mar 17, 2025)
- ↑ @AlexisCoke61651 Twitter (Accessed Mar 17, 2025)
- ↑ @__Valul_ Twitter (Accessed Mar 17, 2025)
- ↑ @__LopezRancet_ Twitter (Accessed Mar 17, 2025)
- ↑ @sleeplesss79132 Twitter (Accessed Mar 17, 2025)
- ↑ @bifylf55727 Twitter (Accessed Mar 17, 2025)
- ↑ @AoJlt36712 Twitter (Accessed Mar 17, 2025)
- ↑ @___vecoulido_ Twitter (Accessed Mar 17, 2025)
- ↑ @cgcl0u45212 Twitter (Accessed Mar 17, 2025)
- ↑ @royal_yass_ Twitter (Accessed Mar 17, 2025)
- ↑ @5Zcxg79723 Twitter (Accessed Mar 17, 2025)
- ↑ @Web3Suoluosi Twitter (Accessed Mar 17, 2025)
- ↑ @SebAaltonen Twitter (Accessed Mar 17, 2025)
- ↑ @raiyan_27 Twitter (Accessed Mar 17, 2025)
- ↑ @peter00963 Twitter (Accessed Mar 17, 2025)
- ↑ @dwritez Twitter (Accessed Mar 17, 2025)
- ↑ @dwritez Twitter (Accessed Mar 17, 2025)
- ↑ @stygianbroker Twitter (Accessed Mar 17, 2025)
- ↑ @Next100xCalls Twitter (Accessed Mar 17, 2025)
- ↑ @HustleMillenial Twitter (Accessed Mar 17, 2025)
- ↑ @tor_browser_cto Twitter (Accessed Mar 17, 2025)
- ↑ @Nodeyzoff Twitter (Accessed Mar 17, 2025)
- ↑ @apollo_and_defi Twitter (Accessed Mar 17, 2025)
- ↑ @Dommgames98 Twitter (Accessed Mar 17, 2025)
- ↑ @0xtearss Twitter (Accessed Mar 17, 2025)
- ↑ @CryptonicsCoin Twitter (Accessed Mar 17, 2025)
- ↑ @DynastySol_ Twitter (Accessed Mar 17, 2025)
- ↑ @Hurric4n3Ike Twitter (Accessed Mar 17, 2025)
- ↑ @SebastianCuevas Twitter (Accessed Mar 17, 2025)
- ↑ @amy_luphyou Twitter (Accessed Mar 17, 2025)
- ↑ @Alfredntmarshal Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @Rojocalls Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @DeAlpha000 Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @SDehey Twitter (Accessed Mar 17, 2025)
- ↑ @MILLENNIALDEG3N Twitter (Accessed Mar 17, 2025)
- ↑ @harryhalpin Twitter (Accessed Mar 17, 2025)
- ↑ @rizzorbust Twitter (Accessed Mar 17, 2025)
- ↑ @0xtearss Twitter (Accessed Mar 17, 2025)
- ↑ @0xtearss Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @tor_browser_cto Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @migortw Twitter (Accessed Mar 17, 2025)
- ↑ @0xtearss Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @tor_browser_cto Twitter (Accessed Mar 17, 2025)
- ↑ @zawaFNBR Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @CoinStreak1 Twitter (Accessed Mar 17, 2025)
- ↑ @0xtearss Twitter (Accessed Mar 17, 2025)
- ↑ @peter00963 Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @chaintrader10 Twitter (Accessed Mar 17, 2025)
- ↑ @rizzorbust Twitter (Accessed Mar 17, 2025)
- ↑ @tor_browser_cto Twitter (Accessed Mar 17, 2025)
- ↑ @kriptoloji22 Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @Coach_Lope Twitter (Accessed Mar 17, 2025)
- ↑ @Coach_Lope Twitter (Accessed Mar 17, 2025)
- ↑ @kolspot Twitter (Accessed Mar 17, 2025)
- ↑ @Qusaismael Twitter (Accessed Mar 17, 2025)
- ↑ @xMAST3RxxxM7NDx Twitter (Accessed Mar 17, 2025)
- ↑ @xMAST3RxxxM7NDx Twitter (Accessed Mar 17, 2025)
- ↑ @AbuGod86 Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @Zayn_BNB Twitter (Accessed Mar 17, 2025)
- ↑ @GAARA_WEB3 Twitter (Accessed Mar 17, 2025)
- ↑ @CryptAbiodun_ Twitter (Accessed Mar 17, 2025)
- ↑ @Njoki002 Twitter (Accessed Mar 17, 2025)
- ↑ @tor_browser_cto Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @pleasewin19 Twitter (Accessed Mar 17, 2025)
- ↑ @Eserya77 Twitter (Accessed Mar 17, 2025)
- ↑ @kojoma55 Twitter (Accessed Mar 17, 2025)
- ↑ @PatrickAbenoja Twitter (Accessed Mar 17, 2025)
- ↑ @WilliamsDan11 Twitter (Accessed Mar 17, 2025)
- ↑ @Sheikhisol Twitter (Accessed Mar 17, 2025)
- ↑ @Souleiman_vii Twitter (Accessed Mar 17, 2025)
- ↑ @Cid_051 Twitter (Accessed Mar 17, 2025)
- ↑ @CryptoHead1045 Twitter (Accessed Mar 17, 2025)
- ↑ @jajangguludug Twitter (Accessed Mar 17, 2025)
- ↑ @agsniperbot Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)
- ↑ @coinally1 Twitter (Accessed Mar 17, 2025)
- ↑ @solhousesignal Twitter (Accessed Mar 17, 2025)
- ↑ @ariescopilot Twitter (Accessed Mar 17, 2025)
- ↑ @tpx_Security Twitter (Accessed Mar 17, 2025)
- ↑ @AUTculers Twitter (Accessed Mar 17, 2025)
- ↑ @_freethought_ Twitter (Accessed Mar 17, 2025)