Zulu Network Official X Airdrop Phishing
Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.
Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!
Zulu Network allows computing power to be monetized into bitcoin revenue. On October 12th, their Twitter/X account posted a new airdrop promotion, which multiple users engaged in and promoted in the hopes of receiving the airdrop. However, this airdrop was a scam and users who connected their wallets would find that they were drained. It is unclear the level of loss. The Zulu Network project does not appear to have acknowledged the incident or offered any assistance to affected users.[1][2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24][25][26][27][28]
About Zulu Network
"The Native Bitcoin DePIN Layer. Zulu Network is the first DePin-focused Bitcoin Layer 2 to achieve the tokenization of computing power, allowing anyone to power DePIN innovation and earn Bitcoin."
"Built on top of the Bitcoin blockchain, Zulu Network enhances transaction speeds, reduces costs, and maintains the security of the Bitcoin network while introducing EVM compatibility."
"Blockchain technology has transformed the way individuals and organizations approach decentralization, offering benefits such as enhanced security, transparency, and efficiency. Despite the advancements in blockchain, challenges such as scalability, high transaction fees, and limited access to decentralized resources remain critical hurdles. Zulu Network aims to address these challenges by providing a layer 2 solution that optimizes tokenized computing power within a decentralized framework, utilizing Bitcoin’s security."
"The Native Bitcoin DePIN Layer. Zulu Network is the first DePin-focused Bitcoin Layer 2 to achieve the tokenization of computing power, allowing anyone to power DePIN innovation and earn Bitcoin."
"Mainnet airdrop registration starting now! We are now in half of our roadmap, starting with Testnet v1 and final step Full Zulu Mainnet. Check More. Mainnet Register. Registration process will be closed on November 5, after..."
The Reality
This sections is included if a case involved deception or information that was unknown at the time. Examples include:
- When the service was actually started (if different than the "official story").
- Who actually ran a service and their own personal history.
- How the service was structured behind the scenes. (For example, there was no "trading bot".)
- Details of what audits reported and how vulnerabilities were missed during auditing.
What Happened
"The official X account of Bitcoin L2 Zulu Network appears to have been compromised. The hacker has posted a fake phishing link. Please avoid interacting with it."
| Date | Event | Description |
|---|---|---|
| October 10th, 2024 5:10:00 AM MDT | Adoption Tweet Discussion | A Post by Zulu Network discusses blockchain adoption by Steve Jobs. |
| October 12th, 2024 12:46:00 AM MDT | First Mention Of Scam | The first mention of the airdrop being a scam is posted on the Zulu Network twitter. |
| October 12th, 2024 1:09:00 AM MDT | Not Eligible Upset User | One user is upset that they are not eligible for the airdrop. They include a screenshot of the airdrop page. |
| October 12th, 2024 6:44:00 AM MDT | Warning With Screenshots | A warning is posted with screenshots by user Jayyj101. |
| October 13th, 2024 2:15:00 AM MDT | Comment Warning Posted | A Comment by user OTPYRCEVOLUTION on the last legitimate topic by Zulu Network. |
| October 13th, 2024 6:58:00 PM MDT | Scam Sniffer Tweet | Scam Sniffer posts a tweet which includes a screenshot of the phishing on the Zulu Network Twitter account. |
| October 15th, 2024 1:50:00 AM MDT | Zulu Network Account Restored | The Zulu Network X account starts posting legitmiate updates. There does not appear to be any mention of the fake airdrop incident or account breach. |
Technical Details
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?
Total Amount Lost
The total amount lost is unknown.
How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Immediate Reactions
"The @zulu_network account got compromised, please report them so Twitter freezes the account until the team can get access back."
"Until further notice, the Zulu Network Twitter account has been compromised. DO NOT CLICK ANY LINKS, DO NOT CONNECT YOUR WALLET. @zulu_network it will drain your WALLET Metamask is telling you it is a suspicious transaction."
Ultimate Outcome
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?
Total Amount Recovered
There do not appear to have been any funds recovered in this case.
What funds were recovered? What funds were reimbursed for those affected users?
Ongoing Developments
What parts of this case are still remaining to be concluded?
Individual Prevention Policies
No specific policies for individual prevention have yet been identified in this case.
For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.
Platform Prevention Policies
Policies for platforms to take to prevent this situation have not yet been selected in this case.
For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.
Regulatory Prevention Policies
No specific regulatory policies have yet been identified in this case.
For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.
References
- ↑ @OTPYRCEVOLUTION Twitter (Accessed Nov 8, 2024)
- ↑ @zulu_network Twitter (Accessed Nov 8, 2024)
- ↑ @rodeo_crypto Twitter (Accessed Nov 8, 2024)
- ↑ Zulu Network - The Native Bitcoin DePIN Layer (Accessed Nov 8, 2024)
- ↑ @web3_antivirus Twitter (Accessed Nov 8, 2024)
- ↑ @paid_network Twitter (Accessed Nov 8, 2024)
- ↑ @0xBigDre4ms Twitter (Accessed Nov 8, 2024)
- ↑ @krissh_naa Twitter (Accessed Nov 8, 2024)
- ↑ @ReaPromotes Twitter (Accessed Nov 8, 2024)
- ↑ @Lovato_Crypt Twitter (Accessed Nov 8, 2024)
- ↑ @Rakibcoorg Twitter (Accessed Nov 8, 2024)
- ↑ @DaenerysS89 Twitter (Accessed Nov 8, 2024)
- ↑ @oexcommunity Twitter (Accessed Nov 8, 2024)
- ↑ @Crypto_rigger Twitter (Accessed Nov 8, 2024)
- ↑ @OTPYRCEVOLUTION Twitter (Accessed Nov 8, 2024)
- ↑ @tzoum13 Twitter (Accessed Nov 8, 2024)
- ↑ @SanaNisti Twitter (Accessed Nov 8, 2024)
- ↑ @BillionzDeFi Twitter (Accessed Nov 8, 2024)
- ↑ @MdAltafxyz Twitter (Accessed Nov 8, 2024)
- ↑ @akhaura360 Twitter (Accessed Nov 8, 2024)
- ↑ @LouisVicto15206 Twitter (Accessed Nov 8, 2024)
- ↑ @ChristianJ97078 Twitter (Accessed Nov 8, 2024)
- ↑ @BPexc Twitter (Accessed Nov 8, 2024)
- ↑ @leooneer Twitter (Accessed Nov 8, 2024)
- ↑ @MaverickLeviX Twitter (Accessed Nov 8, 2024)
- ↑ @MikeEze18 Twitter (Accessed Nov 8, 2024)
- ↑ @krissh_naa Twitter (Accessed Nov 8, 2024)
- ↑ Zulu Network - The Native Bitcoin DePIN Layer (Accessed Nov 8, 2024)