Arbitrum regains compromised DAO X account after hackers stoke airdrop rumors

Arbitrum has regained control of its governance X account after losing it to hackers on Tuesday afternoon, and promised to review its security protocols to prevent more incidents.

In an X post published after access was restored late Tuesday evening, Arbitrum confirmed its governance handle was once again secure to interact with. The team also thanked those who flagged the unusual activity and spread word of suspicious posts made when the DAO account was hacked.

“We have regained control of the Arbitrum DAO account… Thank you to everyone who flagged suspicious activity and avoided engaging with the compromised posts. We’re reviewing our security protocols to prevent future incidents,” the team wrote.

Hackers used Arbitrum’s DAO account to push an airdrop phishing link

As reported by Cryptopolitan yesterday, the compromised account was used to spread messages about supposed usage-based rewards and token distributions. Several posts made by the hackers suggested that user actions such as bridging assets, swapping tokens, providing liquidity, and participating in governance could qualify for benefits.

The deleted messages sought to create exclusivity, claiming rewards were limited to “real users” and exempting so-called “opportunistic actors.” Other posts reassured Arbitrum holders who saw the first post late that “it isn’t the end of airdrop season.”

Such tactics are common in social engineering campaigns aimed at stealing from crypto communities. Attackers convince digital currency investors to hand over their assets by telling them to click on links that eventually drain their wallets. 

The governance account breach is the latest security-related episode involving Arbitrum projects in just two months. On January 5, two projects deployed by the same developer suffered unauthorized withdrawals totaling an estimated $1.5 million.

According to blockchain monitoring service Cyvers Alert, hackers executed several suspicious transactions on Arbitrum after gaining administrative access and replacing smart contracts with malicious versions.

Preliminary findings suggest the deployer behind the USDGambit and TLP projects may have lost control of their account, allowing the attacker to deploy a new contract with ProxyAdmin permissions. The stolen assets were later bridged back to the Ethereum main network and then passed through crypto-mixing services. 

Arbitrum price slides 20% weekly, bearish signals flashing

Amid the governance incident, Arbitrum has been moving within a defined intraday range, between a session low of $0.1286 and a high of $0.1384. Market watchers observed the price pivoting near $0.1356 at the time of this reporting, close to flipping its 24-hour losses. 

If the asset holds above that level for the rest of the week, the $0.1350 could be the platform bulls use to create a firmer charge towards a six-month local high of $0.2, while a drop below risks retesting session lows in the $0.1280 range. 

Within a one- to seven-day timeframe, buyers defended the $0.1286 support level as a bullish continuation level. However, a failure to break above the $0.1384 resistance on strong volume soon would favor a bearish scenario and a deeper correction towards a $0.1153 support region.

In other news, Arbitrum is scheduled to host a community Ask Me Anything session on X on Thursday. The network’s team has opened the floor for members of the community team to ask ecosystem representatives about recent developments and ongoing projects.

Want your project in front of crypto’s top minds? Feature it in our next industry report, where data meets impact.