Arbitrum, the leading Ethereum Layer-2 scaling network, issued an urgent security alert on February 3, 2026, after hackers took over its official Arbitrum DAO governance X account (@arbitrumdao_gov). The breach allowed attackers to post unauthorized content, including promotions for a fraudulent “snapshot confirmed” airdrop that directed users to a phishing site (gov-arbitrum.com) designed to steal credentials and wallet information.
The Arbitrum team, via its primary verified account (@arbitrum), immediately warned the community: “The @arbitrumdao_gov account has been compromised. Do not click any links or interact with posts from that account until further notice.” They emphasized that the incident was confined to the social media channel, with no compromise to the core Arbitrum protocol, smart contracts, or user funds.
Recovery efforts succeeded quickly, and by later that day, Arbitrum announced it had regained full control of the account, declaring it safe for interaction again. The team thanked users who flagged suspicious activity and pledged to strengthen security measures, including protocol reviews to prevent recurrences. They are also collaborating with X to investigate the access method, suspected to involve targeted phishing or credential theft.
Crypto experts note that social media compromises remain a persistent threat in the industry, often exploiting trust in official channels to push scams. This event echoes recent similar incidents across projects, reinforcing the need for robust two-factor authentication, limited access, and community vigilance.
Arbitrum reiterated that information should only be trusted from verified official sources and urged users never to connect wallets or share keys based on social media posts. The protocol continues operating securely, with no evidence of broader vulnerabilities. Updates will follow as the investigation progresses.
Business Sandesh Indian Newspaper | Articles | Opinion Pieces | Research Studies | Findings & News | Sandesh News