Attackers hacked the official account of hardware wallet manufacturer Trezor on social network X, publishing tweets about the pre-sale of fraudulent TRZR tokens.

Independent “blockchain detective” ZachXBT warned about this. A series of tweets posted on the official Trezor account promoted a fake TRZR token based on the Solana network. Users were required to send SOL coins to a specified Solana address to be eligible to participate in the free token airdrop.

The hacker's messages also mentioned a new memecoin, Slerf, also running on Solana. Given the popularity of this memecoin, it was most likely used to increase user involvement in the scheme. ZachXBT also noted that the attacker managed to steal about $8,100 from the Trezor account on Zapper.

“Imagine if a hacker hacked into a Trezor account only to steal $8,100, including a 25% drain fee,” wrote ZachXBT.

The Trezor incident caused a wave of outrage in the crypto community. One X user criticized a hardware wallet manufacturer for likely not using two-factor authentication (2FA) to protect their X account. The user called on the company to take security issues more seriously.

In January, Trezor warned users of a possible phishing threat following a breach of a third-party partner's security systems that may have exposed the contact details of around 66,000 users. In May 2023, Unciphered was able to discover a vulnerability in the Trezor Model T hardware wallet and obtain the private key.