Solana-Based DEX Aggregator Jupiter Suffers Social Media Hack

February 6, 2025 by Bena Ilyas

• Jupiter’s official X account was hacked. The account promoted scam tokens like $MEOW and $DCOIN, leading to millions in trader losses within minutes.
• Jupiter Mobile warned users to avoid clicking links and assured efforts to regain control, but frustration grew over the lack of security.
• The hack reignited concerns about Web3 security, exposing vulnerabilities in non-core systems like social media accounts.

In a surprising turn, Solana-based decentralized exchange (DEX) aggregator Jupiter’s X (formerly Twitter) account was hacked on Wednesday. The attack saw its account promote fake meme cryptocurrencies, with its investors at risk of incurring colossal financial losses.

The main Jupiter Exchange account is compromised,” Jupiter Mobile’s X handle notified its followers. Users have been instructed not to follow any links shared by the account and assured that an attempt to regain access is underway.

The compromised account uploaded several posts—after deletion—marketing a scam token with the ticker $MEOW. Screenshots of them circulated extensively, with Meow, Jupiter’s co-founder pseudonym, appearing to have been impersonated alarmingly. Millions of dollars in trading loss were incurred in a matter of minutes after the hack, according to GM Capital founder Beanie.

“It’s astonishing how protocols managing billions of dollars in liquidity fail to secure their social media accounts,” Beanie wrote, reflecting the frustration shared by many in the crypto community.

Some respondents who filled in Jupiter Mobile’s alert mentioned that they had lost Solana (SOL) coins as a direct result of the attack. Despite immediately deleting posts for scams, Jupiter’s X account remained in hacker’s hands at 9:15 p.m. ET. The account kept promoting a new scam token with the ticker $DCOIN, raising concerns even more.

Jupiter Hack Sparks Wake-Up Call for Web3 Security

This incident revives talks regarding security in Web3 platforms and how vulnerabilities in non-core infrastructure—like social profiles—can have catastrophic repercussions for users. DEX aggregators like Jupiter serve as a critical component in a decentralized finance (DeFi) ecosystem, providing the best terms for trading between platforms. Nevertheless, the attack confirms even secure entities can become a point of failure.

In recent years, a growing plethora of compromised social media accounts cases have been witnessed in the crypto community. Hacks exploit trust in confirmed accounts to sell phishing links, fake tokens, and scams. For investors, penalties for such hacks include financial loss, for instance, in the Jupiter hack.

This incident is a strong reminder for cryptocurrency companies to implement security protocols in addition to their basic protocols. Implementing sophisticated types of authentication, such as multi-factor authentication (MFA), for social media platforms and regular security audits must become necessary to avert such incidents.

For users, vigilance is key. Avoid interacting with suspicious links or tokens, even if shared by seemingly official accounts, and double-check warnings issued by trusted sources within the community.

As Jupiter’s team keeps working towards reviving its account and rebuilding trust with its users, such an episode brings out the ever-present challenge of security in a decentralized system. Trust, naturally, is a backbone of DeFi, and any incident puts such trust to a test.

Related | AAVE DESTROYS the “Utility Token” Myth, Here’s How