A hacker hijacked the X accounts of SpaceX and Starlink to promote a Sam Altman (SCATMAN) meme coin, profiting over $135,000. The token briefly hit a $2 million market cap before crashing to near zero. The hacker created 10 trillion tokens and sold the entire stash, converting into 59 Ether (ETH) worth approximately $108,000, plus another sale of 59.28 million SCATMAN for 14.7 ETH ($27,000). Both companies have since deleted the fake posts and regained control of their accounts. The incident follows a pattern of prominent social media account takeovers used for crypto pump-and-dump schemes.
A hacker hijacked the X accounts of SpaceX and Starlink to promote a Sam Altman (SCATMAN) meme coin, netting over $135,000. The profiles were used to shill a Robinhood-based token that briefly hit a $2 million market cap before being rug-pulled to almost zero.
Screenshots showed both accounts reposting content from the token’s profile, with posts featuring the SCATMAN meme coin and tags claiming association with SpaceX. On-chain data shows the hacker created 10 trillion tokens and sold the entire stash, converting it into 59 Ether (ETH) worth around $108,000 shortly after the posts went live.
According to Lookonchain, a separate wallet linked to the attacker made another sale of 59.28 million SCATMAN tokens for 14.7 ETH, valued at approximately $27,000, bringing the total profit to roughly $135,000. The on-chain analytics platform also identified the two addresses used by the hacker. Per GeckoTerminal data, SCATMAN’s market cap surged to over $2 million before being immediately rug-pulled, and both companies have since deleted the fake posts and regained control of their accounts.
Prominent social media account takeovers have become common in the crypto space, many used to pump and dump low-cap cryptocurrencies. For instance, Scroll co-founder Ye Chen’s X account was hijacked in January 2026, with attackers impersonating platform staff and sending phishing messages about copyright violations that tricked crypto leaders into clicking malicious links.
A couple of months later, Pepe creator Matt Furie’s account was used to promote a scam token. Around the same time, WinRAR’s official account was also compromised to push a fake Solana meme coin.
The most notable breach came in May when Keith Gill, popularly known as Roaring Kitty, had his dormant account breached. Hackers launched Red Kitten Crew (RKC) on Solana and walked away with more than $600,000 in half an hour.
Each case followed a pattern where influencers create hype, developers cash out, and retail traders are left with losses.
