SpaceXAI And Starlink X Accounts Hijacked For $125K SCATMAN Token Dump

The X accounts of Elon Musk’s SpaceXAI and Starlink were hijacked to promote a newly launched meme coin before wallets tied to the attacker sold about $125,000 worth of the token.

Two wallets minted 10 trillion SCATMAN and sold the full position for 59 ETH. A second wallet controlled by the same attacker sold another 59.28 million tokens for 14.7 ETH.

The transactions brought the combined proceeds to 73.7 ETH. The token sales began after promotional posts appeared on the two compromised corporate accounts, giving SCATMAN immediate exposure to their large audiences.

The token had no disclosed connection to SpaceXAI, Starlink or Elon Musk. No endorsement remained once the unauthorized posts were identified.

Compromised Accounts Fuel Token Liquidity

SCATMAN followed a familiar account-takeover structure: launch or accumulate a low-liquidity token, promote it through a trusted profile and sell into the demand generated by the posts.

The 10 trillion-token mint gave the attacker control over most of the supply used in the first sale. The separate 59.28 million-token position added another 14.7 ETH as buyers entered the market.

SpaceXAI is the new identity adopted by Musk’s artificial intelligence division after the X account previously used by xAI changed its name and handle in early July. Starlink operates SpaceX’s satellite internet business.

Neither account disclosed how access was obtained. The onchain trail identified the wallets used for the token mint and sales but did not establish the attacker’s identity.

Account Takeovers Drive Repeat Meme Coin Dumps

The SCATMAN launch extends a string of token promotions pushed through compromised social accounts.

A hacker used Binance co-CEO Yi He’s WeChat account to promote MUBARAK before executing a $55,000 meme coin pump. The attacker bought the token before the posts and sold into the resulting demand.

Crypto trader James Wynn later denied involvement in a $WORLD meme coin rug pull after promotional posts appeared on his compromised X account. The deployer removed about $70,000 in liquidity before the token collapsed.