A bizarre cyberattack involving the hacked Instagram account of hip-hop group Migos has surfaced, allegedly as part of an attempted extortion scheme aimed at Solana co-founder Raj Gokal.
On May 27, the compromised account began publishing a series of now-deleted posts that appeared to show images of Gokal holding government-issued IDs, including a passport and driver’s license. Captions suggested a failed demand for “40 BTC,” hinting at a ransom Gokal allegedly refused to pay.
One post also purported to show Gokal’s wife holding identification, while others contained what seemed to be private contact details such as phone numbers and email addresses.
The photos resembled those commonly used in Know Your Customer (KYC) verifications, though it remains unclear how the images were obtained or whether they are authentic.
The posts were widely interpreted as an attempt to publicly pressure Gokal following unsuccessful efforts to access his digital accounts. Just a week earlier, Gokal warned via X (formerly Twitter) that attackers were targeting his email and social profiles, urging caution over suspicious activity.
Both Gokal and the Solana Foundation have yet to issue a public response regarding the incident. The situation mirrors other recent high-profile account hacks, including one involving McDonald’s Instagram, which was used to promote a memecoin scam.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.