Share this article

Animoca Brands Founder Yat Siu's X Account Exploited to Promote Fake Token

The fake MOCA token on Solana exploited Animoca's links to Mocaverse and the Moca Network.

Updated Dec 26, 2024, 2:52 p.m. Published Dec 26, 2024, 1:59 p.m.
poly network attacker exploit hacker
(Pixabay, modified by CoinDesk)

What to know:

  • The X account of Animoca Brands co-founder Yat Siu was compromised and used to promote a fictitious token.
  • The fake MOCA token on Solana plays off the Moca Coin (MOCA) related to Animoca-linked Mocaverse.
  • The scam may be related a more than a dozen similar exploits that have occurred over the past month, according to ZachXBT.

The X account of Animoca Brands co-founder Yat Siu, one of CoinDesk's Most Influential 2024, was compromised and used to promote a fictitious token, the company said in a post on the social media platform.

Animoca, a metaverse and gaming venture capital firm, posted a warning on its own account at 01:36 UTC on Thursday saying Siu's account had been compromised and the company was not introducing an official token or non-fungible token (NFT).

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
Loading...

The exploit was probably perpetrated through a phishing email that purported to come from X and be related to copyright infringement, according to ZachXBT. The crypto exploit investigator posted on Tuesday about several similar attacks that took place over the past month, allowing the perpetrators to get away with about $500,000 at the time.

The false post from Siu's account promoted a token named MOCA on the Solana blockchain, according to a screenshot posted by ZachXBT.

Moca Foundation, a "community-owned foundation that aims to supercharge Mocaverse’s network effects," has its own Moca Coin (MOCA), which it describes as an "omni-chain network token." Mocaverse is an account and ID management system in which both Animoca and Siu personally have a stake,

According to a post from Mocaverse, control of Siu's account has been secured by X, which is in the process of verifying ownership. Related accounts remain untouched.

"There is no compromise on Animoca Brands, Moca Network or MOCA Foundation official handles, and there are strict security measures in place," it said.

Whoever is behind the fake MOCA token is active on memecoin-creation platform Pump.fun and has also created a number of NFT collections over the past two weeks, on-chain data show. The wallet holds about $67,000 worth of the USDC stablecoin, although it is unclear whether this is the direct proceeds of any phishing scams.

Oliver Knight contributed reporting to this story.

UPDATE (Dec. 26, 14:52 UTC): Adds wallet data from Solscan in last paragraph.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

From Wall Street to the World Cup: How Football Became Crypto’s Biggest Gateway Drug

Soccer ball (Unsplash/Peter Glaser/Modified by CoinDesk)

As institutions are laying the groundwork for wider crypto adoption from the top down, it’s being met by rising interest from football fans from the ground up.