← Radar

Incident case file

Sign in to watch

Roaring Kitty X Account Hijack — RKC Memecoin Pump & Dump

Incident date May 11, 2026

0 views

ActiveSolanaAccount hijack / Memecoin scamCluster: RKC-SOL-2026-05

Estimated loss

$2.9M

Victims identified

80
Victim group joining is coming soon.

Investigation

60%

Facts and investigation

Attacker: 10 developer wallets (Lookonchain-traced cluster); no single EOA identified

Funds moved to: 5,071 SOL sold by developer (~$495K) + 1,209 SOL in Pump.fun creator fees (~$118K). Victim funds (~$2.86M) extracted from 80+ wallets during the pump.
Developer used 10 Solana wallets to acquire 395.18M RKC tokens (39.52% of supply) for approximately 20 SOL (~$1,950) ahead of the hijacked promotion. After the X account was used to publish the contract address, the developer dumped via Pump.fun for ~$611K in total profit (token sale + creator fees). Lookonchain confirmed the full clustering on-chain. 80+ retail buyer wallets were drained as the price collapsed.

Timeline: On May 11, 2026 around 21:13 UTC, Keith Gill's verified X account (Roaring Kitty), dormant for 16 months, suddenly published the contract address of a new Solana memecoin RKC deployed on Pump.fun. Within 30 minutes, market cap pumped to between $5.97M and $12M (consensus sources cite $11-12M, while BeInCrypto and Yahoo reported a $5.97M peak). The posts were then deleted, and RKC crashed over 90% within two hours. Lookonchain traced the developer's 10-wallet cluster: 39.52% of total supply acquired for ~$1,950 in 20 SOL pre-promotion, then dumped during the pump for 5,071 SOL plus 1,209 SOL in Pump.fun creator fees (~$611K total profit). Over 80 retail wallets lost a combined ~$2.86M. GameStop stock briefly spiked 12-13% intraday on the social signal before erasing gains. As of May 16, Keith Gill has neither confirmed nor denied the account hijack publicly. Speculation about Kevin Gill (brother) is unverified.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)