← Radar

Incident case file

Sign in to watch

Robinhood CEO Vlad Tenev X account hijack — fake $VLAD memecoin

Incident date July 23, 2026

1 views

ContainedRobinhood Chain (Ethereum L2Arbitrum Orbit)Social Engineering / Account TakeoverCluster: ROBINHOOD-ATO-2026-07

Estimated loss

$1.2M

Victims identified

more than ten victims identified
Victim group joining is coming soon.

Investigation

75%

Facts and investigation

Attacker: Deployer EOA: 0xD70627FD9eE5b70906620a6f2001BA74457b438D (Robinhood Chain) — deployed VLAD token via PonsLaunchFactory ~46 min before the fraudulent post

Funds moved to: Attacker profit estimated ~$1.2–1.3M (~650 ETH per analyst estimates) — CAUTION: figure is analyst estimate only, not confirmed by authoritative firm. Mechanism: VLAD token generated >$22M Uniswap V3 volume and ~85,000 swaps. Attacker collected PonsLaunchFactory trading fees 6 times (~31.6 ETH direct fee extraction + ~72M VLAD tokens retained = ~7% of 1B supply). Cash-out path not fully traced.
VLAD token contract (Robinhood Chain): 0x92D176ccBeEffeCd8089e841D09ea17b6C22D969 — flagged #SCAM on Robinhood Chain Blockscout | Launchpad: PonsLaunchFactory (PonsLauncherToken, Solidity 0.8.30) | DEX Factory (Uniswap V3): 0x1f7d7550B1b028f7571E69A784071F0205FD2EfA | Position Manager: 0x73991a25C818Bf1f1128dEAaB1492D45638DE0D3 | Pair token (WETH): 0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73 | Token supply: 1,000,000,000 VLAD | Max wallet: 5% | Restriction blocks: 2 | Twitter field hardcoded in

Timeline: On July 23, 2026, approximately 46 minutes before a fraudulent post appeared on X, attacker EOA 0xD70627FD9eE5b70906620a6f2001BA74457b438D deployed the VLAD token (0x92D176ccBeEffeCd8089e841D09ea17b6C22D969) on Robinhood Chain via PonsLaunchFactory. The contract embedded Vlad Tenev's X handle (https://x.com/vladtenev) as the social link, evidencing premeditated impersonation. At approximately 17:24 UTC, the attacker posted from Vlad Tenev's compromised verified X account, announcing 'Vladhood ($VLAD)' as the 'official mascot of Robinhood Chain' and falsely claiming an upcoming in-app listing. The post drew approximately 175,000 views in 20 minutes. VLAD trading volume surged past $22M across ~85,000 swaps on Uniswap V3. The attacker collected PonsLaunchFactory trading fees 6 times, extracting ~31.6 ETH directly plus retaining ~72M VLAD (7% of supply). Analyst estimates place total attacker profit at ~$1.2–1.3M (~650 ETH), though figures vary across sources. Robinhood Communications confirmed the account compromise, coordinated with X to remove the post and restore access. Tenev regained control of his account on July 24 and posted a clarification. The incident echoed a July 12, 2026 X account hijack of SpaceX/Starlink accounts used in a similar memecoin scam (~$2M). No buyer recovery mechanism was announced.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)