← Radar

Incident case file

Sign in to watch

SCATMAN Memecoin — SpaceX & Starlink X Account Hijack + Uniswap V2 Dump

Incident date July 12, 2026

0 views

RuggedEthereumSocial engineering / brand account hijackCluster: SCT-SOC-2026-07

Estimated loss

$135K

Victims identified

more than ten victims identified
Victim group joining is coming soon.

Investigation

100%

Facts and investigation

Attacker: Wallet 1: 0xfee50d4ce48f2d05f520ce04c875647e4870a8ba (dumped 10 trillion SCATMAN for 59.0856 ETH ~ $108K). Wallet 2: 0xdd9f6d3e16ebda7f35cb694ceadb50af3eebba89 (dumped 59.28M SCATMAN for 14.7296 ETH ~ $27K). Total attacker gain: ~73.8 ETH ~ $135K per Lookonchain.

Funds moved to: Wallet 1 dump tx 0xfa78...1822: 10T SCATMAN → 59.0856 ETH (~$108,366) via Uniswap V2 swapExactTokensForETHSupportingFeeOnTransferTokens. Wallet 2 dump tx 0xdfb7...3157: 59.28M SCATMAN → 14.7296 ETH (~$26,996) via same method. Wallet 2 then split 14.74 ETH via 2 Send txs: 7.7022 ETH to 0xf252...e5b8 and 7.0384 ETH to 0x87d1...213a for offloading to fresh wallets. Total ~73.8 ETH extracted.
Two attacker EOAs: 0xfee50d4ce48f2d05f520ce04c875647e4870a8ba (received 10T SCATMAN mint via rebalance from 0x9bef...6604), 0xdd9f6d3e16ebda7f35cb694ceadb50af3eebba89 (accumulated 21.88M + 38.35M SCATMAN via Uniswap V2 buys ~7h47 before the dump using 0.1215 + 0.2000 ETH). SCATMAN token contract 0x9bef...6604 features a rebalance() function allowing arbitrary mint (10T tokens minted directly to Wallet 1). Compromised X accounts: @SpaceXAI (~2M followers) and @Starlink (~1.6M followers). Relay/pr

Timeline: July 12, 2026 (all times UTC approximate): ~08:00 UTC compromise of @SpaceXAI and @Starlink X accounts. ~08:00-09:00 UTC accumulation phase — attacker Wallet 2 buys SCATMAN via Uniswap V2 (0.1215 ETH → 21.88M SCATMAN, then 0.2000 ETH → 38.35M SCATMAN). ~08:30 UTC promotion phase — @SamCatmanRH posts $SCATMAN cashtag, the hijacked @SpaceXAI and @Starlink accounts repost it (visible in screenshots: 'Starlink reposted', 'SpaceXAI reposted') — a pattern that leverages the X algorithm and delays takedown vs. posting directly from compromised accounts. Token pumps rapidly on retail FOMO — SCATMAN briefly reaches a market cap reported between ~$800K-$2M (SolanaFloor/DEX Screener) and up to ~$32M (Bitcoin.com), figures vary. ~09:00 UTC: Wallet 1 dump — 10 trillion SCATMAN swapped to 59.0856 ETH via Uniswap V2. ~09:15 UTC: Wallet 2 dump — 59.28M SCATMAN swapped to 14.7296 ETH. ~10:00-11:00 UTC: Wallet 2 offloads 14.74 ETH via 2 splits (7.70 ETH + 7.04 ETH) to fresh wallets. Token crashes ~98%. Compromised X accounts eventually recovered. Total attacker profit ~$135K per Lookonchain analysis. No recovery mechanism — retail buyers took losses. No official post-mortem published by SpaceX or Starlink on the account compromise mechanism.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)