Highlights:
- Hackers took over the X account of TRON DAO and used it to run a scam through fake posts.
- Justin Sun has asked OKX to freeze a wallet that received funds linked to the scam.
- TRON plans to return any recovered funds to the community and is working with law enforcement to track the scammers.
Justin Sun, the founder of TRON, has asked OKX, a crypto exchange based in San Jose, to freeze funds connected to a scam that followed the hack of the official TRON DAO X (formerly Twitter) account. Hackers hijacked the @trondao handle and used it to promote a scam that misled users and tried to steal their funds.
TRON DAO X account was compromised from 9:25 AM PST on May 2, 2025. An unauthorized party published a post containing a contract address, sent direct messages, and followed various accounts. A member of team was targeted in a malicious social engineering attack, which led to…
— Wu Blockchain (@WuBlockchain) May 3, 2025
Sun confirmed the hack through a post on X and indicated that the attackers moved the stolen funds to a wallet tied to OKX. He also urged the platform to stop the transfer of those assets and assist in the investigation. However, the founder has deleted the X post.
Justin said, “We urgently call on OKX to immediately freeze and investigate the fraudulent funds deposited following the illegal takeover of the @trondao Twitter account.” He added that he believed OKX would act fast to protect its platform from being used for scams.

The TRON founder sent a public message shortly after detecting the suspicious activity. The scammers used the compromised Twitter account to trick users by sharing links or content designed to steal funds. This method has been seen in previous attacks across the crypto space, where official social handles are hijacked to promote scams.
Sun’s team released key details to help track the stolen assets. They provided the wallet address suspected of receiving the funds and listed two transaction hashes linked to the scam.
Authorities Join Investigation as Sun Speaks to Attackers
As the situation unfolded, Sun confirmed that law enforcement is investigating the case. The TRON team is working with investigators to identify the scammers and to recover the funds. Sun claimed the hacker used techniques to induce users to invest in fraudulent businesses but did not disclose the exact technique.
Hackers often act fast once a breach occurs, using stolen accounts to spread fake offers or links. Given the reason that no one can reverse blockchain transactions, hackers may quickly move or hide the stolen funds using various wallets and tokens. In a separate message, Sun addressed the attackers directly. He called on them to return the funds and said that anything recovered would be given back to the community.
Exchange Oversight and Security Concerns
The hacked TRON X account has sparked new debate over whether exchanges should use their rules to filter scam-related fund flows. Fresh concerns now surround how platforms manage assets that could be linked to fraud. Meanwhile, the crypto community is awaiting to see the next step that the exchange will take.
The cryptocurrency exchange OKX had not issued an official statement regarding the matter at press time. The high-profile nature of the event and law enforcement’s involvement might prompt a response. The project has asked the community to remain alert as it continues to cooperate with authorities. Meanwhile, a recent report points out that hacks increased 124% last month compared to March. The total losses from the hacks amounted to $92 million.
Best Crypto Exchange
- Over 90 top cryptos to trade
- Regulated by top-tier entities
- User-friendly trading app
- 30+ million users
eToro is a multi-asset investment platform. The value of your investments may go up or down. Your capital is at risk. Don’t invest unless you’re prepared to lose all the money you invest. This is a high-risk investment, and you should not expect to be protected if something goes wrong.