Key Takeaways:
- The Bankr X account was spoofed to promote fraudulent airdrop links to users.
- Security fears are emerging due to the fact that an on-device passkey was supposed to protect this account but failed to do so.
- After the incident, the $BNKR token experienced selling pressure as the team addressed the malicious messages from X and conducted an investigation.
Theoretically, Bankr’s official X was breached and malicious links to fake airdrops were sent. The attack gained widespread attention in the crypto community, particularly given the account’s likely securing with a passkey, not a conventional password.
The incident also had $BNKR token owners alarmed, who saw a significant drop in the token after their attention was drawn to people posting content without his permission.
Bankr Confirms X Account Compromise
According to statements shared by Bankr developer deployer, the team lost control of the @bankrbot X account after attackers gained access and began publishing fraudulent airdrop promotions.
🚨 the @bankrbot X account has been compromised and is publishing fake airdrop links despite being secured with an on-device passkey.@X @nikitabier please remove the the fake airdrop posts and help us determine how this account was compromised even with a passkey. https://t.co/s0G3LqP3DY
— deployer (@0xDeployer) July 25, 2026
The developer publicly appealed to X and X executives Nikita Bier, asking them to remove the malicious content and help in figuring out how the breach took place.
Before confirming the compromise, the team had already reported being locked out of the account and unable to regain access through standard recovery methods. A few days later, fake airdrop messages started appearing on the profile once again, leading to confusion on users who thought it was legitimate.
Read More: FBI Warns of Fake “FBI Token” on TRON Targeting Users in New Crypto Scam Wave
Fake Airdrops Trigger Security Fears
With the majority of airdrop-related attacks, one of the most prevalent is the fraudulent airdrop scheme. Often scammers will take control of legitimate social media accounts to send links – it is here that hackers can extract wallet credentials, purloin funds or lead to the signing of malicious transactions.
Users Advised to Strengthen Account Protection
After the breach, Bankr developers encouraged consumers to turn on multi-factor authentication (MFA) in their Bankr accounts. Based on this, the team said that depending only on security options from the social media platforms may not be enough to secure crypto-related assets.
The alert is part of a rising trend in the industry. Session hijacking, insider compromises, phishing attacks, third-party integration or platform weaknesses can all allow an even legitimate account with stringent authentication elements to be targeted.
Read More: Supra Labs CEO’s X Account Hacked for Fake Token Scam
$BNKR Faces Market Pressure
The security incident rapidly flowed into the market. The uncertainty around the hacked account caused an increased volatility with the $BNKR token.
Although the compromise only seems to be with Bankr’s X account and not the system it is using, crypto markets react intently to any headline pertaining to security. Investors are often displayed first and wait for more information later, specifically when the fake token giveaways or phishing campaigns are concerned.
So far, the team has not disclosed any incident of user fund, wallet, protocol infrastructure compromise, thus far upon filing this announcement. But users are being advised to stay away from any airdrop links that were previously shared by the hacked channel and to check information from authentic communication banks.
