TRON DAO faced a serious security incident on May 2, 2025, when its official X account was compromised. The breach started at exactly 9:25 AM PST, allowing an unknown individual to misuse the platform for deceptive activities.
The attacker publicly posted a contract address, sent suspicious DMs, and followed random accounts. This created immediate alarm and confusion among the TRON community.
The TRON team subsequently affirmed that the intrusion was due to a social engineering plan that was aimed against one of its own employees.
The attacker was able to deceive the employee and access the account and thereby create the window of opportunity to hijack TRON DAO’s primary X account. Once the breach was detected, the team reacted fast and was able to regain entry to the account in record time.
After regaining control, the team identified several accounts believed to be connected to the attacker. These included @flacadivinaroja and @behisollg on X, as well as @EmanAbioo on Telegram.
The attacker continued trying to exploit the breach even after being removed, contacting individuals to sell post-access to the firm account.
TRON warns users after security breach
However, TRON DAO reminded followers never to trust unsolicited contract addresses or direct messages from their accounts. They urged users to delete any messages received on May 2 and remain highly cautious.
TRON founder Justin Sun also reached out to OKX, requesting the freezing of any funds tied to the attacker. He assured that any recovered assets would be returned directly to affected users.
Despite TRON’s quick response, the breach caused a noticeable impact on user trust across Web3 channels. The community acknowledged TRON’s transparency but emphasized the growing need for improved social platform security.
TRON is still one of the most utilized blockchain networks with more than 275 million account holders and a market capitalization of $23.544 billion. It has a total value locked in of $7.286 billion and daily earnings of $2.003 million.
Nonetheless, TRON is one of the key drivers of decentralization. The latest hack highlights the dangers present in the Web3 environment. It also underscores the urgent need for stronger digital security.