The X account of Robinhood CEO Vlad Tenev was compromised on Thursday and briefly used to promote a fraudulent memecoin called Vladhood (VLAD). Hackers reportedly profited approximately $1.3 million from the scheme before the token's value collapsed.

The fraudulent post described VLAD as the "official Robinhood Chain mascot," claimed it would be listed on the Robinhood app, and included a token contract address for traders. It garnered more than 175,000 views in under 20 minutes before users flagged it as a scam.

Robinhood swiftly removed the post and confirmed the breach. "Our CEO Vlad Tenev's X account was compromised and posted a fake promotion for a meme coin," Robinhood's communications account stated on X. The company said it was coordinating with X to restore access, and the account was subsequently secured.

Traders Rushed In Before the Token Collapsed

The hack occurred amid heavy memecoin speculation on Robinhood Chain. On-chain activity indicates that traders purchased VLAD within minutes, believing the token had official endorsement from Tenev.

Blockchain data revealed that approximately 70% of the token supply was concentrated in the earliest wallets. The token's market capitalization rapidly climbed to between $4 million and $10 million before crashing.

On-chain monitors reported that wallets linked to the operation cashed out roughly 650 ETH, valued at approximately $1.2 million to $1.3 million. The token's liquidity was never locked or burned, enabling fees to continue flowing to wallets that controlled the liquidity pool.

Thousands of retail investors were left holding the token after the sell-off. Robinhood Chain's blockchain explorer later flagged the contract address as a scam, and other blockchain explorers marked the token as high risk within the hour.

One blockchain researcher reported that a suspected attacker spent just $126.81 to acquire 47.2 million VLAD tokens, with the position later showing an estimated unrealized profit of around $159,000.

Robinhood Chain's Rapid Growth Attracts Speculators

The incident follows Robinhood's launch of its Ethereum Layer-2 network on July 1, built on the Arbitrum Orbit stack. The network was designed to support tokenized stocks and other real-world assets, though memecoins have dominated early activity. Robinhood has been steadily expanding its cryptocurrency business, having added crypto trading for users in the European Union and rolled out a standalone crypto wallet app, making the launch of its own blockchain infrastructure a notable extension of those efforts.

According to Arbitrum, Robinhood Chain has already attracted more than $750 million in assets across stablecoins, tokenized stocks, and memecoins. The network has surpassed 300,000 daily active addresses and processed approximately 10 million transactions in a single day.

This rapid expansion has triggered a surge of new token launches, with many seeking to capitalize on the chain's growing popularity. Earlier in July, Tenev himself acknowledged the trend, stating that while Robinhood Chain was built for real-world assets, it "works great for memes too."

Attack Follows a Familiar Crypto Scam Playbook

The hack mirrors a well-documented pattern from previous crypto market cycles: attackers compromise verified social media accounts, leverage the account's credibility to promote a token, attract buyers through fear of missing out, and liquidate their holdings before the price collapses.

During the 2024 memecoin boom, high-profile X accounts belonging to celebrities including Sydney Sweeney, Doja Cat, and 50 Cent were similarly compromised to promote fraudulent tokens. The tactic echoes the July 2020 Twitter breach, in which attackers seized control of accounts belonging to executives and public figures including Elon Musk, Joe Biden, and Barack Obama to promote a Bitcoin giveaway scam, underscoring that even the highest-profile accounts on social platforms have proven vulnerable to takeover-based fraud schemes.