Hackers Seize Robinhood CEO Vlad Tenev's X Account to Push Fraudulent VLAD Token
Key Takeaways
- •Attackers compromised Vlad Tenev's verified X account to promote a fraudulent meme coin called VLAD, which temporarily reached a market capitalization of approximately $10 million.
- •The VLAD smart contract was deployed 46 minutes before the hacked post went live, demonstrating that the attackers prepared the token infrastructure in advance of the account takeover.
- •Robinhood confirmed the breach roughly 40 minutes after the fake post appeared and clarified that VLAD had no affiliation with the company or Tenev.
- •On-chain analysis traced about 70% of the VLAD token supply to early wallets, with addresses tied to the launch withdrawing approximately 690 ETH valued at around $1.3 million.
- •Since Robinhood Chain launched on July 1, meme coins have dominated trading activity, with 63% of wallets trading the network's 50 largest meme coins incurring losses.

The X account of Robinhood CEO Vlad Tenev was compromised on Thursday and used to promote a fraudulent meme coin that briefly attained a market capitalization of nearly $10 million. The incident is the latest in a wave of high-profile social media takeovers in which attackers exploit verified accounts of public figures to lend credibility to pump-and-dump token schemes within a short window before the fraud is detected.
The since-deleted post introduced a token called Vladhood, trading under the ticker VLAD, described as the "official Robinhood Chain mascot." It further claimed the token would be listed within the Robinhood app and included the contract address 0x92D176ccBeEffeCd8089e841D09ea17b6C22D969, directing Tenev's followers to purchase it on Robinhood Chain.
Robinhood acknowledged the account breach approximately 40 minutes after the promotional message appeared. The company removed the post and coordinated with X to regain access, confirming that VLAD had no affiliation whatsoever with Robinhood or Tenev personally.
The fake announcement accumulated more than 175,000 views within just 20 minutes. Tenev's profile picture had also been swapped for a doctored image depicting him wearing a Robin Hood-style hat.
Token Deployed Before Account Takeover
The VLAD smart contract was created via the Pons launchpad 46 minutes before the compromised post went live, according to on-chain records. Its launch metadata listed Tenev's X profile as the project's official website, directly tying the token deployment to the planned social media scheme. The pre-deployment timing illustrates a common tactic in account-takeover scams: attackers prepare the token infrastructure in advance so that the compromised post can immediately drive buyers into an already-live contract.
VLAD surged toward a $10 million valuation before pulling back as Robinhood's disavowal spread. Trading activity persisted even after the fraudulent post was removed, with the primary Uniswap pool handling over $24 million in volume across more than 90,000 transactions. Because decentralized exchange pools operate without a central listing authority, tokens cannot be delisted in the conventional sense, allowing trading to continue even after fraud warnings are issued. The contract drew upward of 5,000 holders before Robinhood Chain's Blockscout explorer flagged it as a potential scam.
Bubblemaps traced approximately 70% of the token supply to early wallets and estimated that addresses tied to the launch withdrew roughly 690 ETH, valued at approximately $1.3 million. Additional transaction analysis revealed that the creator simultaneously collected trading fees while the token's liquidity remained active.
Meme Coin Activity Leads on Robinhood Chain
Robinhood debuted its Ethereum Layer 2 network on July 1, centering its strategy on tokenized stocks, real-world assets, and onchain financial products. Meme coins rapidly emerged as the platform's dominant driver of speculative trading, echoing a pattern observed on other newly launched Layer 2 networks where early-stage speculative frenzy often precedes broader adoption of utility-focused applications.
During its initial trading surge, Robinhood Chain recorded approximately $825 million in daily decentralized exchange volume, spearheaded by tokens such as CASHCAT, HOODIE, and thousands of smaller projects.
The skewed distribution of profits was apparent well before the VLAD incident. Bubblemaps reported that 63% of wallets trading the network's 50 largest meme coins incurred losses, while a concentrated group of early buyers secured the majority of gains. CASHCAT alone generated several seven-figure exits, including one wallet that transformed a $3,000 position into $2.85 million.
Following Robinhood's removal of the fraudulent promotion, VLAD continued trading, with its main liquidity pool holding approximately $247,000 at the time of the latest market check. The episode underscores the reputational challenges facing Robinhood as it builds out its own blockchain infrastructure: while the company positions Robinhood Chain around regulated financial products, the network's early traffic has been dominated by the kind of speculative meme coin activity that has drawn regulatory scrutiny on other chains.