Post
Parent event 01
Tweet promoting fake $ZANSEM airdrop
User @zandyor claims $ZANSEM launch in 2 hours and offers last airdrop to first 500 RT and drop SOL wallet.
Related posts
Back to narratives
SecurityActive
Conversation intelligence
$ansem Airdrop Scam and BullpenFi Hack
A series of tweets from multiple accounts are soliciting Solana addresses for $ansem airdrops, which has been linked to a phishing attack that compromised a user's MetaMask wallet. The scam appears to be connected to the @BullpenFi project hack.
Heat
90
Confidence
75%
Evidence
8
Updated
Why It Happened
Scammers are using fake airdrop promises to collect wallet addresses, then executing phishing attacks via Telegram and fake Coinbase emails to drain funds. The user's report indicates a direct link between the airdrop solicitation and the wallet compromise.
Outcome So Far
Users have reported loss of funds; the scam campaign is ongoing.
Actors
Timeline order
Post
Post
Parent event 02
Tweet promoting fake $ANSEM airdrop
User @HeyPinky_ claims airdrop incoming and asks users to drop $ANSEM address and check wallets.
Related posts@0xMrPinky@Cryptoze@0xMrPinky
Post
Parent event 03
Tweet promoting fake $ANSEM airdrop with follow request
User @HeyPinky_ asks users to comment $SOL address and follow @nexocooker for airdrop, linking to a potential phishing site.
Related posts@HeyPinky_
Post
Parent event 04
Multiple Accounts Soliciting $ansem Airdrop Addresses
Tweets from @mikadontlouz, @zandyor, and others asking users to drop Solana addresses for $ansem or rival token $ZANSEM airdrops.
Related posts
Post
Parent event 05
X conversation update
4 related posts from @BullpenFi, @ansem
Related posts@BullpenFi@ansem@ansem4 posts