← Input Output Group (IOG) YouTube Channel Hijack – Deepfake Hoskinson Giveaway Scamreviewed 2026-11-01 · 10 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Input Output Group (IOG) YouTube Channel Hijack – Deepfake Hoskinson Giveaway Scam against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
2 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #7[unverifiable][awaiting moderator]in section: Deepfake Technology and Broader Threat Landscape
“TRM Labs' 2026 AI-in-Crime Adoption Index assigned a score indicating widespread AI adoption across crypto crime.”
reviewerTRM Labs' 2026 AI-in-Crime Adoption Index assigned a scoreNo source is cited and I did not locate the index. The sentence is vague, with no score stated. - #10[unverifiable][awaiting moderator]in section: Scope of Compromise
“IOG's website, GitHub repositories, and other social accounts showed no signs of concurrent compromise at the time of reporting.”
reviewerIOG's website, GitHub repositories and other social accounts showed no signs of concurrent compromiseThe cited reporting that I read does not address the state of the website, GitHub or other accounts. The blockchain-unaffected claim is supported, but this specific assertion was not found.
link rot
1 claimA cited source no longer resolves or no longer says what the page attributes to it.
- #5[link rot][awaiting moderator]in section: Deepfake Technology and Broader Threat Landscape
“https://www.techopedia.com/youtube-deepfake-crypto-scams-take-600k”
reviewerA deepfake Musk operation reportedly netted approximately $600,000 (Techopedia source)The cited Techopedia URL is gone and has no archive copy, so the $600,000 figure cannot be checked at the cited source. The Cybernews source may still support it, which I did not check.
partially supported
3 claimsThe cited evidence supports part of the claim but not all of it.
- #3[partially supported][awaiting moderator]in section: Incident Overview
“Charles Hoskinson posted a warning on X confirming the breach and stating IOG was cooperating with YouTube to remove the unauthorized videos and restore the channel's credentials.”
reviewerHoskinson posted on X confirming the breach and that IOG was working with YouTubeTwo of the cited sources do not report a Hoskinson statement. Search results indicate other outlets, such as CryptoPotato and 36Crypto, do report it. The page says he 'confirmed' the breach, but he reportedly said the channel 'appeared' compromised. - #4[partially supported][awaiting moderator]in section: Financial Impact and Known Losses
“IOG confirmed it was unaware of confirmed victim transactions and had not released any on-chain analysis linking specific wallet transfers to the September 18 broadcast.”
reviewerIOG confirmed it was unaware of confirmed victim transactionsThe source says IOG did not disclose whether anyone sent funds. The page turns that silence into an affirmative IOG statement of being unaware. - #6[partially supported][awaiting moderator]in section: Deepfake Technology and Broader Threat Landscape
“During the 2026 Super Bowl a deepfake video of Donald Trump was used in a parallel 'double your crypto' scheme attracting an estimated 200,000 viewers.”
reviewerDeepfake Trump video in a Super Bowl 'double your crypto' scheme attracting about 200,000 viewersOnly one secondary outlet was found for the figure. The paragraph cites no source for it.
confirmed
4 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in the summary
“On September 18, 2026, unknown attackers hijacked the official YouTube channel of Input Output Group (IOG), the core development company behind the Cardano blockchain, and broadcast an approximately two-hour fraudulent livestream.”
reviewerThe IOG YouTube channel was hijacked on September 18, 2026 and used for an approximately two-hour fraudulent livestreamDate, duration, fake Project Catalyst town hall and QR code are all supported. - #2[confirmed][no action needed]in section: Incident Overview
“IOG issued an immediate public advisory: 'Please avoid interacting with the IO Group YouTube channel until further notice,'”
reviewerIOG's advisory quote and warning against links, funds and personal informationQuote verified. - #8[confirmed][no action needed]in section: Pattern of Targeting: Prior Cardano / IOG Ecosystem Compromises
“The false SEC lawsuit post accumulated over 256,000 views before the account was recovered.”
reviewerCardano Foundation X account compromised in December 2024; $ADASOL over $500,000 volume; false SEC post over 256,000 views; LinkedIn restoration noticeFigures and timeline date match. This is a Cardano Foundation incident, not IOG, so 'IOG and affiliated Cardano entities' is a loose characterization. - #9[confirmed][no action needed]in section: IOG and Hoskinson Response
“Neither IOG nor Hoskinson had publicly confirmed full channel recovery as of the time of initial reporting.”
reviewerNeither IOG nor Hoskinson had confirmed full channel recovery; no attribution or access method disclosedAccurate as of initial reporting. My searches found no later recovery confirmation either.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.