Audit log

Every state-changing event for Kylie Jenner X account hack / $KYLIE Solana memecoin scam: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-09-09 01:50:37Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 445,490,055

   sig

   2TFVjfsm9KZW…M3ufTpEJcopyexplorer ↗

   hash

   5SV3mkcVFFLF…JsiVjiafcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (20462 B) ▸

   {"actor":"system:backfill","investigation_id":"b173f563-e427-4e38-b875-99c5c5f106ae","kind":"publish","page_slug":"kylie-jenner-x-account-hack-kylie-solana-memecoin-scam","published_at":"2026-09-09T01:50:37.255Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Kylie Jenner X account hack / $KYLIE Solana memecoin scam","sections":[{"content":"According to multiple news outlets, Kylie Jenner's verified X account was reportedly hacked on August 24, 2026, and used to post promotional content for a Solana-based token under the ticker $KYLIE. One post linked to a Pump.fun profile under the handle 'cutekjenner'; a second post carried a Solana contract address reported as 6b7KQsXqb6JR5Nmeer5zGRmo51dwDfttM5b5Nu2rpump. The two posts drew approximately 50,000 and 33,000 views (roughly 83,000 combined) before being deleted. Neither Kylie Jenner nor her representatives had issued any official public statement about the incident as of the reporting reviewed. On-chain observers and community accounts, including SolanaFloor, described the account as 'likely compromised' based on the mismatch between the posts' tone and Jenner's typical content and the abruptness of the posting. Reporting consistently uses 'reportedly' or 'allegedly' framing and does not establish the precise technical mechanism of compromise (e.g., phishing, SIM swap, session-token theft, or a compromised third-party tool); this dossier preserves that uncertainty rather than asserting a specific attack vector. It remains unclear whether the post was removed by Jenner's team or by X's own systems.","heading":"The August 2026 Kylie Jenner account compromise","severity":"high","sources":[{"credibility":2,"name":"Yahoo Finance / Kylie Jenner's X Account Reportedly Hacked to Push Meme Coin That Crashed 68%","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/kylie-jenners-x-account-reportedly-041314498.html"},{"credibility":2,"name":"CryptoBriefing / Kylie Jenner's X account posts and deletes compromised Solana token address","type":"news_article","url":"https://cryptobriefing.com/kylie-jenner-compromised-solana-token/"},{"credibility":2,"name":"CryptoNews.net / Kylie Jenner's X Account Hacked to Promote Solana Memecoin, Token Crashes 90%","type":"news_article","url":"https://cryptonews.net/news/security/33344037/"},{"credibility":2,"name":"TechTimes / Kylie Jenner's X Account Was Hacked for Crypto: X Never Confirmed Its Anti-Scam Lock Deployed","type":"news_article","url":"https://www.techtimes.com/articles/325433/20260825/kylie-jenners-x-account-was-hacked-crypto-x-never-confirmed-its-anti-scam-lock-deployed.htm"}]},{"content":"$KYLIE was launched on Pump.fun, a Solana-based token launchpad frequently used for rapid, low-friction memecoin creation. Reported figures on the token's peak market capitalization vary slightly by source and by the moment of measurement, ranging from approximately $1.19 million to $1.21 million, before the token's value fell sharply once the promotional posts were removed from Jenner's account. Some outlets reported a decline of roughly 68% (to about $378,500), while others reported a steeper decline of roughly 90% (to under $120,000, with one report citing a low of approximately $2,800); the discrepancy likely reflects different measurement windows as the token continued to bleed value after the initial crash. Reporting also noted that several copycat 'kylie'-branded tokens appeared on Solana within hours of the incident, a pattern consistent with opportunistic actors piggybacking on a viral hijack rather than the original scheme's operators. No source reviewed identified the wallet(s) that profited from the token's launch or quantified total extracted funds, in contrast to the SpaceX/Starlink and Vlad Tenev incidents described below, where extraction amounts were reported.","heading":"The $KYLIE token: mechanics and financial impact","severity":"high","sources":[{"credibility":2,"name":"CryptoNews.net / Kylie Jenner's X Account Hacked to Promote Solana Memecoin, Token Crashes 90%","type":"news_article","url":"https://cryptonews.net/news/security/33344037/"},{"credibility":2,"name":"Yahoo Finance / Kylie Jenner's X Account Reportedly Hacked to Push Meme Coin That Crashed 68%","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/kylie-jenners-x-account-reportedly-041314498.html"},{"credibility":2,"name":"Startup Fortune / Kylie Jenner's X Account Was Hacked to Pump a Solana Memecoin That Crashed 90%","type":"news_article","url":"https://startupfortune.com/kylie-jenners-x-account-was-hacked-to-pump-a-solana-memecoin-that-crashed-90/"}]},{"content":"Multiple news outlets frame the Kylie Jenner incident as part of a broader, repeatable pattern of attackers compromising high-follower, verified X accounts to briefly promote newly created Solana or other-chain memecoins before dumping holdings and disappearing. Reported prior instances in 2026 include: the official SpaceXAI and Starlink X accounts, compromised to promote a token called SCATMAN, whose market capitalization briefly approached roughly $2 million before crashing about 98% as attacker wallets reportedly extracted approximately $125,000-$135,000 in ETH; Robinhood CEO Vlad Tenev's X account, compromised to promote a token called 'Vladhood' (ticker VLAD) framed as tied to Robinhood's blockchain network, with wallets behind the scheme reported to have extracted roughly $1.2-1.3 million before the token collapsed (this incident is separately tracked on AVOID.NET); and the X account of Keith Gill ('Roaring Kitty'), compromised to promote a Solana token called Red Kitten Crew (RKC), which briefly reached an $11-12 million market capitalization before crashing, with over 80 wallets reported to have extracted roughly $2.86 million during the rally. Each incident follows a similar sequence: a dormant or highly-trusted verified account posts a Pump.fun-style contract address, the token's market cap spikes within minutes on the strength of the account's follower base, the promotional post is deleted (by the account holder or by platform intervention), and the token's value then collapses sharply, leaving buyers who purchased near the peak with substantial losses. The consistency of this pattern across unrelated public figures and organizations supports characterizing it as an organized, repeatable scheme rather than a series of isolated incidents, though no single actor or group has been publicly identified as responsible for all of the incidents in the sources reviewed.","heading":"A recurring campaign: verified-account hijacks used to launch short-lived memecoins","severity":"critical","sources":[{"credibility":2,"name":"AMBCrypto / Hackers use SpaceXAI, Starlink X accounts to pump SCATMAN: Token crashes 98%","type":"news_article","url":"https://ambcrypto.com/hackers-use-spacexai-starlink-x-accounts-to-pump-scatman-token-crashes-98/"},{"credibility":1,"name":"CoinDesk / Robinhood CEO Vlad Tenev's X account hacked to promote token amid memecoin frenzy","type":"news_article","url":"https://www.coindesk.com/business/2026/07/23/robinhood-ceo-vlad-tenev-s-x-account-hacked-to-promote-token-amid-memecoin-frenzy"},{"credibility":2,"name":"Crowdfund Insider / Hackers Compromise Robinhood CEO's X Account To Push Fake Vladhood Memecoin","type":"news_article","url":"https://www.crowdfundinsider.com/2026/07/293412-hackers-compromise-robinhood-ceos-x-account-to-push-fake-vladhood-memecoin/"},{"credibility":2,"name":"crypto.news / Roaring Kitty X account hacked for RKC coin dump","type":"news_article","url":"https://crypto.news/roaring-kitty-x-account-hacked-for-rkc-coin-dump/"},{"credibility":2,"name":"KuCoin News / Roaring Kitty's X account hacked; meme coin RKC surges to $12M before crashing","type":"news_article","url":"https://www.kucoin.com/news/flash/roaring-kitty-s-x-account-hacked-meme-coin-rkc-surges-to-12m-before-crash"}]},{"content":"In April 2026, X's then-Head of Product Nikita Bier publicly announced plans for an automatic account-lock system that would freeze an account and require additional verification the first time it posted about cryptocurrency, a measure he said should 'kill 99% of the incentive' for hijacking high-follower accounts to promote tokens. Bier stepped down from his role as X's Head of Product on August 5, 2026, roughly three weeks before the Kylie Jenner incident, and X had not named a successor as of the reporting reviewed. Following the Jenner compromise, X did not publicly confirm whether the promised auto-lock protection had been fully deployed or whether it was active on, or failed to trigger for, Jenner's account. This gap in disclosure is itself the subject of reporting rather than an established fact about the platform's technical state, and it should be read as an open question rather than a confirmed security failure.","heading":"X Corp's security posture and the unconfirmed 'anti-scam lock'","severity":"medium","sources":[{"credibility":2,"name":"TechTimes / Kylie Jenner's X Account Was Hacked for Crypto: X Never Confirmed Its Anti-Scam Lock Deployed","type":"news_article","url":"https://www.techtimes.com/articles/325433/20260825/kylie-jenners-x-account-was-hacked-crypto-x-never-confirmed-its-anti-scam-lock-deployed.htm"},{"credibility":1,"name":"CoinDesk / Elon Musk's X to deploy scam kill switch by auto-locking first-time crypto mentioners","type":"news_article","url":"https://www.coindesk.com/web3/2026/04/02/elon-musk-s-x-to-deploy-scam-kill-switch-by-auto-locking-first-time-crypto-mentioners"},{"credibility":1,"name":"TechCrunch / Nikita Bier steps down as X's head of product","type":"news_article","url":"https://techcrunch.com/2026/08/05/nikita-bier-steps-down-as-xs-head-of-product/"}]},{"content":"Every source reviewed for this dossier treats Kylie Jenner as the victim of an alleged account compromise, not as a participant in or beneficiary of the $KYLIE token. No source reviewed presents evidence that Jenner created, endorsed, promoted, or financially benefited from the $KYLIE token, and reporting is consistent that the promotional posts were out of character for her account and were removed shortly after appearing. Readers should not interpret this entry, or the existence of a token bearing her name, as an allegation against Kylie Jenner personally. The purpose of this entry is to document the $KYLIE token as an unsafe, scam-linked asset and to record the account-hijacking campaign pattern for risk-awareness purposes.","heading":"Clarification: Kylie Jenner's role","severity":"low","sources":[{"credibility":2,"name":"CryptoBriefing / Kylie Jenner's X account posts and deletes compromised Solana token address","type":"news_article","url":"https://cryptobriefing.com/kylie-jenner-compromised-solana-token/"},{"credibility":2,"name":"Yahoo Finance / Kylie Jenner's X Account Reportedly Hacked to Push Meme Coin That Crashed 68%","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/kylie-jenners-x-account-reportedly-041314498.html"}]},{"content":"Based on the documented pattern across the SpaceX/Starlink, Vlad Tenev, Roaring Kitty, and Kylie Jenner incidents, several warning signs recur: (1) a token or contract address is posted from a verified, high-follower account whose recent posting history shows a sudden, out-of-character shift in tone or subject matter; (2) the token is newly created (in some cases minutes before the post) on a low-friction launchpad such as Pump.fun; (3) the token's market capitalization spikes rapidly, driven almost entirely by the reach of the compromised account rather than any underlying product or utility; (4) the promotional post is deleted within minutes to roughly an hour, often before most followers have seen it, followed by a sharp price collapse of 68-98% as early buyers and the attacker's wallets sell into the hype; and (5) neither the account owner nor the platform issues prompt, detailed public confirmation of what happened, leaving a window in which copycat tokens using the same name proliferate. AVOID.NET recommends treating any token promoted via a sudden, unverified social-media post from any account — celebrity, corporate, or otherwise — as high-risk by default, independent of the account's apparent authenticity.","heading":"What readers should watch for","severity":"medium","sources":[{"credibility":2,"name":"AMBCrypto / Hackers use SpaceXAI, Starlink X accounts to pump SCATMAN: Token crashes 98%","type":"news_article","url":"https://ambcrypto.com/hackers-use-spacexai-starlink-x-accounts-to-pump-scatman-token-crashes-98/"},{"credibility":2,"name":"crypto.news / Roaring Kitty X account hacked for RKC coin dump","type":"news_article","url":"https://crypto.news/roaring-kitty-x-account-hacked-for-rkc-coin-dump/"},{"credibility":2,"name":"TechTimes / Kylie Jenner's X Account Was Hacked for Crypto: X Never Confirmed Its Anti-Scam Lock Deployed","type":"news_article","url":"https://www.techtimes.com/articles/325433/20260825/kylie-jenners-x-account-was-hacked-crypto-x-never-confirmed-its-anti-scam-lock-deployed.htm"}]}],"sources_used":[{"credibility":2,"name":"Yahoo Finance / Kylie Jenner's X Account Reportedly Hacked to Push Meme Coin That Crashed 68%","type":"news_article","url":"https://finance.yahoo.com/markets/crypto/articles/kylie-jenners-x-account-reportedly-041314498.html"},{"credibility":2,"name":"CryptoBriefing / Kylie Jenner's X account posts and deletes compromised Solana token address","type":"news_article","url":"https://cryptobriefing.com/kylie-jenner-compromised-solana-token/"},{"credibility":2,"name":"CryptoNews.net / Kylie Jenner's X Account Hacked to Promote Solana Memecoin, Token Crashes 90%","type":"news_article","url":"https://cryptonews.net/news/security/33344037/"},{"credibility":2,"name":"TechTimes / Kylie Jenner's X Account Was Hacked for Crypto: X Never Confirmed Its Anti-Scam Lock Deployed","type":"news_article","url":"https://www.techtimes.com/articles/325433/20260825/kylie-jenners-x-account-was-hacked-crypto-x-never-confirmed-its-anti-scam-lock-deployed.htm"},{"credibility":2,"name":"Startup Fortune / Kylie Jenner's X Account Was Hacked to Pump a Solana Memecoin That Crashed 90%","type":"news_article","url":"https://startupfortune.com/kylie-jenners-x-account-was-hacked-to-pump-a-solana-memecoin-that-crashed-90/"},{"credibility":2,"name":"AMBCrypto / Hackers use SpaceXAI, Starlink X accounts to pump SCATMAN: Token crashes 98%","type":"news_article","url":"https://ambcrypto.com/hackers-use-spacexai-starlink-x-accounts-to-pump-scatman-token-crashes-98/"},{"credibility":1,"name":"CoinDesk / Robinhood CEO Vlad Tenev's X account hacked to promote token amid memecoin frenzy","type":"news_article","url":"https://www.coindesk.com/business/2026/07/23/robinhood-ceo-vlad-tenev-s-x-account-hacked-to-promote-token-amid-memecoin-frenzy"},{"credibility":2,"name":"Crowdfund Insider / Hackers Compromise Robinhood CEO's X Account To Push Fake Vladhood Memecoin","type":"news_article","url":"https://www.crowdfundinsider.com/2026/07/293412-hackers-compromise-robinhood-ceos-x-account-to-push-fake-vladhood-memecoin/"},{"credibility":2,"name":"crypto.news / Roaring Kitty X account hacked for RKC coin dump","type":"news_article","url":"https://crypto.news/roaring-kitty-x-account-hacked-for-rkc-coin-dump/"},{"credibility":2,"name":"KuCoin News / Roaring Kitty's X account hacked; meme coin RKC surges to $12M before crashing","type":"news_article","url":"https://www.kucoin.com/news/flash/roaring-kitty-s-x-account-hacked-meme-coin-rkc-surges-to-12m-before-crash"},{"credibility":1,"name":"CoinDesk / Elon Musk's X to deploy scam kill switch by auto-locking first-time crypto mentioners","type":"news_article","url":"https://www.coindesk.com/web3/2026/04/02/elon-musk-s-x-to-deploy-scam-kill-switch-by-auto-locking-first-time-crypto-mentioners"},{"credibility":1,"name":"TechCrunch / Nikita Bier steps down as X's head of product","type":"news_article","url":"https://techcrunch.com/2026/08/05/nikita-bier-steps-down-as-xs-head-of-product/"},{"credibility":2,"name":"CoinDesk (X post) / Kylie Jenner's X account was reportedly hacked to promote a meme coin called $KYLIE","type":"social_media","url":"https://x.com/CoinDesk/status/2092351344401064312"}],"summary":"On August 24, 2026, Kylie Jenner's verified X account (roughly 39.5 million followers) was reportedly hacked and used, without her knowledge or consent, to promote a Pump.fun-launched Solana memecoin called $KYLIE. The token's market cap spiked to roughly $1.2 million before collapsing 68-90% within minutes of the compromised posts being deleted. Kylie Jenner is the victim of this incident, not its perpetrator: this dossier concerns the account-hijacking campaign and the $KYLIE token, not any wrongdoing by Jenner, and evidence indicates the incident is one instance of a recurring scheme that has also hit the SpaceX/Starlink, Robinhood CEO Vlad Tenev, and 'Roaring Kitty' (Keith Gill) X accounts in 2026.","timeline":[{"date":"2026-04","date_original":"2026-04-02","event":"X's then-Head of Product Nikita Bier publicly announces plans for an automatic account-lock system intended to prevent hijacked verified accounts from being used to promote cryptocurrency tokens.","source":"CoinDesk","source_url":"https://www.coindesk.com/web3/2026/04/02/elon-musk-s-x-to-deploy-scam-kill-switch-by-auto-locking-first-time-crypto-mentioners"},{"date":"2026-05","date_evidence":"Two posts appeared on Gill's verified X account at around 21:13 UTC on May 11","date_original":"2026-05-11","event":"Keith Gill's ('Roaring Kitty') X account is reportedly hacked and used to promote a Solana token, Red Kitten Crew (RKC), which briefly reached an $11-12 million market cap before crashing; over 80 wallets reportedly extracted roughly $2.86 million.","source":"crypto.news","source_url":"https://crypto.news/roaring-kitty-x-account-hacked-for-rkc-coin-dump/"},{"date":"2026-07","date_evidence":"This pattern resurfaced on the 13th of July, when hackers compromised verified SpaceXAI and Starlink X accounts","date_original":"2026-07-13","event":"The official SpaceXAI and Starlink X accounts are reportedly compromised and used to promote a token called SCATMAN, which briefly approached a $2 million market cap before crashing about 98%; wallets reportedly extracted about $135,000 in ETH.","source":"AMBCrypto","source_url":"https://ambcrypto.com/hackers-use-spacexai-starlink-x-accounts-to-pump-scatman-token-crashes-98/"},{"date":"2026-07-23","date_evidence":"The fraudulent message appeared on July 23, 2026","event":"Robinhood CEO Vlad Tenev's X account is reportedly hacked and used to promote a token called 'Vladhood' (VLAD); wallets behind the scheme reportedly extracted roughly $1.2-1.3 million before the token collapsed. This incident is tracked separately on AVOID.NET.","source":"Crowdfund Insider","source_url":"https://www.crowdfundinsider.com/2026/07/293412-hackers-compromise-robinhood-ceos-x-account-to-push-fake-vladhood-memecoin/"},{"date":"2026-08","date_evidence":"Bier wrote Wednesday that he thinks it's 'time to pass the torch and demote myself to my natural state: a poster'","date_original":"2026-08-05","event":"Nikita Bier steps down as X's Head of Product; X has not named a successor, and whether the previously announced crypto auto-lock feature was fully deployed remains publicly unconfirmed.","source":"TechCrunch","source_url":"https://techcrunch.com/2026/08/05/nikita-bier-steps-down-as-xs-head-of-product/"},{"date":"2026-08-24","date_evidence":"Aug. 24, 2026","event":"Kylie Jenner's verified X account is reportedly hacked and posts, then deletes, links to a Pump.fun profile ('cutekjenner') and a Solana contract address for a token called $KYLIE.","source":"CryptoBriefing","source_url":"https://cryptobriefing.com/kylie-jenner-compromised-solana-token/"},{"date":"2026-08","date_original":"2026-08-25","event":"News outlets report the $KYLIE token spiked to a market cap of approximately $1.2 million before crashing 68-90%; several copycat 'kylie'-named tokens appear on Solana; X has not confirmed whether its anti-scam account-lock protection was active during the incident.","source":"TechTimes","source_url":"https://www.techtimes.com/articles/325433/20260825/kylie-jenners-x-account-was-hacked-crypto-x-never-confirmed-its-anti-scam-lock-deployed.htm"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 385c7352-1902-449f-abda-83d8445d2957copy