Skip to main content
AVOID.NET
Sign in

Nelly

avoid.net/nelly→40/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:etherscan][src:zachxbt][account-hack][celebrity][celebrity-account-compromise][ens-targeting][ethereum][no-attacker-wallet-confirmed][permit-signature-drain][phishing][rapper][scam-sniffer][scam-sniffer-impersonation][single_source_claim_disproved][social-engineering][weak_evidence][x-account-hack][zachxbt-flagged]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3QLpci…3Pjt

Summary

Rapper Nelly (Cornell Iral Haynes Jr.) is flagged here not as a perpetrator of crypto fraud, but as a victim of an account compromise. In October 2023, an X (formerly Twitter) account associated with Nelly — handle @NellioETH — was hacked by an unknown third party who then used it to run a social engineering phishing campaign against crypto users. Blockchain investigator ZachXBT first identified and publicized the incident; specific amounts stolen from victims and detailed on-chain forensics have not been publicly confirmed.

Connected Entities

2 entities · 60 linked investigations
Organizations
□Nelly□ZachXBT82
Relationships
  • Nelly→mentioned with→ZachXBT(70%)
Also appears in
StableMagnet·2Dean Daghita / CMDSS (Command Services and Support)·0Nexera·32SafePal·42BearnFi·12Gurhan Kiziloz·0PAAL AI·28JUDAO·18Ansem / $ANSEM ("Black Bull") creator-coin controversy·38Wonderland Finance·8+ 50 more

Connected Through

1 shared actor · 447 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Nelly?

Timeline(4 events)

18 October 2023

X account @NellioETH, associated with rapper Nelly, is compromised by an unknown threat actor. ZachXBT identifies and publicly reports the phishing campaign via Telegram. Multiple crypto news outlets publish coverage the same day.

18 October 2023

Scam Sniffer publicly denies affiliation with @NellioETH on X, confirming the account is fraudulent and urging users to use only scamsniffer.io.

18 October 2023

@NellioETH account is suspended or deleted by X; the profile returns a 'does not exist' message at time of reporting.

August 2024

A separate but related pattern of celebrity account hacks for meme coin pump-and-dump schemes begins, documented by ZachXBT, ultimately accounting for at least $3.5 million in losses across multiple celebrities including Usher and Wiz Khalifa. This campaign is distinct from the 2023 Nelly hack.

Research Gaps

1 open · agent-resolvable

Heuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.

  • [med]
    unarchived sources

    Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain7 Wayback Archivessrc:etherscansrc:zachxbt

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (3 events). 7 of 7 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet

generated: 5/4/2026, 4:05:02 PM

last updated: 8/29/2026, 1:35:41 AM

5 views

avoid.net — verified advice for a post-truth world