Vitalik Buterin
Summary
Vitalik Buterin is the legitimate co-founder of Ethereum and is not himself a scam actor. However, his name, likeness, and social media presence constitute one of the most heavily weaponized impersonation surfaces in crypto. Documented threats include a September 2023 SIM-swap of his X account (linked to Pink Drainer, resulting in ~$691K stolen from followers), persistent fake giveaway livestreams on YouTube, thousands of fraudulent Instagram accounts, and an escalating campaign of AI-generated deepfake videos distributing wallet-drainer phishing links.
Timeline(11 events)
2018-10-03
Fake Instagram account @buterin_vitalik with 24,000 followers collects 37.491 ETH (~$7,500 at the time) via a fake giveaway directing victims through a Telegram bot.
2020-07-10
CoinDesk reports that crypto giveaway scams impersonating Buterin and other figures are flourishing on YouTube, constituting an established multi-year threat vector.
2022-01-04
A fraudulent Instagram account using the handle @vitalik.eth accumulates over 570,000 followers and runs sponsored paid advertisements to promote staking scams.
2022-02-18
Group-IB documents 36 fabricated YouTube giveaway livestreams using Buterin footage over a 48-hour window; scammer wallets receive over $1.6 million in 281 transactions from more than 165,000 viewers.
2022-08-15
Vitalik Buterin publicly warns via his Twitter account that all 5,000+ Instagram accounts claiming to be him are fake and constitute scams.
2022-01-01
Attacker compromises verified journalist Aaron Goldfarb's Twitter account, redesigns it to impersonate Vitalik Buterin, and uses it to launch phishing campaigns targeting followers.
2023-09-09
Attacker SIM-swaps Buterin's T-Mobile number, resets his X account password, and posts a phishing link for a fake 'Proto-Danksharding commemorative NFT.' ZachXBT tracks losses reaching ~$691,000, including CryptoPunk #3983 (~$244,000). Attack wallet is linked to Pink Drainer.
2023-09-12
Buterin confirms publicly via Farcaster that the attack was a SIM swap via T-Mobile, and advises users to remove phone numbers from X account settings.
2024-02-07
CertiK discloses a deepfake video falsely depicting Buterin endorsing a wallet-drainer phishing site, marking an escalation from text-based impersonation to synthetic AI-generated video.
Research Gaps
1 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
Decision Log
- hash: 71FYBCQ97CeUowGfmXp54qGaUQg2ajJTrQBdEYLw7jPE
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet
generated: 5/4/2026, 4:05:02 PM
last updated: 5/18/2026, 11:07:57 PM
avoid.net — verified advice for a post-truth world