Skip to main content
Sign in

Summary

On November 3, 2024, unidentified scammers compromised the X (Twitter) account of rapper Wiz Khalifa (35.7 million followers) and used it to promote two fraudulent Solana meme coins — $WIZ and $WIZZLE — launched on pump.fun. The $WIZ token reached a peak market cap of approximately $2.5 million within 15 minutes before collapsing over 95% in under one hour, with at least two insider wallets extracting a combined $160,000 in profit. Blockchain investigator ZachXBT linked the incident to a broader campaign of celebrity account takeovers that allegedly stole over $3.5 million in total, and subsequently accused a former professional Fortnite player known as 'Serpent' of involvement in the coordinated scheme.

Connected Entities

1 entities
Organizations
Wiz Khalifa Pump Fun
Relationships
    Have evidence about Wiz Khalifa Pump Fun?

    Timeline(8 events)

    2024-08-01

    ZachXBT's investigation indicates the ATO campaign allegedly linked to Serpent began in approximately August 2024 with the first compromised social media accounts promoting pump.fun tokens.

    2024-08-01

    McDonald's Instagram account compromised; GRIMACE token launched on pump.fun, allegedly extracting approximately $690,000.

    2024-10-29

    Truth Terminal creator Andy Ayrey's X account compromised; multiple tokens including TRUTH and INFINITY launched, with over $2.1 million allegedly stolen.

    2024-11-03

    Wiz Khalifa's X account compromised. Fraudulent posts promoting $WIZ and $WIZZLE tokens on pump.fun published. $WIZ peaks at ~$2.5 million market cap within 15 minutes.

    2024-11-03

    ZachXBT posts public warning: 'Do not buy the Wiz Khalifa pump fun [token] it's the same hacker who compromised Andy Ayrey.' Fraudulent posts deleted from Wiz Khalifa's account.

    2024-11-04

    $WIZ market cap collapses from $2.5 million to approximately $7,900. At least two insider wallets extract a combined $160,000. Approximate investor losses recorded at $119,000 USD.

    2024-11-26

    ZachXBT publishes Part 1 of broader investigation linking nine or more account takeovers across McDonald's, Usher, Wiz Khalifa, Andy Ayrey, Dean Norris, and others to a single alleged threat actor. Total estimated theft: $3.5 million via 16 pump.fun tokens.

    2024-11-27

    ZachXBT publishes Part 2 alleging that a former professional Fortnite player known as 'Serpent', an Australian previously expelled from esports org Overtime for cheating, was involved. Serpent allegedly deletes X posts after Part 1 is published. Gambling platform deposits on Roobet, Stake, and BC Game allegedly linked to scam wallet addresses.

    Provenance & Audit Trail

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    model: claude-sonnet

    generated: 5/4/2026, 4:05:01 PM

    last updated: 5/26/2026, 4:11:15 AM

    avoid.net — verified advice for a post-truth world