Vitalik's X account was hacked via SIM-Swap attack

Ethereum co-founder Vitalik Buterin confirmed on Farcaster on Sept. 12 that his X (Twitter) account was hijacked through a SIM swap attack, in which someone socially engineered T-Mobile into taking over his phone number. Buterin said a phone number is enough to reset a Twitter password even if it is not used for 2FA, and that users can completely remove a phone from their account. The takeover occurred on Sept. 9, when scammers posted a fake NFT giveaway with a malicious link that led victims to collectively lose over $691,000. On Sept. 10, developer Tim Beiko recommended removing phone numbers from X accounts and enabling 2FA.