A Twitter account linked to Donald Trump promoted a token referred to as $GOLD before wallets related to the venture appeared to promote their holdings. This added concern about how Trump-linked accounts can be utilized to lend credibility to speculative crypto tokens.
The Twitter account realtrumpcoins1 is adopted by @realDonaldTrump and describes itself as an “Official Associate of The Trump Group.” The Trump Group’s account on X has retweeted its merchandise commercials as effectively.
Coin Bureau flagged the $GOLD posts as an obvious hack, however neither the account holder nor the Trump Group has individually confirmed that the account was compromised.
⚠️ ALERT: Trump-linked account seems to have been HACKED to advertise a “Trump Digital Gold” rug pull.
A publish selling $GOLD appeared on ‘realtrumpcoins1,’ an account adopted by the official Trump account and linked as a merchandise accomplice to the Trump Group.$Gold… pic.twitter.com/pt8XhkdgJz
— Coin Bureau (@coinbureau) August 29, 2026
The account already has a hyperlink with Trump, which helped it shortly acquire a degree of legitimacy obligatory for impersonation fraud to succeed.
Why a single meme coin rip-off travels far past one token
Using celeb and politician tokens continues to be a standard supply of retail danger, typically inflicting problems past only one token.
Chainalysis discovered that rip-off addresses obtained no less than $14 billion on-chain in 2025 and mentioned the full may exceed $17 billion as extra illicit addresses are recognized. Impersonation scams surged greater than 1,400% 12 months over 12 months.
The $GOLD incident adopted a well-known sample: the presence of a seemingly official account, new cash being created, and other people speeding to purchase them before the verification course of occurred. Each time such incidents happen, the real crypto tasks are pressured to work even tougher to realize this wanted belief.
How the rug performed out on-chain
Lookonchain raised the alarm on the focus of the token’s provide shortly, pointing out that the developer held 600 million of the tokens and 15 new wallets paid $18,657 to get 224.5 million tokens. The mixture allowed them to regulate 82.45% of the provision.
Afterwards, the wallets sold their holdings, amounting to 224.5 million cash, and made 3,178 SOL, which had a worth of round $330,000. Lookonchain estimated that their complete gross of about $ 312,000 was topic to a margin a number of of 17.
That focus made it doable for a small variety of individuals to make decisive strikes out there, which made unusual merchants weak.
The hacker’s $8.2 million declare is just not backed by tracked wallets
One other publish from that account confirmed a much bigger image. In line with ChainCatcher, the account claimed to have made greater than $8.2 million in earnings and mocked those that purchased the token.
“low IQ Trump supporters”— @realtrumpcoins1, as reported by ChainCatcher on August 29, 2026
The account additionally said that the earnings have been meant to fund a $10 million bounty on Barron Trump and included additional claims of $165 million in Solana allegedly stolen from him. ChainCatcher characterised these declarations as biased and unproven.
The wallets being monitored haven’t confirmed the determine of $8.2 million. Lookonchain recorded some $330,000 in proceeds and $312,000 in revenue from the gathering of 15 tracked wallets. Nevertheless, this info by itself can not verify the full earnings of the attacker from all different wallets.
Iranian cyber angle is elevating the stakes
Some stories attributed the obvious compromise to Iranian hackers, however that declare has not been independently confirmed.
The timing is notable. NPR reported on August 26 that the Secret Service was conscious of an Iranian state-media video showing to threaten Barron Trump. The video referred to “our $10 million prize,” apparently suggesting a bounty—the identical determine later invoked by @realtrumpcoins1. The U.S.-Israeli battle with Iran started on February 28, 2026.
Iranian cyber exercise has additionally elevated in the course of the battle. The Middle for Strategic and Worldwide Research reported on August 6 that operations had risen since March throughout espionage, disruptive assaults, info operations and conflict-themed cybercrime.
The overlap makes the attribution value analyzing, however it isn’t proof that Iranian actors managed the account or orchestrated $GOLD.
This has occurred to the Trump orbit before
The playbook is acquainted. In February 2025, the X account of World Liberty Monetary co-founder Zach Witkoff was compromised and used to advertise a faux Barron Trump memecoin. The attacker claimed, “Trump ought to verify the information quickly.”
World Liberty Monetary warned customers:
“@zachwitkoff’s account was compromised, and a faux Barron meme was posted. Please don’t interact. We’re resolving the difficulty ASAP.” — World Liberty Monetary, February 12, 2025
Ivanka Trump had additionally warned weeks earlier about an unauthorized memecoin utilizing her likeness.
For a market that continues to reward Trump-branded property, the sample issues. Cryptopolitan reported on August 22 that Official Trump (TRUMP) had rallied greater than 80% amid renewed hypothesis round Trump-family crypto exercise.
The $GOLD episode exposes the weak spot clearly: when a well-known account can transfer cash before anybody verifies who’s behind the keyboard, popularity itself turns into an assault floor.
Don’t simply learn crypto information. Perceive it. Subscribe to our e-newsletter. It’s free.
