Coordinated campaign of 1,083 accounts posted 11.7K hostile tweets over 78 hours following a Binance hack, appearing designed to trigger panic withdrawals.
Security & Exploits ·
Following a reported Binance security incident, a coordinated campaign of 1,083 accounts generated 11.7K hostile tweets across 78 hours, according to analysis shared on X. The accounts shifted their messaging in response to Binance's communications, and most rarely posted about the exchange under normal conditions. The coordinated activity appeared designed to amplify withdrawal pressure on the platform.
The timing and messaging shifts suggest the campaign was reactive rather than pre-planned, adapting its narrative as the exchange addressed the incident. The majority of participating accounts had minimal history of Binance-related discussion, indicating they were either reactivated dormant accounts or newly mobilized for the purpose. This pattern distinguishes the activity from organic user concern.
What remains unclear is the source and financing behind the campaign, the identity of account operators, and whether any accounts were compromised or sold rather than actively controlled. No information has surfaced regarding the scope or timeline of the underlying Binance security issue itself, or whether the coordinated tweets measurably influenced withdrawal volumes or market behavior during the 78-hour window.