Yeliz Akmaca 
Solana co-founder Raj Gokal faced an organized social engineering attack. Hackers obtained Gokal’s passport, email, phone number, and other sensitive information. Moreover, they exposed these data publicly through Migos’ Instagram account, which has 13 million followers.
The attackers demanded 40 BTC (approximately $4.3 million) from Gokal. Their posts included statements such as: “You should have paid 40 BTC” and “It was only 40 BTC… you should have paid.” Following these threats, the hackers posted a photo of Gokal holding his passport, his personal contact details, and images of an unidentified woman.
Security Alarm in the Solana Ecosystem
Additionally, they changed Migos’ Instagram bio. They promoted a new meme coin and shared links directing users to various Telegram groups. Security experts believe these groups aim to scam users with fake investment promises. Instagram removed the posts after about 90 minutes, but the content had already reached millions.
Blockchain researcher ZachXBT revealed details of the attack on social media:
“They targeted Gokal’s personal accounts. Using the information they gathered, they tried to extort money from him. It seems when he didn’t pay, they started exposing him. Today, they took over Migos’ account to spread this content.”
Meanwhile, The Rollup co-founder Andy claimed that a Solana wallet balance belonging to a person named “Arvind” was also leaked in the posts. However, this person’s identity remains unclear.
🚨JUST IN: Hackers compromised rapper Migos’ Instagram account to leak Solana co-founder @rajgokal's passport, ID, and family pictures.
The materials appear to be KYC images, raising questions about whether the source may be linked to recent @coinbase data breach.
The caption… pic.twitter.com/wKEVKP1dFi
— SolanaFloor (@SolanaFloor) May 27, 2025
Gokal had warned his followers on X (formerly Twitter) days before the attack:
“They tried to take over my email, social media, Google, and Apple accounts. If you see any suspicious posts about token launches or fundraising, know that it’s not me. Please be cautious.”
The Solana (SOL) Foundation also issued an official statement regarding the incident:
“This attack targeted Raj Gokal’s personal security. The Solana network and its projects were not affected. However, this event reminds everyone operating in the digital asset space to review their security.”
The foundation also issued warnings to the community, emphasizing that users should trust only announcements from official channels. Additionally, they recommended basic security measures such as two-factor authentication, strong passwords, and regular account checks.
You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.