Cryptocurrency [loss] $700,000

"McRugged: Hackers Take Over McDonald’s Instagram, Make $700K on Fake Grimace Token"

2024-08-21 [vendor] McDonalds Instagram [chain] solana
Primary Source ↗
Financial Loss $700,000 (700,000 USD)
Blockchain(s) Solana

Incident Details

McDonald’s Instagram account, as well as the Twitter account of a McDonald’s marketing director, began promoting a memecoin called $GRIMACE (named for the restaurant chain’s blobby purple mascot). The posts to McDonald’s 5.1 million followers caused the token price to spike. Then, the attacker sold off their holdings, profiting around $700,000 and plunging the token price.They then boasted about their haul on the compromised Instagram account, changing the bio to say: “Sorry mah nigga you have just been rug pulled by India_X_Kr3w thank you for the $700,000 in Solana 🇮🇳".The token stunt by the massive company was perhaps made more believable by McDonald’s previous forays into crypto, including when they launched a McRib-themed NFT project in December 2021. The company had also joked about a “Grimacecoin” back in January 2022, in a reply to a tweet from Elon Musk.

Total loss estimated at $700,000.

Technical Details

Initial Attack Vector
Exit scam / rug pull
Vendor / Product
McDonalds Instagram

Timeline

  1. 2024-08-21 Breach occurred
  2. 2024-08-21 Publicly disclosed