Oct 2025 - Noble Twitter/X Account Compromise Fake Token Launches - $Unknown (Global)
Noble is a blockchain-based infrastructure designed to scale stablecoin and payment systems across various financial ecosystems. It provides a robust and reliable platform for facilitating billions of dollars in transactions, with over $296 million in total assets issued, including stablecoins and Real World Assets (RWAs). Noble’s core technology integrates seamlessly with numerous applications, wallets, and exchanges, ensuring fast and efficient transaction flows. Their focus is on creating a decentralized stablecoin infrastructure that supports high-volume transactions and interoperability across different networks.
At the heart of Noble’s offering is the Noble Dollar, a collateral-backed stablecoin that earns daily yield, backed by short-duration U.S. Treasury Bills. The platform operates on a modular, composable stack, allowing developers to build secure and efficient stablecoin-centric applications and DeFi primitives. By utilizing CometBFT/Tendermint consensus, Noble ensures fast block times and rapid transaction processing. This approach minimizes complexity while enhancing usability, as Noble integrates with leading market players and payment systems, making it easier for enterprises and individuals to access stablecoin services.
Noble’s vision is to bridge the gap between decentralized finance (DeFi) and traditional financial systems by providing an infrastructure built for scalability and reliability. With backing from prominent venture capitalists and a team of experienced founders from both traditional finance (TradFi) and crypto sectors, Noble is positioned as a key player in the evolution of global payment systems. Their technology aims to simplify the interaction between digital assets and traditional financial services, supporting a wide range of assets like USDC, USDN, and FRAX, while ensuring security and seamless interoperability across blockchain ecosystems.
Once the Noble Twitter/X account was compromised, a phishing post appeared with the following text.
"$NBL is now live on Solana network.
We're launching our first airdrop before launch! All followers can claim it."
Users who clicked the link would be taken to a phishing site at the domain register-noble.com.
There appear to have been multiple phishing campaigns run over the 16 hour period where the account was compromised including a Solana blockchain launch and a BSC blockchain launch.
The loss totals are unreported.
Noble.xyz team member Jelena published a warning very early on in the attack. The Noble.xyz community actively reposted and warned others through Discord. Efforts were made to recover the account.
It appears that the Twitter/X account was recovered. A post-mortem has been promised.
There is no suggestion that any assistance will be available for affected users.
It remains to be seen what attack vector allowed the account to be compromised and what assistance, if any, will be provided for users who were impacted.
Further Analysis
Noble, a blockchain infrastructure for stablecoins and financial systems, was compromised when its Twitter/X account was hacked. The attackers posted a phishing link claiming $NBL was launching on the Solana network and offered an airdrop, which redirected users to a fraudulent site. Multiple phishing campaigns targeted both Solana and BSC blockchain communities over a 16-hour period, though the total losses are unknown. Noble’s team acted quickly, with a warning issued early and community members spreading alerts. While the Twitter account was eventually recovered, no details have been provided on how the hack occurred or if any support will be offered to affected users. A post-mortem is expected, but no specific assistance for victims has been confirmed.
How Could This Have Been Prevented?
More Cryptocurrency Exchange Hacks/Scams/Frauds
GMGN.ai MEV Transaction Reordering Sandwich Attacks > > < < DoodiPals NFT Treasury Drained After Private Key Leakage
Sources/Further Reading
realScamSniffer - "The @noble_xyz X account has been compromised and shared phishing tweets. Please stay vigilant!" - Twitter/X (Dec 31)
jelena_noble - "The @noble_xyz account has been compromised. Please do not engage with anything from the account. Working on resolving this issue" - Twitter/X (Dec 31)
jelena_noble - "The official @noble_xyz account was compromised for ~16 hours. Were happy to confirm the hacker no longer has access, and were working with X Support to fully restore control. Huge thanks to our community and friends who flagged scam tweets and helped us resolve this quickly." - Twitter/X (Dec 31)
noble_xyz - "Comments are closed due to malicious links. This is the last post." - Twitter/X (Dec 31)
De_FiSecurity - "SECURITY ALERT @noble_xyz X Account is compromised, promoting fake $NBL token launch Do not interact with any content until further update" - Twitter/X (Dec 31)
CryptoUsopp - "Twitter/X of @noble_xyz has been compromised! They are and have been posting airdrop claim links Ignore everything from there for now until more updates from the team! As usual, always double and triple check from all socials when you see a stealth drop like this!" - Twitter/X (Dec 31)
museowunsaram - "Breaking news) @noble_xyz seems to have been hacked Noble X seems to have been hacked;; When you click it, it goes to a weird link Be careful" - Twitter/X Translated From Korean (Dec 31)
getfailsafe - "Heads up, security fam. The @noble_xyz account has been compromised. Several industry accounts are being targeted with similar exploits. If you see unexpected token launch or claim links dont engage. Secure your socials with 2FA, hardware keys & limited admin access. Stay safu!" - Twitter/X (Dec 31)
maria_cosmosfi - "Scammers Couldnt even write the token name properly Stay safe fam, dont click any links on @noble_xyz The team is working on account recovery rn Meanwile, @De_FiSecurity is on guard" - Twitter/X (Dec 31)
__traviSKrypto - "ATTENTION The @noble_xyz account has been compromised Repost for others to know!" - Twitter/X (Dec 31)
Noble.xyz Homepage (Dec 31)
Noble.xyz Twitter/X Account (Dec 31)
Tipwotip - "Can I get a G Morning? Do you know how many assets are available in @noble_xyz ?" - Twitter/X (Dec 31)
DavyCryptoJones - "Looks like a Noble @noble_xyz TGE update is coming soon could be (imo) tied to the Hyperliquid vault season 2 was expected to wrap when the vault goes live" - Twitter/X (Dec 31)
 t.me/QuadrigaInitiative
|
 /r/QuadrigaInitiative
|
 @QuadrigaInit
|
 info@quadrigainitiative.com
|