Web3 security firm CertiK's X account hacked to push crypto drainer

CertiK's gold-verified X account was compromised via a social-engineering attack that used a separate, high-follower hacked journalist account to phish CertiK staff and post a malicious link directing followers to a fake Revoke.cash site and a cryptocurrency wallet drainer; the malicious tweet was removed after ~15 minutes. BleepingComputer reports this is part of a broader, ongoing campaign that has hijacked multiple verified government and business X accounts (including Mandiant and Bloomberg Crypto) to push crypto scams and phishing pages that can result in wallet drains and credential theft.