Svmuu News: "deployer," the developer of the AI agent toolkit Bankr, has posted again on X regarding the compromise of Bankr’s X account. He believes there are two possible scenarios behind the incident: first, an undiscovered critical security vulnerability in X’s backend system; second, the involvement of an insider.
deployer stated that Bankr had previously enabled Passkey, but when the team attempted to log in, they were redirected to the suspended account appeal page; meanwhile, the attacker was still able to log in and post malicious links even after the team had lost access to the account. Furthermore, the team began receiving 503 errors from the X API, yet the attackers were still able to post normally. They questioned why the attackers retained full access while the team’s access was restricted.
deployer also noted that several high-profile X accounts—including those of the Robinhood CEO and the official SpaceX account—had recently been compromised, with some reportedly having MFA enabled as well, and called on the X team to investigate the matter and provide an explanation.