The official X account of hardware wallet manufacturer Trezor has published a series of nefarious posts pointing to fraudulent presale token offerings, suspected the result of a suspected SIM-swap attack.

Independent blockchain sleuth ZachXBT notified his 528,000 followers on X of Trezor’s suspected breach in a March 19 post to X. Crypto security service Scam Sniffer also flagged the suspicious activity 10 minutes later.

Several posts made from the official Trezor touted a fake Trezor “$TRZR” presale token on the Solana networks, asking users to send funds to a Solana wallet address and including links that directed users to wallet drainers.

Additionally, ZachXBT noted that the hacker had stolen roughly $8,100 from Trezor’s Zapper account.

“Imagine hacking the Trezor account only to steal $8.1K (includes 25% drainer fee),” he wrote in a follow-up comment.

The posts also included references to a new memecoin on Solana dubbed Slerf, most likely used as a method to drum up further engagement. However, many of the posts were removed just minutes after being uploaded.

Trezor’s latest incident was described as a major loss by crypto commentator and X user John Holmquist, who slammed the hard wallet manufacturer for presumably not using two-factor authentication (2FA) to secure its X account.

“Please take account security more seriously,” he stressed.

Others, such as X user Pledditor, found it ironic that a security-focused hardware wallet firm can’t secure its own social media account.

“It’s hard, funny, and shameful at the same damn time” that they don’t take their own advice, added X user DigitalHustlerX.

Cointelegraph contacted SatoshiLabs, the company behind Trezor, but did not receive an immediate response.

Trezor suffered a security breach in January that exposed the contact information of nearly 66,000 users.

Trezor has sold over 2 million hardware wallets to customers since it launched in 2012, according to the firm’s website. The firm currently sells three products which collectively can store more than 9,000 coins offline for users.

Source