Binance Co-CEO Yi He’s WeChat Account Hacked to Push Meme Coin MUBARA

Why It Matters

The hack demonstrates that even top‑tier crypto executives are vulnerable to social‑engineering attacks, exposing retail investors to manipulated price spikes and underscoring the need for stronger security protocols across the industry.

Key Takeaways

• Yi He’s WeChat hacked to promote MUBARA memecoin
• Attackers bought 21.16M tokens, sold $55K profit
• Binance warned users, highlighted Web2 security gaps
• Pump‑and‑dump exploited Binance executive’s perceived endorsement
• Remaining tokens valued at ~$31K, still unsold

Pulse Analysis

The breach of Yi He’s WeChat account highlights a growing convergence of traditional social media vulnerabilities and crypto market manipulation. By impersonating a Binance co‑CEO, the attackers leveraged the trust placed in high‑profile executives to generate artificial demand for MUBARA, a little‑known token. This tactic mirrors classic pump‑and‑dump operations, but the use of a real‑time, personal messaging platform amplified the speed and reach of the false endorsement, catching retail traders off‑guard before the price correction.

On‑chain analytics from Lookonchain reveal the attackers’ precise playbook: two newly created wallets spent nearly 20,000 USDT on PancakeSwap to acquire 21.16 million MUBARA tokens, then off‑loaded 11.95 million for roughly $43,500, pocketing about $55,000 in profit while still holding a $31,000 position. The rapid inflow of liquidity caused a sharp price spike on Dexscreener, only to collapse as the malicious wallets dumped their holdings. This incident underscores the fragility of decentralized exchange ecosystems, where thin order books can be easily manipulated by coordinated social‑engineering attacks.

For Binance and the broader crypto industry, the episode serves as a cautionary tale about the reliance on Web2 communication channels for executive outreach. It reinforces the urgency for multi‑factor authentication, hardware‑based key management, and dedicated security training for senior staff. Regulators are likely to scrutinize such incidents as evidence of systemic risk, prompting tighter compliance standards. Investors, meanwhile, should treat unsolicited endorsements with skepticism and prioritize on‑chain verification over social media hype, fostering a more resilient market environment.