Migos' Instagram Account Compromised to Leak Sensitive Data of Solana Co-founder Raj Gokal

This case was notable for an apparent failed extortion attempt. The hackers demanded 40 Bitcoin from Gokal, as indicated by a caption accompanying one of the posts.

A hacker collective has compromised the Instagram account of hip-hop group Migos and shared sensitive data and credentials of Solana co-founder Raj Gokal with the group’s 13 million followers.

The hackers posted at least seven images on Migos’s account, which is followed by 12.9 million users. The images included pictures of Gokal and his wife, as well as images of credentials like passports and driver’s licenses.

The hackers also wrote messages on the posts, which appeared to be an unsuccessful extortion attempt. In one of the posts, the hackers demanded 40 Bitcoin (BTC) from Gokal.

“You should’ve paid the 40 BTC,” the post read.

Another post, which had an image of Gokal holding his passport, read: “It was only 40 BTC.. should’ve paid.”

Some of the posts included sensitive personal information, such as phone numbers and email addresses. In one instance, the hackers revealed Gokal’s personal number and urged followers to spam him.

One post had an image of someone identified as “Arvind.” The hackers wrote: “Email him at arvind@coinbase.com and tell him to return Migos’s Instagram.”

The compromised posts were live for about 90 minutes before Meta intervened, restoring control of the account and removing the content.

Alongside the leaked images, the hackers had also modified Migos’s Instagram bio to promote a meme coin. The bio now reads: “We own this account. DM for shoutouts and promos. Best meme coin: Banana Token.”

The post count was also reset to 0, and the account name was changed to Banana Token. However, the account’s profile picture remained the same.

Here’s How Solana Founder’s Account Was Hacked

Commenting on the incident, blockchain investigator ZachXBT said that Gokal’s personal accounts were likely compromised using social engineering techniques over the past week.

“They tried to extort him for funds with the PII obtained. Guess he didn’t pay so they started trolling and posted it after they compromised Migos’s Instagram account today,” he wrote.

Thanks for actually blurring the personal info unlike every other account on CT.

Think Raj’s personal accounts got social engineered and they tried to extort him for funds with the PII obtained. Guess he didn’t pay so they started trolling and posted it after they compromised Migos's Instagram account today. pic.twitter.com/Cj2a2yAFa6

— ZachXBT (@zachxbt) May 27, 2025

Earlier this month, Gokal had warned that hackers were trying to break into his accounts.

“Attackers have been trying to take control of my email, social media, Google, Apple, etc. this past week. If you see anything suspect (token launch, soliciting funds, etc) that means they got through. Be careful out there,” Gokal said.

Attackers have been trying to take control of my email, social media, Google, Apple, etc. this past week. If you see anything suspect (token launch, soliciting funds, etc) that means they got through.

be careful out there

— raj 🖤 (@rajgokal) May 20, 2025

The leaked images appeared to be similar to Know Your Customer (KYC) verification files, sparking speculation about a potential connection to the recent Coinbase data breach. However, there’s no official confirmation to verify the potential links between the two incidents.

Bhushan is a FinTech enthusiast and holds a good flair in understanding financial markets. His interest in economics and finance draw his attention towards the new emerging Blockchain Technology and Cryptocurrency markets. He is continuously in a learning process and keeps himself motivated by sharing his acquired knowledge. In free time he reads thriller fictions novels and sometimes explore his culinary skills.

Bhushan Akolkar on Xoutput:

.