SKN | Binance Co-CEO Yi He’s WeChat Hack Sparks MUBARA Pump-and-Dump Scare

A dormant WeChat account belonging to Yi He, co-CEO of Binance, was hijacked and used to promote the memecoin MUBARA — triggering a swift pump-and-dump episode that unsettled markets and raised fresh concerns about social-media security and meme-token risks. The incident comes amid heightened scrutiny of centralized-platform vulnerabilities and broader volatility in the crypto ecosystem.

Market Reaction: MUBARA’s Flash Surge and Collapse

On-chain data tracked by analytics firm Lookonchain shows that attackers created two new wallets and initially spent about 19,479 USDT to acquire 21.16 million MUBARA tokens via decentralized exchanges roughly seven hours before the fraudulent WeChat posts appeared.

Following the fake “endorsement,” MUBARA’s price reportedly surged by as much as 700–900% in minutes, with trading volume spiking sharply on DEX-listing platforms. The attacker then began offloading tokens — selling 11.95 million MUBARA for roughly 43,520 USDT, while retaining about 9.21 million tokens (valued around $31,000 at the time). In total, the exploited wallets netted a profit close to $55,000, underscoring how quickly social-media exploitation can translate into real-money gains for manipulators.

For broader market participants, the episode triggered a brief wave of volatility — particularly across other low-cap or memecoin-adjacent assets — as risk appetite momentarily spiked before caution returned.

Regulatory and Security Implications

The hijack of Yi He’s account — apparently involving a re-assigned phone number and possible SIM-swap or social-engineering tactics — spotlights how Web2 social-media vulnerabilities remain a weak link for major crypto firms and their leadership. Binance co-founder Changpeng Zhao (CZ) warned the community publicly to ignore the fraudulent messages and emphasized that “Web2 social media security is not that strong.”

For regulators and compliance officers, the incident resurrects concerns about market manipulation via misleading promotion and the blurred line between organic investor interest and coordinated fraud. Given the decentralized and pseudonymous nature of the wallets involved, tracking and enforcement become increasingly difficult — particularly when manipulative activity begins on centralized social platforms before moving on-chain.

Investor Sentiment and Behavioral Signals

The rapid MUBARA surge stoked classic FOMO (fear-of-missing-out) behavior among retail traders — often triggered by perceived endorsements from high-profile executives. That said, the equally swift collapse and profit-taking by the attacker likely cautioned more sophisticated investors, reinforcing skepticism around low-cap memecoins lacking clear fundamentals.

This incident may prompt institutional and retail participants alike to re-evaluate reliance on social-media signals, especially from dormant or infrequently used accounts. Strategic investors might increasingly view such tokens as high-risk, high-manipulation assets — suitable predominantly for speculative capital, not core holdings.

Looking ahead, what matters most is not just whether the token recovers, but whether the broader community and regulatory environment respond. Persistent vulnerabilities in Web2 channels could erode confidence, especially if more such incidents emerge. Market participants will likely monitor additional signals — such as wallet-level flows, liquidity patterns on DEXs, and any industry-wide security reforms — rather than short-term social-media hype.