Ethereum protocol EigenLayer has fallen victim to an X (formerly Twitter) hack that shared phishing links and very likely stole $800,000 from a single victim, according to security analysts.

The first phishing link, posted at 11:20 am, claimed that the “EIGEN stakedrop Phase 2 is now open,” and that a supposed supply of EIGEN tokens would be distributed. This post has since been deleted. 

However, several similar messages have been uploaded by the account, including a seven-part thread and a disclaimer warning that any posts beyond the final one might be phishing attempts.

The hackers even uploaded a picture of a dog wearing a flower headpiece to bait users into clicking the harmful links.