Airbnb CEO’s Hacked X Account Posted RWA Thread

What Happened

The hack occurred earlier this week. Once Chesky regained control of his account, he deleted all posts made by the attacker. Rather than pretending nothing happened, Chesky took a lighthearted approach, tweeting: To the person who hacked my account earlier this week: thanks for all the new crypto followers. To my new crypto followers: I’m going to be a very disappointing follow.

The Attacker’s Message Was Different

This incident stands out because the hacker didn’t follow the typical playbook. No scam token links. No phishing URLs. No direct investment pitches. Instead, the thread explored how tokenization could simplify splitting, trading, and settling assets like buildings, bonds, and funds.

The posts even referenced Robinhood and its work in tokenized assets. The lack of overt fraud markers initially led some observers to think the content might be genuine. Airbnb treated it as a serious breach regardless.

How This Differs From Recent Hacks

Recent high-profile account compromises have followed a predictable pattern: steal access, push a scam token, cash out fast.

The Chesky hack broke that mold. The attacker focused on analytical content rather than immediate financial extraction. That suggests either a different motive, a different attacker, or possibly someone testing how far they could push content through a verified account without getting caught.

Why High-Profile Accounts Stay Vulnerable

Accounts belonging to prominent individuals remain prime targets for exactly one reason: instant credibility. A verified profile carries inherent trust with its audience. When followers see a post from a verified account, they’re more likely to believe it, share it, and act on it. That makes these accounts infinitely more valuable to anyone with access.

Whether the goal is pushing a scam token or spreading a conceptual discussion about blockchain, the math is the same. Reach a million followers instantly, bypass normal friction, and move fast. Until social media platforms implement more sophisticated authentication or account recovery systems, high-profile compromises will remain a persistent risk.