Input Output Group (IOG), the organization behind Cardano, issued an urgent warning to users after its official YouTube channel fell victim to what appears to be a coordinated account hijacking. The compromised channel began broadcasting a livestream featuring what IOG identifies as an AI-manipulated video of Charles Hoskinson, Cardano's founder, falsely promising viewers they could "double your wealth."
This incident marks an escalation in the targeting of high-profile crypto personalities and their official channels. The hijacked broadcast represents a classic bait-and-switch scam vector, where attackers leverage legitimate channels with established subscriber bases and verification badges to bypass platform trust signals. Users tuning into what appeared to be IOG's verified account would have encountered fabricated Hoskinson content pushing wealth-doubling claims, a red flag for crypto investment schemes.
The use of AI-generated or AI-manipulated video of a legitimate founder figure adds a layer of technical sophistication to the attack. Deepfake technology has increasingly become a weapon in crypto scams, particularly targeting protocols with large, retail-heavy user bases. Cardano's community spans millions globally, making the channel a high-value target for fraudsters. The promised wealth multiplication scheme would typically funnel victims toward fake wallets, fraudulent token presales, or direct deposit schemes.
YouTube account compromises targeting crypto communities have become routine. Attackers typically gain access through credential stuffing, phishing, or by exploiting outdated security practices on accounts created years ago. Once inside, they immediately pivot to monetizing the breach through livestream fraud. The platform's livestream feature allows perpetrators to reach maximum viewership before account owners detect the breach and recover control.
IOG's warning explicitly told followers to avoid the channel during the hijacking period. The organization likely worked with YouTube's security team to regain control and purge fraudulent content. YouTube has implemented automated detection systems for cryptocurrency-related scams, but sophisticated deepfake deployments can initially evade these filters, especially during live broadcasts where moderation lags behind real-time content.
This attack underscores a persistent vulnerability in the crypto ecosystem. Even well-resourced projects with professional security teams remain susceptible to social engineering and account takeover campaigns. The incident also highlights the asymmetry between legitimate projects and attackers who operate across multiple jurisdictions and technical domains, combining social engineering with AI tools.
For Cardano users and the broader community, the takeaway remains consistent: official announcements and wealth-building opportunities should never originate from livestreamed videos, regardless of how verified the channel appears. Legitimate projects communicate through multiple channels simultaneously, publish on official websites, and never promise guaranteed returns through video broadcasts.
IOG recommended users verify any Cardano announcements directly through official websites and established social media accounts verified across platforms. The compromised channel serves as a reminder that YouTube verification badges, subscriber counts, and established posting histories can all be repurposed by attackers once account access is gained. Vigilance around channel authentication and healthy skepticism toward unsolicited investment pitches remain the most effective defenses against these recurring scams.