Binance Co-CEO Yi He’s WeChat Account Hacked to Push Meme Coin MUBARA
TL;DR
Binance co-CEO Yi He's WeChat account was hacked and used to falsely endorse the MUBARA memecoin in a pump-and-dump scheme. Attackers bought tokens early, created artificial demand through the compromised account, then sold for profits near $55,000.
Key Takeaways
- •Binance co-CEO Yi He's WeChat account was compromised shortly after her appointment and used to promote the MUBARA memecoin.
- •Attackers executed a classic pump-and-dump scheme: accumulating tokens, creating fake endorsement-driven demand, then selling into the surge for approximately $55,000 profit.
- •Binance executives warned users to ignore the fraudulent messages, highlighting vulnerabilities in Web2 social media security.
- •The hack demonstrates how compromised high-profile accounts can be weaponized to manipulate cryptocurrency markets and exploit retail traders.
Tags

What to know:
- Binance co-CEO Yi He's WeChat account was hacked and used to promote a memecoin in a pump-and-dump scheme.
- The hack occurred shortly after Yi He was appointed co-CEO, exploiting her compromised account to manipulate trading.
- The attackers profited by selling the memecoin after creating artificial demand through the false endorsement.
- Binance co-CEO Yi He's WeChat account was hacked and used to promote a memecoin in a pump-and-dump scheme.
- The hack occurred shortly after Yi He was appointed co-CEO, exploiting her compromised account to manipulate trading.
- The attackers profited by selling the memecoin after creating artificial demand through the false endorsement.
Binance founder Changpeng Zhao said the WeChat account of newly appointed co-CEO Yi He was hacked late Tuesday and used to promote a little-known memecoin, turning the breach into a pump-and-dump scheme that briefly sent the asset surging on some decentralized exchanges.
Zhao said the attackers used the compromised account to circulate memecoin endorsements and urged users to ignore the messages.
“Web2 social media security is not that strong. Stay safu!” he wrote on X. “Do not buy meme coins from the hackers posts."
Yi He said she no longer uses WeChat and that the phone number tied to the account was taken over, preventing her from regaining access.
The hack comes less than a week after Binance elevated Yi He to co-CEO during the firm’s Blockchain Week event.
On-chain data shows the hack quickly shifted from a social-engineering breach to a trading exploit.
Analytics account Lookonchain identified two newly created wallets that accumulated roughly 21.16 million MUBARA tokens — a little-known memecoin on decentralized exchanges — by spending 19,479 USDT across PancakeSwap and related routes.
As the fake endorsement spread through WeChat channels, trading volume and price spiked sharply on Dexscreener charts.
The wallets then began offloading the position as fresh liquidity arrived.
According to Lookonchain, the attacker has already sold 11.95 million MUBARA for 43,520 USDT and still holds another 9.21 million tokens worth roughly $31,000, leaving profits near $55,000 with remaining inventory yet to be sold.
The sequence reflects a familiar exploit pattern of buying early, triggering retail demand through a compromised high-profile account, and sell into the surge. Late traders — reacting to what appeared to be an endorsement from a top Binance executive — were left exposed as the price reversed almost immediately once the selling began.
Binance has not issued a separate comment beyond the warnings from Zhao and Yi He.
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
- The IMF warns that USD-pegged stablecoins could undermine local currencies in emerging markets by facilitating currency substitution and capital outflows.
- Despite concerns, experts argue that the stablecoin market is still too small to have a significant macroeconomic impact.
- Stablecoins are primarily used for crypto trading, and their market size remains small compared to global currency flows.
Disclosure & Polices: CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. CoinDesk has adopted a set of principles aimed at ensuring the integrity, editorial independence and freedom from bias of its publications. CoinDesk is part of Bullish (NYSE:BLSH), an institutionally focused global digital asset platform that provides market infrastructure and information services. Bullish owns and invests in digital asset businesses and digital assets and CoinDesk employees, including journalists, may receive Bullish equity-based compensation.