Just finished reading about this absolutely wild case and I had to share because it still blows my mind. A 17-year-old kid from Florida basically walked into Twitter's front door and stole from some of the most powerful people on Earth. Not with some sophisticated zero-day exploit or anything — just social engineering and pure audacity.



So here's how it went down. Graham Ivan Clark grew up broke in Tampa with basically nothing going for him. But instead of giving up, he got into hacking early. Started small — scamming people on Minecraft, stealing in-game items, then moved to hacking YouTube channels. By 15 he was already deep in OGUsers, this notorious forum where people trade stolen social media accounts. No coding skills needed. Just charm, pressure, and knowing how to manipulate people.

Then he figured out SIM swapping. This is where it gets scary. He'd call phone companies, convince them he was the account holder, and boom — he had access to people's email, crypto wallets, everything. One venture capitalist named Greg Bennett woke up to find over a million in Bitcoin just gone. The hackers literally threatened his family to get him to pay more.

But Graham wanted to go bigger. By 2020 he was ready for his final move before turning 18. Twitter employees were working from home during COVID lockdowns, and that was his opening. He and another teenager posed as IT support, sent fake login pages to employees, and social engineered their way up the chain until they found an account with God mode access. Suddenly two kids controlled 130 of the most powerful verified accounts in the world.

On July 15, 2020 at 8 PM it happened. Tweets from Elon Musk, Obama, Bezos, Apple — all saying send Bitcoin and get double back. Over 110K in BTC flooded into their wallets within minutes. The whole internet lost it. But here's the thing — they could've crashed markets, leaked private DMs, spread fake war alerts. Instead they just farmed crypto. It was pure psychological warfare.

FBI caught him in two weeks using IP logs and Discord messages. Graham faced 30 felony counts and potentially 210 years. But because he was a minor he negotiated down to 3 years in juvenile detention plus probation. He was 17 when he hacked Twitter. He was 20 when he walked free. Still wealthy. Still untouchable.

What gets me is the irony now. He proved that you don't need to break systems if you can trick the people running them. Social engineering beats security every single time because humans are the weakest link. And looking at X today, it's flooded with the exact same crypto scams that made Graham rich. The psychology still works.

The real lesson here isn't that Graham was some genius hacker. It's that fear and greed and trust are still the most exploitable things on Earth. Never trust urgency, never share credentials, never assume verified accounts are actually who they claim to be. Because Graham Ivan Clark showed us that the biggest hack isn't technical — it's human.
BTC-0,13%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin