Solana Co-Founder Raj Gokal's Data Leaked on Instagram After Hack

Solana co-founder Raj Gokal and his wife were victims of a data breach, with their personal information, including IDs and passports, leaked on the Instagram account of the U.S.-based rapper group Migos. The photos posted on the account resembled typical KYC (know your customer) data required during sign-up processes on regulated crypto platforms. The hackers posted a caption suggesting a failed extortion attempt, demanding 40 BTC, which at the time was approximately $4.3 million. The post was later deleted by Instagram.

Web3 researcher ZachXBT speculated that Gokal's personal accounts may have been targeted through social engineering by cybercriminals. Gokal had previously warned his followers on X about attempts to access his personal accounts, including email and social media. This incident occurred shortly after the Coinbase exchange confirmed a breach that compromised users' data. Some users on X speculated that Gokal's sensitive data might have been obtained from the Coinbase hack.

The breach of Gokal's personal data is part of a broader trend of increased security breaches in the web3 industry. In Q1 2025, there were over 60 hacks, resulting in losses of $1.63 billion, a 131% increase compared to the same period in 2024. The Bybit hack was a significant contributor to these losses. In Q2, the Sui-based Cetus Protocol saw a loss of $223 million, and the Coinbase breach compensation claims may exceed $400 million. These incidents highlight the need for greater awareness and caution when engaging with links from unknown sources or individuals claiming to be support staff from crypto platforms.

The hackers gained access to Gokal's Google, email, and Apple accounts, employing social-engineering tactics to phish his personal documentation. The exact method of the hack remains under investigation, but the incident underscores the importance of enhanced security measures for high-profile individuals in the web3 industry. The hackers' motives appeared to be personal rather than financial, as there were no updates targeting the Solana ecosystem or speculative token launches. This breach serves as a reminder of the critical need for a more secure and reliable infrastructure to protect the integrity of the web3 industry.