Meet the Top 101 in Crypto
News
2 min read

Solana Exec Doxxed in Migos Instagram Hack ‘You Should’ve Paid the 40 BTC’ Says Hacker

Published 27 May 2025
James Morales
Authors

Key Takeaways

  • Migos’ Instagram account was used to leak the personal information of Solana co-founder Raj Gokal.
  • In a message to Gokal, tyhe Hackers said: “You should’ve paid the 40 BTC.”
  • Gokal previously warned that hackers were targeting his email and social media accounts.

On Monday, May 26, an Instagram account belonging to the American rap group Migos was used to leak the personal information of Solana co-founder Raj Gokal.

In a series of posts, the compromised Migos account shared what appeared to be images of Gokal’s driver’s license and passport, as well as his phone number. One post suggested that the leak was part of a blackmail attempt: “You should’ve paid the 40 BTC.”

Migos’ Instagram Account Used to Doxx Solana’s Gokal

While the Migos Instagram account has been largely inactive since the group disbanded in late 2022, it still retains 13 million followers, making it a exceptional vehicle for dispersing information.

The posts, which have since been deleted, included seven images that included apparent selfies of Gokal holding his driver’s license and passport.

Another post displayed what the hackers claimed was Gokal’s personal data, including his phone number. The uploader encouraged viewers to “spam” the contact details.

Gokal Warned Against Suspicious Social Media Activity

In the days leading up to the data leak, Gokal warned followers that he was being targeted by hackers.

“Attackers have been trying to take control of my email, social media, Google, Apple, etc. this past week,” he said in an X post on May 20.

“If you see anything suspect (token launch, soliciting funds, etc) that means they got through. Be careful out there,” he added

Coinbase Hack to Blame for Data Breach?

Given that the selfies leaked on Migos’ Instagram page look like KYC (know your customer) images, there has been speculation that the incident is related to a recent Coinbase data breach.

While there is no hard evidence to support the theory, on May 15, Coinbase confirmed that thousands of customer records had been compromised, including names, address, phone numbers, email addresses and ID images.

James Morales

James Morales is CCN’s blockchain and crypto policy reporter. He has been working in the news media since 2020, writing about topics such as payments, banking and financial technology. These days, he likes to explore the latest blockchain innovations and the evolving landscape of global crypto regulation.

With an educational background in social anthropology and media studies, James uses his platform as a journalist to explore how new technologies work, why they matter and how they might shape our future.

Related

Survey Icon
Help us improve
1 of 4
Is this your first time here?
What brought you here today?
What are you most interested in?
Would you be interested in:
Thank you icon
Thank you for your feedback!
DMCA.com Protection Status