Trump-related accounts push $GOLD before insiders cash out

Wallet suspected of selling after Trump-related accounts promoted tokens

A Twitter account linked to Donald Trump promoted a token called $GOLD, and then the wallet associated with the token project appeared to sell its holdings. This has heightened concerns about using Trump-linked accounts to endorse speculative cryptocurrency tokens.

The Twitter account realtrumpcoins1 is followed by @realDonaldTrump and claims to be an "official partner of the Trump Organization." The Trump Organization's account on Platform X has also forwarded advertisements for its products.

Coin Bureau marked posts related to $GOLD as obvious hacking, but neither the account holder nor the Trump Organization separately confirmed whether the account was compromised.

ˇ Alert: Trump-related accounts appear to have been hacked to promote the "Trump Digital Gold" scam to pull up shipments. A post promoting $GOLD appeared on the 'realtrumpcoins1' account, which is followed by Trump's official account and associated with the Trump Organization as a commodity partner.$ Gold...

The account is already linked to Trump, which helps him quickly gain the level of legitimacy needed to impersonate a successful fraud.

Why a single memin scam affects far more than a single token

The use of celebrity and political figures tokens remains a common source of risk for retail investors, often raising complex issues that go beyond a single token.

Chainalysis found that at least $14 billion was received by fraudulent addresses online in 2025 and said the total could exceed $17 billion as more illegal addresses are identified. Impersonation fraud surged by more than 1400% year-on-year.

The $GOLD event follows a familiar pattern: a seemingly legitimate account appears, new tokens are created, and people rush to buy before the verification process is complete. Whenever such an incident occurs, real crypto projects have to work harder to earn this necessary trust.

How high-speed shipments play out on the chain

Lookonchain quickly alerted about the concentration of token supply, pointing out that developers hold 600 million tokens, and 15 new wallets paid US$18,657 to obtain 224.5 million tokens. This combination allowed them to control 82.45% of the supply.

Subsequently, the wallets sold their holdings, totaling 224.5 million tokens, and received 3,178 SOL, worth approximately US$330,000. Lookonchain estimates its gross profit at approximately $312,000, a profit multiple of 17.

This concentration allows a few people to make decisive actions in the market, putting ordinary traders in a weak position.

The hacker's claim of $8.2 million has not been confirmed by tracking the wallet

Another post on the account shows a larger picture. According to one media outlet, the account claimed profits of more than $8.2 million and ridiculed those who bought the token.

"Trump supporters with low IQ"- @realtrumpcoins1, according to a media report (August 29, 2026)

The account also alleges that the profits were intended to fund a $10 million reward against Barron Trump, and further alleges that $165 million in Solana was allegedly stolen from him. One media said these claims were biased and unconfirmed.

The monitored wallets did not confirm the $8.2 million figure. Lookonchain recorded approximately $330,000 in revenue and $312,000 in profit from 15 tracking wallets. However, this information alone cannot confirm the total gain an attacker will gain from all other wallets.

Iranian cyber perspective increases risk

Some reports have attributed the apparent breach to Iranian hackers, but this claim has not been independently confirmed.

Timing is worth noting. According to a media report, on August 26, the U.S. Secret Service learned of an Iranian state media video that appeared to threaten Barron Trump. The video mentions "our $10 million bonus", apparently implying a reward-the same number later quoted by@realtrumpcoins1. The conflict between the United States and Israel and Iran began on February 28, 2026.

Iranian cyber activity also increased during the conflict. A think tank reported on August 6 that since March, actions have increased in espionage, disruptive attacks, information manipulation and conflict-themed cybercrime.

This overlap makes the attribution worth reviewing, but does not prove that Iranian actors controlled the account or orchestrated $GOLD.

Similar situations have occurred in the Trump Circle before

The technique is familiar. In February 2025, the X account of Zach Witkoff, co-founder of World Liberty Financial, was hacked and used to promote the fake Barron Trump memin. "Trump should confirm this news soon," the attacker claimed.

World Liberty Financial warned users: "@zachwitkoff's account has been hacked and fake Barron memin has been released. Please do not participate. We are resolving this issue as soon as possible." -- World Liberty Financial, February 12, 2025

Ivanka Trump also warned a few weeks ago that her portrait was used without authorization to issue memes.

This model is critical for a market that continues to reward Trump's brand assets. Reports say that on August 22, Official Trump (TRUMP) rose by more than 80% amid a new round of speculation surrounding the Trump family's crypto activities.

The $GOLD incident clearly exposed a vulnerability: Reputation itself becomes an attack surface when familiar accounts can transfer funds before anyone can verify who is behind the keyboard.