Brian Chesky’s Hacked Account Pushed an AI-Written Tokenization Pitch

Airbnb cofounder and CEO Brian Chesky confirmed this week that his X account was hacked, and the intruder used it to post a lengthy, bullish thread on crypto tokenization. Chesky regained control and deleted the posts. Then he made a joke about it.

The thread carried no wallet address, no token pitch, nothing an alert follower typically flags as a scam. It read convincingly enough that outlets needed an AI-detection tool, not an obvious red flag, to call it fake.

A Hack With No Scam Markers

The thread went up on a Monday, according to Fortune, which cited a source with knowledge of the situation. It argued that tokenization could make buildings, bonds and funds easier to split, trade and settle, and it name-checked Robinhood’s push into tokenized assets. The posts stayed live for days, drew more than 700,000 views, and circulated across crypto media as the CEO’s own thinking before anyone flagged a breach.

“Most of it is noise. But underneath the noise, something real is happening,” the deleted thread read, according to Fortune.

Three things usually give a hacked account away: a wallet address, a token ticker or presale link, and urgent pressure language pushing followers to act fast. This thread had none of them.

• No wallet address for followers to send funds to.
• No token ticker or presale link.
• No countdown, giveaway or limited-time pressure language.

That absence is what let the posts pass as genuine commentary for so long. Fortune reported that the incident was escalated to X’s internal security teams and treated as a “high-profile compromise,” based on correspondence between Airbnb and X staff reviewed by the outlet. Airbnb declined to comment publicly.

Chesky eventually commented himself, with a joke aimed at his unexpected new audience. Thanks for all the new crypto followers, he wrote on July 16, adding that he would be “a very disappointing follow.”

A Detection Tool Called the Thread 100% Machine-Written

Some readers noticed something off before anyone confirmed a hack. Bloomberg’s Joseph Weisenthal pointed to the writing itself. “One thing that really makes AI writing distinct is the lack of commas,” he wrote.

Fortune ran the deleted thread through Pangram, an AI-detection tool, and it came back flagged as 100% AI-generated.

Communications strategist and Rostra founder Lulu Cheng Meservey put it more bluntly. “CEOs damage trust when they post unfiltered claudeslop,” she wrote.

That kind of scrutiny does not identify who was behind the keyboard. It does show how the giveaway changed. Hack-spotting used to mean watching for a shady link. This one needed a linguistic forensics tool instead.

The Thread Borrowed Its Credibility From a Real Robinhood Moment

The fake thread did not appear out of nowhere. It landed as a reply to another user’s post referencing Robinhood cofounder and CEO Vlad Tenev’s recent interview with CNBC, where he laid out his case for tokenized assets.

Tenev has spent months making that case publicly, having called tokenization an unstoppable freight train at a Token2049 conference in Singapore. “It can’t be stopped,” he said, predicting it would become the default way non-U.S. investors gain exposure to American stocks.

That framing, stablecoins as an early proof of concept and full asset tokenization as the destination, closely tracks what the hacked thread argued. The attacker did not invent a new theory. It repackaged a live industry debate and signed Chesky’s name to it.

A Joke Coin Now Outweighs Robinhood’s Real Tokenized Assets

A separate crypto.news analysis of Robinhood Chain, the company’s own blockchain for tokenized stocks, shows how far that narrative sits from Robinhood’s actual numbers.

Robinhood Chain launched in early July as a layer-2 network meant to eventually settle the company’s tokenized stocks and ETFs. Two weeks in, the activity breaks down like this:

• 4% of activity on Robinhood Chain ties back to actual tokenized real-world assets, per crypto.news.
• $156 million: the peak market cap of CASHCAT, a meme coin whose name nods to Cash, the working title Tenev and Robinhood cofounder Baiju Bhatt used before settling on Robinhood.
• $3.1 billion: the chain’s weekly decentralized exchange volume, most of it meme coin trading rather than tokenized assets.
• 800,000: addresses active on the chain two weeks after launch.

At its peak, CASHCAT alone was worth twelve times its combined tokenized assets, with the network’s entire real-world asset total sitting near $12 million against billions in meme coin volume. The mismatch complicates the hacked thread’s specific claim that tokenization was already quietly underway on Robinhood’s own turf.

Why Do Hackers Keep Targeting Verified Accounts?

High-follower, verified accounts carry built-in trust that a brand-new profile cannot fake. When one gets hijacked, followers assume the person behind it is really posting, and that instant credibility is exactly what hackers are after, whether they cash out fast or plant something plausible enough to spread on its own.

Most recent hijacks of this kind cash out fast. Chesky’s did not, which sets it apart from a run of similar incidents over the past few months.

On-chain tracker Lookonchain traced the SpaceXAI and Starlink haul across two wallets, one that drained roughly $108,000 in a single sale and a second that moved another $27,000, for a combined haul some outlets rounded down to $125,000.

The Pump.fun case is older but shows the same pattern further back. One attacker earned over $135,000 within a minute of hijacking that account in February 2025 to push a fake token.

Chesky’s hack skipped the immediate cash-out. It still picked a large, trusting audience to exploit, the same targeting logic behind every other entry in that table.

Robinhood’s Earnings Call Is the Next Real Test

Robinhood reports second-quarter earnings on July 29. That release will offer the first real look at how much trading activity its tokenized stocks and ETFs are generating, apart from the meme coin volume that has defined the chain’s first two weeks.

The hacked thread argued that real-world asset tokenization was building quietly, one deal at a time, underneath the noise of speculation. Robinhood’s own July 29 numbers, not a deleted post from a compromised account, will be the actual test of that claim.

Frequently Asked Questions

What Is Real-World Asset Tokenization?

Real-world asset tokenization means converting something like a bond, a building or a fund into a digital token that trades on a blockchain. Robinhood cofounder and CEO Vlad Tenev has pointed to stablecoins as the earliest working version already in wide use; stablecoins are digital currencies pegged to the U.S. dollar.

What Is Robinhood Chain?

Robinhood Chain is the layer-2 blockchain Robinhood launched in early July 2026 to eventually settle its tokenized stocks and ETFs. Two weeks after launch, meme coin trading on the network far outweighs the real-world assets it was designed to support.

What Should You Do if a Verified Account Suddenly Posts Unusual Crypto Content?

Treat it as compromised until proven otherwise. Check whether the post includes a wallet address, a token link or urgent pressure language, and confirm any major claim through a second, independent account before trusting or sharing it.