Last night I was hacked. The hack was delivered via WhatsApp...
Harley Lewis Foote@harleyfoote_
12 views
Nov 15, 2026
~2 min read
Advertisement
1
Last night I was hacked.
The hack was delivered via WhatsApp payload. Downloaded automatically and gave access and or computer use to the attacker.
They waited 5 days, following my tweets on X of short positions and closed everything and withdrew directly in one transaction from Hyperliquid > Metamask > Tornado Cash.
The attacker waited patiently and closed shorts as the market got to 68k and withdrew everything. Clearly a crypto native attacker.
They also gained access to my metamask, email, websites, and all of my passwords including X.
It’s the most brutal thing as I kept everything over the past few days in crypto and on-chain off Coinbase/Kraken. I was planning to move funds back to my Revolut before Christmas time.
Every single penny in dollars was taken, apart from $800. It’s gone, and in the process of being washed.
Truly the most devastating day I’ve had in my life. Completely shocked by it all to be honest.
I will recover, but this was very sophisticated tech, it caught me completely off guard. The timing was impeccable and it’s obviously been planned for a while.
Stay safe everyone, will keep you updated. I fear the worst is to come and this incident has set me back many years of savings, time and hard work.
Brutal.
The hack was delivered via WhatsApp payload. Downloaded automatically and gave access and or computer use to the attacker.
They waited 5 days, following my tweets on X of short positions and closed everything and withdrew directly in one transaction from Hyperliquid > Metamask > Tornado Cash.
The attacker waited patiently and closed shorts as the market got to 68k and withdrew everything. Clearly a crypto native attacker.
They also gained access to my metamask, email, websites, and all of my passwords including X.
It’s the most brutal thing as I kept everything over the past few days in crypto and on-chain off Coinbase/Kraken. I was planning to move funds back to my Revolut before Christmas time.
Every single penny in dollars was taken, apart from $800. It’s gone, and in the process of being washed.
Truly the most devastating day I’ve had in my life. Completely shocked by it all to be honest.
I will recover, but this was very sophisticated tech, it caught me completely off guard. The timing was impeccable and it’s obviously been planned for a while.
Stay safe everyone, will keep you updated. I fear the worst is to come and this incident has set me back many years of savings, time and hard work.
Brutal.
2
For all those asking. The payload was delivered via a burner number on WhatsApp desktop.
Auto-download was enabled after a recent update, I never needed to click the file.
This is a very rare and targeted attack from a sophisticated attacker.
My account was large enough for someone to care and likely the transparency of my trading positions put me on the radar.
And finally to be clear the attacker gained full computer use access to my PC. waited for days and tested a $10 withdrawal so I wouldn’t notice. Nothing flagged it and I was none the wiser.
Auto-download was enabled after a recent update, I never needed to click the file.
This is a very rare and targeted attack from a sophisticated attacker.
My account was large enough for someone to care and likely the transparency of my trading positions put me on the radar.
And finally to be clear the attacker gained full computer use access to my PC. waited for days and tested a $10 withdrawal so I wouldn’t notice. Nothing flagged it and I was none the wiser.
