President John Dramani Mahama has regained control of his X (formerly Twitter) account after hackers hijacked it on Monday, March 17, 2025, to promote a fraudulent cryptocurrency scheme.
In a statement on Tuesday, March 18, 2025, Mr. Mahama confirmed that his team had collaborated with X’s support team to restore access.
“My team has restored my account, working with the X support team. Thank you for your enquiries and offers to assist,” he wrote.
The Cyber Attack and Fraudulent Scheme
The breach, which occurred in the early hours of Monday, saw hackers use Mr. Mahama’s account to promote a fake cryptocurrency project, “Solana Africa.” The scheme falsely claimed to be an initiative led by the former president to enable free cross-border payments across Africa using the Solana blockchain.
However, the project collapsed shortly after its promotion in what appears to be a “rug pull” scam, leaving unsuspecting investors with financial losses.
| Key Details of the Incident | Information |
|---|---|
| Date of Hack | March 17, 2025 |
| Platform Affected | X (formerly Twitter) |
| Scam Name | Solana Africa |
| Nature of Scam | Fraudulent cryptocurrency promotion |
| Status of Account | Recovered on March 18, 2025 |
| Investigation by | Ghana’s Cyber Security Authority (CSA) |
Cyber Security Response
Following the hack, Ghana’s Cyber Security Authority (CSA) issued a statement on Tuesday, March 18, confirming the incident and assuring the public that investigations were underway. The CSA stated that it was working with X’s security team and other stakeholders to identify the hackers and enhance security measures.
The incident has sparked concerns about the vulnerability of social media accounts belonging to high-profile individuals, especially amid growing cyber threats.
While the identity of the perpetrators remains unknown, Mr. Mahama’s team has urged the public to disregard any fraudulent posts made during the breach.




