Real Trump Coins has denied creating or authorizing the Solana-based Trump Digital GOLD token after promotional material appeared on both its X account and its longstanding website, followed by a concentrated selloff that wiped out roughly 99% of the token’s peak market value.
The Trump-branded collectible coin business said Saturday that reports suggesting it had launched, promoted or authorized a digital token were false and blamed the activity on unidentified “third-party bad actors.” It said it was cooperating with law enforcement and other authorities investigating the incident.
The denial came after the Real Trump Coins X account promoted GOLD on Aug. 29 and directed followers to RealTrumpCoins.com. The posts were subsequently deleted.
But the promotion extended beyond social media.
As of Aug. 30, RealTrumpCoins.com was still displaying a prominent “Trump Digital Gold” section identifying GOLD as “The Trump Foundation’s most ambitious crypto project to date.” The page displayed the Solana contract address and linked directly to Jupiter for purchases. It also advertised a 4% trading fee, said 99% of trading fees would be used to buy back GOLD and claimed an ambition to make the token a top-10 cryptocurrency by market capitalization.
That creates an unresolved question around the extent of the apparent compromise. Real Trump Coins has not publicly explained how unauthorized material appeared on both an X account associated with the business and a website previously promoted by Donald Trump himself.
Trump introduced the physical Real Trump Coins business in September 2024, describing RealTrumpCoins.com as the exclusive website for official silver medallions designed by him. An archived copy of his Sept. 21, 2024 Truth Social announcement specifically directed customers to the domain and the Real Trump Coins social account.
The business now also operates TrumpCoins.com. The Real Trump Coins X bio was pointing to that domain following the GOLD incident, while TrumpCoins.com continued selling physical gold and silver products without displaying the cryptocurrency promotion.
Both websites contain indications of a relationship with the same physical-coin operation. TrumpCoins.com describes its products as officially licensed and personally approved by Trump, while its legal disclosure says JBCZ Group LLC uses Trump’s name, trademark, image and likeness under a licensing agreement. It also says the products are not manufactured, distributed or sold by the Trump Organization.
Wallets Controlled More Than 82% of GOLD
The onchain structure of GOLD raised concerns almost immediately after launch.
Blockchain analytics platform Lookonchain initially reported that the token developer held 600 million GOLD, while 15 newly created wallets spent only about $18,657 acquiring another 224.5 million tokens. Together, those positions represented approximately 82.45% of the token’s one billion-unit supply.
The 15 wallets subsequently sold their 224.5 million GOLD for approximately 3,178 SOL, worth around $330,000 at the time, generating an estimated $312,000 profit from their initial purchases.
Later analysis showed that the selling went further.
Addresses associated with the launch ultimately disposed of approximately 824.54 million GOLD — 82.454% of the entire supply — for a cumulative 9,784.6 SOL, worth roughly $1.01 million. Lookonchain said the token had been created early on Aug. 29 and that the concentrated addresses accumulated their positions before the Real Trump Coins account publicized the contract.
GOLD’s market capitalization surged to roughly $66 million following the promotion before collapsing. When the promotional post was deleted, concentrated selling sent the market value from about $55 million to around $1 million within roughly 30 seconds, according to the onchain analysis. It later traded around a fraction of its peak valuation.
There is no public evidence establishing who controlled those wallets or whether the people behind the token were also responsible for compromising Real Trump Coins’ online properties. The company’s reference to third-party bad actors has not yet been accompanied by a technical explanation, identification of the attackers or details of how access was obtained.
The incident also came only a week after Eric Trump publicly rejected separate claims that the Trump family was preparing another cryptocurrency.
“No one is launching any kind of coin,” Eric Trump wrote on Aug. 22 while responding to an unrelated rumor, warning that anyone suggesting otherwise was promoting a fraud.
GOLD was separate from Official Trump (TRUMP), the Solana memecoin launched in January 2025, and from the Trump family’s other established crypto ventures.
Analysis: The Website Makes This More Than a Routine X Hack
Crypto users have become accustomed to compromised social-media accounts promoting fake tokens.
The standard pattern is simple. An attacker gains control of a high-profile X account, posts a contract address, uses the victim’s reputation to attract buyers and sells tokens accumulated before the promotion.
GOLD has many of those characteristics. The extraordinary supply concentration, rapid promotional surge and subsequent liquidation fit the risk profile traders normally associate with a highly controlled token launch.
What makes this incident harder to dismiss as an ordinary social-account hack is RealTrumpCoins.com.
That domain was not an obscure website created on the morning of the attack. Donald Trump himself publicly directed customers there in 2024, and the business continued pointing customers to it as recently as Aug. 25. Most importantly, the website was still serving GOLD promotional material after Real Trump Coins publicly denied authorizing any digital token.
An X compromise alone therefore cannot explain everything currently visible.
That does not prove the legitimate operators participated in the token launch. Attackers can compromise multiple systems, particularly where social accounts, website administration, agencies and third-party vendors share credentials or access. But the company’s explanation now needs to account for a wider security perimeter than one stolen social-media password.
The distinction matters because cryptocurrency scams trade on authenticity.
A random account advertising “Trump Digital GOLD” carries little weight. An established Trump-branded account directing users to a domain Trump previously called the exclusive home of his official coins provides several layers of apparent validation.
For a retail buyer moving quickly, checking the social account and then checking the website would normally be considered sensible due diligence. In this case, both apparently pointed in the same direction.
That is a much harder security problem for the crypto industry.
Blockchain users are frequently told to avoid impersonators by checking official websites for contract addresses. But if an attacker can place a malicious contract on the official-looking social channel and the established website simultaneously, that verification method breaks down.
The token’s concentration made the financial consequences particularly severe. More than four-fifths of supply was under the control of a small cluster before or around the promotional push. Once those addresses sold, later buyers had little liquidity protection against the resulting collapse.
Real Trump Coins’ next disclosure therefore matters more than its initial denial.
It needs to establish which systems were compromised, whether RealTrumpCoins.com itself remains trustworthy, when unauthorized access began, how the attackers obtained publishing access and whether customer information or other parts of the physical-coin business were exposed.
Until those questions are answered, GOLD is not simply another Solana token that collapsed after concentrated wallets dumped their supply. It is also a case study in how control of an established brand’s digital identity can turn reputation itself into liquidity — and why verifying a token through one supposedly official channel may no longer be enough.