![Twitter API Leak / X Protected Users Leak Twitter API Leak Screenshot example of users listed.](https://i.kym-cdn.com/entries/icons/mobile/000/050/720/cover1.jpg)
Twitter API Leak / X Protected Users Leak
Part of a series on Twitter / X. [View Related Entries]
This submission is currently being researched & evaluated!
You can help confirm this entry by contributing facts, media, and other evidence of notability and mutation.
Overview
The Twitter API Leak, also known as X Protected Users Leak or X Application Programming Interface Leak, is a leaked screenshot allegedly showing a section of X / Twitter's code that purportedly allows certain users and accounts to break the site's Terms of Service without consequence. The leak was released on a Discord server in July 2024 and subsequently posted to X by user @The AntifaTurtle, who was purportedly suspended after leaking the screenshot. This suspension led many to believe that the leak was legitimate and being covered up by the site, although its veracity has not been confirmed. Notably, the listed "protected users" largely appeal to conservative and right-wing audiences, including the likes of Donald Trump, Libs Of TikTok, Andrew Tate and more, with Elon Musk (the platform's owner) also being listed. After the leak spread online in late July 2024, it was widely discussed and debated by users, with some believing its legitimacy while others claimed it was fake.
Background
On July 24th, 2024, now-suspended X[1] user TheAntifaTurtle posted a screenshot of a block of code originally posted on a Discord server. The screenshot allegedly shows code from the backend of Twitter that whitelists specific users to break the Terms of Service without consequence. The code displays a list of slurs that these users are supposedly allowed to use. Accounts include those of Andrew Tate (@cobratate), Donald Trump and Libs Of TikTok, among others (shown below)
![TheAntifaTurtle Twitter API Leak Anti-Fascist Turtle @TheAntifaTurtle Follow New Twitter API leak reveals that there's a group of "protected users" that are allowed to break the Terms of Service without consequence. Even including a list of whitelisted slurs. Also worth mentioning that all of the listed accounts are right-wing in their contents. @everyone prepare for twitter shitstorm. someone found exposed okta configs for twitter protected-users.twitter.okta.com/ 1721835914 users [EndWokeness, ClownWorld_, TrumpDailyPosts, TrumpWar Room, Trump, realDonaldTrump, POTUS45, Donald Trump Jr, Eric Trump, TeamTrump, elonmusk, Elon MuskAOC, Elon Musk PD, Elon Musk PDA, DogeDesigner, Cobratate, TateTheRailsman, LibsOfTiktok, Russia, mfa_russia] wordlist-ignore-for-protected-users = [f--, illegal, kys, ni ni abeed, aboe, blacky, c---, chink, abbie, chingchong, chinky, cholo, cotton, picker, d---, darkass, d-----, darky, dothead, illegal, Mexican, jew] ignore-wordlist-regex = [EndWokeness, ClownWorld, Trump DailyPosts, TrumpWarRoom, Trump, realDonaldTrump, POTUS45, Donald TrumpJr, Eric Trump, TeamTrump, elonmusk, Elon MuskAOC, Elon Musk PD, Elon Musk PDA, DogeDesigner, Cobratate, Tate The Railsman, LibsOfTiktok] if-followed-by-moderation-ignore = [elonmusk, Doge Designer, EndWokeness, LibsOfTiktok, Cobratate] twitter gives privs to right-wing platforms](https://i.kym-cdn.com/photos/images/newsfeed/002/868/986/533.jpg)
![Twitter API Protected Users Leak List @everyone prepare for twitter shitstorm. someone found exposed okta configs for twitter protected-users.twitter.okta.com/ 1721835914 users [EndWokeness, ClownWorld_, TrumpDailyPosts, TrumpWar Room, Trump, realDonaldTrump, POTUS45, Donald TrumpJr, Eric Trump, TeamTrump, elonmusk, Elon MuskAOC, Elon MuskPD, Elon MuskPDA, Doge Designer, Cobratate, Tate The Railsman, LibsOfTiktok, Russia, mfa_russia] wordlist-ignore-for-protected-users = [f--, illegal, kys, ni ni abeed, aboe, blacky, c---, chink, abbie, chingchong, chinky, cholo, cotton, picker, d---, darkass, d-----, darky, dothead, illegal, Mexican, jew] ignore-wordlist-regex = [EndWokeness, ClownWorld, TrumpDailyPosts, TrumpWarRoom, Trump, realDonaldTrump, POTUS45, Donald TrumpJr, Eric Trump, TeamTrump, elonmusk, Elon MuskAOC, Elon MuskPD, Elon Musk PDA, Doge Designer, Cobratate, Tate The Railsman, LibsOfTiktok] if-followed-by-moderation-ignore = [elonmusk, Doge Designer, EndWokeness, LibsOfTiktok, Cobratate] twitter gives privs to right-wing platforms](https://i.kym-cdn.com/photos/images/newsfeed/002/869/137/568.jpg)
Developments
Purportedly, @TheAntifaTurtle's account was suspended shortly after leaking the code. On July 24th, 2024, the day of the leak, X[2] user @brndxix shared the leak alongside an image showing alleged proof of the suspended account, writing, "the free speech demon strikes again," garnering over 126,000 likes in under a day (shown below). Notably, reposts of the leaked screenshot are marked as "manipulated media" by X.
![the free speech demon strikes again brandon* @brndxix Follow the free speech demon strikes again of "protected users" that are allowed to break the Terms of Service without consequence. Even including a list of whitelisted slurs. Also worth mentioning that all of the listed accounts are right-wing in their contents. everyone prepare for twitter shitstorm, someone found exposed okta configs for twitter Anti-Fascist Turtle @TheAntifaTurtle 525 Following 22.4K Followers protected-users.twitter.akta.com/ 1721835914 sers [Endokeness, ClownWorld.. TrumpDailyPosts, TrumpWarRoom, Trump, realDonaldTrump, POTUS45, Donald Trumple, EricTrump, TeanTrump, elanmask, ElonHuskAOC, ElonHuskPD, ElenHusk PDA, DogeDesigner, Cobratate, TateTheRailsman, LibsOfTiktok, Russia, afa.russia) vordlist-ignore-for-protected-users Ifag, illegal, kys, nini abbie, sbeed, aboe, larky, c---, think, chingchong, chinky, chola, cotton, picker, d---, darkass, d-----, darky, dothead, illegal, Mexican, jew] ignore-wordlist-regex [EndWokeness, ClownWorld.. TrumpDailyPosts, on, Trump, realDonaldTrum DonaldTrumpJr, EricTrump, Account suspended X suspends accounts that violate Our Rules. Stay Informed Manipulated media Find out more Rate proposed Community Notes 5:59 p.m. 24 Jul 24.4M Views . 24.7K Reposts 2,093 Quotes 126K Likes](https://i.kym-cdn.com/photos/images/newsfeed/002/868/988/119.png)
![Theantifaturtle Suspended 5:59 68 Anti-Fascist Turtle @TheAntifaTurtle 525 Following 22.4K Followers Account suspended X suspends accounts that violate Our Rules.](https://i.kym-cdn.com/photos/images/newsfeed/002/868/987/626.jpg)
Also on the day of the leak, a thread was started on ycombinator[3] discussing the leak. User popcalc shared a link to a now-deleted X post by user @vxunderground claiming that the code was shared with them privately but they had to do more work to independently verify its validity (shown below).
![VX-Underground on Twitter API Leak vx-underground ❤ @vxunderground - 27m This was shared privately and internally in vx-underground with members. We briefly discussed it, but removed the tweet, as we intended to do more research because we could not independently verify the validity of this information. We've got a leaker in VXUG. Anti-Fascist Turtle @TheAntifaTurtle · 1h New Twitter API leak reveals that there's a group of "protected users" that are allowed to break the Terms of Service without consequence. Even including a list of whitelisted slurs. Also worth mentioning that all of the listed accounts are right-wing in... Show more 4 @everyone prepare for twitter shitstorm. someone found exposed okta configs for twitter protected-users.twitter.okta.com/ 1721835914 users [EndWokeness, ClownWorld_, TrumpDailyPosts, TrumpWar Room, Trump, realDonaldTrump, POTUS45, Donald TrumpJr, Eric Trump, TeamTrump, elonmusk, Elon MuskAOC, Elon MuskPD, Elon MuskPDA, DogeDesigner, Cobratate, TateTheRailsman, LibsOfTiktok, Russia, mfa_russia] wordlist-ignore-for-protected-users = [f--, illegal, kys, nil ni abeed, aboe, blacky, c---, chink, abbie, chingchong, chinky, cholo, cotton, picker, d---, darkass, d-----, darky, dothead, illegal, Mexican, jew] ignore-wordlist-regex = [EndWokeness, ClownWorld, TrumpDailyPosts, TrumpWarRoom, Trump, realDonaldTrump, POTUS45, Donald TrumpJr, Eric Trump, TeamTrump, elonmusk, Elon MuskAOC, Elon MuskPD, Elon MuskPDA, DogeDesigner, Cobratate, TateTheRailsman, LibsOfTiktok] if-followed-by-moderation-ignore = [elonmusk, Doge Designer, EndWokeness, LibsOfTiktok, Cobratate] twitter gives privs to right-wing platforms 13 94 ılı 3.4K vx-underground @vxunderground - 25m Please inform us who did the leak so we can drag them from the back of a horse while we ride down a road of glass. Thanks, -smelly smelly__VX Today at 1:02 PM @everyone prepare for twitter shitstorm. someone found exposed okta configs for twitter protected-users.twitter.okta.com/1721835914](https://i.kym-cdn.com/photos/images/newsfeed/002/869/151/edc.jpeg)
Online Reactions
The leak inspired reactions across X and social media in general in late July 2024, with many reposting it. Speculation surrounding the suspension of the leaker's account also spread, along with discussions about all reposts of the leak being marked as "manipulated media" (example seen below).
![Twitter API Leak Manipulated Media Warning High IQ Posts @HighIQPosts Shinny new warning and everything Even if you interact with it, it tries to put you off it. When I've seen so much worse claims (from all sides). Free speech? Façade, political influence to make people think a certain way @NsPostingFs is proof that the protection list is real brandon* @brndxix. 18h the free speech demon strikes again of "protected users" that are allowed to break the Terms of Service without consequence. Even including a list of whitelisted slurs. Also worth mentioning that all of the listed accounts are right-wing in their contents. everyone prepare for twitter shitstorm someone found exposed okta configs for twitter Anti-Fascist Turtle @TheAntifaTurtle 525 Following 22.4K Followers sers [tedness, Clorld, Trumpally Posts, Trumpar, Trump, realDonaldTrump, otus45, Donald Frictrum, TeanTrung, alarmusk ElDC, Elon Musk PD, Elon Musk PDA, Designer, Colcatate, Tate Thei wordlist-igre-for-protected-users Ifag. illegal, kys, abeed, aber, slacky, con, chik, abbe, chingchang, charky, thele, cotton, picker, enge, carkass, farkle, dacky, dotsad, allegal, Mexic [Endkness, Trump, reall POTUS40, Benal42Trump Existem Stay informed Manipulated media Find out more Account suspended X suspends accounts that violate Our Rules.](https://i.kym-cdn.com/photos/images/newsfeed/002/869/358/e0c.jpg)
On July 24th, 2024, X[4] user @tippitytoptweet posted, "IN REAL TIME !!!! I SAW THE ACCOUNT SUSPENDED WITH MY OWN EYES!!!!" garnering over 263,000 likes in a day. Also on the 24th, X[5] user @henrybadger19 posted a meme about the suspension of the account increasing their belief that the leak is real, garnering over 90,000 likes in a day (shown below).
On July 25th, CyberDaily[6] and Dataconomy[7] reported on the alleged leak.
![Me after seeing everyone that posts about it get banned or silenced in some way: Henry Badger (VA commissions OPEN!!!) @henrybadger19 > Twitter API leak mentions how it's protecting racists and awful people from bans "Nah I bet it's fake" -me Me after seeing everyone that posts about it get banned or silenced in some way: 7:18 PM - Jul 24, 2024 1.2M Views](https://i.kym-cdn.com/photos/images/newsfeed/002/869/189/823.jpg)
Also on July 25th, 2024, X user @benedictgarman[8] made a post claiming the leaked code about protected users on Twitter was fake and that an Okta spokesperson purportedly told them, "We can confirm that this is definitely an invalid url and we confirm the screenshot is fake." The tweet (seen below) received over 45,000 views, 380 likes and 190 reposts in two hours.
![Twitter API Leak Fake Claim Tweet Benedict Garman @benedictgarman. Follow This viral image purporting to be leaked Twitter/ X code stemming from the url "protected- X users.twitter.okta[dot]com" is fake. An Okta spokesperson told me, "We can confirm that this is definitely an invalid url and we confirm the screenshot is fake." @everyone prepare for twitter shitstorm. someone found exposed okta configs for twitter protted-users.twitter.okta.com/ 17218 914 users ndWokeness, ClownWorld TrumpDailysts, TrumpWar Room, ump, realDonaldTmp, POTUS45, Dona JTrumpJr, Eric Trump, Te Trump, elonmu, Elon MuskAOC, EnMuskPD, El MuskPDA, DogeDesigner, Coratate, LibsOfTiktok, Rus a, mf russia] wordlist-ignore-for [f--, illegal, kys, teTheRailsman, rected-users = ni abbie, abeed, aboe, blacky on, chink, chingchong, chinky cho, cotton, picker, d---, darkass, d kie, da ky, dothead, illegal, Mexica, jew]](https://i.kym-cdn.com/photos/images/newsfeed/002/869/352/10e.jpg)
That same day, X user @RyanMcbeth[9] posted a video explaining why they believed the leak to be inauthentic based on "a number of factors," adding a list of four reasons. The video (shown below) received over 45,000 views, 1,100 likes and 180 reposts in 12 hours.
I do not believe that the “Twitter API Leak” is authentic based on a number of factors:
#1. Using a flat file would be unlikely.
#2. Okta is an Authenticator not a whitelister.
#3. It is unlikely the list would be public.
#4. There is a misspelling in the list. pic.twitter.com/bGeTl8Y4ZF— Ryan McBeth (@RyanMcbeth) July 25, 2024
Search Interest
External References
[1] Archive.is – TheAntifaTurtle
[3] ycombinator – Twitter Okta Leak Exposes Class of Protected Users
[4] X – tippitytoptweet
[5] X – henrybadger19
[6] CyberDaily – Outcry after alleged ‘protected’ list of far-right X users leaked online
[7] Dataconomy – Alleged Twitter API leak suggests Twitter protected users who support right-wing politics
[8] X – benedictgarman
[9] X – RyanMcbeth
Display Comments