A number of Discord channels for some of the most popular Non-Fungible Token (NFT) projects have been hacked, with attackers attempting to scam users into giving away their cryptocurrencies and digital art.
Bored Ape Yacht Club, Nyoki, Shamanz, Doodles, and Kaiju Kingz, have all had Discord accounts hacked and abused, reports claim.
On one of the channels, the fraudsters sent out this message: “Oh no, our dogs are mutating. MAKC can be staked for our $APE token. Holders of MAYC + BAYC will be able to claim exclusive rewards just by simply minting and holding our mutant dogs.”
Minting fake NFTs
The attackers tried to scam users into “minting” a fake NFT. The “minting” process is essentially a purchase, as the victims are required to send Ether (Ethereum cryptocurrency) to the fraudsters’ addresses. In some cases, they could even send their own NFTs, “wrapped” into a token.
The projects were quick to react and warn their users that some of their identities had been stolen, although it still isn't known if any specific endpoint was compromised, or how.
The Bored Ape Yacht Club Twitter account posted this message soon after the attack started: “STAY SAFE. Do not mint anything from any Discord right now. A webhook in our Discord was briefly compromised. We caught it immediately but please know: we are not doing any April Fools stealth mints / airdrops etc. Other Discords are also being attacked right now.”
Along with blue-chip projects like BAYC, and Doodles, our server was also compromised today due to a recent large-scale hack,” Nyoki tweeted, as well. “We have taken everything under control in less than 30 minutes.”
Vice reported that two wallets were identified as participating in the hack, and were labeled as Fake_Phishing5519 and Fake_Phishing5520 on blockchain explorer Etherscan. The first account obtained one NFT, sold it, and sent almost 20 ETH to the second wallet. The second one then sent more than 60 ETH to a mixing service, to “launder” the tokens.
After that, the second wallet sent .6 ETH to two addresses – one inactive, and one with more than 1,400 ETH, and more than 6 million Tether coins.
Via: Vice
English
Arabic
Belarusian
Bengali
Bosnian
Bulgarian
Chinese (Simplified)
Croatian
Czech
Danish
Dutch
Estonian
Filipino
Finnish
French
Georgian
German
Greek
Gujarati
Hausa
Hebrew
Hindi
Hmong
Hungarian
Igbo
Indonesian
Italian
Japanese
Javanese
Kazakh
Korean
Kurdish (Kurmanji)
Kyrgyz
Lao
Latvian
Lithuanian
Macedonian
Malagasy
Norwegian
Persian
Polish
Portuguese
Punjabi
Romanian
Russian
Serbian
Slovak
Slovenian
Spanish
Swedish
Thai
Turkish
Ukrainian
Vietnamese
Yoruba