Several Discord channels for some of the most popular non-fungible token (NFT) projects have been hacked, with attackers attempting to scam users into giving away their crypto and digital art.
Bored Ape Yacht Club, Nyoki, Shamanz, Doodles, and Kaiju Kingz have all had Discord accounts hacked and abused, according to reports.
On one of the channels, the scammers sent this message: “Oh no, our dogs are mutating. MAKC can be staked for our €APE token. MAYC + BAYC owners will be able to claim exclusive rewards simply by hitting and holding our mutant dogs.
Hit fake NFTs
The attackers tried to scam users into "minting" a fake NFT. The "minting" process is essentially a purchase, as victims must send Ether (Ethereum cryptocurrency) to the addresses of the scammers. In some cases, they can even send their own NFTs, "wrapped" in a token.
The projects responded quickly and notified their users that some of their identities had been stolen, though it is not yet clear if or how any specific endpoints were compromised.
The Bored Ape Yacht Club Twitter account posted this message shortly after the attack began: “STAY SAFE. Don't touch anything on any Discord yet. A webhook on our Discord was briefly compromised. We spotted it right away, but keep in mind we don't do any April Fools/stealth airdrops etc. Other Discords are also under attack right now.
In addition to top-tier projects like BAYC and Doodles, our server was also compromised today due to a recent large-scale attack," Nyoki tweeted. "We had everything under control in less than 30 minutes."
Vice reported that two wallets involved in the hack were identified and tagged as Fake_Phishing5519 and Fake_Phishing5520 on the Etherscan blockchain explorer. The first account got an NFT, sold it and sent almost 20 ETH to the second wallet. The second then sent over 60 ETH to a mixing service to “launder” the tokens.
After that, the second wallet sent 0,6 ETH to two addresses: one inactive and one with more than 1400 ETH and more than 6 million Tether coins.
By: vice