News hardware Hacker Takes Over Bored Ape Yatch Club (BAYC) Discord Server, Walks Away With Huge Loot
Published on 05/06/2022 at 14:20
Decidedly, the owners of NFTs with monkey heads continue to attract malevolent lusts… This Saturday, June 4, a hacker managed to infiltrate the Discord of the most famous collection of NFTs to steal the equivalent of a beautiful T3. Unfortunately, this is not the first time that a hack like this has happened. Last April, the collection of the Yuga Labs group had been the victim of the same process on their official Instagram account. At the time, the hacker was able to start from a few million euros.
Scam on official Discord Bored Ape server
A hacker managed to infiltrate the Bored Ape Yacht Club Discord server on Thursday. To achieve his ends, the attacker first hacked the account of Community Manager Discord, Boris Vagner, in order to obtain administrator rights. These rights then allowed him to communicate on official announcement channels in order to extort NFTs from members of the server.
In the announcement, the hacker made believe a giveaway for all NFT Bored ape, Mutant ape and OtherSide holders. It also instructs all owners to connect their wallet through a malicious link. And apparently some didn’t wait very long to take the bait…
The hacker under the cover of Boris Vagner’s account would have had time to steal 32 NFTs through his phishing link on the server. These 32 non-fungible tokens represent the total sum of more than 200eth, or €332,000.
Among these 32 stolen NFTs are:
- 1 Bored ape (3215)
- 2 Mutant Ape (4439, 3197)
- 1 Bored Ape Kennel (4945)
- 1 Koda (2019)
- 5 Otherdeed (62444, 13781, 52306, 59851, 82318)
- 1 Goblintown (4260)
Bored Ape said on Twitter:
“Our Discord servers were briefly exploited today. The team dealt with the threat quickly. About 200 ETH of NFT seems to have been stolen. We’re still investigating, but if you’ve been impacted, email us at discord@yugalabs.io. “As a reminder, we do not offer surprise collections or gifts. »
NFTs: prime target for scammers
Phishing attacks and other scams are unfortunately frequent in this environment and more so when a project is successful. The Bored Ape have paid the price many times with more or less organized scams.
This attack is unfortunately not the first and reminds us of the major hack a few months ago. Indeed, last April, the official Instagram account had been hacked. At the time, the hacker used the same method by sharing a malicious link where followers had to connect their wallet to participate in a fictitious Otherdeed giveaway.
Estimated loot: €3,000,000, a figure that puts the recent scam into perspective.
Despite recurring recalls of the Bored Ape brand, some owners remain unsuspecting and are still prime targets for scams of all kinds.