The Bored Ape Yacht Club (BAYC) community manager’s Discord account was hacked today, and the attacker took advantage of the opportunity to broadcast a phishing link on the server. In total, 32 non-fungible tokens (NFTs) were stolen, for an amount of around $256,000.
BAYC Discord server hacked
Today, a number of members of the official Bored Ape Yacht Club (BAYC) Discord server were unpleasantly surprised to have their non-fungible tokens (NFTs) stolen.
According to the information currently available, it would seem that the BAYC community manager’s account was the cause of the theft, as it is believed to have been hacked. The attacker(s) would then have used his account to broadcast a phishing link on the project’s Discord server
BAYC & OtherSide discords got compromised‼️
Seems because Community Manager @BorisVagner got his account breached, which let the scammers execute their phishing attack. Over 145E in was stolen
Proper permissions could prevent this pic.twitter.com/lCl2DfZQ0W
– OKHotshot (@NFTherder) June 4, 2022
Current estimates put the value of the theft at over 145 Ethers (ETH), or about $256,000. The users affected by the hack had the misfortune to click on the phishing link published by the official community manager’s account, which sent them to a site encouraging them to connect their wallet in order to benefit from an “exclusive gift”.
According to security firm PeckShield, 32 NFTs from several collections were stolen, including 1 NFT from BAYC, 2 mutant BAYCs, 5 NFTs from the Otherdeed metaverse and 1 NFT from the Bored Ape Kennel Club.
BAYC, a favourite target for hacks
Unfortunately, the risk of hacks, phishing and scams of all kinds often goes hand in hand with the success of a particular project. In this case, BAYC, which is probably the most successful and lucrative NFT project to date, is not the first hack.
Today’s attack is reminiscent of the sad episode at the end of April, similar in broad outline to today’s, when a hacker managed to take over the official Instagram account of the Bored Ape Yacht Club.
Promising to offer virtual land in the Otherdeed metaverse, the attacker also submitted a link to the project’s official account, inviting users to connect their MetaMask wallet to the site. The total amount of the loot was around 3 million dollars.
We can only encourage you to always check the addresses of the sites you are on if you have a wallet on your web browser, especially if you are invited to connect it.
For the time being, no official statement has been issued either by the BAYC teams or by the project’s community manager.
