Bored Ape Yacht Club’s official Discord channel was briefly compromised, the company tweeted Friday. A phishing attack infiltrated the Discord group and tried to bait users into minting fake Bored Ape NFTs. Other collections the attacker targeted with the phishing tool included Doodles, Shamanzs, and Nyoki. Loading Something is loading.
Bored Ape Yacht Club warned against minting sham NFTs after a malicious tool infiltrated its official Discord channel in an attempt to swindle users of the popular collection.
“Do not mint anything from any Discord right now. A webhook in our Discord was briefly compromised,” Bored Ape Yacht Club tweeted early Friday. “We caught it immediately but please know: we are not doing any April Fools stealth mints/airdrops etc. Other Discords are also being attacked right now.”
—Bored Ape Yacht Club (@BoredApeYC) April 1, 2022A ticket tool that is responsible for verifying users in the channel and that sends out channel-wide notifications was compromised. Any users who received a malicious link and clicked on it would be susceptible to hacking, researchers concluded.
The link tried to dupe people into minting fake NFTs from the popular Bored Ape collection, potentially allowing the hacker to steal the contents of a user’s NFT wallet. So far, only one Bored Ape Yacht Club NFT has been stolen, Coindesk reported.
Other Discord channels for popular NFT collections — including Doodles, Shamanzs, and Nyoki — were also hacked, likely by the same attacker, according to famous Twitter sleuth zachxb, who is known to uncover digital asset scandals.
—zachxbt (@zachxbt) April 1, 2022