Bored Ape Instagram account hack resulted in a $2,8 million loss in NFTs
A hacker posted a phishing link to a fake airdrop on the social network and stole 91 non-fungible tokens
26.04.2022 - 09:00
846
2 min
0
.
What’s new? On April 25, a hacker hacked into the official Instagram account of the NFT collection Bored Ape Yacht Club (BAYC). The attacker managed to steal 91 NFTs worth around $2,8 million using phishing. According to BAYC’s Twitter post, the hacker spread a malicious link under the pretext of a fake airdrop.

Details of the hack. Following the Instagram hack, the hacker posted a message about the airdrop of LAND tokens. The link in the post led to a fake website where users were encouraged to link their wallets to receive the coins.
Among the stolen NFTs are 4 Bored Apes, 6 Mutant Apes, and 3 Bored Ape Kennel Club. The hacker also received tokens from the CloneX, EightBit, Alien Fren, and Toxic Skull Club collections. According to the Zerion platform, the total value of the 91 stolen tokens was around $2,8 million, based on the minimum prices of the respective collections.
What had happened before? On April 1, 2022, the Bored Ape Yacht Club (BAYC) Discord server was also hacked. The hacker made a similar phishing attempt, but only managed to steal 1 MAYC #8662, 1 BAYC #3738, and two NFTs from the Doodles collection.
The Rare Bears NFT project suffered a similar attack on the Discord server, losing 179 NFTs worth 286 ETH ($800 000 at the time of the hack). The hacker also used phishing software.
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Telegram
Twitter