Hacker hacked the main Discord server of OpenSea

An attacker posted a phishing link to a fake NFT airdrop from YouTube

06.05.2022 - 13:55

611

2 min

What’s new? A hacker compromised the main Discord server of the OpenSea NFT marketplace. The attacker was spreading phishing links under the pretext of airdropping non-fungible tokens from YouTube, the cybersecurity company PeckShield reports on its Twitter.

#PeckShieldAlert #phishing @opensea discord is exploited, youtubenft[.]art is the phishing site. Do *NOT* fall prey to it! https://t.co/RAcRjEfuub pic.twitter.com/rjqMpTnpjW— PeckShieldAlert (@PeckShieldAlert) May 6, 2022

Details of the hack. The scammer claimed that OpenSea had partnered with video hosting site YouTube and was ready to release exclusive NFTs to celebrate this partnership. The hacker wrote in his fake message that only the first 100 participants would be able to get tokens at a 100% discount. The OpenSea team said it was looking into what happened and asked users not to click on the Discord links just yet.

We are currently investigating a potential vulnerability in our Discord, please do not click on any links in the Discord.— OpenSea Support (@opensea_support) May 6, 2022

What happened before? On April 1, 2022, the Discord server of the NFT project Bored Ape Yacht Club (BAYC) suffered a similar hack. A hacker managed to hack into the captcha bot and gain access to the server to post a phishing link. The attacker stole 1 MAYC #8662, 1 BAYC #3738, and two NFTs from the Doodles collection. Also the NFT project Rare Bears lost $800 000 in a phishing attack on the Discord channel.

According to the PrivacyHQ research, half of NFT holders lost access to at least one of their tokens. Also, 16% of marketplace users were hacked, but about 90% of them were able to partially recover their losses.

Author: