Yuga Labs confirmed attack on its Discord servers

What’s new? On June 4, Discord servers of the NFT project Bored Ape Yacht Club (BAYC) and the Otherside metaverse were subjected to phishing attacks, as a result of which attackers managed to steal 200 ETH worth of digital assets (around $360 000 at the time of the attack). The BAYC team later reported on Twitter that the problem had been detected and fixed. The project’s representatives confirmed the exploit and said that they will continue to investigate.

Our Discord servers were briefly exploited today. The team caught and addressed it quickly. About 200 ETH worth of NFTs appear to have been impacted. We are still investigating, but if you were impacted, email us at [email protected].— Bored Ape Yacht Club (@BoredApeYC) June 4, 2022

Details of the hack. The attack on Yuga Labs’ projects was first reported by a Twitter user under the nickname OKHotShot. According to him, hackers hacked into the account of BAYC community manager Boris Wagner, allowing them to enable a phishing attack.

🚨BAYC & OtherSide discords got compromised‼️Seems because Community Manager @BorisVagner got his account breached, which let the scammers execute their phishing attack. Over 145E in was stolen Proper permissions could prevent this pic.twitter.com/lCl2DfZQ0W— OKHotshot (@NFTherder) June 4, 2022

After the attack, Yuga Labs’ co-founder Gordon Goner noted that Discord’s system is not suitable for Web 3.0 communities. “We need a better platform that puts security first,” he added.

Discord isn’t working for web3 communities. We need a better platform that puts security first.— GordonGoner.eth (@GordonGoner) June 4, 2022

BAYC is one of the most expensive NFT collections created by Yuga Labs. BAYC consists of 10 000 unique digital pictures of monkeys with various attributes of rarity. The collection is based on the Ethereum blockchain in the form of ERC-721 tokens. The minimum price per token as of June 6 is 94 ETH ($179 446 as of June 6, 11:50 UTC, according to Binance).

Otherside is a blockchain-based metaverse from Yuga Labs and was launched on May 1, 2022. The company raised $450 million in a seed funding round led by the venture capital fund Andreessen Horowitz (a16z) to develop it. The native token of the metaverse is ApeCoin (APE).

On April 1, the BAYC representatives also reported a hacker attack that resulted in the theft of four non-fungible tokens. The hackers managed to hack into the captcha bot and gain access to the Discord server.