Yuga Labs confirms Discord server breach, ETH and NFTs stolen
BAYC’s Discord server was subject to a severe breach that saw 145 ETH stolen from the account
According to Yuga Labs, the Bored Ape Yacht Club (BAYC) Discord server was subject to a severe breach that allowed a hacker access to steal 145 ETH ($276,500 approx), as well as NFTs worth around 200 ETH (around $380,000).
The breach occurred on Saturday, after Yuga Labs’ community manager, Boris Vagner, had his Discord account hacked, which allowed the hacker to gain access to Yuga Labs’ account and get away with thousands of dollars worth of NFTs.
The hacker also used the official Discord channels for the BAYC to post phishing links which promoted an “exclusive giveaway” for all BAYC and Otherside holders, and hacked BAYC’s metaverse project Otherside using the same method.
Twitter user OKHotshot, an active member of the crypto Twitter community, alerted users of the phising scam that was taking place on BAYC’s Discord channel.
The post in BAYC’s Discord channel tricked users that were unaware of the ongoing scam into thinking the giveaway was legitimate, and losing thousands of dollars.
Yuga Labs later confirmed the breach that had occurred on its system, asking users to get in touch if they had been affected. The firm also stated that it does not “offer surprise mints or giveaways”.
This is the third time a hacker has been able to impersonate a Yuga Labs account and gain access to steal users’ funds, following two similar hacks that took place in April this year.
Gordon Goner, one of the founders of BAYC, also took to Twitter to share the news, and blamed the popular messaging platform for the compromise and lack of security functions.