A Discord server belonging to the Bored Ape Yacht Club (BAYC) has been compromised, with Yuga Labs confirming the theft of several NFTs.
News of the breach was disclosed by Yuga Labs at the weekend with the attacker said to have made off with some $360 000 (or 200ETH) worth of NFTs.
According to Coin Desk, the breach was originally made known by a Twitter user with Yuga Labs taking some 11 hours to report the news.
Our Discord servers were briefly exploited today. The team caught and addressed it quickly. About 200 ETH worth of NFTs appear to have been impacted. We are still investigating, but if you were impacted, email us at discord@yugalabs.io.
— Bored Ape Yacht Club 🍌 (@BoredApeYC) June 4, 2022
The theft was reportedly made possible through a compromise of a Discord account. Unfortunately for all parties involved, the account that was allegedly compromised belongs to that of Bored Ape Yacht Club community manager Boris Vagner.
With the Discord account the attacker was easily able to post phishing links to the NFT projects and from there users would click the links and have their accounts compromised.
Back in April, Bored Ape Yacht Club Instagram and Discord accounts were compromised. Once again, a dodgy link was shared and users clicked the link giving attackers access to their wallets.
Attackers are very clearly preying on the FOMO that accompanies being a part of the NFT space. In both the most recent incident and the one in April, the attackers used the allure of being the first to mint to get folks to click links they shouldn’t have.
While we’re sure Yuga Labs will be having a stern word with Vagner about their account being compromised, NFT buyers and sellers need to start thinking twice before clicking links.
Had you thought cartoon apes were as bizarre as social currency gets, allow us to introduce you to Goblintown. As Coin Desk says in the video below, this is either a fantastic bit or fantastic performance art. Here’s hoping goblins are more familiar with cybersecurity best practice than apes are.
