Rare Bears, a newly formed NFT project, was targeted by a hacker who used a phishing link in the group’s Discord channel to steal approximately $800,000 in NFTs.
The attacker was able to steal 179 NFTs, including Rare Bears and other NFTs from other collections, including CloneX, Azuki, a “mfer” from artist sartoshi, and 6 LAND tokens used for The Sandbox metaverse, according to blockchain security firm Peckshield.
According to on-chain research, the majority of the NFTs were sold, netting the hacker 286 ETH worth approximately $795,500, the majority of which was immediately sent through Tornado Cash, a crypto mixer used to hide the source of funds.
A slew of similar phishing attempts have surfaced on Discord in recent months. So, implying that certain teams should pay closer attention to the security of admin accounts. The Rare Bears team announced earlier today that it has recruited security specialist. Then, and auditor “Pandez” to conduct a complete security assessment of its Discord server.
What happened during the attack? According to a Rare Bears team update, the hacker got access to the account of “Zhodan,” a Rare Bears Discord moderator. Then, and issued a statement within the group’s channel announcing a new mint of NFTs.
The security audit discovered that the project’s leader’s Discord account had been hacked. Using the hijacked account, the attacker then banned or revoked other members’ roles from the server. Therefore, removing their ability to erase the phishing link.
The attacker then invited a bot to the server. Of course, which froze all channels and prevented others from publicly revealing that the postings and links were phony.
The team was able to reclaim control of the server, removing the compromised account. That’s, transferring ownership to a new one. Then, and the service is now secure against further attacks, according to Rare Bears.
Related Posts – Bank DBS’s Crypto Business Grows Massively Due To Growing Demand From Investors