BAYC Discord Compromised, NFTs Totaling 200 ETH Stolen

The Discord account belonging to BAYC community manager Boris Vagner was compromised on Saturday, paving the way for the theft

article-image

Bored Ape Yacht Club | Source: Shutterstock

share

key takeaways

  • A malicious actor has made off with $359,000 worth of Bored Ape NFTs following a compromise to BAYC’s discord server
  • The hack marks the third time in two months that BAYC’s NFTs have been compromised, raising questions over the project’s security

A malicious actor has made off with 200 ether ($359,000) worth of Bored Ape NFTs after the Discord server belonging to the project was compromised on Saturday.

Bored Ape Yacht Club’s (BAYC) parent company, Yuga Labs, confirmed the amount in a tweet roughly 11 hours following the attack. The attacker was able to breach the security of the Discord account belonging to BAYC’s project manager Boris Vagner, according to on-chain analyst and Twitter user @NFTherder who first sounded the alarm.

“Our Discord servers were briefly exploited today,” Yuga Labs tweeted via its BAYC Twitter handle. “The team caught and addressed it quickly. About 200 ETH worth of NFTs appear to have been impacted. We are still investigating.”

Following the successful breach, the actor was then able to post a phishing scam pretending to be Vagner that duped Bored Ape collectors into clicking a malicious link and sent their NFTs (non-fungible tokens) to the attacker’s address, NFTherder said.

Vagner was promoted to social and community manager in February, according to a tweet in which he praised the founders of Bored Apes and Yuga Labs.

Questions have sprung up on social media as to how the Discord account was compromised, questioning the project’s security. Despite proper security measures by way of two-factor authentication, attackers, in this instance, may have circumvented security by obtaining a Discord ID token from a targeted victim.

One explanation for the method behind the attack was that Vagner’s Discord ID token — used to log in multiple times locally without verifying one’s identity — was also compromised. This could have allowed the actor to gain access to Vagner’s account.

The theft marks the third time BAYC has been hacked, including an instance on April 1 when a Mutant Ape Yacht Club NFT was stolen via a phishing link on Discord. Almost four weeks later, on April 25, BAYC’s Discord and Instagram accounts were also hacked when a link to a copycat website duped users into giving up NFTs worth millions of dollars.

Hundreds of users have taken to Twitter to vent their frustration at the repeated attacks and alleged lack of security.

Loading Tweet..

“They [BAYC] should consider investing a full-time security manager,” NFTherder tweeted in response to one user’s comment on BAYC’s security. “Surprised they haven’t already though.”


Don’t miss the next big story – join our free daily newsletter.

Tags

Upcoming Events

HYATT REGENCY SALT LAKE CITY

TUES, OCT. 8, 2024

Guided by the expertise of Blockworks Research Analysts team, this one day event will feature senior leaders, entrepreneurs, and developers from across the crypto industry. Attendees will have the opportunity to participate in an immersive experience to explore the latest trends, […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

hivemapper.jpeg

Research

We believe crypto market participants overlook Hivemapper’s fundamental potential due to a poor understanding of both the niche map data market and Hivemapper’s positioning relative to incumbents. Hivemapper’s token model catalyzes both a cost and product advantage via unmatched map freshness and near real-time accuracy, which is its wedge into a market characterized by stale data and high data collection costs. Its current and potential future product suite may represent one of the strongest possibilities for PMF in crypto today.

article-image

A greater focus on data availability sampling is top of mind, including additional work that layer-2s must do to become faster and more secure

article-image

The former FTX CEO was sentenced in a New York courtroom on Thursday

article-image

👨‍⚖️ SBF’s courtroom sequel: Plus, Coinbase’s legal loss was DeFi’s gain

article-image

Public mining companies have been acquiring sites, refreshing machine fleets and diversifying business models in preparation for the event

article-image

Exploit shows centralization can sometimes be an asset