Data leak
Tweet by PeckShieldAlert
Primary Source ↗Incident Details
Members of several large NFT Discord servers began seeing suspicious-looking messages announcing supposed NFT mints that turned out to be fakes. Affected communities appeared to include Moonbirds/PROOF, Axie Infinity, RTFKT, Memeland, Alien Frens, and others. The attack appeared to involve a Discord bot called MEE6, though there was some confusion around whether there was a compromise of MEE6 itself or if it was simply used in the attack. The following day, MEE6 acknowledged that an employee account had been compromised.Bot compromises have emerged as a wide attack vector in crypto and web3 communities, as widely-used bots can have elevated permissions across Discord channels used as official information sources across many communities.
Technical Details
- Initial Attack Vector
- Smart contract exploit / hack
- Vendor / Product
- Multiple Discords compromised
Timeline
- 2022-05-17 Breach occurred
- 2022-05-17 Publicly disclosed