Data leak

Tweet by PeckShieldAlert

2022-05-17 [vendor] Multiple Discords compromised
Primary Source ↗

Incident Details

Members of several large NFT Discord servers began seeing suspicious-looking messages announcing supposed NFT mints that turned out to be fakes. Affected communities appeared to include Moonbirds/PROOF, Axie Infinity, RTFKT, Memeland, Alien Frens, and others. The attack appeared to involve a Discord bot called MEE6, though there was some confusion around whether there was a compromise of MEE6 itself or if it was simply used in the attack. The following day, MEE6 acknowledged that an employee account had been compromised.Bot compromises have emerged as a wide attack vector in crypto and web3 communities, as widely-used bots can have elevated permissions across Discord channels used as official information sources across many communities.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Multiple Discords compromised

Timeline

  1. 2022-05-17 Breach occurred
  2. 2022-05-17 Publicly disclosed