What happened
On 4 June 2022 an attacker took over the Discord account of Boris Vagner, a Bored Ape Yacht Club community manager, and used it to post phishing links in the official BAYC and Otherside Discord servers. The posts advertised an exclusive giveaway for BAYC, MAYC and Otherside holders. Holders who followed the link and signed the transactions it requested lost their NFTs.
PeckShield counted 32 NFTs taken, including BAYC, MAYC, BAKC and Otherdeed tokens. Estimates range from 145 ETH (about $260K) to Yuga Labs' figure of about 200 ETH (about $360K). Yuga confirmed the breach roughly 11 hours after the first reports and asked affected users to contact it.
This was the third attack on Yuga Labs' community channels in about two months.
How it happened
- The attacker gained control of community manager Boris Vagner's Discord account. How the account was compromised has not been disclosed.
- Using that trusted account, the attacker posted a link in the official BAYC and Otherside Discord channels, presented as an exclusive giveaway for holders.
- The link led to a fake site that asked visitors to connect a wallet and sign transactions.
- Those signatures let the attacker move victims' NFTs. At least 32 NFTs were taken and spread across several attacker wallets.
Protocol details
Evidence
- report Report beincrypto.com
- analysis 32 NFTs Stolen as BAYC and OtherSide Discord Servers Compromised cryptopotato.com
- analysis Web Archive web.archive.org
- analysis DeFiLlama defillama.com
- analysis Yuga Labs Confirms Discord Server Hack; 200 ETH Worth of NFTs Stolen coindesk.com
- analysis Bored Ape Yacht Club's Discord server was hacked with $360,000 in NFTs stolen; blame debated fortune.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
