Monkey Kingdom Hack

TOTAL LOST $1.3M
Medium Phishing Attacks solana

What happened

The attacker's address:

https://solscan.io/account/HuiYfmAceF…M2k9ib

Monkey Kingdom's Discord was flooded with thousands of bots impersonating the Monkey Kingdom or Baepes announcements. They DM-ed users directing them to suspicious websites that require them to connect their wallets.

When the NFT presale began, the project's announcement channel on Discord was hijacked by the bot named "Monkey Kingdom". A Discord webhook got compromised and posted a phishing link to the Announcement channel.

The attacker was able to steal 316.8 WETH. Stolen funds were bridged through the Wormhole:

https://solscan.io/tx/oUbXHMm158…VJtBs1

https://solscan.io/tx/47YYx62nvo…tzxz3D

https://solscan.io/tx/2pM5asqypG…PfsjBt

https://solscan.io/tx/4MrJuXHeJL…cDqaoM

Case & protocol details

Classification NFT / Social Engineering
Protocol Type Exploit/Other
Official Website monkeykingdom.io/
Protocol Twitter/X @MonkeyKingdom_

Funds Recovery

98.0%

Recovered

$1.3M

Net Loss

$26,000

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.