Rare Bears Hack

REPORTED LOSS $206K
Low Access Control

What happened

The project's admin account on Discord was compromised. The attacker posted a phishing link on the server, which led to the fake NFT minting website. The compromised account deleted admin roles from the project team, so no one could prevent this immediately.

As a result, users spent approx 73 ETH which were stolen by this address:

https://etherscan.io/address/0x67542f6e…02fce1

After, the Discord server ownership was regained by the team.

Case & protocol details

Classification NFT
Protocol Type Exploit/Access control
Protocol Twitter/X @BearsRare

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes