Tableland Hack

The Tableland Discord was compromised by a hacker posing as a moderator on the channel. The hacker published a link to the fake Tableland website inside Tableland's Discord group. During any interaction with the website, the assets of the users were withdrawn from their wallets to the addresses of the scammer.

The Tableland Network is a decentralized web3 protocol for structured relational data, focussing on Ethereum and EVM-compatible L2s.

Community members that reached the phishing domain, triggered a function to witdraw funds from their browser-based wallets through clicking the mint button. The stolen assets were sent to two ETH wallets:

- hacker address (A)

- hacker address (B)

Hacker address (A)  began receiving stolen assets through a phishing domain. Eleven Tableland Rigs (Name of the NFT collection) were sent to this address, as well as NFT from other projects. The tokens were stored for a short period of time before they were sold on an open trading platform or transferred to the address of a hacker address (B).

Involved addresses:

- Hacker address (A): https://etherscan.io/address/0x28804031…63b716

- Hacker address (B): https://etherscan.io/address/0xb3b79426…30e8e9