Hacker hijacks OpenSea Discord server to promote NFT scam

An unknown hacker compromised the OpenSea NFT marketplace’s Discord server and published a link to a phishing site. PeckShield researchers said.

#PeckShieldAlert #phishing @opensea discord is exploited, youtubenft[.]art is the phishing site. Do *NOT* fall prey to it! https://t.co/RAcRjEfuub pic.twitter.com/rjqMpTnpjW

— PeckShieldAlert (@PeckShieldAlert) May 6, 2022

An announcement posted on the channel announced a collaboration between the platform and the video hosting service YouTube as part of a limited-edition NFT series. Users were invited to follow a link that visually resembled the real domain of the service.

OpenSea confirmed the breach and urged users:

«We are currently examining a potential vulnerability in our Discord; please do not click any links.»

As of writing, investigators continue to probe the incident. Details and potential losses have not been disclosed.

Do not click links in our Discord.

We are continuing to investigate this situation and will share information as we have it. https://t.co/jgtHcXifer

— OpenSea Support (@opensea_support) May 6, 2022

In February, hackers used a compromised Discord server of the Moschi Mochi NFT collection and stole 13 tokens worth $2.7 million from collector Larry Loulita.

In March, a phishing attack via a Discord breach affected the NFT project Rare Bears. Users lost 179 tokens worth about $790 000.

In April, an unknown placed a phishing link on the hacked Instagram account of the Bored Ape Yacht Club project. According to PeckShield, the hacker’s haul totaled 765.3 ETH and 91 collectible tokens.