Malicious actors hacked the Discord account of the Monkey Kingdom NFT project administrator and posted a phishing link in the group chat before the sale began. Users lost 7,056 SOL (about $1.3 million).
Update on our investigation of the Discord hack pic.twitter.com/9PP8KJiLLj
— Monkey Kingdom (@MonkeyKingdom_) December 22, 2021
Representatives of Monkey Kingdom said the breach stemmed from weaknesses in Grape — a user-identification solution on Solana used by most NFT projects.
They also pledged to compensate the stolen funds and urged the community to share news when they have received compensation.
Monkey Kingdom community, we have your back! We have begun processing compensation requests and will be contacting individuals starting today. Thank you for your patience! Once you receive your compensation, please kindly share the news with the community. For the Kingdom!! 🙌💎 pic.twitter.com/TVbuSqdKtq
— Monkey Kingdom (@MonkeyKingdom_) December 22, 2021
Launched on November 27, the Asian project Monkey Kingdom features 2,222 NFTs depicting pixelated monkeys in a range of outfits.
Earlier, NFT platform Fractal faced a similar breach. The attackers also posted a phishing link in its Discord channel.
Users lost about 800 SOL (roughly $150,000). The project pledged to reimburse the stolen funds.
As Crystal Blockchain notes, over the past decade the cumulative losses to crypto platforms and their users from hackers and scammers exceeded $12 bn.
Read ForkLog’s bitcoin news on our Telegram — crypto news, prices and analysis.