A phishing attack appears to have compromised the Discord servers of Yuga Lab projects Bored Ape Yacht Club (BAYC) and Otherside.
Over 145 Ethereum ($256,000) worth of tokens were allegedly stolen by the attackers. It appears that a community manager’s account was hacked, giving the attackers access to the servers’ admin accounts.
They then posted a link to a phishing site where users were encouraged to link their wallets in order to gain access to a “exclusive giveaway.” The BAYC Discord has been disabled, and moderators on the Otherside server are advising users to turn off direct messages.
This isn’t the first time BAYC has hacked Discord this year. In the last three months, the project has been the target of a series of phishing attacks, which resulted in the theft of several NFTs.
32 NFTs were stolen, according to data from blockchain security firm PeckShield, including one BAYC token, two Mutant Apes, five Otherdeeds, and one Bored Ape Kennel Club token.
The hack appears to be one of the most damaging in recent memory. In previous attacks this year, one to two tokens were stolen per attack.
Yuga Labs has yet to make a public statement on the subject. According to Coingecko data, BAYC’s floor price has also dropped by 2.9 percent in the last 24 hours.
The project has been the target of several phishing and hacking attempts since its inception, owing to its status as the most valuable NFT collection.
In April, the project’s social media platforms were hacked twice. Seth Green, an actor and producer, had his Bored Ape stolen recently.
It’s unclear whether Yuga, the owner of Bored Ape Yacht Club, has taken any security measures so far. With ownership of the most valuable collections, the company is by far the most powerful player in the NFT space.