Avalanche, ZKsync arrived hours after Polygon’s discord deal
Layer-1 network Avalanche and Layer-2 blockchain ZKsync's official Discord servers were hit by an exploit less than 48 hours after Polygon's Discord was compromised.
In the year In an August 25 post to X, Avalanche's official account said its Discord server had been compromised and urged users not to connect to or click on any links.
According to screenshots shared by members of the Avalanche Discord on X, the attackers posted several links to bogus “distribution” schemes for Avalanche (AVAX) tokens, claiming that holders and community members could claim free AVAX.
A screenshot of the dummy link from Avalanche's Discord server. Source: X
An hour later, Avalanche community leader Ben Weil wrote that the Avalanche team had “discovered” the issue and resolved it. He added that the team is working to restore the server.
However, an hour after the Avalanche exploit, the official ZkSync discord was also reportedly compromised.
Hackers once again shared malicious links to a fake “Round 2 airdrop” scheme, where users were given free ZK tokens.
Source: HammerToesKnows
ZkSync didn't mention the exploit on X, but several members of the ZkSync team noticed the deal on Discord.
The attack on Avalanche and zkSync comes less than 48 hours after the official Discord for Polygon was similarly compromised, with hackers sharing malicious links throughout the server.
Polygon's Chief Information Security Officer Mudit Gupta confirmed the breach and urged users to refrain from clicking on any links shared in the Discord channel until the situation is fully resolved.
Related: Discord crypto trading bot shuts down after ‘critical exploit'
One user, ValidatorK, reported losing $150,000 worth of Ether (ETH) on Polygon's Discord channel after interacting with what appeared to be an official ad.
The latest attacks add to the list of similar Discord exploits.
In the year On March 25, 2023, blockchain security firm CertiK revealed a phishing scam being circulated on Arbitrum's Discord server. The scam – believed to be orchestrated by a hacked developer account – is a fake ad containing a malicious link.
Similarly, on May 5, the Gnus.AI artificial intelligence network fell victim to a Discord-related exploit, resulting in a loss of approximately $1.27 million.
Web3 Gamer: Axie Infinity Creator Wants to Eliminate Discord, SocialFi Increases Gaming Revenue
