Bored Ape Yacht Club hack sees millions of dollars worth of NFTs stolen

[midian182]

What just happened? Several owners of what is arguably the most famous NFT collection, Bored Ape Yacht Club (BAYC), have had their digital assets stolen after a hacker or hackers took over the official BAYC Instagram and Discord accounts. It's estimated that the non-fungible tokens pilfered in the hack are worth millions of dollars.

The scam involved taking over the social media accounts and pushing out messages with a link that claimed users could mint land in the upcoming Otherside metaverse. Those who clicked on the link and connected their MetaMask wallets found that their Bored Apes NFTs had been transferred to new, hacker-owned wallets, as had tokens from Mutant Apes and Bored Ape Kennel Club—projects that also come from Yuga Labs.

"There is no mint going on today. It looks like BAYC Instagram was hacked. Do not mint anything, click links or link your wallet to anything," the project tweeted.

🚨There is no mint going on today. It looks like BAYC Instagram was hacked. Do not mint anything, click links, or link your wallet to anything.

— Bored Ape Yacht Club (@BoredApeYC) April 25, 2022

"The hacker posted a fraudulent link to a copycat of the Bored Ape Yacht Club website, where a safeTransferFrom attack asked users to connect their MetaMask to the scammer's wallet in order to participate in a fake Airdrop. At 9:53am ET, we alerted our community, removed all links to Instagram from our platforms and attempted to recover the hacked Instagram account," said a spokesperson for Yuga Labs.

CoinDesk writes that the value of the 54 NFTs calculated by floor price is $13.7 million, though Yuga Labs claims the actual value is lower. Exactly how the hacker compromised Instagram is unknown as Yuga Labs says two-factor authentication was enabled at the time, and it followed "tight" security practices.

The hacker's OpenSea page showed the account receiving the stolen NFTs. The marketplace says it has now banned the account for violating its terms of service.

Victims of the hack have been expressing their anger. "I'm at the point where I have to sue yugo over this hack. Im not walking away from $300k because their shit was hacked," wrote one user (via Vice). No word yet on whether Yuga Labs plans to compensate those who lost NFTs due to the hack.

Phishing scams are a popular way of stealing NFTs. MetaMask recently warned Apple users to disable iCloud backups after a $650,000 phishing scam, and the method was believed to be used in an OpenSea theft earlier this year.

Permalink to story.

https://www.techspot.com/news/94348-bored-ape-yacht-club-instagram-hack-sees-millions.html

 

[Puiu]

"calculated by floor price is $13.7 million" --> yeah, we all know what the real resell value of this is. they could have "calculated" the prices at billions if they wanted.

 

[QuantumPhysics]

I'm just wondering, WHO has to have THEIR money stolen in order to put an end to this crypto scam nonsense.

Usually, it takes one right person who automatically gets enough outrage generated behind them to start a wave of political change.

I just wonder who will be that threshold.

 

[winjer]

Nothing was lost.

 

[Dimitriid]

The beauty of this is inversely proportional to the ugliness of the bored apes.

 

[QuantumPhysics]

Nothing was lost.

And Nothing of Value was Lost

 

[Plutoisaplanet]

I thought web3 was supposed to be secure?

 

[MaestroIT]

Programmatically generated pictures of apes cost millions??
What will Picasso, Leonardo, Michelangelo, Van Gogh.. etc... think when they hear about this?

 

[Dd663]

While it sucks that those people lost so much money, it's hard to feel bad for them when they put it into something so stupid. Also it's hard to feel bad for people who have that much money in the first place.

 

[Avro Arrow]

I love how this is framed:
"Bored Ape Yacht Club hack sees millions of dollars worth of NFTs stolen"

It's not like that's what it cost them to create these things and that's only the value to the fools who are willing to pay it. Personally, I find this hilarious. Hackers stole something that never really existed in the first place!

 

[BuckarooBonzaii]

No sympathy for the sellers (being sued) of NFTs or the buyers. First there are no set regulations for NFT insurance, secondly the buyers should assume all risks and deserves nothing because you want decentralization? You got it.

 

[NightAntilli]

It's always through centralized platforms that these kinds of things happen.

 

[Guybrush3epwood]

Good job there is a screenshot of the jpeg they lost

 

[Waris]

All my apes,,, gone,,,

 

[Benny26]

Did they Fn+Prtsc