A hacker managed to steal more than $1 million in NFTs after carrying out a phishing attack from the official Instagram account of the Bored Ape collection. The criminal managed to carry out the theft after sharing a link that transferred the users’ tokens to a virtual wallet owned by him.
The hack was reported by Bored Ape Yacht Club on its Twitter account, where They warned of the situation and asked users not to access any link that is shared on the Internet and is related to the collection of NFTs.. They also alerted the owners of Bored Ape tokens to avoid, at least for now, connecting the wallets in which their tokens are stored with any type of service.
The hacker who carried out the robbery promised, in the link he shared, to give away tokens to all those who connect their Metamask wallets to the service.
According to a screenshot of the hacker’s alleged OpenSea account, the attack netted him more than a dozen NFTs, making him one of the biggest heists in Bored Ape history since the collection launched in April 2021.
Hours later, said account was blocked by the platform because it is a user who carries out fraudulent activities.
Among the stolen NFTs are Ape #7203 whose last sale price was $138,000; Ape #6778 $256,000; Ape #6178 $259,400; and Ape #6623 $354,000.
It is still unknown how the hacker was able to compromise the Bored Ape Yacht Club Instagram account in order to share the fraudulent link. Those responsible for the account stated that it had a double authentication factor, which should have kept it safe from an unauthorized access attempt.
NFT thefts have been a trend in recent months and proof of this was the attack on the NFT game Axie Infinity which resulted in a loss of more than $620 million.
This attack was made possible because hackers found a vulnerability in one of the networks the game was running on. Thanks to this they were able to make cryptocurrency withdrawals equivalent to 173,600 Ethereum and 25.5 million USDC.
After learning of the attack, those responsible for the game reported that they were willing to reimburse the money that users lost as a result of the attack.
This may also interest you:
– Axie infinity: hackers steal more than $620 million
– Cryptocurrencies: US government seizes $3.6 billion in cryptocurrency stolen by hackers
– Samsung confirmed that hackers stole source code from its Galaxy devices