90 BAYC NFTs stolen by Hacker
- Estimated damage of 3.5 billion won -
The official Instagram account of 'Board Ape Yacht Club (BAYC)', the No. 1 non-fungible token (NFT) brand by floor price, was hacked. It is known that the attacker stole their NFTs by persuading NFT holders to click on malicious links posted by them after account hacking. The damage so far is estimated at about $2.8 million (about 3.5 billion won).
On the 25th (local time), BAYC announced that a phishing attack occurred against the holder after the official Instagram account was hacked .
After hacking the BAYC Instagram account, the attacker posted a fake update claiming to airdrop LAND, the BAYC governance and utility token, to induce users to click the link and connect to their wallet. Taking advantage of the fact that the BAYC business roadmap includes a metaverse game and a virtual land plan.
Airdrop is the act of giving away virtual assets for free to specific token holders, and is an incentive strategy mainly used in virtual asset projects to attract new users or grow the community. The hackers stole the NFTs when users connected their wallets to view the post and apply for airdrops.
BAYC said, “Instagram account was hacked.” “We are not minting today. Users should not click on any link and should not link or issue their wallet to any link.”
According to on-chain data analysis firm Zachxbt, the hacker reportedly stole 4 BAYC NFTs, 7 Mutant Ape Yacht Club (MAYC), 3 Board Ape Kennel Club (BAKC) and 1 CloneX . .
According to Etherscan data, there are 91 NFTs in the wallets known as attackers . According to Zerion, the NFTs are equivalent to $2.8 million based on the lower price of each collection .
Regarding the hack, a BAYC official said, "If you have been affected by a hack or have any information, the user should contact you by email first, and the team will never contact the user first or ask for a seed phrase." We are investigating with the Instagram side to see if they have obtained it.”
This is not the first case of hacking the social network (SNS) accounts of NFT projects such as Instagram, Twitter, and Discord to steal NFTs from owners by sharing malicious links.