Curriculum·Graduate·G704
Community Moderation
The Bored Ape Yacht Club Discord, 4 June 2022. The Discord account of the project's community manager was compromised and used to post a phishing link, dressed as an exclusive giveaway for holders, in the official BAYC and Otherside servers.
Start with lesson 14 lessons · about 2.1 hours · free account to read in full
Lesson 1 opens on
The Bored Ape Yacht Club Discord, 4 June 2022
The Discord account of Yuga Labs' community manager, Boris Vagner, was compromised and used to post a phishing link in the official Bored Ape Yacht Club server and in the server of the related Otherside project. The post was dressed as another exclusive giveaway for existing holders, promising free mints, with limited supply. Members who followed the link and signed were drained.
The lessons
- G704-01The server is the attack surfaceState what happened in the Bored Ape Discord compromise of June 2022, what was taken, and which account the message came fromabout 31 min · opens on The Bored Ape Yacht Club Discord, 4 June 2022
- G704-02Admin accounts and the privilege ladderState what happened to the Bored Ape Instagram account in April 2022, what the fake page asked members to sign, and what was takenabout 32 min · opens on The Bored Ape Yacht Club Instagram, 25 April 2022
- G704-03Social engineering of the people who hold the keysState what happened in the Twitter compromise of 15 July 2020, how access was obtained, how many accounts were used, and who was chargedabout 32 min · opens on The Twitter account compromise, 15 July 2020
- G704-04The recovery scam inside your own communityState what the FBI's 2024 announcement reported about fictitious law firms targeting cryptocurrency scam victims, including the loss figure and the windowabout 32 min · opens on FBI Internet Crime Complaint Center, fictitious law firms targeting cryptocurrency scam victims, 24 June 2024