Polygon Discord Hack Sparks Security Warnings as Phishing Wallet Linked to the Incident

Blockchain data shows that the wallet involved in the Polygon hack has a history of phishing activities.

CoinChapter reports that Polygon's Discord server was hacked early Saturday, leading to the theft of $145,000 in assets from one user. The attack lasted four hours, during which a fraudulent message was posted. The message, appearing to come from Polygon's community lead, advertised a “special pre-migration” airdrop linked to the upcoming POL token launch on September 4. The message included a phishing link that tricked at least one user into losing their assets.

Polygon regained control of the Discord and immediately disabled all external bots and integrations. The team announced on Twitter,

“We have regained access and secured the Polygon community discord server. All external bots and integrations have been disabled while we perform a security review of each of them to avoid this from happening again.”

Phishing Wallet Tied to Polygon Hack Sparks Security Warnings

Blockchain data shows that the wallet involved in the Polygon hack has a history of phishing activities. Ten days before this incident, the wallet transferred $72,300 worth of ether to a wallet flagged by Etherscan as a phishing perpetrator. This flagged wallet now holds nearly $400,000 in assets. Additionally, five days ago, the same wallet sent $29,500 worth of ether to another flagged wallet containing $150,000. These transfers suggest that the hacker has targeted other victims before the Polygon incident.

The involvement of a known phishing wallet raises concerns about the security of crypto platforms. Users should remain cautious, especially with the upcoming POL token launch.

CISO Mudit Gupta Investigates Polygon Discord Hack, Eyes Bot Compromise

Polygon's Chief Information Security Officer, Mudit Gupta, addressed the breach on Twitter. Gupta mentioned that the team is still investigating the cause but does not believe that any moderators were compromised. Instead, the focus is on a possible bot or integration breach. Gupta stated,

“At this moment, we don’t believe any of our mods were compromised this way [being phished]. It seems more likely that a bot/integration we had was compromised. Still going through the logs.”

Polygon plans to release a postmortem after completing its review. The team is working to ensure that similar breaches do not occur in the future, especially with the POL token launch approaching.

The above is the detailed content of Polygon Discord Hack Sparks Security Warnings as Phishing Wallet Linked to the Incident. For more information, please follow other related articles on the PHP Chinese website!