Axie Infinity, the popular play-to-earn nonfungible token (NFT) game, faced another attack on its Discord server earlier on Wednesday, leading to a compromise of its MEE6 bot.
MEE6 is a popular discord bot mainly used for automating roles and messages and is used by numerous crypto projects. The attackers used the compromised bot to add permissions to a fake Jiho account and later issued a fake announcement regarding a mint.
The developers managed to remove the compromised MEE6 bot from the main server and deleted the fake messages as well. However, the official Twitter account of the project warned that many users might still see the fake message until they restart their Discord.
2/ The announcements have been deleted but some users may still see the message until they restart their Discord.
— Axie Infinity (@AxieInfinity) May 18, 2022
We have removed the Mee6 bot from the server and will never do a surprise mint.
The developers also claimed that the compromise of MEE6 is not a new phenomenon and many projects have faced similar issues. However, the official MEE6 Discord support channel denied allegations of a hack and claimed they have verified with their engineers and didn’t see any unusual activity.
Many believe that the hackers compromised the admin accounts first and then got access to the alternate admin account using MEE6. This helped them to send out webbook messages while hiding the compromised administrator account.
Related: The aftermath of Axie Infinity’s $650M Ronin Bridge hack
The Discord bot compromise comes within a month of one of the biggest heists on Axie Infinity’s Ronin bridge, resulting in a loss of over $600 million worth of crypto assets. The recent slew of security breaches has brought down the confidence of the community in the game, which was once seen as a revolutionary project for the gaming world.
Although MPC (Multi-Party Computation, Multi-party Secure Computation) wallet and Multi-Signature Wallet (Multi-Signature Wallet) are both used to improve the security and control authority of private keys, their working principles and application scenarios are significantly different.
JinseFinanceIn the ever-evolving blockchain landscape, navigating the multitude of chains and networks can be daunting. Enter Dora, the groundbreaking multi-chain search engine and explorer.
WilfredzkLink is leading a new era of more interconnected multi-chain and bringing more new opportunities.
JinseFinancePixeLAW is an autonomous world dedicated to exploring interoperability between games. It was born during the ETHGlobal Paris Hackathon in July 2023 and won the first prize of Starknet Best Use.
JinseFinanceThe Chinese are celebrating the Chinese Festival, and those veterans in the currency circle who have traveled to Japan and the United States are somewhat homesick. So the Lunar New Year concept stock inscriptions appeared one after another, and it was still a familiar routine and a familiar taste.
JinseFinanceEthereum developers have proposed EIP-7281 to mitigate the impact of bridge hacks and enhance security.
BeincryptoStablecoin issuers Circle and Tether have blacklisted over half of the stolen funds, according to available information.
BeincryptoMetaMask has fixed the issue where all accounts in one wallet were getting linked together when interacting with crypto applications. It has also limited the amount of data sent to third-party services and provided options for changing RPC providers.
TheBlockThe platform's new owner issued the warning after some celebrities changed their Twitter display names — not their account names.
OthersFancy slipping between realities as seamlessly as Rick Sanchez? Well, Parody Coin might not let you slip into an alternate ...
Bitcoinist