Mocaverse: Phishing emails received by community members were related to bot attacks, and the database was not leaked

Animoca Brands' NFT series Mocaverse posted on the X platform that community members reported receiving a phishing email requesting MOCA allowlisting and verification. The official reminder states that if any user receives any suspicious emails, please do not interact or click on any links. Mocaverse later followed up and said: "After receiving reports that community members received phishing emails claiming the corresponding Moca ID, the team investigated and confirmed that no data leak occurred in the database. However, a bot attack did occur, with 6 million emails. Mail attempts to retrieve information from the Mocaverse API and returns the Moca ID if a random email matches. Our ‘reserve invite code’ feature has a passwordless email verification process, once the service is requested using the registered email, the service will return: 1. Eligibility 2. Domain name (if mint) The scammers tried 6 million random combinations and used email addresses to retrieve the above information and use it to send scam emails. Our developers discovered this via the API before the scam email was reported (information returned) and posted an update at 5:20pm Hong Kong time last Sunday. "