A Mutant Ape and a Bored Ape were among 35 NFTs stolen last week via a handful of hacked verified Twitter accounts. The combined value of the phishing attack is assumed to exceed US$900,000.
The phishing incident disguised itself off the back of a Bored Ape Yacht Club (BAYC) airdrop that happened earlier this month. BAYC had airdropped ApeCoins to Mutant Ape and Bored Ape holders, which allowed for a copycat attack by scammers who hacked verified Twitter accounts and spread fake URLs impersonating a BAYC link:
Victims of the link who were prepared to pay 0.33 ETH to take part instead encountered code that allowed the hackers access to their wallets. Some victims claimed that, although the links appeared strange, they would nonetheless be safe as they were shared by trusted public figures.
Twitter is yet to comment on the incident, despite many users feeling the social media giant is partly to blame.
Other Recent Phishing Attacks
This isn’t the first large-scale phishing attack this year. Earlier in March, US$790,000 worth of Rare Bears were stolen. The phishing scam behind the NFT theft utilised the weakened security of Discord groups to share around a ‘corrupt’ link.
More recently, a crypto venture capitalist lost US$1.7 million worth of NFTs. Arthur Cheong, the founder of Web3 and DeFi venture capital firm Defiance Capital, had his hot wallet account hacked and 59 NFTs taken.