Another Axie Infinity hack, this time using discord bot

More On: axs

Axie Infinity said that hackers infiltrated the MEE6 Bot in order to add rights for a fictitious Jiho account.

Axie Infinity has declared on its Twitter account that the MEE6 bot on its Discord server was compromised. The MEE6 team has disputed that its bot was under assault.

Numerous servers utilize the MEE6 bot to automate messages and do other activities on Discord.

Axie Infinity reported on May 18 that the attackers infiltrated the bot and used it to provide rights to a false Jiho account, which they then used to publish a bogus mint announcement.

1/ There was a compromise of the Mee6 bot which was installed on the main Axie server. The attackers used that bot to add permissions to a fake Jiho account, which then posted a fake announcement about a mint.
— Axie Infinity🦇🔊 (@AxieInfinity) May 18, 2022

Fortunately, the developers immediately spotted it. They eliminated the compromised bot and destroyed the communications. According to the gaming platform, there will never be a surprise mint, and such events are often announced on Twitter, Facebook, Discord, and Substack.

However, it also stated that some users may be able to view the erased messages until they restart their Discord client. At least one user reports losing an NFT and Domain owing to the breach.

Axie asserts that others have had the same misfortune

Axie Infinity indicated that the breach is not unique to its server and that numerous servers running MEE6 Bot had previously seen similar difficulties. Cool Cats, RTFKT, PXN, PROOF/Moonbirds, and Memeland have all claimed that the bot has compromised their administrator accounts.

4/ This was not unique to Axie and happened to many servers with the Mee6 bot installed.
— Axie Infinity🦇🔊 (@AxieInfinity) May 18, 2022

According to people with knowledge of Discord's security, the hackers presumably first targeted admin accounts. Then, they developed a response role function for the MEE6 bot, which transfers the admin position to a different account.

This allowed them to send webbook messages without disclosing the hijacked administrator account.

MEE6 denies any hack .

MEE6 has disputed the accusation that its Discord server was compromised. It was said that their bot did not breach any NFT communities.

“We have not been contacted by any real community owners at the time of this message, nor via Discord or any other Support Communication Channels. We have checked the situations with our engineers, and no data of unusual activities have been spotted,” the statement reads.

AXS, the native token of Axie Infinity, has suffered since the exploit, even when additional money were raised to repay customers.

Due to delays and growing security concerns, user confidence has decreased and continues to fall. Currently, AXS is trading at $21.6, compared to a high of $164.9 in November 2021.

** Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of USA GAG nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.