Polygon’s Discord Hacked; Team Asks Users to Not Interact With Links

• Polygon’s Discord channel was hacked today, with one team member asking users not to click on any links on the group.
• A user has stated they lost $150,000 from their Ethereum pool because of this hack.

The official Polygon Discord channel was hacked earlier today. Its chief information security officer, Mudit Gupta, warned users of the incident. “PSA: Do not click on any links in the @0xPolygon community discord until further notice. It has been compromised and we’re trying to get back ownership.”

Source: Mudit Gupta

Users concerned about the incident asked Gupta about how this transpired. They clarified that none of their mods were compromised upon first glance—rather a “bot/integration.” Furthermore, Gupta mentioned that all privileged accounts in the channel had two-factor authentication (2FA) protection.

Nevertheless, X user ValidatorK commented on Gupta’s post with a bleak update: “I lost $150,000 of my Ethereum pool in one go through Polygon’s official Discord announcement.” Another user, shadabk2005, noticed the hack and highlighted the issue. However, they received a timeout on the Discord channel for doing so, suggesting the bad actor(s) may have gained access to one or more privileged accounts.

He also mentioned scam links being spread in the channel, many of which were in response to users seeking help. The links were relayed to catch users in their moments of panic, pushing them to click on links that can further drain their assets as they click in hopes of receiving resolutions.

Projects’ groups on platforms like Discord and Telegram are witnessing increased phishing and social engineering attacks. As users huddle with these communities to discuss the projects and receive updates from the teams behind the platforms, cybercriminals find them ideal grounds to execute their nefarious operations.

Polygon Team Regains Access to Their Discord Channel

A few hours into this fiasco, Gupta commented with an update on his original post informing users of the hack. “We’ve regained access and currently cleaning up all the changes made by the hacker to make sure they can’t come back.” No updates have been provided yet about how the hack occurred.