Avalanche Discord Server Breach Leads to Fake Token Scams

A recent wave of Discord server compromises has targeted multiple blockchain projects, including Avalanche, Polygon, and ZKsync. Scammers gained unauthorized access to these servers, posting fake token distribution links and attempting to defraud community members by pretending to offer free tokens. The attacks have raised significant concerns regarding the security of social media platforms like Discord and the growing sophistication of cryptocurrency-related scams.

A coordinated scam involving the Discord servers of Avalanche, Polygon, and ZKsync resulted in fake token distribution links being shared, leading to significant financial losses. The breaches highlight vulnerabilities in using social media platforms for cryptocurrency communities and call for heightened security measures and user awareness to prevent future attacks. Other platform scams that we have encountered can be seen here.

• Defendant: Unknown cybercriminals (scammers).
• Crime: Fraudulent cryptocurrency token distribution solicitation through compromised Discord servers.
• Amount Defrauded: Reports indicate losses up to $150,000 worth of ETH from Polygon's community. No confirmed figures for Avalanche or ZKsync.
• Method: Hackers compromised Discord servers of Polygon, Avalanche, and ZKsync, posing as administrators to share phishing links related to fake token distributions.
• Sentence Received: No arrests or charges reported yet; investigation ongoing.
• Additional Penalties: None reported.
• Investigation: Likely ongoing by internal security teams of affected platforms and potentially cybersecurity firms.
• Plea: No plea or official suspect identification.
• Prosecutor's Statement: Not applicable at this stage.

• August 24, 2024: Discord server of Polygon breached; hackers posted phishing links and compromised administrative roles.
• August 25, 2024: Following Polygon, Avalanche’s Discord server was also compromised; similar phishing links for fake AVAX token distributions were posted.
• August 25, 2024: ZKsync’s Discord server suffered a breach within hours of Avalanche, using a similar method involving fake token links.
• August 26, 2024: The compromised servers for Polygon and Avalanche were reclaimed by their respective security teams, while ZKsync's breach remained unresolved as of the last update.

Over the weekend of August 24-26, 2024, the Discord servers of three major blockchain projects—Polygon, Avalanche, and ZKsync—were compromised in a series of coordinated attacks. Hackers infiltrated these servers and posed as administrators to post fraudulent links promising free token distributions. The breaches led to significant financial losses, including a reported $150,000 in ETH from the Polygon community. The incidents have underscored the vulnerabilities of using centralized communication platforms like Discord for cryptocurrency communities, prompting calls for improved security measures and greater awareness among users to avoid falling prey to such scams.