GSD-2022-1000070
- Source
- https://data.gsd.id/GSD-2022-1000070
- Import Source
- https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000070.json
- JSON Data
- https://api.osv.dev/v1/vulns/GSD-2022-1000070
- Withdrawn
- 2023-03-14T07:04:18Z
- Published
- 2022-02-01T17:45:15Z
- Modified
- 2023-03-14T07:04:18Z
- Summary
- Reliance on improperly secured communications channel (Discord) in Grape Network version unknown
- Details
-
In Grape Network Grape Network version unknown a Reliance on improperly secured communications channel (Discord) exists in the Discord community "announcement" channels for multiple NFTs that can be attacked via unknown resulting in access Grape Network tokens was used to send Discord server messages resulting in social engineering of access to crypto wallets resulting in $1.3 Million USD (Monkey Kingdom) and $150,000 USD (Fractal) in stolen funds
- References
-
- https://twitter.com/MonkeyKingdom_/status/1473312369556213769
- https://www.theverge.com/2022/1/7/22870912/nft-communities-boom-discord-hackers-cryptocurrency-webhooks
- https://it.slashdot.org/story/22/01/07/1957250/discord-hacking-is-the-newest-threat-for-nft-buyers
- https://cointelegraph.com/news/hong-kong-nft-project-monkey-kingdom-loses-1-3m-in-phishing-hack-launches-compensation-fund
- https://twitter.com/justinkan/status/1473328245030277122
- https://twitter.com/grapeprotocol/status/1473422238250680320