Hackers take over Azuki’s Twitter account, steal over $750K i | Big Bang Coin
Hackers take over Azuki’s Twitter account, steal over $750K in less than 30 minutes.
Most of the funds stolen were from a single wallet, with $751,321.80 in USDC drained from the malicious link.
Azuki, a popular nonfungible token (NFT) project, had its Twitter account compromised on Jan. 27, leading to hackers stealing over $750,000 worth of USD Coin by posting a malicious “wallet drainer link” posing as a virtual land mint.
Hackers stole $751,321.80 in USDC from a single wallet within half an hour of the malicious links being tweeted, according to Etherscan data provided to Cointelegraph by crypto wallet security firm Wallet Guard.
The data also revealed that hackers stole a further $6,752.62 worth of USDC from various wallets holding 11 NFTs and over 3.9 Ether.
Wallet Guard stated that the total amount stolen was $758,074.42.
Emily Rose, community manager for the anime-inspired NFT project, confirmed via Twitter on Jan. 27 that the Azuki account was hacked, warning users not to click any links from Azuki’s Twitter account.
Azuki’s head of community and product manager, Dem, explained on a Twitter Space hosted by Wallet Guard on Jan. 27 that scammers were able to “post a wallet drainer link” after gaining control of Azuki's Twitter account.
Dem urged users to “stay safe and stay suspicious” while the team attempted to regain control of the account.
Several hours later Azuki stated that it had regained control of its Twitter account via a tweet:
This was confirmed by Rose and Dem retweeting the announcement.
Liz Yang, head of growth at Chiru Labs, the company behind Azuki, told Cointelegraph that the team is “currently in contact with Twitter and investigating the breach,” noting that Azuki “will provide an update once we have more information.”
Ohm Shah, the co-founder of Wallet Guard, told Cointelegraph that “it does not matter” if an account is official or verified and users should treat everything as suspicious until proven otherwise. Shah noted:
“Don’t be the first person that clicks the link. It’s better to be paranoid in Web3 than not.”
Upon Azuki regaining control of the account, it emphasized to its followers in a tweet to always “go out on several channels” to confirm announcements.
