Axie Infinity Discord Server HACKED

SOURCE: Coin Sessions Entertainment on Twitter: “Axie Infinity’s Official Discord server got hacked! Read their full statement. Find out more about the social engineering scam here: https://t.co/9gazKhhgCa #CSENews https://t.co/Pam9ewgh6s” / Twitter

The Axie Infinity Discord Server was hacked after a member of their support staff had their account compromised through a new social engineering scam where the scammer will join under a burner account and frame you to the mods as a scammer. You will be banned from the server as a result, because the Discord ID they send to the moderators will be your ID instead of the impersonator.

Then, you will be DM’d by the scammer under a separate account, impersonating as a moderator from said server, and requesting proof that you are innocent. This “proof” requires victims to open the console and take a screenshot of their Discord Authentication Token, enabling the scammer to hijack the victim’s account regardless of whether or not 2-factor authentication was enabled.

Once the staff member got hacked, the scammer then created a fake Axie webpage and used the bot to promote the page, claiming there was an “exclusive sale.” 115 people clicked the link and got scammed after attempting to buy axies from the fake page.

Axie Infinity staff members are currently in the process of reimbursing the individuals who were scammed and reducing the number of people who are allowed to tag everyone. They will also be working with Discord staff to address security flaws and review security practices with all staff members.

If it’s sus, it’s likely a scam. Also this is the reason why you don’t want to use Discord, or any cryptographically unverified platform for anything serious and/or involving money. At that point it’s practically your fault for trusting the wrong side, even if it was backed up by previously legit people. Always verify.
And note to all Discord guild moderators / admins: CHECK thoroughly and rigorously before banning “fakes”, check for linked profiles, account creation dates, recent nick changes (if your guild can log that), previous messages (!) and overall presence.