Axie Infinity, the favored play-to-earn nonfungible token sport, confronted one other assault on its Discord server earlier on Wednesday, resulting in a compromise of its MEE6 bot.
MEE6 is a well-liked discord bot primarily used for automating roles and messages and is utilized by quite a few crypto initiatives. The attackers used the compromised bot so as to add permissions to a faux Jiho account, and later issued a faux announcement concerning a mint.
The builders managed to take away the compromised MEE6 bot from the essential server and deleted the faux messages as properly. Nevertheless, the official Twitter account of the mission warned that many customers may nonetheless see the faux message till they restart their Discord.
2/ The bulletins have been deleted however some customers should still see the message till they restart their Discord.
We’ve got eliminated the Mee6 bot from the server and won’t ever do a shock mint.
— Axie Infinity (@AxieInfinity) Could 18, 2022
The builders additionally claimed that the compromise of MEE6 shouldn’t be a recent phenomenon and lots of initiatives have confronted comparable points. Nevertheless, the official MEE6 Discord assist channel denied allegations of a hack and claimed they’ve verified with their engineers and did not see any uncommon exercise.
MEE6 Official Discord Channel Message
Many imagine that the hackers compromised the admin accounts first after which acquired entry to the alternate admin account utilizing MEE6. This helped them to ship out webbook messages whereas hiding the compromised administrator account.
Associated: The aftermath of Axie Infinity’s $650M Ronin Bridge hack
The Discord bot compromise comes inside a month of certainly one of the most important heists on Axie Infinity’s Ronin bridge leading to a lack of over $600 million value of crypto belongings. The current slew of safety breaches has introduced down the arrogance of the neighborhood in the sport, which was as soon as seen as a revolutionary mission for the gaming world.
